last executing test programs: 4.502937604s ago: executing program 0 (id=2319): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 3.477681817s ago: executing program 0 (id=2324): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0082, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=@unlock_all, 0xb) read$msr(r0, &(0x7f0000000280)=""/175, 0xaf) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(&(0x7f000001fa80), 0x2, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x4, [{r1, 0x0, 0xfffffffff0000000, 0x2000}, {r2, 0x0, 0xfffff000, 0xfffff000}, {r0, 0x0, 0x10000}, {r0, 0x0, 0x2000, 0xfffffffffffff000}]}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000500)={{r4}, 0xa, &(0x7f0000000480)=[0x9, 0xfffffffeffffffff, 0x9, 0x7, 0x40, 0xfffffffffffffffb, 0x0, 0x3, 0x7, 0x2], 0x3, 0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000b40)=@vmx={0x103, 0x0, 0x2080, {0x10000, 0x3f000, {}, 0x1, 0x20000009a4}, {"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", "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"}}) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="58659c2534d2243e0642ea9b4c73bb184604a8956b919a63bb49968bc6d11460983866697ffbbbe3630f6500783e70124306a794943e38371147fbc832e053fa60f6749790a80fdd38e6f8370ad344933e0f66fab63f1d9f691f041427a1a7446ade33c2d8c2af1b8d1a9043f3e79ea407fcf0e67141f8ecee9d73c8453c0c529d4309dca67980a19e28af68303dda2ff2805e30cb0c7ca485e885882f0f9fc9fe8ddfc0a661f58f3b91355a1e4068d54e05069c5cdd3db1d28ce90d35f1e929ac7273e43cb217b2afba0df34d1451d825ea444180f15dbbbeb30617a4791acb91341ee86854015f3786ac83f5032bfaccc6129e7b74"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) 2.705659072s ago: executing program 1 (id=2329): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000104c05d503000000000001090224000100000000090400000203"], 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.601726865s ago: executing program 2 (id=2330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x643f94f49a90105b, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x1ff, 0x6, 0xa, 0x7ff}, {0xff, 0x5, 0x4, 0x9}]}) close_range(r2, r1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x19fa}], 0x1, 0x7f, 0x10, 0x4, 0x60, 0x8}) r5 = inotify_init() inotify_rm_watch(r5, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000200)=""/116, 0x74}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0xb, 0xd, 0x0, 0x200, 0x9, 0x8, 0x3, 0x4, 0x9, 0x2, 0x9c, 0x0, 0xb, 0xb, 0x0, 0x0, 0xfc, 0x7d, '\x00', 0x2, 0x7}) 2.601029805s ago: executing program 2 (id=2331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc0200000000000000000000000000000000000000002900000000000000003a00"/64, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32090000000000000000000000000000000000010000000000000000001000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000600000000000000000000000000000008000000000100000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffffd, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x0, 0x0, 0x0, 0xb7, 0x20000002, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, r6, 0xd}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x8000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000600)={[0x10, 0x8, 0x100, 0x4, 0x7, 0x1, 0xac58, 0x8, 0x7fff, 0xffff, 0xf5a, 0x56, 0x7, 0x4, 0xdbd0, 0x6, 0x1d4, 0x5, 0x3ff, 0x0, 0x6c, 0x100, 0x3, 0x40, 0x10001, 0xa, 0x8, 0xb00, 0x0, 0x2, 0xf, 0x16a, 0x3c, 0x200, 0x7fffffff, 0x80000000, 0x6e5, 0x8, 0x0, 0x8, 0x0, 0xd00, 0x596, 0xc5, 0xe, 0x0, 0x5, 0x0, 0x3ff, 0x7, 0x5, 0xf, 0x0, 0x10, 0x2cc8, 0x81, 0x6, 0xfffffff9, 0x23ffa9dd, 0x6, 0x81, 0x10000, 0x9, 0x4, 0xa, 0x2, 0x1, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x101, 0x1, 0xfffffffd, 0x8, 0x5, 0x9, 0x6, 0x8, 0x3, 0x0, 0x80, 0x7ff, 0x40, 0x2, 0x5, 0x6, 0x1, 0x10001, 0xf, 0xdf, 0x3ff, 0xd237, 0xfffffffa, 0x400, 0x5, 0x8, 0x8, 0x1, 0x2, 0x1, 0x8000, 0x6, 0xbb6, 0xb8, 0x6, 0x2, 0x143f1f62, 0x10, 0x81, 0x3, 0x5, 0xff, 0x800, 0x1000, 0x7, 0x7, 0x0, 0xffff9699, 0x5, 0x0, 0x0, 0x6, 0x4, 0x151, 0x401, 0x80, 0x3, 0xffffffff, 0x3, 0x7, 0x5, 0xffffffff, 0x9, 0x7f, 0x1, 0x1ff, 0x4, 0x9, 0x7fffffff, 0x8, 0xaf0d, 0xd73, 0x7, 0x9, 0x3, 0x4, 0x7, 0x3e, 0x1, 0x1, 0x7, 0x3, 0xf6ca, 0x51f8, 0x8, 0x4, 0x5, 0x5, 0xfffffffa, 0x2, 0x4, 0xffff, 0x4, 0x9, 0x9, 0x1, 0xffff5da5, 0x9, 0x7ff, 0x2, 0xad, 0x0, 0x4, 0x0, 0xffff732b, 0x3, 0x8, 0x3, 0xd, 0xfffffffb, 0x5, 0x0, 0x6, 0x2, 0x0, 0x4, 0x0, 0x4, 0x5, 0xe, 0x5, 0xfff, 0x3, 0x8001, 0x80000000, 0x0, 0x5, 0x7, 0x2, 0x7, 0x2, 0x3, 0x0, 0x1, 0xc4f7, 0x8, 0x6, 0x7ff, 0xfffffffd, 0x3, 0x45be, 0x1, 0x0, 0x9, 0x2f5, 0x6, 0xc, 0x8, 0x94d5, 0x4, 0x8, 0x6, 0x5, 0x5, 0x0, 0x6, 0x2, 0x1, 0xffff, 0x7, 0x40, 0x9, 0x68, 0x7, 0x9f, 0x6, 0x6, 0x8, 0x5, 0xfff, 0x9, 0x350f, 0xa6, 0x5, 0x1000, 0x8, 0x3, 0x8, 0x6, 0xa, 0x4, 0x0, 0x199b, 0x7, 0x5, 0x3c, 0x7, 0xfc, 0x2, 0x3, 0x10, 0x10000, 0x6, 0x1e, 0x0, 0x9, 0x4, 0x72, 0x193f, 0x2, 0xd58e, 0x1, 0x2, 0x7, 0x7, 0x4, 0x7c7, 0x5, 0x4b3, 0x7, 0xff, 0xffffffff, 0x0, 0x8, 0x8, 0x10, 0x8, 0x3ff, 0x1, 0xff, 0x1, 0x73c, 0x2, 0x9, 0x400, 0x0, 0x3, 0x401, 0x70c, 0x8, 0x9, 0x9, 0x1, 0x7fffffff, 0x0, 0x7, 0x10000, 0x10000, 0x5, 0x9, 0x40, 0x1d6, 0xb082, 0x8, 0x781, 0x1, 0x4, 0x2, 0x853, 0x1, 0x6, 0x100, 0x0, 0x0, 0xffffffff, 0x2, 0x2, 0x7, 0x6, 0xff, 0x6, 0x0, 0xffff0000, 0x2, 0x84, 0xd, 0x8, 0x3, 0x8b, 0x3ff, 0x0, 0x1, 0x1000, 0x4b8c, 0x1, 0x4, 0xf, 0x5, 0xe378, 0x9, 0x5, 0x2, 0x8, 0x2, 0x2, 0x45d1, 0x8, 0x2, 0x4, 0x101, 0x6, 0x4f, 0x6, 0x5, 0x6b, 0x2, 0x0, 0x26, 0x1, 0x4, 0x0, 0x5, 0x7fffffff, 0x2, 0x8f1, 0x2, 0x8, 0x1, 0x4f0d, 0x6, 0x6, 0x10000, 0xfffffffa, 0x6, 0x651, 0x5, 0xffff, 0xd40b, 0x5, 0x6116, 0xfa8, 0xfff, 0x9, 0x6, 0x8, 0xffffffff, 0xd03f, 0xf, 0x2, 0xb14, 0x80, 0x3ff, 0x4, 0x1000, 0xe, 0x9, 0x7, 0x94, 0x97d, 0xe6, 0x10, 0x9, 0x5, 0x5, 0x6, 0x4f, 0x3, 0xfffffffd, 0x7, 0x10000, 0x8000, 0x7, 0x81, 0x2, 0x1, 0xa, 0x1, 0xf, 0xf, 0x7f, 0x8000, 0x4, 0x2, 0xff, 0x8, 0xc, 0xfdc, 0xb, 0x38e90152, 0xe, 0x4, 0x200, 0x101, 0xff, 0xf, 0x20a4, 0x9, 0xffffffff, 0x81, 0x5, 0x4, 0x8, 0x1dd1, 0x3, 0x0, 0x28231209, 0x1f, 0x6, 0xd, 0x9, 0x3, 0x99, 0x5, 0x9, 0x4, 0x40, 0x1, 0x6, 0x7, 0x97, 0xff, 0x80000001, 0x2, 0x4, 0x2, 0x1000, 0x2, 0xfae, 0x5, 0x7, 0x1, 0x7, 0x8, 0xe61b, 0x5, 0xf07a, 0x5, 0x2, 0xfff, 0x9, 0x2, 0xdd89281, 0x5, 0xfffffffe, 0x9, 0x6, 0x7, 0x6, 0xffffffff, 0x1, 0x2, 0x904d, 0x0, 0x80000001, 0x1, 0x826d, 0xdf2, 0xb, 0xb468, 0x5, 0x2, 0x3046, 0xff, 0x3, 0x5, 0xff, 0xd, 0x6, 0x6a, 0x5, 0x4, 0x4, 0x9, 0x3, 0x8, 0x3, 0xe2cc, 0x5e5, 0x9, 0x9, 0x6, 0x80, 0x8000, 0x9, 0xfffffc01, 0x1, 0xffff, 0x7, 0x3, 0x7fff, 0x8, 0x1, 0x101, 0x0, 0x4, 0x5, 0x4, 0x3, 0x5, 0x9, 0x3, 0x0, 0xfffffb1f, 0x1, 0x7, 0xc, 0x101, 0x0, 0x80, 0x0, 0x3, 0xf76, 0xe4, 0x8, 0xf86e, 0xb5, 0x8, 0x3, 0x1, 0x4, 0x5, 0x10000, 0x6, 0xffff, 0x2, 0x34, 0x5, 0x554a, 0x3, 0x7, 0x5, 0x6, 0x4, 0x0, 0xab, 0xfffffff3, 0xfff, 0x4, 0x400, 0x7, 0xf, 0xcf, 0x9, 0x1, 0xfffffff7, 0x8, 0x6, 0x5, 0x52f, 0x2, 0x7, 0xffff, 0x1000, 0x5, 0x6, 0x0, 0x3, 0x8, 0x0, 0x2, 0x1, 0x5d7, 0x703b00, 0x8001, 0x800, 0x9, 0xb, 0x9, 0x35, 0xff, 0x3ff, 0x4, 0x2, 0x4, 0x1ff, 0x8, 0xfffffffc, 0x2bc, 0x7, 0x5, 0x4, 0xf81, 0x3e2, 0x8, 0x101, 0x1, 0x3, 0x100, 0x81, 0x2, 0x6, 0xfffffffe, 0x3, 0x7fff, 0xcdc, 0x2, 0x7ff, 0x81, 0x6, 0xac, 0x8, 0x3, 0x2, 0x5, 0x3045, 0x7, 0x40, 0x380000, 0x7ff, 0x6, 0x42, 0x9, 0x4, 0x2, 0x7, 0x3d, 0x9, 0x8, 0x2, 0x5, 0xffff0000, 0xdf, 0x3, 0x4, 0x0, 0x9, 0x0, 0xffff5d56, 0x8, 0xe81d, 0x3, 0x80, 0x8, 0x66ccaa76, 0x6, 0xf, 0x5, 0x4, 0xfffffff7, 0x4, 0x8000, 0x3, 0xc9, 0x5, 0x200, 0x9, 0x6, 0x13, 0x1ff, 0x4, 0x1, 0x9, 0x4, 0x9, 0xe9ca, 0x3, 0x5, 0x4, 0x8, 0x86, 0x0, 0x5, 0x7, 0x6, 0x9, 0xa569, 0x8d1, 0x9, 0xffffffff, 0x5, 0x3, 0x10000, 0xf, 0x8, 0x1, 0x3f, 0x6, 0x0, 0x4, 0x3, 0x3, 0x40, 0x8, 0x7, 0x5, 0xe6, 0x101, 0x1, 0x8, 0x4, 0x3, 0x100, 0x3, 0x5, 0x19, 0x40400000, 0x2, 0x2, 0x9, 0x9b6, 0x8, 0x7, 0x101, 0xfffffffa, 0x1, 0xf1, 0x0, 0xb, 0xfffffff7, 0x6, 0x6, 0x3173, 0x9, 0x4, 0x9, 0xfffffff6, 0x83e, 0x6, 0xff, 0x1ff, 0x5e78, 0x3e8d8636, 0xfffffff7, 0x8834862d, 0x3, 0x4, 0x71a, 0x8, 0x7fffffff, 0x81, 0xb, 0x9, 0x9, 0x9, 0x400, 0x4, 0x5, 0x5, 0x5, 0x80000000, 0x40, 0x0, 0x2, 0xffffffff, 0x8, 0xfffffffb, 0x0, 0x5, 0x9, 0x74, 0x3, 0x7fffffff, 0x2, 0x1, 0x81, 0x4, 0x5, 0x40, 0x9, 0x101, 0x6, 0xd2, 0xfffffff8, 0x8, 0x554, 0x5, 0x8, 0x8001, 0x4, 0x8, 0x7, 0xfffffffb, 0x5, 0x9, 0x8, 0x3, 0x4, 0x0, 0x0, 0xe8, 0x5, 0xfffffff9, 0x3, 0xf0, 0x5, 0x6, 0x800, 0x4e, 0x1, 0x9, 0xffff3cf1, 0x8, 0x5, 0x2, 0x5, 0x6, 0x1d5f, 0x101, 0xfffffffc, 0x10000, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0x7, 0xb, 0x4, 0xf9d6, 0xffffffff, 0xfff, 0xb, 0xba5, 0xf691, 0x5, 0x800, 0xe, 0x3, 0x4, 0x7fff, 0xf0, 0xffff, 0x6, 0x3, 0x4, 0xffffffe3, 0x2020, 0x62f, 0x8, 0x9ba2, 0x1, 0x8, 0x83da, 0xffff, 0x2, 0x4, 0x101, 0x40, 0x7fffffff, 0x604a06f7, 0x8, 0xff, 0xffffffff, 0x6, 0x2, 0x9, 0xfffff000, 0x1, 0x0, 0x8, 0x474c, 0x3, 0x1ff, 0x2c, 0x9668, 0x294, 0x80000000, 0xf76, 0x3, 0x3, 0xfffffffb, 0x4, 0xa8, 0x1, 0x40, 0x2, 0x3, 0x200, 0x78c1, 0x1, 0x1, 0x5, 0x1, 0x5, 0xfffffffd, 0x5, 0x138d, 0x5, 0x1000, 0x6, 0x2, 0x4, 0x75, 0x3, 0x7fff, 0x4000, 0x0, 0x8001, 0x101, 0x5, 0x9, 0x3, 0x9, 0x1, 0x3ff, 0x10001, 0x4, 0x10001, 0x8, 0x2, 0xfffffffd, 0x8, 0x1, 0x7, 0xfffffffd, 0x2a, 0x7, 0x4, 0x1, 0x5, 0x9, 0x6, 0x3b, 0xda67, 0x1, 0x4f3, 0x10000, 0x1800, 0x344, 0x1, 0x26e, 0x6, 0xe6c0, 0x9, 0x5, 0x8, 0x0, 0x7f, 0x0, 0x3ff, 0x6, 0xd, 0x9, 0x7, 0x24a, 0x8, 0x0, 0x7, 0xee, 0x9, 0x7, 0x8, 0x9, 0x9, 0x3, 0x8, 0x6, 0x9b, 0xc0b, 0x3, 0xe45, 0xd, 0xee0a, 0xc, 0x1, 0x0, 0x5, 0x9, 0x1, 0xc, 0x8, 0x47, 0x2, 0x7f, 0xd, 0x3, 0xcc1, 0x6, 0xac, 0x5, 0x2]}) 2.495570439s ago: executing program 2 (id=2332): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.46568046s ago: executing program 2 (id=2333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00016c0004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088a8"], 0xfdef) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000000c0)) 2.345797383s ago: executing program 2 (id=2334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) 2.344444354s ago: executing program 2 (id=2335): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 2.072359753s ago: executing program 3 (id=2338): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x201, 0x3ffffa, 0x800000, {{}, {}, {0x8, 0x11, 0x84f}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20040010) 2.061180973s ago: executing program 3 (id=2339): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) (fail_nth: 2) 1.937664597s ago: executing program 3 (id=2340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x38, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x10, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x14, 0x5, 0x0, 0x1, [@nested={0x10, 0xce, 0x0, 0x1, [@nested={0xc, 0x13e, 0x0, 0x1, [@nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x61}]}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') lseek(r4, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) write$tun(r3, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x5, 0x2, 0x4, 0x10}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @remote}, {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "d4b60720106792886fa8940b7881c9fb10fd79d0a50b592a", "dc60c393628ae83771967850b9d066904d6ff7ac161515d800be00"}}}}, 0x6a) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 1.695363715s ago: executing program 3 (id=2341): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.25128327s ago: executing program 1 (id=2342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x3, 0x0, 0x6, 0x0, 0x9, 0x8, 0x27, 0x1, 0x1, 0xff, 0x9, 0x7, 0x0, 0x3, 0x5, 0x3, 0x8, 0x1, 0x3, '\x00', 0x1, 0xab5}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.25103629s ago: executing program 3 (id=2343): fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff88a84f028100400008004556005c00610000841190787f000000e00000014e224e23004890780300000002000000462d9ba906833d58c4caf439c90000e2e099bfb900000000eb835fb65c8b9ae493d4fb662704b8db08835fcfb6a4d7ea9378cfc98b077903"], 0x72) syz_usb_connect(0x3, 0x2d, &(0x7f0000001e80)=ANY=[@ANYBLOB="12010102bc823e082404009544420102030109021b0002ca3008a509048d07001b95216e09040000000037977f"], &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) 1.194267061s ago: executing program 1 (id=2344): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x1, 0x0, 0x5, 0x400, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = userfaultfd(0x80801) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xc506}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="540100001000010030bd700000000000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100000000000000000000000000010000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000104cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000700000000000028bd7000aa0e0000"], 0x154}, 0x1, 0x0, 0x0, 0x4044011}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) (async) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x1, 0x0, 0x5, 0x400, r1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) userfaultfd(0x80801) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) (async) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xc506}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="540100001000010030bd700000000000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100000000000000000000000000010000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000104cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000700000000000028bd7000aa0e0000"], 0x154}, 0x1, 0x0, 0x0, 0x4044011}, 0x0) (async) 1.021779487s ago: executing program 1 (id=2345): ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 467.724175ms ago: executing program 0 (id=2346): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 451.494825ms ago: executing program 0 (id=2347): r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 430.616516ms ago: executing program 0 (id=2348): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x201, 0x3ffffa, 0x800000, {{}, {}, {0x8, 0x11, 0x84f}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20040010) 374.660688ms ago: executing program 0 (id=2349): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b01090224"], 0x0) close(0x3) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x2}}]}}, 0x0) 206.526263ms ago: executing program 1 (id=2350): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000240)=0x1) 153.757955ms ago: executing program 1 (id=2351): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000104c05d503000000000001090224000100000000090400000203"], 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc0200000000000000000000000000000000000000002900000000000000003a00"/64, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32090000000000000000000000000000000000010000000000000000001000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000600000000000000000000000000000008000000000100000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffffd, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x0, 0x0, 0x0, 0xb7, 0x20000002, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, r6, 0xd}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000600)={[0x10, 0x8, 0x100, 0x4, 0x7, 0x1, 0xac58, 0x8, 0x7fff, 0xffff, 0xf5a, 0x56, 0x7, 0x4, 0xdbd0, 0x6, 0x1d4, 0x5, 0x3ff, 0x0, 0x6c, 0x100, 0x3, 0x40, 0x10001, 0xa, 0x8, 0xb00, 0x0, 0x2, 0xf, 0x16a, 0x3c, 0x200, 0x7fffffff, 0x80000000, 0x6e5, 0x8, 0x0, 0x8, 0x0, 0xd00, 0x596, 0xc5, 0xe, 0x0, 0x5, 0x0, 0x3ff, 0x7, 0x5, 0xf, 0x0, 0x10, 0x2cc8, 0x81, 0x6, 0xfffffff9, 0x23ffa9dd, 0x6, 0x81, 0x10000, 0x9, 0x4, 0xa, 0x2, 0x1, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x101, 0x1, 0xfffffffd, 0x8, 0x5, 0x9, 0x6, 0x8, 0x3, 0x0, 0x80, 0x7ff, 0x40, 0x2, 0x5, 0x6, 0x1, 0x10001, 0xf, 0xdf, 0x3ff, 0xd237, 0xfffffffa, 0x400, 0x5, 0x8, 0x8, 0x1, 0x2, 0x1, 0x8000, 0x6, 0xbb6, 0xb8, 0x6, 0x2, 0x143f1f62, 0x10, 0x81, 0x3, 0x5, 0xff, 0x800, 0x1000, 0x7, 0x7, 0x0, 0xffff9699, 0x5, 0x0, 0x0, 0x6, 0x4, 0x151, 0x401, 0x80, 0x3, 0xffffffff, 0x3, 0x7, 0x5, 0xffffffff, 0x9, 0x7f, 0x1, 0x1ff, 0x4, 0x9, 0x7fffffff, 0x8, 0xaf0d, 0xd73, 0x7, 0x9, 0x3, 0x4, 0x7, 0x3e, 0x1, 0x1, 0x7, 0x3, 0xf6ca, 0x51f8, 0x8, 0x4, 0x5, 0x5, 0xfffffffa, 0x2, 0x4, 0xffff, 0x4, 0x9, 0x9, 0x1, 0xffff5da5, 0x9, 0x7ff, 0x2, 0xad, 0x0, 0x4, 0x0, 0xffff732b, 0x3, 0x8, 0x3, 0xd, 0xfffffffb, 0x5, 0x0, 0x6, 0x2, 0x0, 0x4, 0x0, 0x4, 0x5, 0xe, 0x5, 0xfff, 0x3, 0x8001, 0x80000000, 0x0, 0x5, 0x7, 0x2, 0x7, 0x2, 0x3, 0x0, 0x1, 0xc4f7, 0x8, 0x6, 0x7ff, 0xfffffffd, 0x3, 0x45be, 0x1, 0x0, 0x9, 0x2f5, 0x6, 0xc, 0x8, 0x94d5, 0x4, 0x8, 0x6, 0x5, 0x5, 0x0, 0x6, 0x2, 0x1, 0xffff, 0x7, 0x40, 0x9, 0x68, 0x7, 0x9f, 0x6, 0x6, 0x8, 0x5, 0xfff, 0x9, 0x350f, 0xa6, 0x5, 0x1000, 0x8, 0x3, 0x8, 0x6, 0xa, 0x4, 0x0, 0x199b, 0x7, 0x5, 0x3c, 0x7, 0xfc, 0x2, 0x3, 0x10, 0x10000, 0x6, 0x1e, 0x0, 0x9, 0x4, 0x72, 0x193f, 0x2, 0xd58e, 0x1, 0x2, 0x7, 0x7, 0x4, 0x7c7, 0x5, 0x4b3, 0x7, 0xff, 0xffffffff, 0x0, 0x8, 0x8, 0x10, 0x8, 0x3ff, 0x1, 0xff, 0x1, 0x73c, 0x2, 0x9, 0x400, 0x0, 0x3, 0x401, 0x70c, 