last executing test programs: 4.227398658s ago: executing program 0 (id=426): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/51, 0x33}, 0xb5b7}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a82700810010000806"], 0x32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="36f26e67c607f32e660f38801604000fc7990000ba4300b00cee0f20e06635000400000f22e00f0179fbd92966b9800000c00f326635004000000f3066b9800000c00f326635008000000f30", 0x4c}], 0x1, 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.000602483s ago: executing program 2 (id=429): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @local, @empty}, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.000379063s ago: executing program 0 (id=430): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (fail_nth: 2) 4.000138113s ago: executing program 0 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004800) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./sec/tomoyo/query/file0\x00', &(0x7f0000000340)='tracefs\x00', 0x880808, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x6, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0x7, 0x3, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x7, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x1000002, 0x8, 0x0, 0x34f1, 0x1fc, 0x8, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0xd, 0x6, 0xac, 0x6, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x2, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x8, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0x41, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7fc, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0xc0000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x2, 0x3000000, 0xe, 0x4000006, 0x4, 0x181dba6d, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4080) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.73998842s ago: executing program 2 (id=434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02f500000000000000000000000001042088be"], 0xfdef) 3.73971408s ago: executing program 2 (id=435): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r2) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x4, 0x71, {0x71, 0xf7ecf655a98aac19, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf791407736dccfb66b4887ab4ca4584c73f9742e50be1261fdb32c997d17710400000000000000c04e0da0af852ee4988e28c41676c93526de074927b60a9f54524030969dd8a164c9db91aa1d23499d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.976958948s ago: executing program 1 (id=436): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x24b, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5a, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000000000000100"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.834004442s ago: executing program 1 (id=439): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (fail_nth: 3) 2.683110175s ago: executing program 1 (id=440): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) syz_ublk_add_dev(r0, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x4, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) 2.515364359s ago: executing program 1 (id=442): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000040)=[{0x200}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) getrlimit(0x8, &(0x7f0000000000)) sendmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) 2.440773991s ago: executing program 1 (id=443): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x53, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0xb, 0xf0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x40, {{0xb, 0x24, 0x6, 0x0, 0x0, "58a02c99f17d"}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x40}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="050f142e2a", @ANYRES32=r0, @ANYBLOB="fa8e58662f60cf9e4ebe2c978e8653c698b9cc0273c9e5d2e8f7aa2e7662bf53abd3b0704e4b0ed1be9560a7451a7ff6ba81db98841c883f2eedb7e2aa8493b50a228b4966827a49c48acd801983a9bd"], 0x2, [{0x13, &(0x7f0000000100)=@string={0x13, 0x3, "64a9075f59dd8d511addcbca6f6855d4ff"}}, {0x63, &(0x7f0000000380)=@string={0x63, 0x3, "a16da6938b7a0c8d3e7caa4c8219d7633cbf07af7c2276b0c8f99ca3f1ea4d92553b169138654ffc07ec6ae01d0df80590488e742862fe9f949baaa7e89423f688c4464c1632f3ba7888570c012c76a225b2bb354a10805f03a544d5e50df3a0c5"}}]}) 2.172790428s ago: executing program 2 (id=445): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x24b, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5a, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e00000010000000000000000"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.481785084s ago: executing program 3 (id=446): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xe7cf000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x0, 0x39, @private2, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x9, 0x4}}) (async) getpgrp(0x0) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) (async) mmap(&(0x7f000093c000/0x2000)=nil, 0x2000, 0x1000005, 0x30, 0xffffffffffffffff, 0xd1643000) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0603d06, &(0x7f0000000040)={0x200}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x7}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) (async) mmap(&(0x7f0000865000/0x4000)=nil, 0x4000, 0x3000006, 0x8010, r1, 0xb3a52000) 1.371871847s ago: executing program 3 (id=447): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8a080, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 1.316943688s ago: executing program 3 (id=448): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x80) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) vmsplice(r7, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f00001bd000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003700), 0x2200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff7ffc}]}) landlock_create_ruleset(&(0x7f0000000140)={0x6000}, 0x18, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './cgroup.cpu/memory.limit_in_bytes', [{0x20, '],:'}, {0x20, '*'}, {0x20, '/dev/snd/timer\x00'}, {0x20, '/dev/snd/timer\x00'}], 0xa, "48c9473790749fea7d004d9cd4759b9a0a4df74ea2db2442259c587c53ca5ec72e00e8cedd9982bd7d19b82b3c3a9e77e551b8283ea22cc1daf05c3d56002072b8163e5335ac95ccfd76fa084f2a766df34aaea353fdd75160a74dcca45150efd398772160a8dac399b9056c8eb795107c0676cdc67bec1f09a55109d2bfd6bdee20a5b4f56dd4f6efc401cf48d10a66506b4cc6bc51bd69cbe978b1e7f4d8764cd7e38ebde2197220f43a96b1938b9e573450dc81db551acfc575920c5b17c46097c3678ace9302eb4d0e5a53ae620ff344adbc49304d06568b06182cb8"}, 0x12a) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r9, &(0x7f0000000080)='4', 0x1) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8084}, 0x80) dup2(r5, r4) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, 0x0, 0x0) r10 = socket$inet6(0xa, 0x4, 0x7) sendto$inet6(r10, &(0x7f00000000c0)="800037bbfa9ba1ce", 0x8, 0x44000, &(0x7f0000000140)={0xa, 0x100, 0x3, @loopback, 0x3}, 0x1c) 1.23386624s ago: executing program 1 (id=449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x0, 0x0, 0x1, @mcast1, @mcast2}}, 0x36) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="0f8702000fc73e3c00b8430c8ee0ba410066b80000000066ef0f01cb266612f2ba4100ecf20f06a1f802f20f7d3b", 0x2e}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000800)=ANY=[@ANYBLOB="12010003020000402505a1a4400000000101090244000101008000090400001102020000052406000005240000000d240f01000000000900fa8c0909058103000003fb0709058202100000000309050302"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.184132341s ago: executing program 2 (id=450): syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7a, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}}]}}, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x80, 0x8000000000000001, 0x1, 0x6, 0x3, [0x6, 0x80, 0x6, 0x2]}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) r3 = signalfd(r2, &(0x7f00000001c0)={[0x5]}, 0x8) close(r3) (async) fcntl$setstatus(r3, 0x4, 0x2c00) (async) r4 = getpid() fcntl$setown(r3, 0x8, r4) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x947654a175941d0c, 0x0, 0xffffffff, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) capset(0x0, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x209, 0x4}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10881408000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x4, 0x12000, 0x1}) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.100002293s ago: executing program 2 (id=451): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0xb522f000) writev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac00255c2dc10bff3a33f49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) 1.001998206s ago: executing program 0 (id=452): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x24b, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5a, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x4012}], 0x1, 0x40011102, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000050000000000000000000000000000000000000000000000000000000000000004"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r5, 0x10ada85e65c25359, 0x70bd2a, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x81, 0x25, 0x70, 0x3ff}}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x5, 0x0, {0x93, 0x11df, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x152a, 0x5}}, @void, @void, @val={0x76, 0x6, {0x7, 0x3, 0x24, 0x1}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_SSID={0x8, 0x34, @random="4fc4717f"}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x98}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001140)={0x4b0, r5, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0xf0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @from_mac=@device_b, {0x5, 0x3}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x1, 0x0, 0x1}}, 0xa7, @default, 0x9095, @void, @val={0x1, 0x1, [{0xb}]}, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x20}}, @void, [{0xdd, 0xaf, "22fe3821b2a2b819b92a74195f376b4f9b5219696723a1f6f437ccb65bb1b3e41b89d7069e41666066cc1c4c351bc1faebbdb70646889402ef05c3a437d1c1e9a9fa5eba41373809b2f9593bd57c784ef1126ff39825b946df2a5410f4fbc3e948def240a15583fc61b04b27b8521b5d41f295eb714bca045c1c9a4f399acc01ce2de06d95693b111439eb3831d05aaa9de2fcd7607d00e6a407b1ca06d609bd34aaf49a8ccf18bc825f1984b55bbb"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x9e, 0x80, [@fast_bss_trans={0x37, 0x98, {0xdf, 0x4, "f83b69a8e57760d558ecf9c72c2d783b", "5db5dad4a25e77afe1eafcda197d459d23f7d51fd0da3858ab0be71559f18fce", "bce0330fc2660c7e76c961808329e11dc30df4788b03cda43bb1f8631a98a57a", [{0x1, 0x1, '#'}, {0x2}, {0x1, 0x15, "aa628bafa45f9172009ef311da87a992ef7071063f"}, {0x2, 0x28, "2f12d99bddb4a64c9c8ab874582cd73462be9d211ae0641680bef5859fb52f7abd31bc357800e813"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x150, 0x7f, [@fast_bss_trans={0x37, 0x11a, {0x0, 0x9, "185aca71e98b182ae0c8d9a8a6748dee", "547c41047aef5deea985304a17dc48e234bb784e5492047273e9872b130e94d4", "2864c105638e94b92c3b8b6dd93a1dab604ffeb343a6bae9edf0b255fe0b9156", [{0x1, 0x20, "a4c6903841b6588dced591fada9206db3927883605a460fec75acb8fb6e39ef7"}, {0xf, 0x11, "666081419d4d889ceb6cc3e031e44f9529"}, {0x1, 0xc, "bae6902b73d128410adfa2e0"}, {0x3, 0x18, "ec8a73298af1e56595e9029a3d342ca93cdde2636b13b001"}, {0x1, 0x17, "b7ec250b8ec293fad558b3d4eed03b15c964d97f5ca654"}, {0x3, 0x25, "d5cf599ea4e92e1f7606280f65a0502b8c5a928576e522ff12b2596ee62980f5afa36d5373"}, {0x4, 0x3, "d044a6"}, {0x3, 0x10, "4a37763bc7e7ef17f452be4f33502d93"}, {0x2, 0x12, "d940bc941d7eb7ce23d929e32658b52f3945"}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xb6, 0x2}}, @ht={0x2d, 0x1a, {0x4000, 0x1, 0x7, 0x0, {0xe9, 0x4, 0x0, 0x14f, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x4, 0x45}}, @chsw_timing={0x68, 0x4, {0x3, 0x6}}, @mesh_chsw={0x76, 0x6, {0x6, 0x1, 0xc}}]}, @NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc9, 0x2, "32b41d6619dcacccb9d54506e58c802339f623c777d56e4daf7e70d8b165769a15a582b76cf93621d54c2b5112eb4d36228c751d7f6818c5804ba2ea4145117f3b033e50039ba3a30d7010f18cb2a5c3375f4f9c54cf03d739553136893635ecef215535f0315416ba09963cc3f245bcce516138a29abaaa28a362cb20e06a0a38803adf581345caf3519ace8e31e17100b434a937a46625413ad3695bdec75ca683d7230e81950a560923619445c611adbf2c9840102316ccf7f85bec0a5ad06b0b9c4708"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x44, 0x2, "0c7e7017cb4c67675d734a79979a002ac633488c876067a1b64d9047d7ff8a26ba3c1086d1f3e10c03975bf62745bcbc00a8d1eee0bf19b2a86016e3ae3aa060"}]}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac02, 0xfac02, 0xfac0e, 0xfac03, 0xfac0b]}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe73}]]}, 0x4b0}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = dup(r10) write$tun(r11, &(0x7f0000000280)={@val={0x0, 0x9300}, @void, @x25={0x1, 0x5, 0x1b, "e625fb5d7b18e8fa6209fbdbb592850d1f48eb07dc5f1b2655526d6984df437751567970b4ecae6fb71d378c8faf7ac77e2bfde3e11e28f6ac67dd6091890be9ec8c0aa3cf541b8996de8986686b289f76bc6bf511e8268fa8530d37fbf06a4d78386b67191b384aff7a5f1e42fdf6eae5947c569f2bbb8c9cf95c56aba564bb465ffaf72a452caf14d05813db587a811ebaf4ef7f68e0983aeec795523f2139c4cd2e02d21ad23171e7bd6668c681c7b24d285dd34cab91c62329d6c25740dd797e4ae215703869c401cd9363afee9c0945a4ffc259"}}, 0xdd) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 994.396216ms ago: executing program 3 (id=453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x20, 0x20, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @broadcast, @rand_addr=0x64010101}}}}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) ioctl$BLKDISCARDZEROES(r4, 0x127c, &(0x7f0000000080)) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) setitimer(0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r5) r6 = inotify_init1(0x800) fcntl$setstatus(r5, 0x4, 0x2c00) r7 = gettid() fcntl$setown(r5, 0x8, r7) fcntl$setsig(r6, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') r8 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000000)) capget(&(0x7f0000000000)={0x19980330, r8}, &(0x7f0000000100)={0x100, 0x7f, 0x2, 0x8, 0x5, 0x8}) 874.712459ms ago: executing program 3 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r3, r2, 0xfffffffffffffffe, 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f000001ab40)={'ip6_vti0\x00', &(0x7f000001aac0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x36, 0xffffffff, 0x10, @empty, @loopback, 0x1, 0x40, 0x65, 0xaa}}) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000162170000018008000400002888ea5659ebb6b63ee0bba79a28484c31290c076422ccf3cffcd4440a310a17d8e1ac44", @ANYRES32, @ANYBLOB], 0x1c}], 0x1, 0x0, 0x0, 0xf14c16a123ccb1bb}, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) 779.976951ms ago: executing program 3 (id=455): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1}, 0x7}], 0x1, 0x100, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x4001af83, 0x0) 50.522959ms ago: executing program 0 (id=456): r0 = socket(0x10, 0x803, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x27, {0x8, 0x6, 0x100, 0x0, 0x1, 0x6}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1], [0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xb83, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x4027, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffce2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x59, 0x2, 0x100, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78b7159d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x5, 0xffffee42]}, 0x45c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x5}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000004c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010182817e00000000000a00000000000001016200400900178002c9a3e3"], 0x28}], 0x1}, 0x0) symlink(&(0x7f0000000000)='.