0x8, 0x9, 0x9, 0x1, 0x7fffffff, 0x0, 0x7, 0x10000, 0x10000, 0x5, 0x9, 0x40, 0x1d6, 0xb082, 0x8, 0x781, 0x1, 0x4, 0x2, 0x853, 0x1, 0x6, 0x100, 0x0, 0x0, 0xffffffff, 0x2, 0x2, 0x7, 0x6, 0xff, 0x6, 0x0, 0xffff0000, 0x2, 0x84, 0xd, 0x8, 0x3, 0x8b, 0x3ff, 0x0, 0x1, 0x1000, 0x4b8c, 0x1, 0x4, 0xf, 0x5, 0xe378, 0x9, 0x5, 0x2, 0x8, 0x2, 0x2, 0x45d1, 0x8, 0x2, 0x4, 0x101, 0x6, 0x4f, 0x6, 0x5, 0x6b, 0x2, 0x0, 0x26, 0x1, 0x4, 0x0, 0x5, 0x7fffffff, 0x2, 0x8f1, 0x2, 0x8, 0x1, 0x4f0d, 0x6, 0x6, 0x10000, 0xfffffffa, 0x6, 0x651, 0x5, 0xffff, 0xd40b, 0x5, 0x6116, 0xfa8, 0xfff, 0x9, 0x6, 0x8, 0xffffffff, 0xd03f, 0xf, 0x2, 0xb14, 0x80, 0x3ff, 0x4, 0x1000, 0xe, 0x9, 0x7, 0x94, 0x97d, 0xe6, 0x10, 0x9, 0x5, 0x5, 0x6, 0x4f, 0x3, 0xfffffffd, 0x7, 0x10000, 0x8000, 0x7, 0x81, 0x2, 0x1, 0xa, 0x1, 0xf, 0xf, 0x7f, 0x8000, 0x4, 0x2, 0xff, 0x8, 0xc, 0xfdc, 0xb, 0x38e90152, 0xe, 0x4, 0x200, 0x101, 0xff, 0xf, 0x20a4, 0x9, 0xffffffff, 0x81, 0x5, 0x4, 0x8, 0x1dd1, 0x3, 0x0, 0x28231209, 0x1f, 0x6, 0xd, 0x9, 0x3, 0x99, 0x5, 0x9, 0x4, 0x40, 0x1, 0x6, 0x7, 0x97, 0xff, 0x80000001, 0x2, 0x4, 0x2, 0x1000, 0x2, 0xfae, 0x5, 0x7, 0x1, 0x7, 0x8, 0xe61b, 0x5, 0xf07a, 0x5, 0x2, 0xfff, 0x9, 0x2, 0xdd89281, 0x5, 0xfffffffe, 0x9, 0x6, 0x7, 0x6, 0xffffffff, 0x1, 0x2, 0x904d, 0x0, 0x80000001, 0x1, 0x826d, 0xdf2, 0xb, 0xb468, 0x5, 0x2, 0x3046, 0xff, 0x3, 0x5, 0xff, 0xd, 0x6, 0x6a, 0x5, 0x4, 0x4, 0x9, 0x3, 0x8, 0x3, 0xe2cc, 0x5e5, 0x9, 0x9, 0x6, 0x80, 0x8000, 0x9, 0xfffffc01, 0x1, 0xffff, 0x7, 0x3, 0x7fff, 0x8, 0x1, 0x101, 0x0, 0x4, 0x5, 0x4, 0x3, 0x5, 0x9, 0x3, 0x0, 0xfffffb1f, 0x1, 0x7, 0xc, 0x101, 0x0, 0x80, 0x0, 0x3, 0xf76, 0xe4, 0x8, 0xf86e, 0xb5, 0x8, 0x3, 0x1, 0x4, 0x5, 0x10000, 0x6, 0xffff, 0x2, 0x34, 0x5, 0x554a, 0x3, 0x7, 0x5, 0x6, 0x4, 0x0, 0xab, 0xfffffff3, 0xfff, 0x4, 0x400, 0x7, 0xf, 0xcf, 0x9, 0x1, 0xfffffff7, 0x8, 0x6, 0x5, 0x52f, 0x2, 0x7, 0xffff, 0x1000, 0x5, 0x6, 0x0, 0x3, 0x8, 0x0, 0x2, 0x1, 0x5d7, 0x703b00, 0x8001, 0x800, 0x9, 0xb, 0x9, 0x35, 0xff, 0x3ff, 0x4, 0x2, 0x4, 0x1ff, 0x8, 0xfffffffc, 0x2bc, 0x7, 0x5, 0x4, 0xf81, 0x3e2, 0x8, 0x101, 0x1, 0x3, 0x100, 0x81, 0x2, 0x6, 0xfffffffe, 0x3, 0x7fff, 0xcdc, 0x2, 0x7ff, 0x81, 0x6, 0xac, 0x8, 0x3, 0x2, 0x5, 0x3045, 0x7, 0x40, 0x380000, 0x7ff, 0x6, 0x42, 0x9, 0x4, 0x2, 0x7, 0x3d, 0x9, 0x8, 0x2, 0x5, 0xffff0000, 0xdf, 0x3, 0x4, 0x0, 0x9, 0x0, 0xffff5d56, 0x8, 0xe81d, 0x3, 0x80, 0x8, 0x66ccaa76, 0x6, 0xf, 0x5, 0x4, 0xfffffff7, 0x4, 0x8000, 0x3, 0xc9, 0x5, 0x200, 0x9, 0x6, 0x13, 0x1ff, 0x4, 0x1, 0x9, 0x4, 0x9, 0xe9ca, 0x3, 0x5, 0x4, 0x8, 0x86, 0x0, 0x5, 0x7, 0x6, 0x9, 0xa569, 0x8d1, 0x9, 0xffffffff, 0x5, 0x3, 0x10000, 0xf, 0x8, 0x1, 0x3f, 0x6, 0x0, 0x4, 0x3, 0x3, 0x40, 0x8, 0x7, 0x5, 0xe6, 0x101, 0x1, 0x8, 0x4, 0x3, 0x100, 0x3, 0x5, 0x19, 0x40400000, 0x2, 0x2, 0x9, 0x9b6, 0x8, 0x7, 0x101, 0xfffffffa, 0x1, 0xf1, 0x0, 0xb, 0xfffffff7, 0x6, 0x6, 0x3173, 0x9, 0x4, 0x9, 0xfffffff6, 0x83e, 0x6, 0xff, 0x1ff, 0x5e78, 0x3e8d8636, 0xfffffff7, 0x8834862d, 0x3, 0x4, 0x71a, 0x8, 0x7fffffff, 0x81, 0xb, 0x9, 0x9, 0x9, 0x400, 0x4, 0x5, 0x5, 0x5, 0x80000000, 0x40, 0x0, 0x2, 0xffffffff, 0x8, 0xfffffffb, 0x0, 0x5, 0x9, 0x74, 0x3, 0x7fffffff, 0x2, 0x1, 0x81, 0x4, 0x5, 0x40, 0x9, 0x101, 0x6, 0xd2, 0xfffffff8, 0x8, 0x554, 0x5, 0x8, 0x8001, 0x4, 0x8, 0x7, 0xfffffffb, 0x5, 0x9, 0x8, 0x3, 0x4, 0x0, 0x0, 0xe8, 0x5, 0xfffffff9, 0x3, 0xf0, 0x5, 0x6, 0x800, 0x4e, 0x1, 0x9, 0xffff3cf1, 0x8, 0x5, 0x2, 0x5, 0x6, 0x1d5f, 0x101, 0xfffffffc, 0x10000, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0x7, 0xb, 0x4, 0xf9d6, 0xffffffff, 0xfff, 0xb, 0xba5, 0xf691, 0x5, 0x800, 0xe, 0x3, 0x4, 0x7fff, 0xf0, 0xffff, 0x6, 0x3, 0x4, 0xffffffe3, 0x2020, 0x62f, 0x8, 0x9ba2, 0x1, 0x8, 0x83da, 0xffff, 0x2, 0x4, 0x101, 0x40, 0x7fffffff, 0x604a06f7, 0x8, 0xff, 0xffffffff, 0x6, 0x2, 0x9, 0xfffff000, 0x1, 0x0, 0x8, 0x474c, 0x3, 0x1ff, 0x2c, 0x9668, 0x294, 0x80000000, 0xf76, 0x3, 0x3, 0xfffffffb, 0x4, 0xa8, 0x1, 0x40, 0x2, 0x3, 0x200, 0x78c1, 0x1, 0x1, 0x5, 0x1, 0x5, 0xfffffffd, 0x5, 0x138d, 0x5, 0x1000, 0x6, 0x2, 0x4, 0x75, 0x3, 0x7fff, 0x4000, 0x0, 0x8001, 0x101, 0x5, 0x9, 0x3, 0x9, 0x1, 0x3ff, 0x10001, 0x4, 0x10001, 0x8, 0x2, 0xfffffffd, 0x8, 0x1, 0x7, 0xfffffffd, 0x2a, 0x7, 0x4, 0x1, 0x5, 0x9, 0x6, 0x3b, 0xda67, 0x1, 0x4f3, 0x10000, 0x1800, 0x344, 0x1, 0x26e, 0x6, 0xe6c0, 0x9, 0x5, 0x8, 0x0, 0x7f, 0x0, 0x3ff, 0x6, 0xd, 0x9, 0x7, 0x24a, 0x8, 0x0, 0x7, 0xee, 0x9, 0x7, 0x8, 0x9, 0x9, 0x3, 0x8, 0x6, 0x9b, 0xc0b, 0x3, 0xe45, 0xd, 0xee0a, 0xc, 0x1, 0x0, 0x5, 0x9, 0x1, 0xc, 0x8, 0x47, 0x2, 0x7f, 0xd, 0x3, 0xcc1, 0x6, 0xac, 0x5, 0x2]}) kernel console output (not intermixed with test programs): 206.528405][ T9] usb 4-1: No valid video chain found. [ 206.538680][ T9] usb 4-1: USB disconnect, device number 80 [ 206.643326][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 206.654177][ T45] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 207.973504][ T310] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 208.141701][ T310] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.150217][ T310] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.160659][ T310] usb 4-1: config 220 has no interface number 2 [ 208.167120][ T310] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.180452][ T310] usb 4-1: config 220 interface 0 has no altsetting 0 [ 208.187334][ T310] usb 4-1: config 220 interface 76 has no altsetting 0 [ 208.194385][ T310] usb 4-1: config 220 interface 1 has no altsetting 0 [ 208.203501][ T310] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 208.212773][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.220899][ T310] usb 4-1: Product: syz [ 208.225210][ T310] usb 4-1: Manufacturer: syz [ 208.229925][ T310] usb 4-1: SerialNumber: syz [ 208.374793][ T45] usb 1-1: USB disconnect, device number 95 [ 208.577911][ T36] audit: type=1400 audit(1778969456.089:1111): avc: denied { map } for pid=4655 comm="syz.0.1772" path="socket:[36820]" dev="sockfs" ino=36820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 208.706767][ T310] usb 4-1: selecting invalid altsetting 0 [ 208.738728][ T310] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 208.763834][ T4659] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1774'. [ 208.772952][ T310] usb 4-1: No valid video chain found. [ 208.828367][ T310] usb 4-1: USB disconnect, device number 81 [ 209.099958][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 209.122707][ T4700] syzkaller0: entered promiscuous mode [ 209.128175][ T4700] syzkaller0: entered allmulticast mode [ 209.179758][ T36] audit: type=1400 audit(1778969456.689:1112): avc: denied { remount } for pid=4701 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.244551][ T4713] capability: warning: `syz.0.1798' uses 32-bit capabilities (legacy support in use) [ 209.249963][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 209.265770][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 209.274323][ T10] usb 2-1: config 0 has no interface number 0 [ 209.286167][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.300316][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.309058][ T10] usb 2-1: Product: syz [ 209.313570][ T10] usb 2-1: Manufacturer: syz [ 209.318224][ T10] usb 2-1: SerialNumber: syz [ 209.323428][ T10] usb 2-1: config 0 descriptor?? [ 209.329124][ T10] smsc95xx v2.0.0 [ 209.362091][ T4723] tmpfs: Unsupported parameter 'mpol' [ 209.741231][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 209.752004][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 209.961831][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 209.972649][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 210.069963][ T310] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 210.230597][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 210.239373][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.249536][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.262457][ T310] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 210.271545][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.280868][ T310] usb 3-1: config 0 descriptor?? [ 210.286566][ T310] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 210.510857][ T611] usb 3-1: USB disconnect, device number 87 [ 211.373393][ T36] audit: type=1400 audit(1778969458.889:1113): avc: denied { setopt } for pid=4766 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.864723][ T10] usb 2-1: USB disconnect, device number 88 [ 212.319951][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 212.469968][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 212.476352][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 212.484615][ T10] usb 2-1: config 0 has no interface number 0 [ 212.496286][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 212.505534][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.513733][ T10] usb 2-1: Product: syz [ 212.517979][ T10] usb 2-1: Manufacturer: syz [ 212.522684][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 212.530284][ T10] usb 2-1: SerialNumber: syz [ 212.535571][ T10] usb 2-1: config 0 descriptor?? [ 212.541325][ T10] smsc95xx v2.0.0 [ 212.690970][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.705303][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 212.714435][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 212.722562][ T9] usb 4-1: Product: syz [ 212.726723][ T9] usb 4-1: Manufacturer: syz [ 212.731363][ T9] usb 4-1: SerialNumber: syz [ 212.943297][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 212.959953][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 213.172509][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 213.200000][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 214.309037][ T36] audit: type=1400 audit(1778969461.819:1114): avc: denied { mounton } for pid=4873 comm="syz.2.1863" path="/477/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 215.333693][ T45] usb 4-1: USB disconnect, device number 82 [ 215.506814][ T10] usb 2-1: USB disconnect, device number 89 [ 215.549994][ T36] audit: type=1400 audit(1778969463.069:1115): avc: denied { append } for pid=4896 comm="syz.2.1871" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 216.182407][ T36] audit: type=1400 audit(1778969463.699:1116): avc: denied { mount } for pid=4932 comm="syz.1.1884" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 216.213445][ T4933] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 216.272587][ T36] audit: type=1400 audit(1778969463.729:1117): avc: denied { mounton } for pid=4932 comm="syz.1.1884" path="/435/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 216.393348][ T36] audit: type=1400 audit(1778969463.839:1118): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 216.759998][ T611] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 216.910089][ T611] usb 3-1: Using ep0 maxpacket: 32 [ 216.920868][ T611] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 216.934045][ T611] usb 3-1: config 0 has no interface number 0 [ 216.941829][ T611] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 216.951290][ T611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.959516][ T611] usb 3-1: Product: syz [ 216.963978][ T611] usb 3-1: Manufacturer: syz [ 216.970393][ T611] usb 3-1: SerialNumber: syz [ 216.982798][ T611] usb 3-1: config 0 descriptor?? [ 216.989094][ T611] smsc95xx v2.0.0 [ 217.070128][ T4992] syzkaller0: entered promiscuous mode [ 217.075672][ T4992] syzkaller0: entered allmulticast mode [ 217.389686][ T611] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 217.400448][ T611] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 217.579961][ T45] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 217.610123][ T611] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 217.620923][ T611] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 217.739944][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 217.746144][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.756301][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.769210][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 217.778259][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.786982][ T45] usb 2-1: config 0 descriptor?? [ 217.792785][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 217.868496][ T5015] syzkaller0: entered promiscuous mode [ 217.873999][ T5015] syzkaller0: entered allmulticast mode [ 218.063113][ T611] usb 2-1: USB disconnect, device number 90 [ 218.178912][ T36] audit: type=1400 audit(1778969465.689:1119): avc: denied { nlmsg_read } for pid=5054 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 218.636514][ T36] audit: type=1400 audit(1778969466.149:1120): avc: denied { relabelfrom } for pid=5076 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 218.656509][ T36] audit: type=1400 audit(1778969466.149:1121): avc: denied { relabelto } for pid=5076 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 218.774955][ T9] usb 3-1: USB disconnect, device number 88 [ 218.803797][ T5100] can: request_module (can-proto-6) failed. [ 218.863403][ T5112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=5112 comm=syz.3.1966 [ 220.070658][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 220.219948][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 220.226108][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 220.234225][ T9] usb 3-1: config 0 has no interface number 0 [ 220.247425][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 220.256492][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.264506][ T9] usb 3-1: Product: syz [ 220.268667][ T9] usb 3-1: Manufacturer: syz [ 220.315455][ T9] usb 3-1: SerialNumber: syz [ 220.320983][ T9] usb 3-1: config 0 descriptor?? [ 220.326605][ T9] smsc95xx v2.0.0 [ 220.519949][ T45] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 220.671280][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.681121][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 220.690189][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.698200][ T45] usb 1-1: Product: syz [ 220.702366][ T45] usb 1-1: Manufacturer: syz [ 220.706957][ T45] usb 1-1: SerialNumber: syz [ 220.729013][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 220.739802][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 220.915449][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.924547][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.936519][ T5161] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1985' sets config #1 [ 220.941268][ T5159] syzkaller0: entered promiscuous mode [ 220.951236][ T5159] syzkaller0: entered allmulticast mode [ 220.956905][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 220.967776][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 221.012289][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 221.021527][ T45] usb 1-1: unit 13 not found! [ 221.029210][ T45] usb 1-1: USB disconnect, device number 96 [ 221.039071][ T511] udevd[511]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 222.340625][ T311] usb 3-1: USB disconnect, device number 89 [ 222.445427][ T5185] tipc: Started in network mode [ 222.450400][ T5185] tipc: Node identity 84f, cluster identity 4711 [ 222.456902][ T5185] tipc: Node number set to 2127 [ 222.478820][ T5188] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1995' sets config #1 [ 222.700002][ T45] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 222.899954][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 223.019955][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 223.026299][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 223.038107][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.049045][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.058840][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 223.071834][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 223.079940][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 223.080929][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.087883][ T9] usb 2-1: config 202 has an invalid interface number: 141 but max is 0 [ 223.094568][ T45] usb 1-1: config 0 descriptor?? [ 223.102920][ T9] usb 2-1: config 202 has no interface number 0 [ 223.113611][ T9] usb 2-1: config 202 interface 141 has no altsetting 0 [ 223.122179][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice=42.44 [ 223.131427][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.139456][ T9] usb 2-1: Product: 㼒ۃ谘᣻䄹巜꺁牻㥚ᶮϝ됕沜蟓叨퀙ና杤嚥鹡ᖏ栄꣍㶺⢂㓍া艱킮⤽臭劂ᵠ㈣谤먇㔔㣴ϒ邪່澋횜ƍ䔻⩃拰♅ꀡᾇ↶ [ 223.157969][ T9] usb 2-1: Manufacturer: 崢㏵컮䟍퇕ƪ홾噭㉅⌃栣焸೯圍䔆汔傼枹㧹츌奿閧胈浺絴깮ඞ竭剈艊吴툘熃鷣㪥䋂쉡㒃㲲㳇罋棷҈낼᧳絛☦囧 [ 223.175862][ T9] usb 2-1: SerialNumber:  [ 223.386295][ T9] smsc95xx v2.0.0 [ 223.390622][ T9] smsc95xx 2-1:202.141 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 223.401001][ T9] smsc95xx 2-1:202.141: probe with driver smsc95xx failed with error -22 [ 223.413133][ T9] usb 2-1: USB disconnect, device number 91 [ 223.439956][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 