\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8a080, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 0s ago: executing program 0 (id=457): unshare(0x60040000) r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0xffffffff, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000000) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4044015) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r4, &(0x7f0000000a00)='te', 0x2) close(r4) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000000000000000000000000000001000030076657468300000000000000024001200080001007665746818000200140001000000000000000000000000000000000010000300766574683100000000000000", 0x64}], 0x1}, 0x40080) kernel console output (not intermixed with test programs): sb 1-1: new high-speed USB device number 9 using dummy_hcd [ 39.851880][ T341] Bluetooth: hci1: Frame reassembly failed (-84) [ 39.870092][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 39.876599][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.886422][ T45] usb 1-1: config 9 has an invalid interface number: 212 but max is 0 [ 39.894653][ T45] usb 1-1: config 9 has no interface number 0 [ 39.900798][ T45] usb 1-1: config 9 interface 212 has no altsetting 0 [ 39.908906][ T45] usb 1-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=cc.d5 [ 39.917980][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.926002][ T45] usb 1-1: Product: syz [ 39.930213][ T45] usb 1-1: Manufacturer: syz [ 39.934808][ T45] usb 1-1: SerialNumber: syz [ 40.030078][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.051096][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.143751][ T45] snd-usb-audio 1-1:9.212: probe with driver snd-usb-audio failed with error -2 [ 40.153756][ T45] usb 1-1: USB disconnect, device number 9 [ 40.181135][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.190958][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.212/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.420097][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.441028][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.571094][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.660075][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 40.660078][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.683000][ T10] usb usb2-port1: unable to enumerate USB device [ 40.940086][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.090082][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 41.096441][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.107719][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.117804][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.130978][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 41.137664][ T45] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 41.149569][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.160111][ T45] usb 1-1: config 0 descriptor?? [ 41.312866][ T823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 41.370383][ T826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.379101][ T826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.571847][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 41.579313][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 41.594430][ T45] usb 1-1: USB disconnect, device number 10 [ 41.702734][ T331] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.860120][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 41.860173][ T365] Bluetooth: hci1: command 0x1003 tx timeout [ 41.880749][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.889144][ T331] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 41.911134][ T331] usb 2-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 41.920278][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.928274][ T331] usb 2-1: Product: syz [ 41.938606][ T331] usb 2-1: Manufacturer: syz [ 41.943280][ T331] usb 2-1: SerialNumber: syz [ 41.970313][ T838] netlink: 'syz.3.158': attribute type 49 has an invalid length. [ 42.013823][ T838] team_slave_1: entered promiscuous mode [ 42.019499][ T838] team_slave_1: entered allmulticast mode [ 42.106613][ T315] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.351315][ T331] usb 2-1: unit 4 not found! [ 42.360216][ T331] usb 2-1: USB disconnect, device number 12 [ 42.371248][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.577160][ T862] netlink: 'syz.2.161': attribute type 27 has an invalid length. [ 42.587559][ T862] netlink: 'syz.2.161': attribute type 27 has an invalid length. [ 42.860090][ T331] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.020106][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 43.031155][ T331] usb 4-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.050132][ T331] usb 4-1: config 0 interface 0 altsetting 216 endpoint 0x81 has invalid maxpacket 2023, setting to 1024 [ 43.073515][ T331] usb 4-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 43.087847][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.094709][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 43.104057][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.113442][ T331] usb 4-1: config 0 descriptor?? [ 43.118899][ T864] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.328600][ T864] netlink: 'syz.3.162': attribute type 27 has an invalid length. [ 43.336672][ T45] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 43.494776][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.502928][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 43.511382][ T45] usb 2-1: config index 0 descriptor too short (expected 26403, got 35) [ 43.519825][ T45] usb 2-1: config 169 has too many interfaces: 60, using maximum allowed: 32 [ 43.528648][ T45] usb 2-1: config 169 has an invalid interface number: 81 but max is 59 [ 43.541836][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 43.541852][ T36] audit: type=1400 audit(1787321354.019:242): avc: denied { write } for pid=884 comm="syz.2.169" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.542068][ T45] usb 2-1: config 169 has 1 interface, different from the descriptor's value: 60 [ 43.578023][ T331] lenovo 0003:17EF:6067.0003: ignoring exceeding usage max [ 43.586408][ T45] usb 2-1: config 169 has no interface number 0 [ 43.592882][ T331] lenovo 0003:17EF:6067.0003: hidraw0: USB HID v7f.fe Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 43.604149][ T45] usb 2-1: config 169 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0 [ 43.614730][ T45] usb 2-1: config 169 interface 81 has no altsetting 0 [ 43.623919][ T45] usb 2-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1 [ 43.633018][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.641036][ T45] usb 2-1: Product: syz [ 43.645189][ T45] usb 2-1: Manufacturer: syz [ 43.649782][ T45] usb 2-1: SerialNumber: syz [ 43.778906][ T331] usb 4-1: USB disconnect, device number 12 [ 43.861798][ T45] usb 2-1: USB disconnect, device number 13 [ 43.866694][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:169.81/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.180106][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.180126][ T365] Bluetooth: hci0: command 0x1003 tx timeout [ 44.460096][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.570086][ T331] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 44.621265][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.635250][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.644928][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.653195][ T45] usb 3-1: SerialNumber: syz [ 44.731242][ T331] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.742590][ T331] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.755849][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 44.762583][ T331] usb 4-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 44.771934][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.782301][ T331] usb 4-1: config 0 descriptor?? [ 45.064952][ T36] audit: type=1326 audit(1787321355.539:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.2.172" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3419d9e0d9 code=0x0 [ 45.140737][ T36] audit: type=1400 audit(1787321355.619:244): avc: denied { write } for pid=909 comm="syz.0.177" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.194829][ T331] input: HID 1e71:200f as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1E71:200F.0004/input/input7 [ 45.234596][ T331] hid-generic 0003:1E71:200F.0004: input,hidraw0: USB HID v20.00 Joystick [HID 1e71:200f] on usb-dummy_hcd.3-1/input0 [ 45.343627][ T36] audit: type=1400 audit(1787321355.829:245): avc: denied { read write } for pid=921 comm="syz.0.180" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.367380][ T36] audit: type=1400 audit(1787321355.829:246): avc: denied { open } for pid=921 comm="syz.0.180" path="/43/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.390902][ T36] audit: type=1400 audit(1787321355.829:247): avc: denied { ioctl } for pid=921 comm="syz.0.180" path="/43/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.415809][ T36] audit: type=1400 audit(1787321355.829:248): avc: denied { ioctl } for pid=921 comm="syz.0.180" path="socket:[10871]" dev="sockfs" ino=10871 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.541654][ T331] usb 4-1: USB disconnect, device number 13 [ 45.760134][ T316] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 45.792456][ T462] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.911139][ T316] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 45.921365][ T316] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.935038][ T316] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 45.944114][ T316] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 45.952128][ T316] usb 1-1: Manufacturer: syz [ 45.959247][ T316] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 46.148808][ T959] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.164915][ T959] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 47.229207][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 47.238934][ T45] usb 3-1: USB disconnect, device number 5 [ 47.351526][ T982] bridge0: port 3(veth0_vlan) entered blocking state [ 47.362139][ T982] bridge0: port 3(veth0_vlan) entered disabled state [ 47.368932][ T982] veth0_vlan: entered allmulticast mode [ 47.375022][ T982] bridge0: port 3(veth0_vlan) entered blocking state [ 47.381789][ T982] bridge0: port 3(veth0_vlan) entered forwarding state [ 47.404567][ T985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 47.423674][ T36] audit: type=1400 audit(1787321357.899:249): avc: denied { audit_write } for pid=986 comm="syz.2.198" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.444659][ T36] audit: type=1400 audit(1787321357.899:250): avc: denied { read write } for pid=986 comm="syz.2.198" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.468887][ T36] audit: type=1400 audit(1787321357.899:251): avc: denied { open } for pid=986 comm="syz.2.198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.860075][ T365] Bluetooth: hci0: command 0x1003 tx timeout [ 47.860071][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.896193][ T45] wiimote 0005:057E:0306.0005: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 47.905796][ T45] wiimote 0005:057E:0306.0005: New device registered [ 48.130086][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.230103][ T45] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 48.290105][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 48.296335][ T10] usb 2-1: config 0 has no interfaces? [ 48.308855][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 48.317986][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.326010][ T10] usb 2-1: Product: syz [ 48.330253][ T10] usb 2-1: Manufacturer: syz [ 48.334844][ T10] usb 2-1: SerialNumber: syz [ 48.339979][ T10] usb 2-1: config 0 descriptor?? [ 48.380844][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 48.389384][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.399701][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 48.408764][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.418782][ T45] usb 4-1: Found UVC 1.00 device (046d:0825) [ 48.425984][ T45] usb 4-1: No streaming interface found for terminal 2. [ 48.476682][ T45] usb 1-1: USB disconnect, device number 11 [ 48.492247][ T1008] Zero length message leads to an empty skb [ 48.547030][ T992] wiimote 0005:057E:0306.0005: Unhandled report 32 size 2 [ 48.554284][ T670] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.561233][ T10] usb 2-1: USB disconnect, device number 14 [ 48.562613][ T991] wiimote 0005:057E:0306.0005: Device removed [ 48.712133][ T670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.723456][ T65] usb 4-1: USB disconnect, device number 14 [ 48.723601][ T670] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 48.740785][ T670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.749890][ T670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.757952][ T670] usb 3-1: Product: syz [ 48.762236][ T670] usb 3-1: Manufacturer: syz [ 48.766844][ T670] usb 3-1: SerialNumber: syz [ 48.774012][ T670] cdc_mbim 3-1:1.0: skipping garbage [ 48.930094][ T45] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 48.974591][ T1006] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 48.980149][ T331] wiimote 0005:057E:0306.0005: detected device: Nintendo Wii Remote (Gen 1) [ 48.993195][ T331] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input10 [ 49.005772][ T331] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input11 [ 49.018749][ T331] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input9 [ 49.081149][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 69: 52, using maximum allowed: 30 [ 49.092092][ T45] usb 1-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 49.103178][ T45] usb 1-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 52 [ 49.116197][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 49.122830][ T45] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 49.131957][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.140653][ T45] usb 1-1: config 0 descriptor?? [ 49.231034][ T463] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.391315][ T670] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 49.397471][ T670] cdc_mbim 3-1:1.0: bind() failure [ 49.403357][ T670] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 49.410179][ T670] cdc_ncm 3-1:1.1: bind() failure [ 49.416566][ T670] usb 3-1: USB disconnect, device number 6 [ 49.548925][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.556098][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.563174][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.570278][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.577364][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.584678][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.591768][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.598816][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.605889][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.612962][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.619986][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.627067][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.634140][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.641232][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.648271][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.655350][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.662409][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.669428][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.676499][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.683545][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.690617][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.697655][ T45] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 49.704876][ T45] uclogic 0003:5543:0064.0006: No inputs registered, leaving [ 49.712767][ T45] uclogic 0003:5543:0064.0006: hidraw1: USB HID v0.08 Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 49.751253][ T45] usb 1-1: USB disconnect, device number 12 [ 50.500258][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 50.650081][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 50.656224][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.668535][ T45] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 50.677641][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.685666][ T45] usb 1-1: Product: syz [ 50.689836][ T45] usb 1-1: Manufacturer: syz [ 50.694471][ T45] usb 1-1: SerialNumber: syz [ 50.774798][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 50.774829][ T36] audit: type=1400 audit(1787321361.249:259): avc: denied { map } for pid=1036 comm="syz.2.213" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.804248][ T36] audit: type=1400 audit(1787321361.249:260): avc: denied { execute } for pid=1036 comm="syz.2.213" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.933180][ T36] audit: type=1400 audit(1787321361.399:261): avc: denied { setopt } for pid=1044 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.960828][ T1045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.971825][ T1045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 50.981855][ T1045] bridge0: port 3(veth0_vlan) entered disabled state [ 50.992044][ T1045] veth0_vlan (unregistering): left allmulticast mode [ 50.998743][ T1045] bridge0: port 3(veth0_vlan) entered disabled state [ 51.022832][ T1048] fuse: Bad value for 'user_id' [ 51.027711][ T1048] fuse: Bad value for 'user_id' [ 51.043424][ T45] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 51.050912][ T45] usb 1-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 51.058279][ T45] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 51.065072][ T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 51.074256][ T45] usb 1-1: USB disconnect, device number 13 [ 51.087338][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.208518][ T1055] ======================================================= [ 51.208518][ T1055] WARNING: The mand mount option has been deprecated and [ 51.208518][ T1055] and is ignored by this kernel. Remove the mand [ 51.208518][ T1055] option from the mount to silence this warning. [ 51.208518][ T1055] ======================================================= [ 51.244599][ T36] audit: type=1400 audit(1787321361.729:262): avc: denied { read } for pid=1054 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.295694][ T36] audit: type=1400 audit(1787321361.769:263): avc: denied { watch } for pid=1054 comm="syz.2.218" path="/57/file0" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.317867][ T365] Bluetooth: hci0: command 0x1003 tx timeout [ 51.317865][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.317912][ T36] audit: type=1400 audit(1787321361.769:264): avc: denied { watch_reads } for pid=1054 comm="syz.2.218" path="/57/file0" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.345765][ T1058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.458080][ T36] audit: type=1400 audit(1787321361.929:265): avc: denied { create } for pid=1068 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.525041][ T1071] process 'syz.3.225' launched '/dev/fd/5' with NULL argv: empty string added [ 51.539475][ T36] audit: type=1400 audit(1787321362.019:266): avc: denied { nosuid_transition } for pid=1070 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 51.568434][ T36] audit: type=1400 audit(1787321362.019:267): avc: denied { transition } for pid=1070 comm="syz.3.225" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 51.598167][ T36] audit: type=1400 audit(1787321362.019:268): avc: denied { entrypoint } for pid=1070 comm="syz.3.225" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1078 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.910095][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.040111][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.280088][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.330116][ T670] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 52.480080][ T670] usb 4-1: Using ep0 maxpacket: 8 [ 52.486247][ T670] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.497322][ T670] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.510336][ T670] usb 4-1: config 0 interface 0 has no altsetting 0 [ 52.516973][ T670] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 52.526117][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 52.533730][ T670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.544995][ T670] usb 4-1: config 0 descriptor?? [ 52.670103][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.901753][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 52.910091][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.953402][ T670] sony 0003:1345:3008.0007: unknown main item tag 0x2 [ 52.960284][ T670] sony 0003:1345:3008.0007: item fetching failed at offset 6/24 [ 52.968068][ T670] sony 0003:1345:3008.0007: parse failed [ 52.973772][ T670] sony 0003:1345:3008.0007: probe with driver sony failed with error -22 [ 53.020178][ T45] usb usb1-port1: attempt power cycle [ 53.154264][ T670] usb 4-1: USB disconnect, device number 15 [ 53.170137][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 53.321123][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.332084][ T65] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.341148][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.349644][ T65] usb 3-1: config 0 descriptor?? [ 53.360124][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 53.381096][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.511093][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.750091][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 53.758585][ T65] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 53.767996][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input13 [ 53.771173][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.845021][ T65] keytouch 0003:0926:3333.0008: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 53.911101][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.980089][ T670] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 54.020272][ T45] usb usb1-port1: unable to enumerate USB device [ 54.131824][ T670] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 54.140947][ T670] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 54.149055][ T670] usb 4-1: Product: syz [ 54.155286][ T670] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected [ 54.163315][ T670] usb 4-1: Detected FT4233HP [ 54.168949][ T1118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.177625][ T1118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.187333][ T65] usb 3-1: USB disconnect, device number 7 [ 54.355357][ T670] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 54.362413][ T670] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 54.369748][ T670] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 54.378845][ T670] usb 4-1: USB disconnect, device number 16 [ 54.385729][ T670] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 54.395398][ T670] ftdi_sio 4-1:5.0: device disconnected [ 54.759456][ T1133] FAULT_INJECTION: forcing a failure. [ 54.759456][ T1133] name failslab, interval 1, probability 0, space 0, times 0 [ 54.772188][ T1133] CPU: 1 UID: 0 PID: 1133 Comm: syz.0.242 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 54.772208][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.772215][ T1133] Call Trace: [ 54.772220][ T1133] [ 54.772224][ T1133] __dump_stack+0x21/0x30 [ 54.772244][ T1133] dump_stack_lvl+0x140/0x1c0 [ 54.772258][ T1133] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.772272][ T1133] ? kasan_save_track+0x4f/0x80 [ 54.772284][ T1133] ? kasan_save_track+0x3e/0x80 [ 54.772294][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 54.772304][ T1133] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 54.772316][ T1133] ? __get_vm_area_node+0x150/0x390 [ 54.772332][ T1133] dump_stack+0x19/0x20 [ 54.772345][ T1133] should_fail_ex+0x3c2/0x510 [ 54.772358][ T1133] should_failslab+0xac/0x100 [ 54.772370][ T1133] kmem_cache_alloc_node_noprof+0x45/0x420 [ 54.772381][ T1133] ? alloc_vmap_area+0x230/0x26f0 [ 54.772395][ T1133] alloc_vmap_area+0x230/0x26f0 [ 54.772410][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 54.772419][ T1133] ? vm_map_ram+0xdd0/0xdd0 [ 54.772436][ T1133] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 54.772447][ T1133] ? __get_vm_area_node+0x150/0x390 [ 54.772461][ T1133] __get_vm_area_node+0x1f8/0x390 [ 54.772475][ T1133] __vmalloc_node_range_noprof+0x340/0x1300 [ 54.772490][ T1133] ? copy_process+0x57c/0x3350 [ 54.772505][ T1133] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 54.772520][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 54.772529][ T1133] ? __kasan_slab_alloc+0x73/0x90 [ 54.772540][ T1133] ? arch_dup_task_struct+0x5b/0xe0 [ 54.772555][ T1133] ? __asan_memcpy+0x5a/0x80 [ 54.772565][ T1133] dup_task_struct+0x5d6/0xd80 [ 54.772577][ T1133] ? copy_process+0x57c/0x3350 [ 54.772588][ T1133] ? _raw_spin_lock_irq+0x93/0x120 [ 54.772603][ T1133] ? copy_process+0x3350/0x3350 [ 54.772615][ T1133] ? __kasan_check_write+0x18/0x20 [ 54.772624][ T1133] copy_process+0x57c/0x3350 [ 54.772637][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 54.772646][ T1133] ? __cfi_copy_process+0x10/0x10 [ 54.772658][ T1133] ? __kmalloc_cache_noprof+0x23c/0x470 [ 54.772668][ T1133] ? __kasan_check_write+0x18/0x20 [ 54.772678][ T1133] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 54.772695][ T1133] vhost_task_create+0x1f7/0x3f0 [ 54.772708][ T1133] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 54.772719][ T1133] ? __cfi_vhost_task_create+0x10/0x10 [ 54.772730][ T1133] ? __cfi_vhost_task_fn+0x10/0x10 [ 54.772740][ T1133] ? __kasan_check_write+0x18/0x20 [ 54.772750][ T1133] ? mutex_lock+0x97/0x1d0 [ 54.772764][ T1133] ? __cfi_mutex_lock+0x10/0x10 [ 54.772773][ T1133] ? kernel_text_address+0xa9/0xe0 [ 54.772789][ T1133] kvm_mmu_post_init_vm+0x161/0x300 [ 54.772804][ T1133] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 54.772823][ T1133] ? _parse_integer_limit+0x195/0x1e0 [ 54.772838][ T1133] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 54.772863][ T1133] ? kstrtoull+0x13b/0x1e0 [ 54.772879][ T1133] ? kstrtouint+0x78/0xf0 [ 54.772895][ T1133] ? ioctl_has_perm+0x1bc/0x500 [ 54.772912][ T1133] ? __asan_memcpy+0x5a/0x80 [ 54.772931][ T1133] ? ioctl_has_perm+0x408/0x500 [ 54.772947][ T1133] ? has_cap_mac_admin+0xd0/0xd0 [ 54.772964][ T1133] ? __kasan_check_write+0x18/0x20 [ 54.772982][ T1133] ? mutex_lock_killable+0x97/0x1d0 [ 54.773001][ T1133] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.773021][ T1133] ? proc_fail_nth_write+0x184/0x220 [ 54.773047][ T1133] kvm_vcpu_ioctl+0xa43/0x1000 [ 54.773062][ T1133] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.773079][ T1133] ? __cfi_vfs_write+0x10/0x10 [ 54.773094][ T1133] ? __kasan_check_write+0x18/0x20 [ 54.773109][ T1133] ? mutex_unlock+0x90/0x240 [ 54.773126][ T1133] ? __cfi_mutex_unlock+0x10/0x10 [ 54.773144][ T1133] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.773166][ T1133] ? security_file_ioctl+0x3e/0x110 [ 54.773183][ T1133] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.773198][ T1133] __se_sys_ioctl+0x135/0x1b0 [ 54.773218][ T1133] __x64_sys_ioctl+0x7f/0xa0 [ 54.773236][ T1133] x64_sys_call+0x1878/0x2ee0 [ 54.773252][ T1133] do_syscall_64+0x57/0xf0 [ 54.773272][ T1133] ? clear_bhb_loop+0x50/0xa0 [ 54.773290][ T1133] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.773316][ T1133] RIP: 0033:0x7f843959e0d9 [ 54.773331][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.773346][ T1133] RSP: 002b:00007f843a4a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.773364][ T1133] RAX: ffffffffffffffda RBX: 00007f8439825fa0 RCX: 00007f843959e0d9 [ 54.773377][ T1133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 54.773389][ T1133] RBP: 00007f843a4a4090 R08: 0000000000000000 R09: 0000000000000000 [ 54.773401][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.773412][ T1133] R13: 00007f8439826038 R14: 00007f8439825fa0 R15: 00007ffc6d238448 [ 54.773427][ T1133] [ 54.773440][ T1133] syz.0.242: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 55.256016][ T1139] veth1_macvtap: left promiscuous mode [ 55.270891][ T1133] CPU: 1 UID: 0 PID: 1133 Comm: syz.0.242 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 55.270921][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.270933][ T1133] Call Trace: [ 55.270938][ T1133] [ 55.270947][ T1133] __dump_stack+0x21/0x30 [ 55.270975][ T1133] dump_stack_lvl+0x140/0x1c0 [ 55.270998][ T1133] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.271022][ T1133] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 55.271048][ T1133] dump_stack+0x19/0x20 [ 55.271070][ T1133] warn_alloc+0x1e7/0x2c0 [ 55.271094][ T1133] ? kasan_save_track+0x3e/0x80 [ 55.271114][ T1133] ? __cfi_warn_alloc+0x10/0x10 [ 55.271136][ T1133] ? __get_vm_area_node+0x211/0x390 [ 55.271160][ T1133] ? __get_vm_area_node+0x211/0x390 [ 55.271185][ T1133] __vmalloc_node_range_noprof+0x365/0x1300 [ 55.271215][ T1133] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 55.271240][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 55.271257][ T1133] ? __kasan_slab_alloc+0x73/0x90 [ 55.271278][ T1133] ? arch_dup_task_struct+0x5b/0xe0 [ 55.271303][ T1133] ? __asan_memcpy+0x5a/0x80 [ 55.271321][ T1133] dup_task_struct+0x5d6/0xd80 [ 55.271342][ T1133] ? copy_process+0x57c/0x3350 [ 55.271369][ T1133] ? _raw_spin_lock_irq+0x93/0x120 [ 55.271391][ T1133] ? copy_process+0x3350/0x3350 [ 55.271413][ T1133] ? __kasan_check_write+0x18/0x20 [ 55.271431][ T1133] copy_process+0x57c/0x3350 [ 55.271454][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 55.271470][ T1133] ? __cfi_copy_process+0x10/0x10 [ 55.271491][ T1133] ? __kmalloc_cache_noprof+0x23c/0x470 [ 55.271511][ T1133] ? __kasan_check_write+0x18/0x20 [ 55.271529][ T1133] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 55.271550][ T1133] vhost_task_create+0x1f7/0x3f0 [ 55.271569][ T1133] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 55.271590][ T1133] ? __cfi_vhost_task_create+0x10/0x10 [ 55.271610][ T1133] ? __cfi_vhost_task_fn+0x10/0x10 [ 55.271629][ T1133] ? __kasan_check_write+0x18/0x20 [ 55.271693][ T1133] ? mutex_lock+0x97/0x1d0 [ 55.271709][ T1133] ? __cfi_mutex_lock+0x10/0x10 [ 55.271726][ T1133] ? kernel_text_address+0xa9/0xe0 [ 55.271750][ T1133] kvm_mmu_post_init_vm+0x161/0x300 [ 55.271775][ T1133] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 55.271799][ T1133] ? _parse_integer_limit+0x195/0x1e0 [ 55.271819][ T1133] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 55.271843][ T1133] ? kstrtoull+0x13b/0x1e0 [ 55.271860][ T1133] ? kstrtouint+0x78/0xf0 [ 55.271878][ T1133] ? ioctl_has_perm+0x1bc/0x500 [ 55.271896][ T1133] ? __asan_memcpy+0x5a/0x80 [ 55.271914][ T1133] ? ioctl_has_perm+0x408/0x500 [ 55.271931][ T1133] ? has_cap_mac_admin+0xd0/0xd0 [ 55.271949][ T1133] ? __kasan_check_write+0x18/0x20 [ 55.271966][ T1133] ? mutex_lock_killable+0x97/0x1d0 [ 55.271984][ T1133] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.272003][ T1133] ? proc_fail_nth_write+0x184/0x220 [ 55.272029][ T1133] kvm_vcpu_ioctl+0xa43/0x1000 [ 55.272047][ T1133] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.272064][ T1133] ? __cfi_vfs_write+0x10/0x10 [ 55.272083][ T1133] ? __kasan_check_write+0x18/0x20 [ 55.272100][ T1133] ? mutex_unlock+0x90/0x240 [ 55.272116][ T1133] ? __cfi_mutex_unlock+0x10/0x10 [ 55.272136][ T1133] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.272158][ T1133] ? security_file_ioctl+0x3e/0x110 [ 55.272179][ T1133] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.272196][ T1133] __se_sys_ioctl+0x135/0x1b0 [ 55.272218][ T1133] __x64_sys_ioctl+0x7f/0xa0 [ 55.272239][ T1133] x64_sys_call+0x1878/0x2ee0 [ 55.272255][ T1133] do_syscall_64+0x57/0xf0 [ 55.272277][ T1133] ? clear_bhb_loop+0x50/0xa0 [ 55.272296][ T1133] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.272322][ T1133] RIP: 0033:0x7f843959e0d9 [ 55.272340][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.272354][ T1133] RSP: 002b:00007f843a4a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.272375][ T1133] RAX: ffffffffffffffda RBX: 00007f8439825fa0 RCX: 00007f843959e0d9 [ 55.272388][ T1133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 55.272400][ T1133] RBP: 00007f843a4a4090 R08: 0000000000000000 R09: 0000000000000000 [ 55.272412][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.272423][ T1133] R13: 00007f8439826038 R14: 00007f8439825fa0 R15: 00007ffc6d238448 [ 55.272438][ T1133] [ 55.272447][ T1133] Mem-Info: [ 55.708379][ T1133] active_anon:7268 inactive_anon:10 isolated_anon:0 [ 55.708379][ T1133] active_file:18107 inactive_file:2336 isolated_file:0 [ 55.708379][ T1133] unevictable:0 dirty:126 writeback:0 [ 55.708379][ T1133] slab_reclaimable:6143 slab_unreclaimable:70943 [ 55.708379][ T1133] mapped:24676 shmem:169 pagetables:858 [ 55.708379][ T1133] sec_pagetables:12 bounce:0 [ 55.708379][ T1133] kernel_misc_reclaimable:0 [ 55.708379][ T1133] free:1524900 free_pcp:1779 free_cma:0 [ 55.753342][ T1133] Node 0 active_anon:29072kB inactive_anon:40kB active_file:72428kB inactive_file:9344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98704kB dirty:504kB writeback:0kB shmem:676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6696kB pagetables:3432kB sec_pagetables:48kB all_unreclaimable? no [ 55.785297][ T1133] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963388kB mlocked:0kB bounce:0kB free_pcp:5224kB local_pcp:0kB free_cma:0kB [ 55.815030][ T1133] lowmem_reserve[]: 0 3921 3921 [ 55.819927][ T1133] Normal free:3141992kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29100kB inactive_anon:40kB active_file:72428kB inactive_file:9344kB unevictable:0kB writepending:572kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:1876kB local_pcp:1556kB free_cma:0kB [ 55.851236][ T1133] lowmem_reserve[]: 0 0 0 [ 55.855597][ T1133] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 55.871744][ T1133] Normal: 369*4kB (UME) 365*8kB (UME) 329*16kB (UME) 382*32kB (UME) 294*64kB (UM) 38*128kB (UME) 8*256kB (UME) 6*512kB (ME) 6*1024kB (UME) 3*2048kB (M) 752*4096kB (M) = 3143164kB [ 55.890685][ T1133] 18480 total pagecache pages [ 55.895544][ T1133] 2 pages in swap cache [ 55.900132][ T1133] Free swap = 124704kB [ 55.904349][ T1133] Total swap = 124996kB [ 55.908513][ T1133] 2097051 pages RAM [ 55.923421][ T1133] 0 pages HighMem/MovableOnly [ 55.930162][ T1133] 352238 pages reserved [ 55.934334][ T1133] 0 pages cma reserved [ 55.942260][ T1133] Memory allocations: [ 55.946282][ T1133] 0 B 0 init/main.c:1477 func:do_initcalls [ 55.954186][ T1133] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 55.971647][ T1133] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 55.973862][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 55.979314][ T1133] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 55.979340][ T1133] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 55.988870][ T1154] syzkaller1: entered promiscuous mode [ 55.996412][ T1133] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 56.011489][ T1154] syzkaller1: entered allmulticast mode [ 56.018309][ T1133] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 56.036143][ T1133] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 56.044178][ T1133] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 56.052355][ T1133] 0 B 0 init/initramfs.c:101 func:find_link [ 56.180106][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 56.320095][ T316] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 56.330102][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 56.337342][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.346421][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.354433][ T9] usb 4-1: Product: syz [ 56.358579][ T9] usb 4-1: Manufacturer: syz [ 56.363185][ T9] usb 4-1: SerialNumber: syz [ 56.370006][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 56.376847][ T9] cdc_ncm 4-1:1.1: bind() failure [ 56.450105][ T316] usb 2-1: device descriptor read/64, error -71 [ 56.690141][ T316] usb 2-1: device descriptor read/64, error -71 [ 56.930104][ T316] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 57.060151][ T316] usb 2-1: device descriptor read/64, error -71 [ 57.100864][ T1180] FAULT_INJECTION: forcing a failure. [ 57.100864][ T1180] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.114065][ T1180] CPU: 0 UID: 0 PID: 1180 Comm: syz.2.259 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 57.114086][ T1180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.114094][ T1180] Call Trace: [ 57.114097][ T1180] [ 57.114102][ T1180] __dump_stack+0x21/0x30 [ 57.114128][ T1180] dump_stack_lvl+0x140/0x1c0 [ 57.114142][ T1180] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.114156][ T1180] ? check_stack_object+0x138/0x150 [ 57.114168][ T1180] dump_stack+0x19/0x20 [ 57.114181][ T1180] should_fail_ex+0x3c2/0x510 [ 57.114193][ T1180] should_fail+0xf/0x20 [ 57.114203][ T1180] should_fail_usercopy+0x1e/0x30 [ 57.114215][ T1180] _copy_to_user+0x24/0xa0 [ 57.114229][ T1180] simple_read_from_buffer+0xed/0x160 [ 57.114250][ T1180] proc_fail_nth_read+0x1aa/0x220 [ 57.114265][ T1180] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.114279][ T1180] ? bpf_lsm_file_permission+0xd/0x20 [ 57.114293][ T1180] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.114306][ T1180] vfs_read+0x288/0xc70 [ 57.114317][ T1180] ? __cfi_vfs_read+0x10/0x10 [ 57.114327][ T1180] ? __kasan_check_write+0x18/0x20 [ 57.114338][ T1180] ? mutex_lock+0x97/0x1d0 [ 57.114348][ T1180] ? __cfi_mutex_lock+0x10/0x10 [ 57.114359][ T1180] ksys_read+0x145/0x260 [ 57.114369][ T1180] ? __cfi_ksys_read+0x10/0x10 [ 57.114379][ T1180] ? __kasan_check_read+0x15/0x20 [ 57.114389][ T1180] __x64_sys_read+0x7f/0x90 [ 57.114399][ T1180] x64_sys_call+0x2638/0x2ee0 [ 57.114408][ T1180] do_syscall_64+0x57/0xf0 [ 57.114422][ T1180] ? clear_bhb_loop+0x50/0xa0 [ 57.114432][ T1180] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.114448][ T1180] RIP: 0033:0x7f3419d5e90e [ 57.114461][ T1180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.114470][ T1180] RSP: 002b:00007f341abd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.114485][ T1180] RAX: ffffffffffffffda RBX: 00007f341abda6c0 RCX: 00007f3419d5e90e [ 57.114493][ T1180] RDX: 000000000000000f RSI: 00007f341abda0a0 RDI: 0000000000000004 [ 57.114500][ T1180] RBP: 00007f341abda090 R08: 0000000000000000 R09: 0000000000000000 [ 57.114506][ T1180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.114513][ T1180] R13: 00007f341a026038 R14: 00007f341a025fa0 R15: 00007ffcc03ea1d8 [ 57.114521][ T1180] [ 57.365425][ T1184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 57.480108][ T316] usb 2-1: device descriptor read/64, error -71 [ 57.590166][ T316] usb usb2-port1: attempt power cycle [ 57.930116][ T316] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.951025][ T316] usb 2-1: device descriptor read/8, error -71 [ 58.081099][ T316] usb 2-1: device descriptor read/8, error -71 [ 58.180091][ T365] Bluetooth: hci0: command 0x1003 tx timeout [ 58.186129][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.305046][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 58.305062][ T36] audit: type=1400 audit(1787321368.779:274): avc: denied { ioctl } for pid=1192 comm="syz.0.264" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.320080][ T316] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.357079][ T1199] capability: warning: `syz.2.266' uses deprecated v2 capabilities in a way that may be insecure [ 58.361130][ T316] usb 2-1: device descriptor read/8, error -71 [ 58.501189][ T316] usb 2-1: device descriptor read/8, error -71 [ 58.620184][ T316] usb usb2-port1: unable to enumerate USB device [ 58.670074][ T314] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 58.830079][ T314] usb 1-1: Using ep0 maxpacket: 32 [ 58.836445][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.847763][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.860870][ T314] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 58.869991][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.879125][ T314] usb 1-1: config 0 descriptor?? [ 58.939236][ T316] usb 4-1: USB disconnect, device number 17 [ 58.996510][ T1211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 59.033292][ T341] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.144897][ T36] audit: type=1400 audit(1787321369.619:275): avc: denied { create } for pid=1214 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.181389][ T36] audit: type=1400 audit(1787321369.649:276): avc: denied { bind } for pid=1214 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.200842][ T36] audit: type=1400 audit(1787321369.649:277): avc: denied { listen } for pid=1214 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.221052][ T36] audit: type=1400 audit(1787321369.649:278): avc: denied { setopt } for pid=1214 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.240627][ T36] audit: type=1400 audit(1787321369.649:279): avc: denied { connect } for pid=1214 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.321865][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 59.327937][ T314] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 59.336644][ T314] usb 1-1: USB disconnect, device number 18 [ 59.831216][ T36] audit: type=1400 audit(1787321370.309:280): avc: denied { create } for pid=1222 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 59.852334][ T36] audit: type=1400 audit(1787321370.309:281): avc: denied { setopt } for pid=1222 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.968841][ T1235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 59.980129][ T314] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 60.120077][ T314] usb 2-1: device descriptor read/64, error -71 [ 60.380076][ T314] usb 2-1: device descriptor read/64, error -71 [ 60.510112][ T65] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.620096][ T314] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 60.680068][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 60.686438][ T65] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 60.694916][ T65] usb 3-1: config 0 has no interface number 0 [ 60.701317][ T65] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 60.711627][ T65] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 60.723446][ T65] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 60.732839][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.741053][ T65] usb 3-1: Product: syz [ 60.745362][ T65] usb 3-1: Manufacturer: syz [ 60.749997][ T65] usb 3-1: SerialNumber: syz [ 60.755831][ T65] usb 3-1: config 0 descriptor?? [ 60.760117][ T314] usb 2-1: device descriptor read/64, error -71 [ 60.767144][ T1243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 60.774479][ T1243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 60.982593][ T1243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 60.989779][ T1243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 61.000117][ T314] usb 2-1: device descriptor read/64, error -71 [ 61.007991][ T36] audit: type=1400 audit(1787321371.479:282): avc: denied { create } for pid=1248 comm="syz.0.287" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.028802][ T36] audit: type=1400 audit(1787321371.479:283): avc: denied { search } for pid=1248 comm="syz.0.287" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 61.070070][ T365] Bluetooth: hci0: command 0x1003 tx timeout [ 61.070090][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.112811][ T314] usb usb2-port1: attempt power cycle [ 61.197840][ T65] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.208407][ T65] asix 3-1:0.34: probe with driver asix failed with error -71 [ 61.218111][ T65] usb 3-1: USB disconnect, device number 8 [ 61.279719][ T1259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 61.299433][ T463] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.400084][ T670] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 61.460076][ T314] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 61.491140][ T314] usb 2-1: device descriptor read/8, error -71 [ 61.551384][ T670] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.559452][ T670] usb 1-1: not running at top speed; connect to a high speed hub [ 61.567899][ T670] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 61.576224][ T670] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 61.584402][ T670] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 61.593545][ T670] usb 1-1: config 129 has no interface number 0 [ 61.599787][ T670] usb 1-1: config 129 has no interface number 1 [ 61.606088][ T670] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 61.619352][ T670] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 61.630303][ T670] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 61.643491][ T670] usb 1-1: config 129 interface 80 has no altsetting 0 [ 61.650421][ T670] usb 1-1: config 129 interface 5 has no altsetting 0 [ 61.657975][ T314] usb 2-1: device descriptor read/8, error -71 [ 61.664927][ T670] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 61.673995][ T670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.681995][ T670] usb 1-1: Product: syz [ 61.686153][ T670] usb 1-1: Manufacturer: syz [ 61.690782][ T670] usb 1-1: SerialNumber: syz [ 61.905474][ T670] usb 1-1: MIDIStreaming interface descriptor not found [ 61.919399][ T670] usb 1-1: USB disconnect, device number 19 [ 61.925903][ T314] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 61.954319][ T314] usb 2-1: device descriptor read/8, error -71 [ 61.962392][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.110769][ T314] usb 2-1: device descriptor read/8, error -71 [ 62.230212][ T314] usb usb2-port1: unable to enumerate USB device [ 62.950095][ T65] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 62.968435][ T1285] futex_wake_op: syz.1.301 tries to shift op by 144; fix this program [ 63.110753][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 63.130404][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.150752][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.159673][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 63.168768][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.180784][ T65] usb 3-1: Found UVC 1.00 device (046d:0825) [ 63.187763][ T65] usb 3-1: No streaming interface found for terminal 2. [ 63.300074][ T365] Bluetooth: hci0: command 0x1003 tx timeout [ 63.300068][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.726259][ T1305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 63.735666][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 63.735683][ T36] audit: type=1400 audit(1787321374.209:289): avc: denied { bind } for pid=1304 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.128526][ T36] audit: type=1400 audit(1787321374.599:290): avc: denied { bind } for pid=1331 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.200089][ T314] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 64.342318][ T341] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.351114][ T314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.361329][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.372854][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.382726][ T314] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 64.391826][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.400684][ T314] usb 2-1: config 0 descriptor?? [ 64.570070][ T670] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 64.721050][ T670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.732007][ T670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.741786][ T670] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 64.750856][ T670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.759499][ T670] usb 4-1: config 0 descriptor?? [ 64.808462][ T314] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x7 [ 64.815965][ T314] hid-picolcd 0003:04D8:F002.0009: item fetching failed at offset 3/5 [ 64.824379][ T314] hid-picolcd 0003:04D8:F002.0009: device report parse failed [ 64.832507][ T314] hid-picolcd 0003:04D8:F002.0009: probe with driver hid-picolcd failed with error -22 [ 65.009706][ T65] usb 2-1: USB disconnect, device number 23 [ 65.166425][ T670] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 65.173314][ T670] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 65.180135][ T670] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 65.186938][ T670] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 65.193785][ T670] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 65.200613][ T670] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 65.207396][ T670] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 65.217615][ T670] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 65.768904][ T36] audit: type=1400 audit(1787321376.239:291): avc: denied { append } for pid=1340 comm="syz.3.320" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.791770][ T331] usb 3-1: USB disconnect, device number 9 [ 65.800891][ T1341] rust_binder: 1340:1341 transaction async to 0:0 failed EINVAL, code 0 size 0-0 [ 65.810709][ T670] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 65.811513][ T65] rust_binder: 1340: undelivered TRANSACTION_ERROR: 29201 [ 65.819618][ T670] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 65.831971][ T314] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 65.840236][ T670] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 65.851005][ T670] usb 4-1: USB disconnect, device number 18 [ 65.980105][ T314] usb 2-1: device descriptor read/64, error -71 [ 66.220130][ T314] usb 2-1: device descriptor read/64, error -71 [ 66.267739][ T36] audit: type=1400 audit(1787321376.739:292): avc: denied { ioctl } for pid=1358 comm="syz.2.327" path="socket:[16364]" dev="sockfs" ino=16364 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.324561][ T36] audit: type=1400 audit(1787321376.799:293): avc: denied { mount } for pid=1360 comm="syz.3.328" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.420076][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.420088][ T365] Bluetooth: hci0: command 0x1003 tx timeout [ 66.470130][ T314] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 66.510103][ T65] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 66.600101][ T670] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 66.607752][ T314] usb 2-1: device descriptor read/64, error -71 [ 66.661220][ T65] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 66.672140][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.681893][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 66.695667][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.704760][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.712793][ T65] usb 3-1: SerialNumber: syz [ 66.720092][ T316] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 66.761160][ T670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.772175][ T670] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.781258][ T670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.789983][ T670] usb 4-1: config 0 descriptor?? [ 66.850090][ T314] usb 2-1: device descriptor read/64, error -71 [ 66.881149][ T316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.891340][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.902360][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.912129][ T316] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 66.921860][ T65] cdc_acm 3-1:1.0: skipping garbage [ 66.927681][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.936292][ T65] usb 3-1: USB disconnect, device number 10 [ 66.942900][ T316] usb 1-1: config 0 descriptor?? [ 66.970169][ T314] usb usb2-port1: attempt power cycle [ 66.997738][ T670] usbhid 4-1:0.0: can't add hid device: -71 [ 67.003753][ T670] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 67.012469][ T670] usb 4-1: USB disconnect, device number 19 [ 67.310072][ T314] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 67.331104][ T314] usb 2-1: device descriptor read/8, error -71 [ 67.410123][ T316] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 67.417859][ T316] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 67.433477][ T670] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 67.434552][ T1369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 67.461106][ T314] usb 2-1: device descriptor read/8, error -71 [ 67.552222][ T316] usb 1-1: USB disconnect, device number 20 [ 67.601169][ T670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.612156][ T670] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 67.621381][ T670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.630766][ T670] usb 4-1: config 0 descriptor?? [ 67.710088][ T314] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 67.731103][ T314] usb 2-1: device descriptor read/8, error -71 [ 67.871144][ T314] usb 2-1: device descriptor read/8, error -71 [ 67.990248][ T314] usb usb2-port1: unable to enumerate USB device [ 68.076172][ T466] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.445280][ T1381] can0: slcan on ttyS3. [ 68.450492][ T670] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 68.461322][ T670] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 68.490866][ T1381] can0 (unregistered): slcan off ttyS3. [ 68.622635][ T466] Bluetooth: hci1: Frame reassembly failed (-84) [ 68.633097][ T36] audit: type=1400 audit(1787321379.109:294): avc: denied { create } for pid=1400 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.664429][ T36] audit: type=1400 audit(1787321379.139:295): avc: denied { connect } for pid=1400 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.762311][ T670] usb 4-1: USB disconnect, device number 20 [ 68.768305][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 69.331239][ T36] audit: type=1400 audit(1787321379.809:296): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 69.403289][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 69.456043][ T1422] fuse: Bad value for 'fd' [ 69.464098][ T36] audit: type=1400 audit(1787321379.939:297): avc: denied { mount } for pid=1421 comm="syz.3.343" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.486285][ T36] audit: type=1400 audit(1787321379.939:298): avc: denied { mounton } for pid=1421 comm="syz.3.343" path="/98/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 69.510618][ T36] audit: type=1400 audit(1787321379.989:299): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.608601][ T1432] FAULT_INJECTION: forcing a failure. [ 69.608601][ T1432] name failslab, interval 1, probability 0, space 0, times 0 [ 69.621485][ T1432] CPU: 1 UID: 0 PID: 1432 Comm: syz.2.346 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 69.621521][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.621534][ T1432] Call Trace: [ 69.621541][ T1432] [ 69.621549][ T1432] __dump_stack+0x21/0x30 [ 69.621583][ T1432] dump_stack_lvl+0x140/0x1c0 [ 69.621608][ T1432] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.621635][ T1432] ? is_bpf_text_address+0x17b/0x1a0 [ 69.621664][ T1432] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 69.621692][ T1432] dump_stack+0x19/0x20 [ 69.621716][ T1432] should_fail_ex+0x3c2/0x510 [ 69.621740][ T1432] should_failslab+0xac/0x100 [ 69.621774][ T1432] __kmalloc_node_noprof+0x69/0x500 [ 69.621795][ T1432] ? __kvmalloc_node_noprof+0x128/0x300 [ 69.621816][ T1432] ? __kasan_check_write+0x18/0x20 [ 69.621835][ T1432] __kvmalloc_node_noprof+0x128/0x300 [ 69.621855][ T1432] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 69.621873][ T1432] ? xas_start+0x317/0x3e0 [ 69.621901][ T1432] ? __kasan_check_write+0x18/0x20 [ 69.621920][ T1432] ? enqueue_timer+0x1c5/0x4b0 [ 69.621946][ T1432] __kvm_mmu_topup_memory_cache+0x58e/0x7e0 [ 69.621975][ T1432] ? mutex_unlock+0x90/0x240 [ 69.621995][ T1432] kvm_mmu_topup_memory_cache+0x24/0x30 [ 69.622022][ T1432] kvm_mmu_load+0xa1/0x2900 [ 69.622047][ T1432] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 69.622072][ T1432] ? queue_delayed_work_on+0x16f/0x1f0 [ 69.622098][ T1432] ? kvm_apic_has_interrupt+0x77a/0x790 [ 69.622125][ T1432] vcpu_run+0x4d72/0x7830 [ 69.622150][ T1432] ? kvm_sched_clock_read+0x15/0x30 [ 69.622180][ T1432] ? signal_pending+0xc0/0xc0 [ 69.622205][ T1432] ? __kasan_check_write+0x18/0x20 [ 69.622225][ T1432] ? xfd_validate_state+0x68/0x140 [ 69.622250][ T1432] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 69.622271][ T1432] ? __kasan_check_write+0x18/0x20 [ 69.622290][ T1432] ? fpregs_mark_activate+0x68/0x160 [ 69.622311][ T1432] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 69.622335][ T1432] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 69.622357][ T1432] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 69.622383][ T1432] ? _parse_integer_limit+0x195/0x1e0 [ 69.622405][ T1432] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 69.622431][ T1432] ? kstrtoull+0x13b/0x1e0 [ 69.622451][ T1432] ? kstrtouint+0x78/0xf0 [ 69.622472][ T1432] ? ioctl_has_perm+0x1bc/0x500 [ 69.622491][ T1432] ? __asan_memcpy+0x5a/0x80 [ 69.622511][ T1432] ? ioctl_has_perm+0x408/0x500 [ 69.622530][ T1432] ? has_cap_mac_admin+0xd0/0xd0 [ 69.622548][ T1432] ? __kasan_check_write+0x18/0x20 [ 69.622569][ T1432] ? mutex_lock_killable+0x97/0x1d0 [ 69.622588][ T1432] ? __cfi_mutex_lock_killable+0x10/0x10 [ 69.622608][ T1432] ? proc_fail_nth_write+0x184/0x220 [ 69.622636][ T1432] kvm_vcpu_ioctl+0xa43/0x1000 [ 69.622657][ T1432] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 69.622681][ T1432] ? __cfi_vfs_write+0x10/0x10 [ 69.622702][ T1432] ? __kasan_check_write+0x18/0x20 [ 69.622722][ T1432] ? mutex_unlock+0x90/0x240 [ 69.622740][ T1432] ? __cfi_mutex_unlock+0x10/0x10 [ 69.622769][ T1432] ? bpf_lsm_file_ioctl+0xd/0x20 [ 69.622794][ T1432] ? security_file_ioctl+0x3e/0x110 [ 69.622812][ T1432] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 69.622830][ T1432] __se_sys_ioctl+0x135/0x1b0 [ 69.622855][ T1432] __x64_sys_ioctl+0x7f/0xa0 [ 69.622877][ T1432] x64_sys_call+0x1878/0x2ee0 [ 69.622896][ T1432] do_syscall_64+0x57/0xf0 [ 69.622920][ T1432] ? clear_bhb_loop+0x50/0xa0 [ 69.622941][ T1432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.622969][ T1432] RIP: 0033:0x7f3419d9e0d9 [ 69.622988][ T1432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.623005][ T1432] RSP: 002b:00007f341abda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.623027][ T1432] RAX: ffffffffffffffda RBX: 00007f341a025fa0 RCX: 00007f3419d9e0d9 [ 69.623042][ T1432] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.623055][ T1432] RBP: 00007f341abda090 R08: 0000000000000000 R09: 0000000000000000 [ 69.623069][ T1432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.623081][ T1432] R13: 00007f341a026038 R14: 00007f341a025fa0 R15: 00007ffcc03ea1d8 [ 69.623098][ T1432] [ 70.100081][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.380067][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 70.400568][ T316] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 70.540116][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 70.546620][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.554977][ T9] usb 3-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 70.565271][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.579275][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.590781][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 70.600281][ T316] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 70.610349][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.618373][ T9] usb 3-1: Product: syz [ 70.622716][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.630815][ T9] usb 3-1: Manufacturer: syz [ 70.635409][ T9] usb 3-1: SerialNumber: syz [ 70.640650][ T316] usb 1-1: config 0 descriptor?? [ 70.660091][ T364] Bluetooth: hci1: command 0x1003 tx timeout [ 70.660100][ T365] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 70.840086][ T331] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 70.849916][ T316] usbhid 1-1:0.0: can't add hid device: -71 [ 70.860623][ T316] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 70.870116][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 70.880236][ T316] usb 1-1: USB disconnect, device number 21 [ 70.894145][ T9] usb 3-1: USB disconnect, device number 11 [ 70.908672][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.020060][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 71.026423][ T331] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 71.036935][ T331] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 71.047818][ T331] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 71.062466][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.070821][ T331] usb 4-1: Product: syz [ 71.075087][ T331] usb 4-1: Manufacturer: syz [ 71.079761][ T331] usb 4-1: SerialNumber: syz [ 71.293496][ T331] usb 4-1: unit 6: unexpected type 0x03 [ 71.299136][ T331] usb 4-1: unit 12 not found! [ 71.304764][ T331] usb 4-1: unit 4 not found! [ 71.309433][ T331] usb 4-1: unit 8 not found! [ 71.314378][ T331] usb 4-1: unit 1 not found! [ 71.319058][ T331] usb 4-1: unit 9 not found! [ 71.344512][ T331] usb 4-1: USB disconnect, device number 21 [ 71.374264][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.490476][ T1456] FAULT_INJECTION: forcing a failure. [ 71.490476][ T1456] name failslab, interval 1, probability 0, space 0, times 0 [ 71.503337][ T1456] CPU: 0 UID: 0 PID: 1456 Comm: syz.2.355 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 71.503376][ T1456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.503388][ T1456] Call Trace: [ 71.503395][ T1456] [ 71.503403][ T1456] __dump_stack+0x21/0x30 [ 71.503436][ T1456] dump_stack_lvl+0x140/0x1c0 [ 71.503463][ T1456] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.503490][ T1456] ? kasan_save_alloc_info+0x3a/0x50 [ 71.503510][ T1456] dump_stack+0x19/0x20 [ 71.503534][ T1456] should_fail_ex+0x3c2/0x510 [ 71.503557][ T1456] should_failslab+0xac/0x100 [ 71.503581][ T1456] __kmalloc_node_noprof+0x69/0x500 [ 71.503603][ T1456] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 71.503633][ T1456] __vmalloc_node_range_noprof+0x529/0x1300 [ 71.503665][ T1456] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 71.503695][ T1456] ? kasan_save_alloc_info+0x3a/0x50 [ 71.503712][ T1456] ? __kasan_slab_alloc+0x73/0x90 [ 71.503743][ T1456] ? arch_dup_task_struct+0x5b/0xe0 [ 71.503773][ T1456] ? __asan_memcpy+0x5a/0x80 [ 71.503793][ T1456] dup_task_struct+0x5d6/0xd80 [ 71.503816][ T1456] ? copy_process+0x57c/0x3350 [ 71.503840][ T1456] ? _raw_spin_lock_irq+0x93/0x120 [ 71.503870][ T1456] ? copy_process+0x3350/0x3350 [ 71.503894][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.503915][ T1456] copy_process+0x57c/0x3350 [ 71.503940][ T1456] ? kasan_save_alloc_info+0x3a/0x50 [ 71.503959][ T1456] ? __cfi_copy_process+0x10/0x10 [ 71.503981][ T1456] ? __kmalloc_cache_noprof+0x23c/0x470 [ 71.504004][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.504022][ T1456] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 71.504047][ T1456] vhost_task_create+0x1f7/0x3f0 [ 71.504068][ T1456] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 71.504091][ T1456] ? __cfi_vhost_task_create+0x10/0x10 [ 71.504114][ T1456] ? __cfi_vhost_task_fn+0x10/0x10 [ 71.504133][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.504153][ T1456] ? mutex_lock+0x97/0x1d0 [ 71.504171][ T1456] ? __cfi_mutex_lock+0x10/0x10 [ 71.504190][ T1456] ? kernel_text_address+0xa9/0xe0 [ 71.504216][ T1456] kvm_mmu_post_init_vm+0x161/0x300 [ 71.504243][ T1456] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 71.504269][ T1456] ? _parse_integer_limit+0x195/0x1e0 [ 71.504291][ T1456] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.504318][ T1456] ? kstrtoull+0x13b/0x1e0 [ 71.504341][ T1456] ? kstrtouint+0x78/0xf0 [ 71.504361][ T1456] ? ioctl_has_perm+0x1bc/0x500 [ 71.504381][ T1456] ? __asan_memcpy+0x5a/0x80 [ 71.504400][ T1456] ? ioctl_has_perm+0x408/0x500 [ 71.504420][ T1456] ? has_cap_mac_admin+0xd0/0xd0 [ 71.504438][ T1456] ? irqentry_exit+0x4a/0x60 [ 71.504461][ T1456] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 71.504481][ T1456] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 71.504504][ T1456] kvm_vcpu_ioctl+0xa43/0x1000 [ 71.504524][ T1456] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.504544][ T1456] ? __cfi_vfs_write+0x10/0x10 [ 71.504564][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.504584][ T1456] ? mutex_unlock+0x90/0x240 [ 71.504602][ T1456] ? __cfi_mutex_unlock+0x10/0x10 [ 71.504624][ T1456] ? bpf_lsm_file_ioctl+0xd/0x20 [ 71.504649][ T1456] ? security_file_ioctl+0x3e/0x110 [ 71.504668][ T1456] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.504686][ T1456] __se_sys_ioctl+0x135/0x1b0 [ 71.504710][ T1456] __x64_sys_ioctl+0x7f/0xa0 [ 71.504733][ T1456] x64_sys_call+0x1878/0x2ee0 [ 71.504759][ T1456] do_syscall_64+0x57/0xf0 [ 71.504785][ T1456] ? clear_bhb_loop+0x50/0xa0 [ 71.504805][ T1456] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.504833][ T1456] RIP: 0033:0x7f3419d9e0d9 [ 71.504852][ T1456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.504867][ T1456] RSP: 002b:00007f341abda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.504891][ T1456] RAX: ffffffffffffffda RBX: 00007f341a025fa0 RCX: 00007f3419d9e0d9 [ 71.504905][ T1456] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.504919][ T1456] RBP: 00007f341abda090 R08: 0000000000000000 R09: 0000000000000000 [ 71.504932][ T1456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.504944][ T1456] R13: 00007f341a026038 R14: 00007f341a025fa0 R15: 00007ffcc03ea1d8 [ 71.504961][ T1456] [ 71.505009][ T1456] syz.2.355: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 71.943643][ T1456] CPU: 0 UID: 0 PID: 1456 Comm: syz.2.355 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 71.943684][ T1456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.943695][ T1456] Call Trace: [ 71.943701][ T1456] [ 71.943709][ T1456] __dump_stack+0x21/0x30 [ 71.943739][ T1456] dump_stack_lvl+0x140/0x1c0 [ 71.943762][ T1456] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.943782][ T1456] dump_stack+0x19/0x20 [ 71.943801][ T1456] warn_alloc+0x1e7/0x2c0 [ 71.943824][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.943844][ T1456] ? __cfi_warn_alloc+0x10/0x10 [ 71.943867][ T1456] ? __kasan_kmalloc+0x28/0xb0 [ 71.943888][ T1456] ? __kmalloc_node_noprof+0x252/0x500 [ 71.943908][ T1456] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 71.943938][ T1456] __vmalloc_node_range_noprof+0x65f/0x1300 [ 71.943970][ T1456] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 71.943998][ T1456] ? kasan_save_alloc_info+0x3a/0x50 [ 71.944015][ T1456] ? __kasan_slab_alloc+0x73/0x90 [ 71.944037][ T1456] ? arch_dup_task_struct+0x5b/0xe0 [ 71.944063][ T1456] ? __asan_memcpy+0x5a/0x80 [ 71.944078][ T1456] dup_task_struct+0x5d6/0xd80 [ 71.944097][ T1456] ? copy_process+0x57c/0x3350 [ 71.944118][ T1456] ? _raw_spin_lock_irq+0x93/0x120 [ 71.944142][ T1456] ? copy_process+0x3350/0x3350 [ 71.944164][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.944183][ T1456] copy_process+0x57c/0x3350 [ 71.944207][ T1456] ? kasan_save_alloc_info+0x3a/0x50 [ 71.944225][ T1456] ? __cfi_copy_process+0x10/0x10 [ 71.944247][ T1456] ? __kmalloc_cache_noprof+0x23c/0x470 [ 71.944266][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.944285][ T1456] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 71.944307][ T1456] vhost_task_create+0x1f7/0x3f0 [ 71.944327][ T1456] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 71.944350][ T1456] ? __cfi_vhost_task_create+0x10/0x10 [ 71.944372][ T1456] ? __cfi_vhost_task_fn+0x10/0x10 [ 71.944393][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.944412][ T1456] ? mutex_lock+0x97/0x1d0 [ 71.944431][ T1456] ? __cfi_mutex_lock+0x10/0x10 [ 71.944449][ T1456] ? kernel_text_address+0xa9/0xe0 [ 71.944475][ T1456] kvm_mmu_post_init_vm+0x161/0x300 [ 71.944501][ T1456] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 71.944524][ T1456] ? _parse_integer_limit+0x195/0x1e0 [ 71.944545][ T1456] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.944566][ T1456] ? kstrtoull+0x13b/0x1e0 [ 71.944583][ T1456] ? kstrtouint+0x78/0xf0 [ 71.944602][ T1456] ? ioctl_has_perm+0x1bc/0x500 [ 71.944620][ T1456] ? __asan_memcpy+0x5a/0x80 [ 71.944639][ T1456] ? ioctl_has_perm+0x408/0x500 [ 71.944657][ T1456] ? has_cap_mac_admin+0xd0/0xd0 [ 71.944682][ T1456] ? irqentry_exit+0x4a/0x60 [ 71.944703][ T1456] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 71.944722][ T1456] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 71.944780][ T1456] kvm_vcpu_ioctl+0xa43/0x1000 [ 71.944798][ T1456] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.944815][ T1456] ? __cfi_vfs_write+0x10/0x10 [ 71.944836][ T1456] ? __kasan_check_write+0x18/0x20 [ 71.944854][ T1456] ? mutex_unlock+0x90/0x240 [ 71.944873][ T1456] ? __cfi_mutex_unlock+0x10/0x10 [ 71.944893][ T1456] ? bpf_lsm_file_ioctl+0xd/0x20 [ 71.944917][ T1456] ? security_file_ioctl+0x3e/0x110 [ 71.944935][ T1456] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.944952][ T1456] __se_sys_ioctl+0x135/0x1b0 [ 71.944976][ T1456] __x64_sys_ioctl+0x7f/0xa0 [ 71.944999][ T1456] x64_sys_call+0x1878/0x2ee0 [ 71.945017][ T1456] do_syscall_64+0x57/0xf0 [ 71.945042][ T1456] ? clear_bhb_loop+0x50/0xa0 [ 71.945061][ T1456] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.945090][ T1456] RIP: 0033:0x7f3419d9e0d9 [ 71.945112][ T1456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.945128][ T1456] RSP: 002b:00007f341abda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.945149][ T1456] RAX: ffffffffffffffda RBX: 00007f341a025fa0 RCX: 00007f3419d9e0d9 [ 71.945163][ T1456] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.945175][ T1456] RBP: 00007f341abda090 R08: 0000000000000000 R09: 0000000000000000 [ 71.945188][ T1456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.945200][ T1456] R13: 00007f341a026038 R14: 00007f341a025fa0 R15: 00007ffcc03ea1d8 [ 71.945216][ T1456] [ 71.945224][ T1456] Mem-Info: [ 72.110229][ T466] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.111433][ T1456] active_anon:7247 inactive_anon:10 isolated_anon:0 [ 72.111433][ T1456] active_file:16020 inactive_file:2343 isolated_file:0 [ 72.111433][ T1456] unevictable:0 dirty:27 writeback:0 [ 72.111433][ T1456] slab_reclaimable:6112 slab_unreclaimable:70497 [ 72.111433][ T1456] mapped:24717 shmem:163 pagetables:935 [ 72.111433][ T1456] sec_pagetables:3 bounce:0 [ 72.111433][ T1456] kernel_misc_reclaimable:0 [ 72.111433][ T1456] free:1527221 free_pcp:2226 free_cma:0 [ 72.140098][ T331] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 72.144940][ T1456] Node 0 active_anon:28988kB inactive_anon:40kB active_file:64080kB inactive_file:9372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98868kB dirty:108kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6712kB pagetables:3540kB sec_pagetables:12kB all_unreclaimable? no [ 72.301121][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.317803][ T1456] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963388kB mlocked:0kB bounce:0kB free_pcp:5224kB local_pcp:5224kB free_cma:0kB [ 72.346621][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.350496][ T1456] lowmem_reserve[]: [ 72.362254][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.366541][ T1456] 0 [ 72.370528][ T331] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 72.372698][ T1456] 3921 [ 72.423526][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.462873][ T1456] 3921 [ 72.478290][ T331] usb 4-1: config 0 descriptor?? [ 72.504242][ T1456] [ 72.560318][ T1456] Normal free:3153296kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29012kB inactive_anon:40kB active_file:64080kB inactive_file:9372kB unevictable:0kB writepending:108kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3108kB local_pcp:968kB free_cma:0kB [ 72.591728][ T1456] lowmem_reserve[]: 0 0 0 [ 72.596566][ T1456] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 72.612146][ T1456] Normal: 179*4kB (U) 350*8kB (UME) 317*16kB (UM) 402*32kB (UME) 326*64kB (UM) 38*128kB (UM) 12*256kB (UME) 9*512kB (UME) 7*1024kB (UME) 3*2048kB (M) 752*4096kB (M) = 3148364kB [ 72.629800][ T1456] 18526 total pagecache pages [ 72.634561][ T1456] 2 pages in swap cache [ 72.638708][ T1456] Free swap = 124672kB [ 72.642873][ T1456] Total swap = 124996kB [ 72.647026][ T1456] 2097051 pages RAM [ 72.650857][ T1456] 0 pages HighMem/MovableOnly [ 72.655624][ T1456] 352238 pages reserved [ 72.659788][ T1456] 0 pages cma reserved [ 72.665332][ T1456] Memory allocations: [ 72.669317][ T1456] 0 B 0 init/main.c:1477 func:do_initcalls [ 72.676573][ T1456] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 72.684664][ T1456] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 72.692342][ T1456] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 72.700286][ T1456] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 72.708172][ T1456] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 72.716801][ T1456] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 72.724910][ T1456] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 72.732845][ T1456] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 72.740765][ T1456] 0 B 0 init/initramfs.c:101 func:find_link [ 72.802724][ T1467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 72.807497][ T1468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 72.821166][ T1467] overlayfs: conflicting options: metacopy=off,verity=on [ 72.970089][ T331] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf3 found [ 72.978390][ T331] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf4 found [ 73.080085][ T65] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 73.126290][ T331] usb 4-1: USB disconnect, device number 22 [ 73.240110][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 73.246353][ T65] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 73.254526][ T65] usb 3-1: config 0 has no interface number 0 [ 73.262040][ T65] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 73.271129][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.279145][ T65] usb 3-1: Product: syz [ 73.283324][ T65] usb 3-1: Manufacturer: syz [ 73.287937][ T65] usb 3-1: SerialNumber: syz [ 73.293466][ T65] usb 3-1: config 0 descriptor?? [ 73.299228][ T65] smsc95xx v2.0.0 [ 73.689414][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 73.699511][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 73.713053][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 73.737968][ T1477] program syz.3.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.840066][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 73.853156][ T1474] netlink: 'syz.1.362': attribute type 4 has an invalid length. [ 73.860979][ T1474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 73.910394][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 73.918707][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 73.926376][ T9] usb 2-1: can't read configurations, error -71 [ 74.150109][ T331] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 74.180090][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 74.180084][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.294038][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 74.305045][ T65] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 74.311112][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.314692][ T65] usb 3-1: USB disconnect, device number 12 [ 74.329298][ T331] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.339175][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.347756][ T331] usb 4-1: config 0 descriptor?? [ 74.439387][ T36] audit: type=1400 audit(1787321384.909:300): avc: denied { append } for pid=1498 comm="syz.1.368" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.440536][ T316] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 74.501512][ T36] audit: type=1400 audit(1787321384.979:301): avc: denied { setopt } for pid=1498 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.556679][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 74.562708][ T331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 74.573592][ T331] usb 4-1: USB disconnect, device number 23 [ 74.600240][ T316] usb 1-1: device descriptor read/64, error -71 [ 74.660082][ T65] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 74.810069][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 74.816473][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.829853][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 74.840160][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 74.850088][ T316] usb 1-1: device descriptor read/64, error -71 [ 74.856779][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.871478][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.880890][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.888963][ T65] usb 3-1: SerialNumber: syz [ 74.894964][ T1497] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.902399][ T1497] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.910816][ T65] hub 3-1:1.0: bad descriptor, ignoring hub [ 74.916775][ T65] hub 3-1:1.0: probe with driver hub failed with error -5 [ 74.924414][ T65] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 75.090086][ T316] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 75.135018][ T65] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 75.171427][ T65] usb 3-1: USB disconnect, device number 13 [ 75.230103][ T316] usb 1-1: device descriptor read/64, error -71 [ 75.367195][ T36] audit: type=1400 audit(1787321385.839:302): avc: denied { write } for pid=1510 comm="syz.3.373" path="socket:[18232]" dev="sockfs" ino=18232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.480180][ T316] usb 1-1: device descriptor read/64, error -71 [ 75.610272][ T316] usb usb1-port1: attempt power cycle [ 75.655588][ T1525] netlink: 'syz.1.378': attribute type 16 has an invalid length. [ 75.657707][ T36] audit: type=1400 audit(1787321386.129:303): avc: denied { create } for pid=1529 comm="syz.2.379" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 75.663439][ T1525] netlink: 'syz.1.378': attribute type 3 has an invalid length. [ 75.713223][ T1525] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.378'. [ 75.713363][ T36] audit: type=1400 audit(1787321386.199:304): avc: denied { link } for pid=1529 comm="syz.2.379" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=19096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 75.780090][ T331] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 75.951558][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.959515][ T331] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 75.968889][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 75.970089][ T316] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 75.976829][ T331] usb 4-1: can't read configurations, error -61 [ 76.001215][ T316] usb 1-1: device descriptor read/8, error -71 [ 76.060077][ T670] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 76.120084][ T331] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 76.141121][ T316] usb 1-1: device descriptor read/8, error -71 [ 76.211163][ T670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.222342][ T670] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.231530][ T670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.240583][ T670] usb 3-1: config 0 descriptor?? [ 