223.512199][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 223.525889][ T45] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0013/input/input27 [ 223.538439][ T45] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0013/input/input28 [ 223.554026][ T45] kye 0003:0458:5013.0013: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 223.559405][ T5199] udevd[5199]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 223.589953][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 223.596060][ T10] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 223.604527][ T10] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 223.613007][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 223.623563][ T10] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 223.632625][ T10] usb 3-1: config 250 has no interface number 0 [ 223.639942][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 223.648979][ T10] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 223.657354][ T10] usb 3-1: Product: syz [ 223.659950][ T504] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 223.661532][ T10] usb 3-1: SerialNumber: syz [ 223.664907][ T10] hub 3-1:250.228: bad descriptor, ignoring hub [ 223.679984][ T10] hub 3-1:250.228: probe with driver hub failed with error -5 [ 223.809935][ T504] usb 4-1: Using ep0 maxpacket: 32 [ 223.816037][ T504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.826970][ T504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.837681][ T504] usb 4-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 223.846761][ T504] usb 4-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 223.854970][ T504] usb 4-1: Product: syz [ 223.859129][ T504] usb 4-1: Manufacturer: syz [ 223.864721][ T504] usb 4-1: config 0 descriptor?? [ 223.874260][ T9] usb 1-1: USB disconnect, device number 97 [ 224.130141][ T10] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 224.139956][ T611] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 224.276824][ T504] hid-generic 0003:25DD:F3D2.0014: hiddev96,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 224.290769][ T611] usb 2-1: Using ep0 maxpacket: 32 [ 224.297870][ T5203] udevd[5203]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 224.309105][ T611] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.317236][ T611] usb 2-1: config 0 has no interface number 0 [ 224.325020][ T611] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.334092][ T611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.342111][ T611] usb 2-1: Product: syz [ 224.346264][ T611] usb 2-1: Manufacturer: syz [ 224.350852][ T611] usb 2-1: SerialNumber: syz [ 224.355883][ T611] usb 2-1: config 0 descriptor?? [ 224.361537][ T611] smsc95xx v2.0.0 [ 224.543053][ T45] usb 4-1: USB disconnect, device number 83 [ 225.286003][ T5209] tipc: Started in network mode [ 225.293103][ T5209] tipc: Node identity 84f, cluster identity 4711 [ 225.299546][ T5209] tipc: Node number set to 2127 [ 225.324255][ T10] usb 3-1: USB disconnect, device number 90 [ 225.332456][ T611] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 225.343771][ T611] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 225.377815][ T5218] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2005' sets config #1 [ 225.554351][ T611] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 225.565144][ T611] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 226.550033][ T504] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 226.710123][ T504] usb 1-1: Using ep0 maxpacket: 8 [ 226.717170][ T504] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 226.725905][ T504] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 226.735692][ T504] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 226.746921][ T504] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 226.756635][ T504] usb 1-1: config 250 has no interface number 0 [ 226.765362][ T504] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 226.775309][ T504] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 226.784203][ T504] usb 1-1: Product: syz [ 226.788683][ T504] usb 1-1: SerialNumber: syz [ 226.810432][ T504] hub 1-1:250.228: bad descriptor, ignoring hub [ 226.821839][ T504] hub 1-1:250.228: probe with driver hub failed with error -5 [ 226.939725][ T504] usb 2-1: USB disconnect, device number 92 [ 227.309247][ T5249] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2016' sets config #1 [ 227.390192][ T45] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 227.850134][ T45] usb 1-1: USB disconnect, device number 98 [ 229.710014][ T611] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 229.859943][ T611] usb 1-1: Using ep0 maxpacket: 8 [ 229.866179][ T611] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 229.874572][ T611] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 229.883098][ T611] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 229.893420][ T611] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 229.902575][ T611] usb 1-1: config 250 has no interface number 0 [ 229.909978][ T611] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 229.919044][ T611] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 229.927341][ T611] usb 1-1: Product: syz [ 229.931540][ T611] usb 1-1: SerialNumber: syz [ 229.939812][ T611] hub 1-1:250.228: bad descriptor, ignoring hub [ 229.948815][ T611] hub 1-1:250.228: probe with driver hub failed with error -5 [ 230.400333][ T611] usb 1-1: reset high-speed USB device number 99 using dummy_hcd [ 230.860077][ T504] usb 1-1: USB disconnect, device number 99 [ 231.459967][ T611] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 231.609947][ T611] usb 2-1: Using ep0 maxpacket: 16 [ 231.616336][ T611] usb 2-1: config 1 has an invalid descriptor of length 224, skipping remainder of the config [ 231.626817][ T611] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.637425][ T611] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 231.646624][ T611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.654709][ T611] usb 2-1: Product: syz [ 231.658970][ T611] usb 2-1: Manufacturer: syz [ 231.663666][ T611] usb 2-1: SerialNumber: syz [ 231.872597][ T611] usb 2-1: Fast Track Pro switching to config #2 [ 231.881228][ T611] usb 2-1: USB disconnect, device number 93 [ 232.148060][ T5334] tipc: Started in network mode [ 232.152994][ T5334] tipc: Node identity 84f, cluster identity 4711 [ 232.159384][ T5334] tipc: Node number set to 2127 [ 232.389129][ T5346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.599953][ T611] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 232.679941][ T310] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 232.749947][ T611] usb 3-1: Using ep0 maxpacket: 8 [ 232.757863][ T611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.766142][ T611] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 232.773759][ T611] usb 3-1: can't read configurations, error -71 [ 232.839934][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 232.845992][ T310] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 232.854404][ T310] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 232.862935][ T310] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 232.873199][ T310] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 232.882239][ T310] usb 2-1: config 250 has no interface number 0 [ 232.888483][ T310] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 232.900046][ T310] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 232.910479][ T310] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 232.923857][ T310] usb 2-1: config 250 interface 228 has no altsetting 0 [ 232.931795][ T310] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 232.940863][ T310] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 232.949202][ T310] usb 2-1: Product: syz [ 232.953368][ T310] usb 2-1: SerialNumber: syz [ 232.959850][ T310] hub 2-1:250.228: bad descriptor, ignoring hub [ 232.966156][ T310] hub 2-1:250.228: probe with driver hub failed with error -5 [ 233.270054][ T9] usb 2-1: USB disconnect, device number 94 [ 233.478182][ T5367] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2056' sets config #1 [ 233.673882][ T5373] cgroup: Invalid name [ 233.681675][ T5373] cgroup: Name too long [ 233.712193][ T5375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.249961][ T611] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 234.409985][ T611] usb 3-1: Using ep0 maxpacket: 8 [ 234.418580][ T611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.427520][ T611] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 234.435129][ T611] usb 3-1: can't read configurations, error -71 [ 235.089961][ T45] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 235.249968][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 235.257606][ T45] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 235.266044][ T45] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 235.274626][ T45] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 235.284897][ T611] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 235.285063][ T45] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 235.301683][ T45] usb 2-1: config 250 has no interface number 0 [ 235.307985][ T45] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 235.321403][ T45] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 235.331989][ T45] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 235.345507][ T45] usb 2-1: config 250 interface 228 has no altsetting 0 [ 235.353580][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 235.362691][ T45] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 235.371360][ T45] usb 2-1: Product: syz [ 235.375505][ T45] usb 2-1: SerialNumber: syz [ 235.381973][ T45] hub 2-1:250.228: bad descriptor, ignoring hub [ 235.388225][ T45] hub 2-1:250.228: probe with driver hub failed with error -5 [ 235.417820][ T5403] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.450138][ T611] usb 3-1: Using ep0 maxpacket: 16 [ 235.456496][ T611] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 235.469285][ T611] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 235.478543][ T611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.486574][ T611] usb 3-1: Product: syz [ 235.490812][ T611] usb 3-1: Manufacturer: syz [ 235.495410][ T611] usb 3-1: SerialNumber: syz [ 235.587217][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.596235][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.705737][ T611] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 235.710030][ T45] usb 2-1: USB disconnect, device number 95 [ 235.717962][ T611] usb 3-1: USB disconnect, device number 94 [ 236.123004][ T36] audit: type=1400 audit(1778969483.639:1122): avc: denied { write } for pid=5408 comm="syz.1.2071" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 236.135737][ T5409] rust_binder: 1158: no such ref 1 [ 236.151194][ T5409] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 236.158442][ T5409] rust_binder: Error while translating object. [ 236.158465][ T5409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.164648][ T5409] rust_binder: 5408:5409 transaction to 5408 failed: EINVAL [ 236.193535][ T5411] netlink: 'syz.1.2072': attribute type 9 has an invalid length. [ 236.539966][ T311] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 236.694956][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 236.701719][ T311] usb 4-1: config 202 has an invalid interface number: 141 but max is 1 [ 236.710098][ T311] usb 4-1: config 202 has an invalid interface number: 141 but max is 1 [ 236.718450][ T311] usb 4-1: config 202 has 1 interface, different from the descriptor's value: 2 [ 236.727497][ T311] usb 4-1: config 202 has no interface number 0 [ 236.733785][ T311] usb 4-1: config 202 interface 141 has no altsetting 0 [ 236.742021][ T311] usb 4-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice=42.44 [ 236.751086][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.759086][ T311] usb 4-1: Product: 㼒ۃ谘᣻䄹巜꺁牻㥚ᶮϝ됕沜蟓叨퀙ና杤嚥鹡ᖏ栄꣍㶺⢂㓍া艱킮⤽臭劂ᵠ㈣谤먇㔔㣴ϒ邪່澋횜ƍ䔻⩃拰♅ꀡᾇ↶ [ 236.777516][ T311] usb 4-1: Manufacturer: 崢㏵컮䟍퇕ƪ홾噭㉅⌃栣焸೯圍䔆汔傼枹㧹츌奿閧胈浺絴깮ඞ竭剈艊吴툘熃鷣㪥䋂쉡㒃㲲㳇罋棷҈낼᧳絛☦囧 [ 236.795279][ T311] usb 4-1: SerialNumber:  [ 237.004237][ T311] smsc95xx v2.0.0 [ 237.007924][ T311] smsc95xx 4-1:202.141 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 237.018310][ T311] smsc95xx 4-1:202.141: probe with driver smsc95xx failed with error -22 [ 237.027709][ T311] usb 4-1: USB disconnect, device number 84 [ 237.447029][ T36] audit: type=1400 audit(1778969484.959:1123): avc: denied { map } for pid=5436 comm="syz.1.2080" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.471387][ T36] audit: type=1400 audit(1778969484.959:1124): avc: denied { write } for pid=5436 comm="syz.1.2080" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.526426][ T5442] 9pnet_fd: p9_fd_create_tcp (5442): problem connecting socket to 127.0.0.1 [ 237.722552][ T5455] tipc: Started in network mode [ 237.727440][ T5455] tipc: Node identity 84f, cluster identity 4711 [ 237.749937][ T5455] tipc: Node number set to 2127 [ 238.488345][ T36] audit: type=1400 audit(1778969485.999:1125): avc: denied { setopt } for pid=5473 comm="syz.0.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.489152][ T5474] fuse: Unknown parameter '' [ 238.569232][ T36] audit: type=1400 audit(1778969486.079:1126): avc: denied { ioctl } for pid=5473 comm="syz.0.2092" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 238.594034][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 238.594112][ T36] audit: type=1400 audit(1778969486.079:1127): avc: denied { wake_alarm } for pid=5473 comm="syz.0.2092" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.749948][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 238.760957][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.778281][ T9] usb 2-1: config 202 has an invalid interface number: 141 but max is 1 [ 238.792061][ T9] usb 2-1: config 202 has an invalid interface number: 141 but max is 1 [ 238.801236][ T9] usb 2-1: config 202 has 1 interface, different from the descriptor's value: 2 [ 238.810777][ T9] usb 2-1: config 202 has no interface number 0 [ 238.817060][ T9] usb 2-1: config 202 interface 141 has no altsetting 0 [ 238.830302][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice=42.44 [ 238.839387][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.847594][ T9] usb 2-1: Product: 㼒ۃ谘᣻䄹巜꺁牻㥚ᶮϝ됕沜蟓叨퀙ና杤嚥鹡ᖏ栄꣍㶺⢂㓍া艱킮⤽臭劂ᵠ㈣谤먇㔔㣴ϒ邪່澋횜ƍ䔻⩃拰♅ꀡᾇ↶ [ 238.866709][ T9] usb 2-1: Manufacturer: 崢㏵컮䟍퇕ƪ홾噭㉅⌃栣焸೯圍䔆汔傼枹㧹츌奿閧胈浺絴깮ඞ竭剈艊吴툘熃鷣㪥䋂쉡㒃㲲㳇罋棷҈낼᧳絛☦囧 [ 238.884551][ T9] usb 2-1: SerialNumber:  [ 238.948585][ T36] audit: type=1400 audit(1778969486.459:1128): avc: denied { write } for pid=5491 comm="syz.3.2098" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.971649][ T36] audit: type=1400 audit(1778969486.459:1129): avc: denied { open } for pid=5491 comm="syz.3.2098" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.995727][ T5492] netlink: 'syz.3.2098': attribute type 27 has an invalid length. [ 239.003737][ T5492] lo: entered promiscuous mode [ 239.008638][ T5492] lo: entered allmulticast mode [ 239.014345][ T5492] tunl0: entered promiscuous mode [ 239.019499][ T5492] tunl0: entered allmulticast mode [ 239.025146][ T5492] gre0: entered promiscuous mode [ 239.030325][ T5492] gre0: entered allmulticast mode [ 239.035700][ T5492] gretap0: entered promiscuous mode [ 239.041286][ T5492] gretap0: entered allmulticast mode [ 239.047997][ T5492] erspan0: entered promiscuous mode [ 239.057369][ T5492] erspan0: entered allmulticast mode [ 239.063875][ T5492] ip_vti0: entered promiscuous mode [ 239.069141][ T5492] ip_vti0: entered allmulticast mode [ 239.075225][ T5492] ip6_vti0: entered promiscuous mode [ 239.080692][ T5492] ip6_vti0: entered allmulticast mode [ 239.107079][ T9] smsc95xx v2.0.0 [ 239.112973][ T9] smsc95xx 2-1:202.141 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 239.119647][ T5492] sit0: entered promiscuous mode [ 239.128516][ T5492] sit0: entered allmulticast mode [ 239.134404][ T5492] ip6tnl0: entered promiscuous mode [ 239.139666][ T5492] ip6tnl0: entered allmulticast mode [ 239.144599][ T9] smsc95xx 2-1:202.141: probe with driver smsc95xx failed with error -22 [ 239.145308][ T5492] ip6gre0: entered promiscuous mode [ 239.158803][ T5492] ip6gre0: entered allmulticast mode [ 239.164498][ T5492] syz_tun: entered promiscuous mode [ 239.170881][ T9] usb 2-1: USB disconnect, device number 96 [ 239.172470][ T5492] syz_tun: entered allmulticast mode [ 239.182805][ T5492] ip6gretap0: entered promiscuous mode [ 239.188905][ T5492] ip6gretap0: entered allmulticast mode [ 239.195276][ T5492] bridge0: entered promiscuous mode [ 239.200650][ T5492] bridge0: entered allmulticast mode [ 239.206479][ T5492] vcan0: entered promiscuous mode [ 239.211866][ T5492] vcan0: entered allmulticast mode [ 239.217171][ T5492] dummy0: entered promiscuous mode [ 239.222639][ T5492] dummy0: entered allmulticast mode [ 239.228182][ T5492] veth0: entered promiscuous mode [ 239.233683][ T5492] veth0: entered allmulticast mode [ 239.239235][ T5492] veth1: entered promiscuous mode [ 239.244507][ T5492] veth1: entered allmulticast mode [ 239.250314][ T5492] wg0: entered promiscuous mode [ 239.255417][ T5492] wg0: entered allmulticast mode [ 239.261080][ T5492] wg1: entered promiscuous mode [ 239.265988][ T5492] wg1: entered allmulticast mode [ 239.271457][ T5492] wg2: entered promiscuous mode [ 239.276358][ T5492] wg2: entered allmulticast mode [ 239.281903][ T5492] veth0_to_bridge: entered promiscuous mode [ 239.287853][ T5492] veth0_to_bridge: entered allmulticast mode [ 239.294796][ T5492] veth1_to_bridge: entered promiscuous mode [ 239.300875][ T5492] veth1_to_bridge: entered allmulticast mode [ 239.307692][ T5492] veth0_to_bond: entered promiscuous mode [ 239.313678][ T5492] veth0_to_bond: entered allmulticast mode [ 239.320418][ T5492] bond_slave_0: entered promiscuous mode [ 239.326091][ T5492] bond_slave_0: entered allmulticast mode [ 239.344396][ T5492] veth1_to_bond: entered promiscuous mode [ 239.350442][ T5492] veth1_to_bond: entered allmulticast mode [ 239.363452][ T5492] bond_slave_1: entered promiscuous mode [ 239.369587][ T5492] bond_slave_1: entered allmulticast mode [ 239.381901][ T5492] veth0_to_team: entered promiscuous mode [ 239.387855][ T5492] veth0_to_team: entered allmulticast mode [ 239.399085][ T5492] team_slave_0: entered promiscuous mode [ 239.405009][ T5492] team_slave_0: entered allmulticast mode [ 239.411211][ T5492] veth1_to_team: entered promiscuous mode [ 239.417013][ T5492] veth1_to_team: entered allmulticast mode [ 239.423410][ T5492] team_slave_1: entered promiscuous mode [ 239.429137][ T5492] team_slave_1: entered allmulticast mode [ 239.435393][ T5492] veth0_to_batadv: entered promiscuous mode [ 239.441482][ T5492] veth0_to_batadv: entered allmulticast mode [ 239.447809][ T5492] batadv_slave_0: entered promiscuous mode [ 239.453847][ T5492] batadv_slave_0: entered allmulticast mode [ 239.460212][ T5492] veth1_to_batadv: entered promiscuous mode [ 239.466203][ T5492] veth1_to_batadv: entered allmulticast mode [ 239.472935][ T5492] batadv_slave_1: entered promiscuous mode [ 239.478829][ T5492] batadv_slave_1: entered allmulticast mode [ 239.485290][ T5492] xfrm0: entered promiscuous mode [ 239.490897][ T5492] xfrm0: entered allmulticast mode [ 239.496337][ T5492] veth0_to_hsr: entered promiscuous mode [ 239.502376][ T5492] veth0_to_hsr: entered allmulticast mode [ 239.508490][ T5492] hsr_slave_0: entered promiscuous mode [ 239.514500][ T5492] hsr_slave_0: entered allmulticast mode [ 239.520598][ T5492] veth1_to_hsr: entered promiscuous mode [ 239.526325][ T5492] veth1_to_hsr: entered allmulticast mode [ 239.532766][ T5492] hsr_slave_1: entered promiscuous mode [ 239.538399][ T5492] hsr_slave_1: entered allmulticast mode [ 239.544667][ T5492] veth1_virt_wifi: entered promiscuous mode [ 239.550932][ T5492] veth1_virt_wifi: entered allmulticast mode [ 239.557328][ T5492] veth0_virt_wifi: entered promiscuous mode [ 239.563644][ T5492] veth0_virt_wifi: entered allmulticast mode [ 239.575001][ T5492] veth1_vlan: entered promiscuous mode [ 239.598406][ T5492] veth1_vlan: entered allmulticast mode [ 239.604828][ T5492] veth0_vlan: entered allmulticast mode [ 239.611978][ T5492] vlan0: entered promiscuous mode [ 239.618487][ T5492] vlan0: entered allmulticast mode [ 239.628030][ T5492] vlan1: entered promiscuous mode [ 239.633844][ T5492] vlan1: entered allmulticast mode [ 239.642681][ T5492] veth1_macvtap: entered allmulticast mode [ 239.651493][ T5492] veth0_macvtap: entered promiscuous mode [ 239.661361][ T5492] veth0_macvtap: entered allmulticast mode [ 239.667820][ T5492] macsec0: entered promiscuous mode [ 239.673192][ T5492] macsec0: entered allmulticast mode [ 240.159972][ T311] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 240.299979][ T311] usb 2-1: device descriptor read/64, error -71 [ 240.339948][ T45] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 240.492658][ T45] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 240.514253][ T45] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 240.533206][ T45] usb 4-1: config 220 interface 0 has no altsetting 0 [ 240.551242][ T311] usb 2-1: device descriptor read/64, error -71 [ 240.561551][ T45] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 240.579958][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.598122][ T45] usb 4-1: Product: syz [ 240.602748][ T45] usb 4-1: Manufacturer: syz [ 240.607348][ T45] usb 4-1: SerialNumber: syz [ 240.782155][ T36] audit: type=1400 audit(1778969488.299:1130): avc: denied { search } for pid=5522 comm="syz.0.2108" name="/" dev="configfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.814544][ T36] audit: type=1400 audit(1778969488.299:1131): avc: denied { setattr } for pid=5522 comm="syz.0.2108" name="/" dev="configfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.843454][ T311] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 240.860233][ T45] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 240.866901][ T45] usb 4-1: No valid video chain found. [ 240.874391][ T45] usb 4-1: USB disconnect, device number 85 [ 240.990379][ T311] usb 2-1: device descriptor read/64, error -71 [ 241.019975][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 241.189942][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 241.201398][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.219953][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.239500][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.248620][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.256637][ T9] usb 1-1: Product: syz [ 241.260830][ T9] usb 1-1: Manufacturer: syz [ 241.265432][ T9] usb 1-1: SerialNumber: syz [ 241.269938][ T311] usb 2-1: device descriptor read/64, error -71 [ 241.380039][ T311] usb usb2-port1: attempt power cycle [ 241.484189][ T9] usb 1-1: 0:2 : does not exist [ 241.492623][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 241.512690][ T9] usb 1-1: USB disconnect, device number 100 [ 241.620570][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 241.730062][ T311] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 241.750895][ T311] usb 2-1: device descriptor read/8, error -71 [ 241.779946][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 241.786501][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.794992][ T10] usb 4-1: config index 0 descriptor too short (expected 28341, got 105) [ 241.803443][ T10] usb 4-1: config 155 has too many interfaces: 241, using maximum allowed: 32 [ 241.812310][ T10] usb 4-1: config 155 has an invalid descriptor of length 113, skipping remainder of the config [ 241.822734][ T10] usb 4-1: config 155 has 1 interface, different from the descriptor's value: 241 [ 241.833243][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 241.842314][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.850302][ T10] usb 4-1: Product: syz [ 241.854437][ T10] usb 4-1: Manufacturer: syz [ 241.859005][ T10] usb 4-1: SerialNumber: syz [ 241.890998][ T311] usb 2-1: device descriptor read/8, error -71 [ 242.067035][ T10] usb 4-1: Fast Track Pro config OK [ 242.073723][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 242.084049][ T10] snd-usb-audio 4-1:155.0: probe with driver snd-usb-audio failed with error -22 [ 242.095981][ T10] usb 4-1: USB disconnect, device number 86 [ 242.109738][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.130016][ T311] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 242.151110][ T311] usb 2-1: device descriptor read/8, error -71 [ 242.501036][ T311] usb 2-1: device descriptor read/8, error -71 [ 242.610110][ T311] usb usb2-port1: unable to enumerate USB device [ 242.746458][ T5539] FAULT_INJECTION: forcing a failure. [ 242.746458][ T5539] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 242.759611][ T5539] CPU: 1 UID: 0 PID: 5539 Comm: syz.1.2113 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 242.759646][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.759667][ T5539] Call Trace: [ 242.759675][ T5539] [ 242.759683][ T5539] __dump_stack+0x21/0x30 [ 242.759716][ T5539] dump_stack_lvl+0x140/0x1c0 [ 242.759743][ T5539] ? __cfi_dump_stack_lvl+0x10/0x10 [ 242.759778][ T5539] ? __kasan_check_write+0x18/0x20 [ 242.759800][ T5539] ? kvm_arch_vcpu_load+0x683/0x8f0 [ 242.759821][ T5539] dump_stack+0x19/0x20 [ 242.759847][ T5539] should_fail_ex+0x3d7/0x530 [ 242.759867][ T5539] should_fail+0xf/0x20 [ 242.759885][ T5539] should_fail_usercopy+0x1e/0x30 [ 242.759907][ T5539] _copy_from_user+0x20/0xa0 [ 242.759930][ T5539] kvm_arch_vcpu_ioctl+0x441/0x2d90 [ 242.759951][ T5539] ? avc_has_perm+0x155/0x240 [ 242.759973][ T5539] ? __cfi_avc_has_perm+0x10/0x10 [ 242.759993][ T5539] ? kasan_save_alloc_info+0x40/0x50 [ 242.760022][ T5539] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 242.760044][ T5539] ? selinux_file_open+0x46c/0x630 [ 242.760064][ T5539] ? __cfi_selinux_file_open+0x10/0x10 [ 242.760087][ T5539] ? is_bpf_text_address+0x17b/0x1a0 [ 242.760116][ T5539] ? kernel_text_address+0xa9/0xe0 [ 242.760142][ T5539] ? __kernel_text_address+0x11/0x40 [ 242.760167][ T5539] ? __asan_set_shadow_00+0x12/0x20 [ 242.760194][ T5539] ? do_vfs_ioctl+0x182d/0x2010 [ 242.760217][ T5539] ? arch_stack_walk+0x10a/0x170 [ 242.760237][ T5539] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 242.760261][ T5539] ? _parse_integer_limit+0x195/0x1e0 [ 242.760289][ T5539] ? _parse_integer+0x2e/0x40 [ 242.760315][ T5539] ? kstrtoull+0x13b/0x1e0 [ 242.760340][ T5539] ? kstrtouint+0x78/0xf0 [ 242.760367][ T5539] ? ioctl_has_perm+0x1bc/0x500 [ 242.760385][ T5539] ? __asan_memcpy+0x5a/0x80 [ 242.760405][ T5539] ? ioctl_has_perm+0x408/0x500 [ 242.760424][ T5539] ? has_cap_mac_admin+0xd0/0xd0 [ 242.760442][ T5539] ? __kasan_check_write+0x18/0x20 [ 242.760461][ T5539] ? mutex_lock_killable+0x97/0x1d0 [ 242.760486][ T5539] ? __cfi_mutex_lock_killable+0x10/0x10 [ 242.760510][ T5539] ? proc_fail_nth_write+0x184/0x220 [ 242.760537][ T5539] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 242.760565][ T5539] kvm_vcpu_ioctl+0x7da/0x1000 [ 242.760585][ T5539] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 242.760605][ T5539] ? __cfi_vfs_write+0x10/0x10 [ 242.760625][ T5539] ? __kasan_check_write+0x18/0x20 [ 242.760645][ T5539] ? mutex_unlock+0x90/0x240 [ 242.760668][ T5539] ? __cfi_mutex_unlock+0x10/0x10 [ 242.760690][ T5539] ? __fget_files+0x2c5/0x340 [ 242.760714][ T5539] ? __fget_files+0x2c5/0x340 [ 242.760736][ T5539] ? bpf_lsm_file_ioctl+0xd/0x20 [ 242.760768][ T5539] ? security_file_ioctl+0x3e/0x110 [ 242.760795][ T5539] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 242.760814][ T5539] __se_sys_ioctl+0x132/0x1b0 [ 242.760838][ T5539] __x64_sys_ioctl+0x7f/0xa0 [ 242.760860][ T5539] x64_sys_call+0x1878/0x2ee0 [ 242.760880][ T5539] do_syscall_64+0x57/0xf0 [ 242.760899][ T5539] ? clear_bhb_loop+0x50/0xa0 [ 242.760923][ T5539] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 242.760946][ T5539] RIP: 0033:0x7fa8aa99ce59 [ 242.760974][ T5539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.760991][ T5539] RSP: 002b:00007fa8ab869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.761022][ T5539] RAX: ffffffffffffffda RBX: 00007fa8aac15fa0 RCX: 00007fa8aa99ce59 [ 242.761037][ T5539] RDX: 00002000000002c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 242.761051][ T5539] RBP: 00007fa8ab869090 R08: 0000000000000000 R09: 0000000000000000 [ 242.761065][ T5539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.761079][ T5539] R13: 00007fa8aac16038 R14: 00007fa8aac15fa0 R15: 00007fff8c1dc048 [ 242.761098][ T5539] [ 243.849952][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 243.989975][ T9] usb 4-1: device descriptor read/64, error -71 [ 244.229950][ T9] usb 4-1: device descriptor read/64, error -71 [ 244.470003][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 244.579938][ T311] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 244.599960][ T9] usb 4-1: device descriptor read/64, error -71 [ 244.771477][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.783238][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 244.795029][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.808908][ T311] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 244.818560][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.835685][ T311] usb 1-1: config 0 descriptor?? [ 244.843726][ T5580] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 244.859945][ T9] usb 4-1: device descriptor read/64, error -71 [ 244.970047][ T9] usb usb4-port1: attempt power cycle [ 245.257214][ T5580] netlink: 'syz.0.2126': attribute type 11 has an invalid length. [ 245.273755][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.285382][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.303898][ T311] hid (null): global environment stack underflow [ 245.313635][ T311] input: HID 28bd:0935 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0935.0015/input/input29 [ 245.319982][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 245.346232][ T311] uclogic 0003:28BD:0935.0015: input,hidraw0: USB HID v1.01 Mouse [HID 28bd:0935] on usb-dummy_hcd.0-1/input0 [ 245.362061][ T5607] udevd[5607]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 245.372758][ T9] usb 4-1: device descriptor read/8, error -71 [ 245.380338][ T36] audit: type=1400 audit(1778969492.899:1132): avc: denied { write } for pid=5605 comm="syz.2.2135" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 245.412811][ T36] audit: type=1400 audit(1778969492.899:1133): avc: denied { open } for pid=5605 comm="syz.2.2135" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 245.489339][ T5611] FAULT_INJECTION: forcing a failure. [ 245.489339][ T5611] name failslab, interval 1, probability 0, space 0, times 1 [ 245.500592][ T5580] incfs: Error accessing: ./file1. [ 245.502060][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.1.2137 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 245.502096][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.502109][ T5611] Call Trace: [ 245.502116][ T5611] [ 245.502124][ T5611] __dump_stack+0x21/0x30 [ 245.502156][ T5611] dump_stack_lvl+0x140/0x1c0 [ 245.502182][ T5611] ? __cfi_dump_stack_lvl+0x10/0x10 [ 245.502210][ T5611] dump_stack+0x19/0x20 [ 245.502234][ T5611] should_fail_ex+0x3d7/0x530 [ 245.502252][ T5611] should_failslab+0xac/0x100 [ 245.502276][ T5611] __kmalloc_node_noprof+0x6c/0x4f0 [ 245.502296][ T5611] ? __kvmalloc_node_noprof+0x128/0x300 [ 245.502324][ T5611] __kvmalloc_node_noprof+0x128/0x300 [ 245.502352][ T5611] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 245.502381][ T5611] traverse+0xf5/0x710 [ 245.502403][ T5611] ? __cfi_mutex_lock+0x10/0x10 [ 245.502426][ T5611] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 245.502450][ T5611] seq_read_iter+0xe50/0xfd0 [ 245.502472][ T5611] ? _parse_integer_limit+0x195/0x1e0 [ 245.502501][ T5611] seq_read+0x368/0x490 [ 245.502523][ T5611] ? __cfi_seq_read+0x10/0x10 [ 245.502546][ T5611] ? __cfi_selinux_file_permission+0x10/0x10 [ 245.502573][ T5611] ? __import_iovec+0x5ad/0x7c0 [ 245.502597][ T5611] ? __cfi_seq_read+0x10/0x10 [ 245.502619][ T5611] proc_reg_read+0x1fa/0x2f0 [ 245.502640][ T5611] vfs_readv+0x5f0/0xa10 [ 245.502662][ T5611] ? __cfi_proc_reg_read+0x10/0x10 [ 245.502682][ T5611] ? do_readv+0x2e0/0x2e0 [ 245.502706][ T5611] ? __cfi_mutex_unlock+0x10/0x10 [ 245.502731][ T5611] __x64_sys_preadv+0x1a6/0x2c0 [ 245.502752][ T5611] ? __cfi___x64_sys_preadv+0x10/0x10 [ 245.502773][ T5611] ? __kasan_check_read+0x15/0x20 [ 245.502793][ T5611] x64_sys_call+0x1ee9/0x2ee0 [ 245.502812][ T5611] do_syscall_64+0x57/0xf0 [ 245.502830][ T5611] ? clear_bhb_loop+0x50/0xa0 [ 245.502852][ T5611] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 245.502874][ T5611] RIP: 0033:0x7fa8aa99ce59 [ 245.502891][ T5611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.502908][ T5611] RSP: 002b:00007fa8ab869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.502929][ T5611] RAX: ffffffffffffffda RBX: 00007fa8aac15fa0 RCX: 00007fa8aa99ce59 [ 245.502944][ T5611] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 245.502958][ T5611] RBP: 00007fa8ab869090 R08: 0000000000000009 R09: 0000000000000000 [ 245.502972][ T5611] R10: 0000000000000180 R11: 0000000000000246 R12: 0000000000000001 [ 245.502985][ T5611] R13: 00007fa8aac16038 R14: 00007fa8aac15fa0 R15: 00007fff8c1dc048 [ 245.503001][ T5611] [ 245.551003][ T9] usb 4-1: device descriptor read/8, error -71 [ 245.562823][ T5580] incfs: mount failed -2 [ 245.783222][ T340] usb 1-1: USB disconnect, device number 101 [ 245.805035][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 245.840883][ T9] usb 4-1: device descriptor read/8, error -71 [ 245.940017][ T5634] batadv_slave_1: entered promiscuous mode [ 245.946376][ T5634] batadv_slave_1: left promiscuous mode [ 245.981032][ T9] usb 4-1: device descriptor read/8, error -71 [ 246.090026][ T9] usb usb4-port1: unable to enumerate USB device [ 246.159959][ T611] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 246.290722][ T611] usb 2-1: device descriptor read/64, error -71 [ 246.547141][ T611] usb 2-1: device descriptor read/64, error -71 [ 246.682576][ T5654] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 246.690717][ T5654] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 246.699117][ T5654] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 246.707307][ T5654] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 246.715808][ T5654] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 246.723953][ T5654] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 246.732133][ T5654] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 246.740320][ T5654] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 246.751336][ T5654] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 246.763574][ T5654] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 246.800029][ T611] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 246.828636][ T5660] FAULT_INJECTION: forcing a failure. [ 246.828636][ T5660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.841825][ T5660] CPU: 0 UID: 0 PID: 5660 Comm: syz.3.2154 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 246.841856][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.841867][ T5660] Call Trace: [ 246.841872][ T5660] [ 246.841876][ T5660] __dump_stack+0x21/0x30 [ 246.841897][ T5660] dump_stack_lvl+0x140/0x1c0 [ 246.841912][ T5660] ? __cfi_dump_stack_lvl+0x10/0x10 [ 246.841928][ T5660] ? avc_has_perm_noaudit+0x28a/0x360 [ 246.841942][ T5660] dump_stack+0x19/0x20 [ 246.841956][ T5660] should_fail_ex+0x3d7/0x530 [ 246.841967][ T5660] should_fail+0xf/0x20 [ 246.841977][ T5660] should_fail_usercopy+0x1e/0x30 [ 246.841988][ T5660] _copy_to_iter+0x1a9/0x1510 [ 246.842011][ T5660] ? __kasan_check_write+0x18/0x20 [ 246.842024][ T5660] ? __virt_addr_valid+0x2a6/0x380 [ 246.842037][ T5660] ? __cfi__copy_to_iter+0x10/0x10 [ 246.842049][ T5660] ? __check_object_size+0x527/0x830 [ 246.842061][ T5660] ? __cfi___check_object_size+0x10/0x10 [ 246.842072][ T5660] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 246.842088][ T5660] __skb_datagram_iter+0x103/0x930 [ 246.842103][ T5660] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 246.842118][ T5660] skb_copy_datagram_iter+0x44/0x160 [ 246.842133][ T5660] ping_recvmsg+0x1d0/0xee0 [ 246.842149][ T5660] ? selinux_socket_recvmsg+0x281/0x380 [ 246.842163][ T5660] ? arch_stack_walk+0x10a/0x170 [ 246.842174][ T5660] ? __cfi_ping_recvmsg+0x10/0x10 [ 246.842189][ T5660] ? avc_has_perm_noaudit+0x28a/0x360 [ 246.842201][ T5660] sock_common_recvmsg+0x11e/0x1d0 [ 246.842214][ T5660] ? __cfi_sock_common_recvmsg+0x10/0x10 [ 246.842227][ T5660] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 246.842240][ T5660] ? security_socket_recvmsg+0x44/0x130 [ 246.842254][ T5660] ? __cfi_sock_common_recvmsg+0x10/0x10 [ 246.842266][ T5660] sock_recvmsg+0x18c/0x1e0 [ 246.842280][ T5660] sock_read_iter+0x252/0x320 [ 246.842291][ T5660] ? __cfi_sock_read_iter+0x10/0x10 [ 246.842303][ T5660] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 246.842320][ T5660] vfs_read+0x657/0xcb0 [ 246.842331][ T5660] ? __cfi_vfs_read+0x10/0x10 [ 246.842343][ T5660] ksys_read+0x145/0x260 [ 246.842354][ T5660] ? __cfi_ksys_read+0x10/0x10 [ 246.842365][ T5660] ? __kasan_check_read+0x15/0x20 [ 246.842376][ T5660] __x64_sys_read+0x7f/0x90 [ 246.842387][ T5660] x64_sys_call+0x2638/0x2ee0 [ 246.842398][ T5660] do_syscall_64+0x57/0xf0 [ 246.842410][ T5660] ? clear_bhb_loop+0x50/0xa0 [ 246.842423][ T5660] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 246.842436][ T5660] RIP: 0033:0x7fad6039ce59 [ 246.842447][ T5660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.842457][ T5660] RSP: 002b:00007fad612e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.842471][ T5660] RAX: ffffffffffffffda RBX: 00007fad60615fa0 RCX: 00007fad6039ce59 [ 246.842480][ T5660] RDX: 000000000000ffe9 RSI: 0000200000002400 RDI: 0000000000000003 [ 246.842489][ T5660] RBP: 00007fad612e5090 R08: 0000000000000000 R09: 0000000000000000 [ 246.842496][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.842506][ T5660] R13: 00007fad60616038 R14: 00007fad60615fa0 R15: 00007ffeb68fa628 [ 246.842517][ T5660] [ 247.220013][ T611] usb 2-1: device descriptor read/64, error -71 [ 247.409946][ T311] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 247.459966][ T611] usb 2-1: device descriptor read/64, error -71 [ 247.539974][ T311] usb 1-1: device descriptor read/64, error -71 [ 247.570260][ T611] usb usb2-port1: attempt power cycle [ 247.678333][ T5676] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2161'. [ 247.788675][ T311] usb 1-1: device descriptor read/64, error -71 [ 247.909945][ T611] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 247.930994][ T611] usb 2-1: device descriptor read/8, error -71 [ 248.030003][ T311] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 248.060986][ T611] usb 2-1: device descriptor read/8, error -71 [ 248.169986][ T311] usb 1-1: device descriptor read/64, error -71 [ 248.299967][ T611] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 248.320973][ T611] usb 2-1: device descriptor read/8, error -71 [ 248.409996][ T311] usb 1-1: device descriptor read/64, error -71 [ 248.451011][ T611] usb 2-1: device descriptor read/8, error -71 [ 248.520030][ T311] usb usb1-port1: attempt power cycle [ 248.560047][ T611] usb usb2-port1: unable to enumerate USB device [ 248.859967][ T311] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 248.880932][ T311] usb 1-1: device descriptor read/8, error -71 [ 248.993441][ T36] audit: type=1400 audit(1778969496.509:1134): avc: denied { write } for pid=5698 comm="syz.1.2169" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 249.018512][ T36] audit: type=1400 audit(1778969496.509:1135): avc: denied { open } for pid=5698 comm="syz.1.2169" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 249.036252][ T5699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.043348][ T36] audit: type=1400 audit(1778969496.509:1136): avc: denied { ioctl } for pid=5698 comm="syz.1.2169" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 249.079136][ T311] usb 1-1: device descriptor read/8, error -71 [ 249.111048][ T36] audit: type=1400 audit(1778969496.629:1137): avc: denied { read } for pid=5701 comm="syz.2.2170" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.134463][ T36] audit: type=1400 audit(1778969496.629:1138): avc: denied { open } for pid=5701 comm="syz.2.2170" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.158241][ T36] audit: type=1400 audit(1778969496.629:1139): avc: denied { ioctl } for pid=5701 comm="syz.2.2170" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.335521][ T36] audit: type=1326 audit(1778969496.849:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.2172" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbfa19ce59 code=0x0 [ 249.386881][ T36] audit: type=1326 audit(1778969496.899:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.2172" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbfa19ce59 code=0x0 [ 249.639953][ T311] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 249.661030][ T311] usb 1-1: device descriptor read/8, error -71 [ 249.779945][ T504] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 249.790962][ T311] usb 1-1: device descriptor read/8, error -71 [ 249.900021][ T311] usb usb1-port1: unable to enumerate USB device [ 249.931006][ T504] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 249.939288][ T504] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 249.949543][ T504] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 249.958678][ T504] usb 2-1: config 220 has no interface number 1 [ 249.964945][ T504] usb 2-1: config 220 interface 0 has no altsetting 0 [ 249.971761][ T504] usb 2-1: config 220 interface 76 has no altsetting 0 [ 249.979981][ T504] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 249.989022][ T504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.997020][ T504] usb 2-1: Product: syz [ 250.001184][ T504] usb 2-1: Manufacturer: syz [ 250.005752][ T504] usb 2-1: SerialNumber: syz [ 250.213919][ T504] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 250.220328][ T504] usb 2-1: No valid video chain found. [ 250.227421][ T504] usb 2-1: USB disconnect, device number 105 [ 250.589962][ T311] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 250.719943][ T311] usb 1-1: device descriptor read/64, error -71 [ 250.952384][ T36] audit: type=1400 audit(1778969498.469:1142): avc: denied { read } for pid=5732 comm="syz.1.2180" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.975027][ T311] usb 1-1: device descriptor read/64, error -71 [ 250.975320][ T36] audit: type=1400 audit(1778969498.469:1143): avc: denied { ioctl } for pid=5732 comm="syz.1.2180" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x128a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.349968][ T340] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 251.501270][ T340] usb 2-1: not running at top speed; connect to a high speed hub [ 251.509689][ T340] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 251.509960][ T311] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 251.520741][ T340] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.541051][ T340] usb 2-1: config 1 interface 0 has no altsetting 0 [ 251.548996][ T340] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.40 [ 251.558074][ T611] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 251.565662][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.574429][ T340] usb 2-1: Product: ည [ 251.578747][ T340] usb 2-1: Manufacturer: 獵끝䳥ᕈ끱䣳䄾钧㡌㡠䶆픉龜괖塀鳼냡㝺콙쑈謏꥜棙䝥뉪లስ㹱定⽂粧ꃼࠫ쀗麐㕭䫌쓹箵园㱡⬙녕ꃤ蚭ᚺꟅ榋㑜ꋁ씃羏Ⅿ켨ပ哕ﾲᡕꪊ呅☂꒒ [ 251.600672][ T340] usb 2-1: SerialNumber: syz [ 251.606247][ T5739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.613433][ T5739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.659965][ T311] usb 1-1: device descriptor read/64, error -71 [ 251.699973][ T611] usb 4-1: device descriptor read/64, error -71 [ 251.900005][ T311] usb 1-1: device descriptor read/64, error -71 [ 251.939938][ T611] usb 4-1: device descriptor read/64, error -71 [ 252.010037][ T311] usb usb1-port1: attempt power cycle [ 252.024544][ T340] usbhid 2-1:1.0: can't add hid device: -71 [ 252.030553][ T340] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 252.040041][ T340] usb 2-1: USB disconnect, device number 106 [ 252.179998][ T611] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 252.310032][ T611] usb 4-1: device descriptor read/64, error -71 [ 252.349982][ T311] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 252.370905][ T311] usb 1-1: device descriptor read/8, error -71 [ 252.500969][ T311] usb 1-1: device descriptor read/8, error -71 [ 252.534786][ T5747] FAULT_INJECTION: forcing a failure. [ 252.534786][ T5747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.547889][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: syz.1.2185 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 252.547920][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.547933][ T5747] Call Trace: [ 252.547940][ T5747] [ 252.547949][ T5747] __dump_stack+0x21/0x30 [ 252.547973][ T5747] dump_stack_lvl+0x140/0x1c0 [ 252.547988][ T5747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 252.548004][ T5747] ? check_stack_object+0x12b/0x150 [ 252.548017][ T5747] dump_stack+0x19/0x20 [ 252.548034][ T5747] should_fail_ex+0x3d7/0x530 [ 252.548046][ T5747] should_fail+0xf/0x20 [ 252.548055][ T5747] should_fail_usercopy+0x1e/0x30 [ 252.548067][ T5747] _copy_to_user+0x24/0xa0 [ 252.548080][ T5747] simple_read_from_buffer+0xed/0x160 [ 252.548096][ T5747] proc_fail_nth_read+0x1aa/0x220 [ 252.548113][ T5747] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 252.548128][ T5747] ? bpf_lsm_file_permission+0xd/0x20 [ 252.548142][ T5747] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 252.548157][ T5747] vfs_read+0x286/0xcb0 [ 252.548169][ T5747] ? __cfi_mapping_seek_hole_data+0x10/0x10 [ 252.548184][ T5747] ? __cfi_vfs_read+0x10/0x10 [ 252.548194][ T5747] ? __kasan_check_write+0x18/0x20 [ 252.548206][ T5747] ? mutex_lock+0x97/0x1d0 [ 252.548220][ T5747] ? __cfi_mutex_lock+0x10/0x10 [ 252.548233][ T5747] ? __fget_files+0x2c5/0x340 [ 252.548247][ T5747] ksys_read+0x145/0x260 [ 252.548257][ T5747] ? __cfi_ksys_read+0x10/0x10 [ 252.548269][ T5747] ? __kasan_check_read+0x15/0x20 [ 252.548280][ T5747] __x64_sys_read+0x7f/0x90 [ 252.548291][ T5747] x64_sys_call+0x2638/0x2ee0 [ 252.548302][ T5747] do_syscall_64+0x57/0xf0 [ 252.548313][ T5747] ? clear_bhb_loop+0x50/0xa0 [ 252.548327][ T5747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.548340][ T5747] RIP: 0033:0x7fa8aa95d68e [ 252.548351][ T5747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.548361][ T5747] RSP: 002b:00007fa8ab868fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.548374][ T5747] RAX: ffffffffffffffda RBX: 00007fa8ab8696c0 RCX: 00007fa8aa95d68e [ 252.548384][ T5747] RDX: 000000000000000f RSI: 00007fa8ab8690a0 RDI: 0000000000000004 [ 252.548392][ T5747] RBP: 00007fa8ab869090 R08: 0000000000000000 R09: 0000000000000000 [ 252.548400][ T5747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.548407][ T5747] R13: 00007fa8aac16038 R14: 00007fa8aac15fa0 R15: 00007fff8c1dc048 [ 252.548417][ T5747] [ 252.557092][ T611] usb 4-1: device descriptor read/64, error -71 [ 252.749943][ T311] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 252.820925][ T311] usb 1-1: device descriptor read/8, error -71 [ 252.859958][ T310] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 252.860073][ T611] usb usb4-port1: attempt power cycle [ 252.950989][ T311] usb 1-1: device descriptor read/8, error -71 [ 253.011000][ T310] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 253.019268][ T310] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 253.029543][ T310] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 253.038679][ T310] usb 2-1: config 220 has no interface number 1 [ 253.044942][ T310] usb 2-1: config 220 interface 0 has no altsetting 0 [ 253.051716][ T310] usb 2-1: config 220 interface 76 has no altsetting 0 [ 253.059794][ T310] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 253.068923][ T311] usb usb1-port1: unable to enumerate USB device [ 253.075294][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.084206][ T310] usb 2-1: Product: syz [ 253.088361][ T310] usb 2-1: Manufacturer: syz [ 253.092954][ T310] usb 2-1: SerialNumber: syz [ 253.209963][ T611] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 253.230979][ T611] usb 4-1: device descriptor read/8, error -71 [ 253.301024][ T310] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 253.307372][ T310] usb 2-1: No valid video chain found. [ 253.314422][ T310] usb 2-1: USB disconnect, device number 107 [ 253.361000][ T611] usb 4-1: device descriptor read/8, error -71 [ 253.589986][ T311] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 253.600067][ T611] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 253.620954][ T611] usb 4-1: device descriptor read/8, error -71 [ 253.743853][ T5751] syzkaller0: entered promiscuous mode [ 253.749389][ T5751] syzkaller0: entered allmulticast mode [ 253.756259][ T611] usb 4-1: device descriptor read/8, error -71 [ 253.792803][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 253.800992][ T311] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 253.808576][ T311] usb 1-1: can't read configurations, error -71 [ 253.870016][ T611] usb usb4-port1: unable to enumerate USB device [ 254.303755][ T5759] tipc: Enabling of bearer rejected, failed to enable media [ 254.330730][ T5761] FAULT_INJECTION: forcing a failure. [ 254.330730][ T5761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.343882][ T5761] CPU: 1 UID: 0 PID: 5761 Comm: syz.3.2191 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 254.343916][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.343929][ T5761] Call Trace: [ 254.343935][ T5761] [ 254.343943][ T5761] __dump_stack+0x21/0x30 [ 254.343975][ T5761] dump_stack_lvl+0x140/0x1c0 [ 254.344002][ T5761] ? __cfi_dump_stack_lvl+0x10/0x10 [ 254.344029][ T5761] ? _parse_integer+0x2e/0x40 [ 254.344056][ T5761] ? kstrtoull+0x13b/0x1e0 [ 254.344082][ T5761] dump_stack+0x19/0x20 [ 254.344107][ T5761] should_fail_ex+0x3d7/0x530 [ 254.344127][ T5761] should_fail+0xf/0x20 [ 254.344144][ T5761] should_fail_usercopy+0x1e/0x30 [ 254.344163][ T5761] _copy_from_user+0x20/0xa0 [ 254.344184][ T5761] ___sys_sendmsg+0x1c7/0x370 [ 254.344202][ T5761] ? __sys_sendmsg+0x2a0/0x2a0 [ 254.344230][ T5761] ? proc_fail_nth_write+0x184/0x220 [ 254.344257][ T5761] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 254.344289][ T5761] __x64_sys_sendmsg+0x1fb/0x2d0 [ 254.344307][ T5761] ? fput+0x1a4/0x240 [ 254.344332][ T5761] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 254.344350][ T5761] ? ksys_write+0x1f3/0x260 [ 254.344371][ T5761] ? __kasan_check_read+0x15/0x20 [ 254.344392][ T5761] x64_sys_call+0x2a4c/0x2ee0 [ 254.344411][ T5761] do_syscall_64+0x57/0xf0 [ 254.344438][ T5761] ? clear_bhb_loop+0x50/0xa0 [ 254.344461][ T5761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 254.344483][ T5761] RIP: 0033:0x7fad6039ce59 [ 254.344501][ T5761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.344518][ T5761] RSP: 002b:00007fad612e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.344540][ T5761] RAX: ffffffffffffffda RBX: 00007fad60615fa0 RCX: 00007fad6039ce59 [ 254.344556][ T5761] RDX: 0000000004044000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 254.344571][ T5761] RBP: 00007fad612e5090 R08: 0000000000000000 R09: 0000000000000000 [ 254.344585][ T5761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.344599][ T5761] R13: 00007fad60616038 R14: 00007fad60615fa0 R15: 00007ffeb68fa628 [ 254.344617][ T5761] [ 254.371924][ T5759] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2190'. [ 254.755618][ T5773] create_pit_timer: 10 callbacks suppressed [ 254.755641][ T5773] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 254.773553][ T5773] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 254.782330][ T5773] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 254.790643][ T5773] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 254.799315][ T5773] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 254.807709][ T5773] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 254.816480][ T5773] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 254.824777][ T5773] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 254.833540][ T5773] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 254.841830][ T5773] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 255.013308][ T611] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 255.038114][ T5786] FAULT_INJECTION: forcing a failure. [ 255.038114][ T5786] name failslab, interval 1, probability 0, space 0, times 0 [ 255.050784][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz.3.2201 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 255.050816][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.050829][ T5786] Call Trace: [ 255.050836][ T5786] [ 255.050844][ T5786] __dump_stack+0x21/0x30 [ 255.050870][ T5786] dump_stack_lvl+0x140/0x1c0 [ 255.050886][ T5786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 255.050902][ T5786] dump_stack+0x19/0x20 [ 255.050916][ T5786] should_fail_ex+0x3d7/0x530 [ 255.050928][ T5786] should_failslab+0xac/0x100 [ 255.050942][ T5786] __kmalloc_cache_noprof+0x41/0x470 [ 255.050955][ T5786] ? tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 255.050972][ T5786] ? is_bpf_text_address+0x17b/0x1a0 [ 255.050988][ T5786] tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 255.051004][ T5786] tcp_sendmsg_locked+0x44d9/0x4b70 [ 255.051020][ T5786] ? __asan_memcpy+0x5a/0x80 [ 255.051032][ T5786] ? __kasan_check_write+0x18/0x20 [ 255.051043][ T5786] ? _raw_spin_lock_bh+0x96/0x130 [ 255.051055][ T5786] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 255.051066][ T5786] ? kstrtouint_from_user+0x117/0x170 [ 255.051083][ T5786] ? _raw_spin_unlock_bh+0x54/0x60 [ 255.051094][ T5786] ? lock_sock_nested+0x21b/0x2b0 [ 255.051106][ T5786] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 255.051122][ T5786] ? __kasan_check_write+0x18/0x20 [ 255.051133][ T5786] ? proc_fail_nth_write+0x184/0x220 [ 255.051149][ T5786] ? __cfi_tcp_sendmsg+0x10/0x10 [ 255.051164][ T5786] tcp_sendmsg+0x3e/0xd0 [ 255.051178][ T5786] ? __cfi_tcp_sendmsg+0x10/0x10 [ 255.051193][ T5786] inet6_sendmsg+0xb7/0x120 [ 255.051204][ T5786] ? __cfi_inet6_sendmsg+0x10/0x10 [ 255.051215][ T5786] __sys_sendto+0x4a6/0x700 [ 255.051230][ T5786] ? __cfi___sys_sendto+0x10/0x10 [ 255.051245][ T5786] ? __kasan_check_write+0x18/0x20 [ 255.051256][ T5786] ? __cfi_ksys_write+0x10/0x10 [ 255.051268][ T5786] __x64_sys_sendto+0xe9/0x100 [ 255.051283][ T5786] x64_sys_call+0x2c2c/0x2ee0 [ 255.051294][ T5786] do_syscall_64+0x57/0xf0 [ 255.051305][ T5786] ? clear_bhb_loop+0x50/0xa0 [ 255.051318][ T5786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 255.051331][ T5786] RIP: 0033:0x7fad6039ce59 [ 255.051342][ T5786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.051352][ T5786] RSP: 002b:00007fad612e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 255.051365][ T5786] RAX: ffffffffffffffda RBX: 00007fad60615fa0 RCX: 00007fad6039ce59 [ 255.051374][ T5786] RDX: 000000005b5ffb81 RSI: 0000200000000400 RDI: 0000000000000004 [ 255.051402][ T5786] RBP: 00007fad612e5090 R08: 0000000000000000 R09: 0000000000000000 [ 255.051409][ T5786] R10: 0000000024005010 R11: 0000000000000246 R12: 0000000000000001 [ 255.051417][ T5786] R13: 00007fad60616038 R14: 00007fad60615fa0 R15: 00007ffeb68fa628 [ 255.051427][ T5786] [ 255.174289][ T5779] syzkaller0: entered promiscuous mode [ 255.289964][ T311] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 255.292771][ T10] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 255.300854][ T5779] syzkaller0: entered allmulticast mode [ 255.401830][ T611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.410082][ T611] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 255.417628][ T611] usb 3-1: can't read configurations, error -71 [ 255.429972][ T10] usb 2-1: device descriptor read/64, error -71 [ 255.499957][ T311] usb 1-1: device descriptor read/64, error -71 [ 255.669978][ T10] usb 2-1: device descriptor read/64, error -71 [ 255.749963][ T311] usb 1-1: device descriptor read/64, error -71 [ 255.860014][ T311] usb usb1-port1: attempt power cycle [ 255.909981][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 255.930097][ T5795] FAULT_INJECTION: forcing a failure. [ 255.930097][ T5795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.943194][ T5795] CPU: 0 UID: 0 PID: 5795 Comm: syz.2.2204 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 255.943225][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.943234][ T5795] Call Trace: [ 255.943238][ T5795] [ 255.943244][ T5795] __dump_stack+0x21/0x30 [ 255.943263][ T5795] dump_stack_lvl+0x140/0x1c0 [ 255.943285][ T5795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 255.943300][ T5795] ? ioctl_has_perm+0x408/0x500 [ 255.943311][ T5795] ? has_cap_mac_admin+0xd0/0xd0 [ 255.943322][ T5795] dump_stack+0x19/0x20 [ 255.943336][ T5795] should_fail_ex+0x3d7/0x530 [ 255.943348][ T5795] should_fail+0xf/0x20 [ 255.943357][ T5795] should_fail_usercopy+0x1e/0x30 [ 255.943369][ T5795] _copy_from_user+0x20/0xa0 [ 255.943382][ T5795] kvm_vcpu_ioctl+0x470/0x1000 [ 255.943394][ T5795] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 255.943405][ T5795] ? __cfi_vfs_write+0x10/0x10 [ 255.943417][ T5795] ? __kasan_check_write+0x18/0x20 [ 255.943429][ T5795] ? mutex_unlock+0x90/0x240 [ 255.943442][ T5795] ? __cfi_mutex_unlock+0x10/0x10 [ 255.943455][ T5795] ? __fget_files+0x2c5/0x340 [ 255.943468][ T5795] ? __fget_files+0x2c5/0x340 [ 255.943481][ T5795] ? bpf_lsm_file_ioctl+0xd/0x20 [ 255.943495][ T5795] ? security_file_ioctl+0x3e/0x110 [ 255.943511][ T5795] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 255.943522][ T5795] __se_sys_ioctl+0x132/0x1b0 [ 255.943536][ T5795] __x64_sys_ioctl+0x7f/0xa0 [ 255.943549][ T5795] x64_sys_call+0x1878/0x2ee0 [ 255.943560][ T5795] do_syscall_64+0x57/0xf0 [ 255.943571][ T5795] ? clear_bhb_loop+0x50/0xa0 [ 255.943585][ T5795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 255.943598][ T5795] RIP: 0033:0x7ffbfa19ce59 [ 255.943609][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.943619][ T5795] RSP: 002b:00007ffbfb067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.943633][ T5795] RAX: ffffffffffffffda RBX: 00007ffbfa415fa0 RCX: 00007ffbfa19ce59 [ 255.943642][ T5795] RDX: 0000000000000000 RSI: 000000004004ae99 RDI: 0000000000000005 [ 255.943650][ T5795] RBP: 00007ffbfb067090 R08: 0000000000000000 R09: 0000000000000000 [ 255.943658][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.943665][ T5795] R13: 00007ffbfa416038 R14: 00007ffbfa415fa0 R15: 00007ffe09b8ba48 [ 255.943676][ T5795] [ 256.210020][ T311] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 256.240943][ T311] usb 1-1: device descriptor read/8, error -71 [ 256.250167][ T10] usb 2-1: device descriptor read/64, error -71 [ 256.309973][ T340] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 256.380286][ T311] usb 1-1: device descriptor read/8, error -71 [ 256.461133][ T340] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 256.469489][ T340] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 256.480218][ T340] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 256.489383][ T340] usb 4-1: config 220 has no interface number 1 [ 256.495774][ T10] usb 2-1: device descriptor read/64, error -71 [ 256.502315][ T340] usb 4-1: config 220 interface 0 has no altsetting 0 [ 256.509333][ T340] usb 4-1: config 220 interface 76 has no altsetting 0 [ 256.518042][ T340] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 256.527438][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.535592][ T340] usb 4-1: Product: syz [ 256.539873][ T340] usb 4-1: Manufacturer: syz [ 256.544681][ T340] usb 4-1: SerialNumber: syz [ 256.610030][ T10] usb usb2-port1: attempt power cycle [ 256.629974][ T311] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 256.651719][ T311] usb 1-1: device descriptor read/8, error -71 [ 256.754678][ T340] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 256.761208][ T340] usb 4-1: No valid video chain found. [ 256.768667][ T340] usb 4-1: USB disconnect, device number 95 [ 256.781371][ T311] usb 1-1: device descriptor read/8, error -71 [ 256.890058][ T311] usb usb1-port1: unable to enumerate USB device [ 256.949947][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 256.971030][ T10] usb 2-1: device descriptor read/8, error -71 [ 257.109304][ T10] usb 2-1: device descriptor read/8, error -71 [ 257.350929][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 257.370990][ T10] usb 2-1: device descriptor read/8, error -71 [ 257.501065][ T10] usb 2-1: device descriptor read/8, error -71 [ 257.610082][ T10] usb usb2-port1: unable to enumerate USB device [ 257.650853][ T5817] incfs: iterate_incfs_dir / -22 [ 258.419955][ T310] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 258.569946][ T310] usb 4-1: device descriptor read/64, error -71 [ 258.830192][ T310] usb 4-1: device descriptor read/64, error -71 [ 258.959958][ T311] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 259.079949][ T310] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 259.109969][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 259.116612][ T311] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 259.124569][ T311] usb 1-1: can't read configurations, error -61 [ 259.192053][ T5847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.209987][ T310] usb 4-1: device descriptor read/64, error -71 [ 259.259985][ T311] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 259.409966][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 259.419094][ T311] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 259.426709][ T311] usb 1-1: can't read configurations, error -61 [ 259.433098][ T311] usb usb1-port1: attempt power cycle [ 259.449975][ T310] usb 4-1: device descriptor read/64, error -71 [ 259.479980][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 259.570027][ T310] usb usb4-port1: attempt power cycle [ 259.609959][ T10] usb 3-1: device descriptor read/64, error -71 [ 259.769988][ T311] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 259.789981][ T340] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 259.790322][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 259.804040][ T311] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 259.811612][ T311] usb 1-1: can't read configurations, error -61 [ 259.849968][ T10] usb 3-1: device descriptor read/64, error -71 [ 259.909946][ T310] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 259.930908][ T310] usb 4-1: device descriptor read/8, error -71 [ 259.939947][ T340] usb 2-1: Using ep0 maxpacket: 16 [ 259.940091][ T311] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 259.946215][ T340] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 259.962361][ T340] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 259.970722][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 259.972026][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.978210][ T311] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 259.984468][ T340] usb 2-1: Product: syz [ 259.992234][ T311] usb 1-1: can't read configurations, error -61 [ 259.996186][ T340] usb 2-1: Manufacturer: syz [ 260.002758][ T311] usb usb1-port1: unable to enumerate USB device [ 260.007028][ T340] usb 2-1: SerialNumber: syz [ 260.019470][ T340] r8152-cfgselector 2-1: Unknown version 0x0000 [ 260.025754][ T340] r8152-cfgselector 2-1: config 0 descriptor?? [ 260.060999][ T310] usb 4-1: device descriptor read/8, error -71 [ 260.089947][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 260.219937][ T10] usb 3-1: device descriptor read/64, error -71 [ 260.232742][ T340] r8152-cfgselector 2-1: Unknown version 0x5cf0 [ 260.239046][ T340] r8152-cfgselector 2-1: bad CDC descriptors [ 260.299949][ T310] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 260.320900][ T310] usb 4-1: device descriptor read/8, error -71 [ 260.433068][ T311] r8152-cfgselector 2-1: USB disconnect, device number 112 [ 260.451062][ T310] usb 4-1: device descriptor read/8, error -71 [ 260.469942][ T10] usb 3-1: device descriptor read/64, error -71 [ 260.560083][ T310] usb usb4-port1: unable to enumerate USB device [ 260.580056][ T10] usb usb3-port1: attempt power cycle [ 260.919981][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 260.948425][ T10] usb 3-1: device descriptor read/8, error -71 [ 261.080982][ T10] usb 3-1: device descriptor read/8, error -71 [ 261.190001][ T311] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 261.319969][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 261.340984][ T10] usb 3-1: device descriptor read/8, error -71 [ 261.351098][ T311] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 261.359427][ T311] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 261.369733][ T311] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 261.378861][ T311] usb 2-1: config 220 has no interface number 1 [ 261.385157][ T311] usb 2-1: config 220 interface 0 has no altsetting 0 [ 261.391955][ T311] usb 2-1: config 220 interface 76 has no altsetting 0 [ 261.400217][ T311] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 261.409253][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.417312][ T311] usb 2-1: Product: syz [ 261.421695][ T311] usb 2-1: Manufacturer: syz [ 261.426283][ T311] usb 2-1: SerialNumber: syz [ 261.470991][ T10] usb 3-1: device descriptor read/8, error -71 [ 261.580071][ T10] usb usb3-port1: unable to enumerate USB device [ 261.633754][ T311] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 261.640185][ T311] usb 2-1: No valid video chain found. [ 261.647127][ T311] usb 2-1: USB disconnect, device number 113 [ 262.177220][ T5875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.839949][ T340] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 262.939935][ T311] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 262.989947][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 262.996391][ T340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 263.003983][ T340] usb 1-1: can't read configurations, error -61 [ 263.079962][ T311] usb 3-1: device descriptor read/64, error -71 [ 263.139975][ T340] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 263.219950][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 263.289943][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 263.296454][ T340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 263.304152][ T340] usb 1-1: can't read configurations, error -61 [ 263.310602][ T340] usb usb1-port1: attempt power cycle [ 263.329962][ T311] usb 3-1: device descriptor read/64, error -71 [ 263.370985][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 263.379296][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 263.389977][ T10] usb 4-1: config 220 has no interface number 2 [ 263.396222][ T10] usb 4-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 263.407166][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 263.420386][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 263.427132][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 263.433990][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 263.442135][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.451187][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.459165][ T10] usb 4-1: Product: syz [ 263.463319][ T10] usb 4-1: Manufacturer: syz [ 263.467906][ T10] usb 4-1: SerialNumber: syz [ 263.569966][ T311] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 263.669989][ T340] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 263.680312][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 263.686642][ T10] usb 4-1: No valid video chain found. [ 263.692450][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 263.700107][ T10] usb 4-1: USB disconnect, device number 100 [ 263.706295][ T340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 263.709944][ T311] usb 3-1: device descriptor read/64, error -71 [ 263.714706][ T340] usb 1-1: can't read configurations, error -61 [ 263.859989][ T340] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 263.880324][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 263.886783][ T340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 263.894362][ T340] usb 1-1: can't read configurations, error -61 [ 263.900709][ T340] usb usb1-port1: unable to enumerate USB device [ 263.969981][ T311] usb 3-1: device descriptor read/64, error -71 [ 264.080043][ T311] usb usb3-port1: attempt power cycle [ 264.233792][ T5905] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2245' sets config #1 [ 264.243377][ T5905] overlayfs: failed to resolve './file0': -2 [ 264.265943][ T5907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.419972][ T311] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 264.441027][ T311] usb 3-1: device descriptor read/8, error -71 [ 264.571062][ T311] usb 3-1: device descriptor read/8, error -71 [ 264.809960][ T311] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 264.830912][ T311] usb 3-1: device descriptor read/8, error -71 [ 264.960938][ T311] usb 3-1: device descriptor read/8, error -71 [ 265.070048][ T311] usb usb3-port1: unable to enumerate USB device [ 265.720873][ T5934] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2254' sets config #1 [ 265.730631][ T5934] overlayfs: failed to resolve './file0': -2 [ 265.754236][ T5936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.919981][ T310] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 266.069163][ T5941] FAULT_INJECTION: forcing a failure. [ 266.069163][ T5941] name failslab, interval 1, probability 0, space 0, times 0 [ 266.071097][ T310] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 266.081884][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.3.2257 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 266.081913][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.081925][ T5941] Call Trace: [ 266.081932][ T5941] [ 266.081940][ T5941] __dump_stack+0x21/0x30 [ 266.081971][ T5941] dump_stack_lvl+0x140/0x1c0 [ 266.081996][ T5941] ? __cfi_dump_stack_lvl+0x10/0x10 [ 266.082022][ T5941] ? __cfi_avc_has_perm+0x10/0x10 [ 266.082043][ T5941] ? kasan_save_alloc_info+0x40/0x50 [ 266.082072][ T5941] dump_stack+0x19/0x20 [ 266.082097][ T5941] should_fail_ex+0x3d7/0x530 [ 266.082115][ T5941] should_failslab+0xac/0x100 [ 266.082137][ T5941] __kmalloc_cache_noprof+0x41/0x470 [ 266.082158][ T5941] ? vhost_task_create+0x12c/0x400 [ 266.082179][ T5941] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 266.082203][ T5941] vhost_task_create+0x12c/0x400 [ 266.082222][ T5941] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 266.082246][ T5941] ? __cfi_vhost_task_create+0x10/0x10 [ 266.082268][ T5941] ? __cfi_vhost_task_fn+0x10/0x10 [ 266.082288][ T5941] ? __kasan_check_write+0x18/0x20 [ 266.082307][ T5941] ? mutex_lock+0x97/0x1d0 [ 266.082329][ T5941] ? __cfi_mutex_lock+0x10/0x10 [ 266.082350][ T5941] ? kernel_text_address+0xa9/0xe0 [ 266.082377][ T5941] kvm_mmu_post_init_vm+0x161/0x300 [ 266.082404][ T5941] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 266.082431][ T5941] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 266.082456][ T5941] ? kstrtoull+0x13b/0x1e0 [ 266.082482][ T5941] ? kstrtouint+0x78/0xf0 [ 266.082507][ T5941] ? ioctl_has_perm+0x1bc/0x500 [ 266.082523][ T5941] ? __asan_memcpy+0x5a/0x80 [ 266.082549][ T5941] ? ioctl_has_perm+0x408/0x500 [ 266.082567][ T5941] ? has_cap_mac_admin+0xd0/0xd0 [ 266.082584][ T5941] ? __kasan_check_write+0x18/0x20 [ 266.082603][ T5941] ? mutex_lock_killable+0x97/0x1d0 [ 266.082625][ T5941] ? __cfi_mutex_lock_killable+0x10/0x10 [ 266.082648][ T5941] ? proc_fail_nth_write+0x184/0x220 [ 266.082676][ T5941] kvm_vcpu_ioctl+0xa48/0x1000 [ 266.082696][ T5941] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 266.082715][ T5941] ? __cfi_vfs_write+0x10/0x10 [ 266.082734][ T5941] ? __kasan_check_write+0x18/0x20 [ 266.082752][ T5941] ? mutex_unlock+0x90/0x240 [ 266.082774][ T5941] ? __cfi_mutex_unlock+0x10/0x10 [ 266.082795][ T5941] ? __fget_files+0x2c5/0x340 [ 266.082818][ T5941] ? __fget_files+0x2c5/0x340 [ 266.082838][ T5941] ? bpf_lsm_file_ioctl+0xd/0x20 [ 266.082862][ T5941] ? security_file_ioctl+0x3e/0x110 [ 266.082889][ T5941] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 266.082908][ T5941] __se_sys_ioctl+0x132/0x1b0 [ 266.082933][ T5941] __x64_sys_ioctl+0x7f/0xa0 [ 266.082954][ T5941] x64_sys_call+0x1878/0x2ee0 [ 266.082972][ T5941] do_syscall_64+0x57/0xf0 [ 266.082990][ T5941] ? clear_bhb_loop+0x50/0xa0 [ 266.083012][ T5941] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.083032][ T5941] RIP: 0033:0x7fad6039ce59 [ 266.083049][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.083065][ T5941] RSP: 002b:00007fad612e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.083086][ T5941] RAX: ffffffffffffffda RBX: 00007fad60615fa0 RCX: 00007fad6039ce59 [ 266.083102][ T5941] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 266.083114][ T5941] RBP: 00007fad612e5090 R08: 0000000000000000 R09: 0000000000000000 [ 266.083127][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.083139][ T5941] R13: 00007fad60616038 R14: 00007fad60615fa0 R15: 00007ffeb68fa628 [ 266.083155][ T5941] [ 266.438652][ T310] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 266.448934][ T310] usb 3-1: config 220 has no interface number 2 [ 266.455725][ T310] usb 3-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 266.466840][ T310] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 266.480672][ T310] usb 3-1: config 220 interface 0 has no altsetting 0 [ 266.487687][ T310] usb 3-1: config 220 interface 76 has no altsetting 0 [ 266.494896][ T310] usb 3-1: config 220 interface 1 has no altsetting 0 [ 266.504363][ T310] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 266.513671][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.722198][ T310] usb 3-1: Product: syz [ 266.726509][ T310] usb 3-1: Manufacturer: syz [ 266.731149][ T310] usb 3-1: SerialNumber: syz [ 266.880026][ T340] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 266.939447][ T310] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 266.945855][ T310] usb 3-1: No valid video chain found. [ 266.954941][ T310] usb 3-1: USB disconnect, device number 105 [ 267.010168][ T340] usb 1-1: device descriptor read/64, error -71 [ 267.249960][ T340] usb 1-1: device descriptor read/64, error -71 [ 267.457929][ T5960] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2264' sets config #1 [ 267.467416][ T5960] overlayfs: failed to resolve './file0': -2 [ 267.490951][ T5962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.501568][ T340] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 267.529990][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 267.639942][ T340] usb 1-1: device descriptor read/64, error -71 [ 267.689954][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 267.696407][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.704109][ T10] usb 2-1: can't read configurations, error -61 [ 267.839961][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 267.879967][ T340] usb 1-1: device descriptor read/64, error -71 [ 267.989945][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 267.995221][ T340] usb usb1-port1: attempt power cycle [ 268.002021][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.009586][ T10] usb 2-1: can't read configurations, error -61 [ 268.015950][ T10] usb usb2-port1: attempt power cycle [ 268.273002][ T5969] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 268.273025][ T5969] rust_binder: Read failure Err(EFAULT) in pid:1387 [ 268.281970][ T5969] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 268.288578][ T5969] rust_binder: Read failure Err(EFAULT) in pid:1387 [ 268.297021][ T5969] rust_binder: validate_parent_fixup: new_min_offset=212, sg_entry.length=0 [ 268.303675][ T5969] rust_binder: Error while translating object. [ 268.312437][ T5969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.318655][ T5969] rust_binder: 5968:5969 transaction to 5968 failed: EINVAL [ 268.339939][ T340] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 268.359956][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 268.370927][ T340] usb 1-1: device descriptor read/8, error -71 [ 268.380281][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 268.386645][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.394254][ T10] usb 2-1: can't read configurations, error -61 [ 268.500933][ T340] usb 1-1: device descriptor read/8, error -71 [ 268.529970][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 268.550292][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 268.556674][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.564282][ T10] usb 2-1: can't read configurations, error -61 [ 268.570627][ T10] usb usb2-port1: unable to enumerate USB device [ 268.739953][ T340] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 268.760983][ T340] usb 1-1: device descriptor read/8, error -71 [ 268.890962][ T340] usb 1-1: device descriptor read/8, error -71 [ 269.000031][ T340] usb usb1-port1: unable to enumerate USB device [ 269.213243][ T36] audit: type=1400 audit(1778969516.729:1144): avc: denied { map } for pid=5978 comm="syz.3.2271" path="/572/file0" dev="tmpfs" ino=2978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 269.499954][ T504] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 269.651333][ T504] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 269.659613][ T504] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 269.674925][ T504] usb 3-1: config 220 has no interface number 2 [ 269.681287][ T504] usb 3-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 269.709939][ T504] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 269.737555][ T504] usb 3-1: config 220 interface 0 has no altsetting 0 [ 269.744394][ T504] usb 3-1: config 220 interface 76 has no altsetting 0 [ 269.751481][ T504] usb 3-1: config 220 interface 1 has no altsetting 0 [ 269.759548][ T504] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 269.768594][ T504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.776592][ T504] usb 3-1: Product: syz [ 269.780796][ T504] usb 3-1: Manufacturer: syz [ 269.785369][ T504] usb 3-1: SerialNumber: syz [ 269.993583][ T504] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 269.999993][ T504] usb 3-1: No valid video chain found. [ 270.008959][ T504] usb 3-1: USB disconnect, device number 106 [ 270.580792][ T6007] kvm: kvm [6006]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 270.709970][ T340] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 270.863694][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.874914][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.913017][ T340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.922548][ T340] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 270.930362][ T340] usb 2-1: can't read configurations, error -71 [ 270.999997][ T10] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 271.129963][ T10] usb 1-1: device descriptor read/64, error -71 [ 271.369960][ T10] usb 1-1: device descriptor read/64, error -71 [ 271.599949][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 271.610037][ T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 271.739955][ T10] usb 1-1: device descriptor read/64, error -71 [ 271.749947][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 271.756116][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.766303][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.775264][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 271.784292][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.792816][ T9] usb 3-1: config 0 descriptor?? [ 271.969966][ T340] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 271.979956][ T10] usb 1-1: device descriptor read/64, error -71 [ 272.020866][ T9] usb 3-1: USB disconnect, device number 107 [ 272.090050][ T10] usb usb1-port1: attempt power cycle [ 272.122237][ T340] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 272.130620][ T340] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 272.141419][ T340] usb 2-1: config 220 has no interface number 2 [ 272.148018][ T340] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 272.161724][ T340] usb 2-1: config 220 interface 0 has no altsetting 0 [ 272.168505][ T340] usb 2-1: config 220 interface 76 has no altsetting 0 [ 272.175516][ T340] usb 2-1: config 220 interface 1 has no altsetting 0 [ 272.183827][ T340] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 272.192911][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.200933][ T340] usb 2-1: Product: syz [ 272.205196][ T340] usb 2-1: Manufacturer: syz [ 272.209762][ T340] usb 2-1: SerialNumber: syz [ 272.216775][ T6035] FAULT_INJECTION: forcing a failure. [ 272.216775][ T6035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.229980][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.3.2292 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 272.230009][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.230023][ T6035] Call Trace: [ 272.230031][ T6035] [ 272.230039][ T6035] __dump_stack+0x21/0x30 [ 272.230071][ T6035] dump_stack_lvl+0x140/0x1c0 [ 272.230102][ T6035] ? __cfi_dump_stack_lvl+0x10/0x10 [ 272.230126][ T6035] ? find_vma+0xd3/0x120 [ 272.230146][ T6035] dump_stack+0x19/0x20 [ 272.230171][ T6035] should_fail_ex+0x3d7/0x530 [ 272.230191][ T6035] should_fail+0xf/0x20 [ 272.230204][ T6035] should_fail_usercopy+0x1e/0x30 [ 272.230215][ T6035] _copy_from_user+0x20/0xa0 [ 272.230229][ T6035] io_submit_one+0xe3/0x1980 [ 272.230244][ T6035] ? lookup_ioctx+0x360/0x360 [ 272.230257][ T6035] ? asm_exc_page_fault+0x2b/0x30 [ 272.230271][ T6035] ? __get_user_4+0x18/0x40 [ 272.230287][ T6035] ? lookup_ioctx+0x207/0x360 [ 272.230300][ T6035] __se_sys_io_submit+0x17f/0x3f0 [ 272.230312][ T6035] ? __x64_sys_io_submit+0xa0/0xa0 [ 272.230325][ T6035] ? ksys_write+0x1f3/0x260 [ 272.230337][ T6035] ? __kasan_check_read+0x15/0x20 [ 272.230349][ T6035] __x64_sys_io_submit+0x7f/0xa0 [ 272.230361][ T6035] x64_sys_call+0x1c95/0x2ee0 [ 272.230373][ T6035] do_syscall_64+0x57/0xf0 [ 272.230384][ T6035] ? clear_bhb_loop+0x50/0xa0 [ 272.230396][ T6035] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 272.230408][ T6035] RIP: 0033:0x7fad6039ce59 [ 272.230419][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.230429][ T6035] RSP: 002b:00007fad612e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 272.230442][ T6035] RAX: ffffffffffffffda RBX: 00007fad60615fa0 RCX: 00007fad6039ce59 [ 272.230452][ T6035] RDX: 0000200000000780 RSI: 0000000000000001 RDI: 00007fad6129b000 [ 272.230460][ T6035] RBP: 00007fad612e5090 R08: 0000000000000000 R09: 0000000000000000 [ 272.230467][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.230475][ T6035] R13: 00007fad60616038 R14: 00007fad60615fa0 R15: 00007ffeb68fa628 [ 272.230485][ T6035] [ 272.452654][ T340] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 272.458999][ T340] usb 2-1: No valid video chain found. [ 272.467897][ T340] usb 2-1: USB disconnect, device number 119 [ 272.509949][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 272.530979][ T10] usb 1-1: device descriptor read/8, error -71 [ 272.660984][ T10] usb 1-1: device descriptor read/8, error -71 [ 272.809953][ T311] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 272.899944][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 272.923659][ T10] usb 1-1: device descriptor read/8, error -71 [ 272.934503][ T6050] overlay: ./bus is not a directory [ 272.983997][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.992602][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.112855][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.131070][ T311] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 273.149518][ T311] usb 3-1: can't read configurations, error -71 [ 273.351037][ T10] usb 1-1: device descriptor read/8, error -71 [ 273.460036][ T10] usb usb1-port1: unable to enumerate USB device [ 273.792217][ T36] audit: type=1400 audit(1778969521.309:1145): avc: denied { read } for pid=6063 comm="syz.0.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.918929][ T6064] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 273.930048][ T4627] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.930585][ T6064] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 274.149950][ T504] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 274.189959][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 274.279981][ T504] usb 2-1: device descriptor read/64, error -71 [ 274.339954][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 274.346171][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.356322][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.365287][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 274.374357][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.382815][ T10] usb 1-1: config 0 descriptor?? [ 274.529945][ T504] usb 2-1: device descriptor read/64, error -71 [ 274.660719][ T367] usb 1-1: USB disconnect, device number 4 [ 274.779996][ T504] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 274.869954][ T311] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 274.909955][ T504] usb 2-1: device descriptor read/64, error -71 [ 275.021144][ T311] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 275.029413][ T311] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 275.039727][ T311] usb 3-1: config 220 has no interface number 2 [ 275.046003][ T311] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 275.059124][ T311] usb 3-1: config 220 interface 0 has no altsetting 0 [ 275.065911][ T311] usb 3-1: config 220 interface 76 has no altsetting 0 [ 275.072778][ T311] usb 3-1: config 220 interface 1 has no altsetting 0 [ 275.080940][ T311] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 275.090229][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.098198][ T311] usb 3-1: Product: syz [ 275.102505][ T311] usb 3-1: Manufacturer: syz [ 275.107111][ T311] usb 3-1: SerialNumber: syz [ 275.159954][ T504] usb 2-1: device descriptor read/64, error -71 [ 275.179282][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2306'. [ 275.189562][ T6080] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2306' sets config #1 [ 275.270083][ T504] usb usb2-port1: attempt power cycle [ 275.314897][ T311] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 275.321298][ T311] usb 3-1: No valid video chain found. [ 275.328868][ T311] usb 3-1: USB disconnect, device number 110 [ 275.609951][ T504] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 275.630951][ T504] usb 2-1: device descriptor read/8, error -71 [ 275.760943][ T504] usb 2-1: device descriptor read/8, error -71 [ 275.969974][ T6069] Bluetooth: hci0: command 0x1003 tx timeout [ 275.969967][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.999971][ T504] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 276.020960][ T504] usb 2-1: device descriptor read/8, error -71 [ 276.069982][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 276.151004][ T504] usb 2-1: device descriptor read/8, error -71 [ 276.260020][ T504] usb usb2-port1: unable to enumerate USB device [ 276.419423][ T9] usb 3-1: device descriptor read/64, error -71 [ 276.629983][ T504] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 276.659951][ T9] usb 3-1: device descriptor read/64, error -71 [ 276.779943][ T504] usb 4-1: Using ep0 maxpacket: 16 [ 276.786096][ T504] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.796225][ T504] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.805189][ T504] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 276.814221][ T504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.822728][ T504] usb 4-1: config 0 descriptor?? [ 276.899946][ T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 277.030747][ T9] usb 3-1: device descriptor read/64, error -71 [ 277.135340][ T504] usb 4-1: USB disconnect, device number 101 [ 277.279958][ T9] usb 3-1: device descriptor read/64, error -71 [ 277.390130][ T9] usb usb3-port1: attempt power cycle [ 277.729975][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 277.753922][ T9] usb 3-1: device descriptor read/8, error -71 [ 277.894956][ T9] usb 3-1: device descriptor read/8, error -71 [ 278.060040][ T36] audit: type=1400 audit(1778969525.579:1146): avc: denied { read } for pid=6130 comm="syz.0.2324" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 278.144200][ T6131] netlink: 'syz.0.2324': attribute type 4 has an invalid length. [ 278.152077][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 278.160346][ T6131] FAT-fs (rnullb0): bogus number of reserved sectors [ 278.167190][ T6131] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 278.191013][ T9] usb 3-1: device descriptor read/8, error -71 [ 278.243152][ T6136] FAULT_INJECTION: forcing a failure. [ 278.243152][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.256222][ T6136] CPU: 1 UID: 0 PID: 6136 Comm: syz.3.2325 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 278.256250][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.256261][ T6136] Call Trace: [ 278.256268][ T6136] [ 278.256275][ T6136] __dump_stack+0x21/0x30 [ 278.256304][ T6136] dump_stack_lvl+0x140/0x1c0 [ 278.256327][ T6136] ? __cfi_dump_stack_lvl+0x10/0x10 [ 278.256352][ T6136] ? check_stack_object+0x12b/0x150 [ 278.256370][ T6136] dump_stack+0x19/0x20 [ 278.256393][ T6136] should_fail_ex+0x3d7/0x530 [ 278.256410][ T6136] should_fail+0xf/0x20 [ 278.256424][ T6136] should_fail_usercopy+0x1e/0x30 [ 278.256442][ T6136] _copy_to_user+0x24/0xa0 [ 278.256462][ T6136] simple_read_from_buffer+0xed/0x160 [ 278.256485][ T6136] proc_fail_nth_read+0x1aa/0x220 [ 278.256509][ T6136] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 278.256532][ T6136] ? bpf_lsm_file_permission+0xd/0x20 [ 278.256555][ T6136] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 278.256577][ T6136] vfs_read+0x286/0xcb0 [ 278.256595][ T6136] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 278.256613][ T6136] ? __cfi_vfs_read+0x10/0x10 [ 278.256635][ T6136] ? __kasan_check_write+0x18/0x20 [ 278.256654][ T6136] ? mutex_lock+0x97/0x1d0 [ 278.256674][ T6136] ? __cfi_mutex_lock+0x10/0x10 [ 278.256694][ T6136] ? __fget_files+0x2c5/0x340 [ 278.256715][ T6136] ksys_read+0x145/0x260 [ 278.256732][ T6136] ? __cfi_ksys_read+0x10/0x10 [ 278.256750][ T6136] ? __kasan_check_read+0x15/0x20 [ 278.256768][ T6136] __x64_sys_read+0x7f/0x90 [ 278.256785][ T6136] x64_sys_call+0x2638/0x2ee0 [ 278.256802][ T6136] do_syscall_64+0x57/0xf0 [ 278.256818][ T6136] ? clear_bhb_loop+0x50/0xa0 [ 278.256839][ T6136] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 278.256858][ T6136] RIP: 0033:0x7fad6035d68e [ 278.256874][ T6136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.256889][ T6136] RSP: 002b:00007fad612e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.256908][ T6136] RAX: ffffffffffffffda RBX: 00007fad612e56c0 RCX: 00007fad6035d68e [ 278.256922][ T6136] RDX: 000000000000000f RSI: 00007fad612e50a0 RDI: 0000000000000006 [ 278.256935][ T6136] RBP: 00007fad612e5090 R08: 0000000000000000 R09: 0000000000000000 [ 278.256947][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.256959][ T6136] R13: 00007fad60616038 R14: 00007fad60615fa0 R15: 00007ffeb68fa628 [ 278.256974][ T6136] [ 278.321015][ T9] usb 3-1: device descriptor read/8, error -71 [ 278.559974][ T340] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 278.610030][ T9] usb usb3-port1: unable to enumerate USB device [ 278.703514][ T340] usb 1-1: device descriptor read/64, error -71 [ 278.846568][ T6142] random: crng reseeded on system resumption [ 278.939962][ T340] usb 1-1: device descriptor read/64, error -71 [ 279.109990][ T310] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 279.179980][ T340] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 279.259933][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 279.266130][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.276369][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.289286][ T310] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 279.298325][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.306884][ T310] usb 2-1: config 0 descriptor?? [ 279.312635][ T310] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 279.319949][ T340] usb 1-1: device descriptor read/64, error -71 [ 279.459967][ T311] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 279.515044][ T6167] FAULT_INJECTION: forcing a failure. [ 279.515044][ T6167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.528168][ T6167] CPU: 1 UID: 0 PID: 6167 Comm: syz.3.2339 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 279.528195][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.528207][ T6167] Call Trace: [ 279.528213][ T6167] [ 279.528220][ T6167] __dump_stack+0x21/0x30 [ 279.528249][ T6167] dump_stack_lvl+0x140/0x1c0 [ 279.528272][ T6167] ? __cfi_dump_stack_lvl+0x10/0x10 [ 279.528296][ T6167] ? check_stack_object+0x12b/0x150 [ 279.528315][ T6167] dump_stack+0x19/0x20 [ 279.528337][ T6167] should_fail_ex+0x3d7/0x530 [ 279.528354][ T6167] should_fail+0xf/0x20 [ 279.528369][ T6167] should_fail_usercopy+0x1e/0x30 [ 279.528386][ T6167] _copy_to_user+0x24/0xa0 [ 279.528405][ T6167] simple_read_from_buffer+0xed/0x160 [ 279.528428][ T6167] proc_fail_nth_read+0x1aa/0x220 [ 279.528451][ T6167] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 279.528474][ T6167] ? bpf_lsm_file_permission+0xd/0x20 [ 279.528496][ T6167] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 279.528519][ T6167] vfs_read+0x286/0xcb0 [ 279.528535][ T6167] ? do_readv+0x2e0/0x2e0 [ 279.528556][ T6167] ? __cfi_vfs_read+0x10/0x10 [ 279.528572][ T6167] ? __kasan_check_write+0x18/0x20 [ 279.528589][ T6167] ? mutex_lock+0x97/0x1d0 [ 279.528609][ T6167] ? __cfi_mutex_lock+0x10/0x10 [ 279.528630][ T6167] ? __fget_files+0x2c5/0x340 [ 279.528650][ T6167] ksys_read+0x145/0x260 [ 279.528666][ T6167] ? fput+0x1a4/0x240 [ 279.528686][ T6167] ? __cfi_ksys_read+0x10/0x10 [ 279.528703][ T6167] ? __x64_sys_preadv+0x21c/0x2c0 [ 279.528722][ T6167] ? __kasan_check_read+0x15/0x20 [ 279.528739][ T6167] __x64_sys_read+0x7f/0x90 [ 279.528756][ T6167] x64_sys_call+0x2638/0x2ee0 [ 279.528773][ T6167] do_syscall_64+0x57/0xf0 [ 279.528790][ T6167] ? clear_bhb_loop+0x50/0xa0 [ 279.528810][ T6167] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 279.528830][ T6167] RIP: 0033:0x7fad6035d68e [ 279.528845][ T6167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.528860][ T6167] RSP: 002b:00007fad612e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.528879][ T6167] RAX: ffffffffffffffda RBX: 00007fad612e56c0 RCX: 00007fad6035d68e [ 279.528893][ T6167] RDX: 000000000000000f RSI: 00007fad612e50a0 RDI: 0000000000000004 [ 279.528905][ T6167] RBP: 00007fad612e5090 R08: 0000000000000000 R09: 0000000000000000 [ 279.528916][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.528928][ T6167] R13: 00007fad60616038 R14: 00007fad60615fa0 R15: 00007ffeb68fa628 [ 279.528942][ T6167] [ 279.559950][ T340] usb 1-1: device descriptor read/64, error -71 [ 279.577920][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2340'. [ 279.700051][ T340] usb usb1-port1: attempt power cycle [ 279.705642][ T311] usb 3-1: device descriptor read/64, error -71 [ 279.811162][ T310] usb 2-1: USB disconnect, device number 124 [ 280.039951][ T311] usb 3-1: device descriptor read/64, error -71 [ 280.050070][ T340] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 280.070992][ T340] usb 1-1: device descriptor read/8, error -71 [ 280.200997][ T340] usb 1-1: device descriptor read/8, error -71 [ 280.279986][ T311] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 280.410169][ T311] usb 3-1: device descriptor read/64, error -71 [ 280.450856][ T340] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 280.471502][ T340] usb 1-1: device descriptor read/8, error -71 [ 280.569965][ T504] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 280.610275][ T340] usb 1-1: device descriptor read/8, error -71 [ 280.651526][ T311] usb 3-1: device descriptor read/64, error -71 [ 280.719931][ T504] usb 4-1: Using ep0 maxpacket: 8 [ 280.720023][ T340] usb usb1-port1: unable to enumerate USB device [ 280.726482][ T504] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.740151][ T504] usb 4-1: config 202 has an invalid interface number: 141 but max is 1 [ 280.748608][ T504] usb 4-1: config 202 has no interface number 1 [ 280.755199][ T504] usb 4-1: config 202 interface 141 has no altsetting 0 [ 280.764198][ T504] usb 4-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice=42.44 [ 280.773445][ T311] usb usb3-port1: attempt power cycle [ 280.779022][ T504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.787013][ T504] usb 4-1: Product: syz [ 280.791183][ T504] usb 4-1: Manufacturer: syz [ 280.795790][ T504] usb 4-1: SerialNumber: syz [ 281.005277][ T504] smsc95xx v2.0.0 [ 281.008927][ T504] smsc95xx 4-1:202.141 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 281.019369][ T504] smsc95xx 4-1:202.141: probe with driver smsc95xx failed with error -22 [ 281.028675][ T504] smsc95xx v2.0.0 [ 281.032335][ T504] smsc95xx 4-1:202.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 281.042461][ T504] smsc95xx 4-1:202.0: probe with driver smsc95xx failed with error -22 [ 281.052040][ T504] usb 4-1: USB disconnect, device number 102 [ 281.109983][ T311] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 281.141188][ T311] usb 3-1: device descriptor read/8, error -71 [ 281.270920][ T311] usb 3-1: device descriptor read/8, error -71 [ 281.429972][ T367] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 281.509953][ T311] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 281.530890][ T311] usb 3-1: device descriptor read/8, error -71 [ 281.579946][ T367] usb 1-1: Using ep0 maxpacket: 8 [ 281.586169][ T367] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.599260][ T367] usb 1-1: config 0 has no interfaces? [ 281.607099][ T367] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 281.618958][ T504] usb 2-1: new high-speed USB device number 125 using dummy_hcd SYZFAIL: posix_spawnp failed [ 281.627699][ T367] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 281.636060][ T367] usb 1-1: Product: syz [ 281.640279][ T367] usb 1-1: SerialNumber: syz [ 281.645429][ T367] usb 1-1: config 0 descriptor?? [ 281.660920][ T311] usb 3-1: device descriptor read/8, error -71 (errno 2: No such file or directory) [ 281.686277][ T36] audit: type=1400 audit(1778969529.199:1147): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1963]" dev="pipefs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 281.770378][ T311] usb usb3-port1: unable to enumerate USB device [ 281.984013][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.991751][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.151588][ T4627] tipc: Left network mode [ 282.192194][ T340] usb 1-1: USB disconnect, device number 9 [ 282.200362][ T504] usb 2-1: device not accepting address 125, error -71 [ 282.393041][ T4627] bridge_slave_1: left allmulticast mode [ 282.398686][ T4627] bridge_slave_1: left promiscuous mode [ 282.404308][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.412124][ T4627] bridge_slave_0: left allmulticast mode [ 282.417748][ T4627] bridge_slave_0: left promiscuous mode [ 282.423410][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.431030][ T4627] bridge_slave_1: left allmulticast mode [ 282.436650][ T4627] bridge_slave_1: left promiscuous mode [ 282.442286][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.449698][ T4627] bridge_slave_0: left allmulticast mode [ 282.455378][ T4627] bridge_slave_0: left promiscuous mode [ 282.461020][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.468506][ T4627] bridge_slave_1: left allmulticast mode [ 282.474188][ T4627] bridge_slave_1: left promiscuous mode [ 282.479762][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.487177][ T4627] bridge_slave_0: left allmulticast mode [ 282.492881][ T4627] bridge_slave_0: left promiscuous mode [ 282.498440][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.722838][ T4627] tipc: Left network mode [ 282.727261][ T4627] tipc: Left network mode [ 282.731863][ T4627] tipc: Left network mode [ 282.737931][ T4627] veth1_macvtap: left promiscuous mode [ 282.743473][ T4627] veth0_vlan: left promiscuous mode [ 282.748969][ T4627] veth1_macvtap: left promiscuous mode [ 282.754484][ T4627] veth0_vlan: left promiscuous mode [ 282.759990][ T4627] veth1_macvtap: left promiscuous mode [ 282.765455][ T4627] veth0_vlan: left promiscuous mode