76.281548][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.289345][ T331] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 76.298449][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 76.306181][ T331] usb 4-1: can't read configurations, error -61 [ 76.312756][ T331] usb usb4-port1: attempt power cycle [ 76.380083][ T316] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 76.411133][ T316] usb 1-1: device descriptor read/8, error -71 [ 76.454245][ T670] usbhid 3-1:0.0: can't add hid device: -71 [ 76.461972][ T670] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 76.472866][ T670] usb 3-1: USB disconnect, device number 14 [ 76.541213][ T316] usb 1-1: device descriptor read/8, error -71 [ 76.656811][ T316] usb usb1-port1: unable to enumerate USB device [ 76.660091][ T331] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 76.693245][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.701011][ T331] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 76.709951][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 76.719864][ T331] usb 4-1: can't read configurations, error -61 [ 76.770453][ T1542] fuse: Bad value for 'fd' [ 76.775372][ T36] audit: type=1400 audit(1787321387.249:305): avc: denied { write } for pid=1541 comm="syz.1.384" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.860194][ T331] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 76.881955][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.889741][ T331] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 76.900397][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 76.907978][ T331] usb 4-1: can't read configurations, error -61 [ 76.914621][ T331] usb usb4-port1: unable to enumerate USB device [ 76.984705][ T36] audit: type=1400 audit(1787321387.459:306): avc: denied { read } for pid=1550 comm="syz.1.387" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.007700][ T36] audit: type=1400 audit(1787321387.459:307): avc: denied { open } for pid=1550 comm="syz.1.387" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.530089][ T1023] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 77.537804][ T331] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 77.670135][ T1023] usb 3-1: device descriptor read/64, error -71 [ 77.690069][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 77.696426][ T331] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 77.707106][ T331] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.717803][ T331] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 77.727228][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.735448][ T331] usb 2-1: Product: syz [ 77.739775][ T331] usb 2-1: Manufacturer: syz [ 77.744639][ T331] usb 2-1: SerialNumber: syz [ 77.920129][ T1023] usb 3-1: device descriptor read/64, error -71 [ 78.160092][ T1023] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 78.223227][ T1574] tmpfs: Invalid uid '0x00000000ffffffff' [ 78.310081][ T1023] usb 3-1: device descriptor read/64, error -71 [ 78.460752][ T331] usb 2-1: unit 8 not found! [ 78.472205][ T331] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 78.483977][ T331] usb 2-1: USB disconnect, device number 30 [ 78.493177][ T314] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 78.524752][ T1580] tipc: Started in network mode [ 78.529670][ T1580] tipc: Node identity 4, cluster identity 4711 [ 78.536066][ T1580] tipc: Node number set to 4 [ 78.541996][ T36] audit: type=1400 audit(1787321389.029:308): avc: denied { search } for pid=1579 comm="syz.1.397" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.564059][ T1023] usb 3-1: device descriptor read/64, error -71 [ 78.564067][ T36] audit: type=1400 audit(1787321389.029:309): avc: denied { write } for pid=1579 comm="syz.1.397" name="functions" dev="configfs" ino=4032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.670095][ T314] usb 1-1: Using ep0 maxpacket: 32 [ 78.676491][ T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.688063][ T314] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 78.697202][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.705376][ T1023] usb usb3-port1: attempt power cycle [ 78.710788][ T314] usb 1-1: Product: syz [ 78.714939][ T314] usb 1-1: Manufacturer: syz [ 78.719521][ T314] usb 1-1: SerialNumber: syz [ 78.725285][ T314] usb 1-1: config 0 descriptor?? [ 78.731191][ T314] usb 1-1: bad CDC descriptors [ 78.736094][ T314] usb 1-1: unsupported MDLM descriptors [ 78.920144][ T45] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 78.932346][ T314] usb 1-1: USB disconnect, device number 26 [ 79.060419][ T1023] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 79.081139][ T1023] usb 3-1: device descriptor read/8, error -71 [ 79.087397][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.097785][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.108813][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.118635][ T45] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 79.127722][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.136345][ T45] usb 4-1: config 0 descriptor?? [ 79.211095][ T1023] usb 3-1: device descriptor read/8, error -71 [ 79.451291][ T1023] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 79.471227][ T1023] usb 3-1: device descriptor read/8, error -71 [ 79.482457][ T1591] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.610231][ T45] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf3 found [ 79.619843][ T45] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf4 found [ 79.628894][ T1023] usb 3-1: device descriptor read/8, error -71 [ 79.660104][ T65] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 79.740198][ T1023] usb usb3-port1: unable to enumerate USB device [ 79.746244][ T316] usb 4-1: USB disconnect, device number 28 [ 79.810088][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 79.816296][ T65] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.824483][ T65] usb 2-1: config 0 has no interface number 0 [ 79.832346][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.841831][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.849890][ T65] usb 2-1: Product: syz [ 79.854102][ T65] usb 2-1: Manufacturer: syz [ 79.858701][ T65] usb 2-1: SerialNumber: syz [ 79.863936][ T65] usb 2-1: config 0 descriptor?? [ 79.869608][ T65] smsc95xx v2.0.0 [ 80.010086][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 80.160063][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 80.166317][ T9] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 80.176190][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.185319][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.193438][ T9] usb 1-1: Product: syz [ 80.197607][ T9] usb 1-1: Manufacturer: syz [ 80.202702][ T9] usb 1-1: SerialNumber: syz [ 80.210247][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 80.216502][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 80.271124][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 80.281899][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.440497][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 80.440513][ T36] audit: type=1400 audit(1787321390.919:313): avc: denied { ioctl } for pid=1601 comm="syz.3.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.491783][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 80.502531][ T314] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 80.502701][ T65] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 80.520291][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 80.526593][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 80.536545][ T9] r8152-cfgselector 1-1: USB disconnect, device number 27 [ 80.650127][ T314] usb 4-1: device descriptor read/64, error -71 [ 80.656520][ T1023] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 80.810085][ T1023] usb 3-1: Using ep0 maxpacket: 32 [ 80.816857][ T1023] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.826239][ T1023] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.836391][ T1023] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.845488][ T1023] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.856714][ T1023] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 80.865800][ T1023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.873814][ T1023] usb 3-1: Product: syz [ 80.877985][ T1023] usb 3-1: Manufacturer: syz [ 80.882597][ T1023] usb 3-1: SerialNumber: syz [ 80.910075][ T314] usb 4-1: device descriptor read/64, error -71 [ 81.029382][ T36] audit: type=1400 audit(1787321391.499:314): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.053387][ T36] audit: type=1400 audit(1787321391.499:315): avc: denied { open } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.077374][ T36] audit: type=1400 audit(1787321391.499:316): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.102911][ T36] audit: type=1400 audit(1787321391.499:317): avc: denied { create } for pid=1607 comm="syz.0.407" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.113501][ T1023] usb 3-1: USB disconnect, device number 19 [ 81.125045][ T36] audit: type=1400 audit(1787321391.499:318): avc: denied { read write } for pid=1607 comm="syz.0.407" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.153739][ T36] audit: type=1400 audit(1787321391.499:319): avc: denied { open } for pid=1607 comm="syz.0.407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.160112][ T314] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 81.177113][ T36] audit: type=1400 audit(1787321391.589:320): avc: denied { setopt } for pid=1603 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.205425][ T1611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.213923][ T1611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.280109][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 81.310159][ T314] usb 4-1: device descriptor read/64, error -71 [ 81.431221][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 81.441054][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 81.452274][ T65] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 81.461683][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.469771][ T65] usb 1-1: Product: syz [ 81.474181][ T65] usb 1-1: Manufacturer: syz [ 81.478804][ T65] usb 1-1: SerialNumber: syz [ 81.484438][ T65] usb 1-1: config 0 descriptor?? [ 81.489778][ T1610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.497043][ T1610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.560113][ T314] usb 4-1: device descriptor read/64, error -71 [ 81.614311][ T36] audit: type=1400 audit(1787321392.089:321): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.634887][ T36] audit: type=1400 audit(1787321392.099:322): avc: denied { create } for pid=1612 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.670202][ T314] usb usb4-port1: attempt power cycle [ 81.705962][ T1608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.713444][ T1608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.970064][ T1023] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 82.010103][ T314] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 82.031070][ T314] usb 4-1: device descriptor read/8, error -71 [ 82.120094][ T1023] usb 3-1: Using ep0 maxpacket: 16 [ 82.126407][ T1023] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.137375][ T1023] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.147170][ T1023] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.160091][ T1023] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.166733][ T1023] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 82.175864][ T1023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.184482][ T314] usb 4-1: device descriptor read/8, error -71 [ 82.191284][ T1023] usb 3-1: config 0 descriptor?? [ 82.197555][ T1023] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 82.205604][ T1023] usbhid 3-1:0.0: can't add hid device: -22 [ 82.211578][ T1023] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 82.399854][ T1023] usb 3-1: USB disconnect, device number 20 [ 82.434120][ T314] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 82.435686][ T1191] usb 2-1: USB disconnect, device number 31 [ 82.461318][ T314] usb 4-1: device descriptor read/8, error -71 [ 82.528424][ T65] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 82.541512][ T65] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 14:9c:33:a4:46:74 [ 82.556775][ T65] usb 1-1: USB disconnect, device number 28 [ 82.563138][ T65] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 82.591440][ T314] usb 4-1: device descriptor read/8, error -71 [ 82.700244][ T314] usb usb4-port1: unable to enumerate USB device [ 82.860108][ T1191] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 82.911311][ T1637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 83.010086][ T1191] usb 2-1: Using ep0 maxpacket: 32 [ 83.016484][ T1191] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 83.033156][ T1191] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 83.045097][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.056846][ T1191] usb 2-1: Product: syz [ 83.061348][ T1191] usb 2-1: Manufacturer: syz [ 83.066099][ T1191] usb 2-1: SerialNumber: syz [ 83.076893][ T1635] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.094760][ T1646] FAULT_INJECTION: forcing a failure. [ 83.094760][ T1646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.111392][ T1646] CPU: 1 UID: 0 PID: 1646 Comm: syz.2.420 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 83.111425][ T1646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.111438][ T1646] Call Trace: [ 83.111445][ T1646] [ 83.111453][ T1646] __dump_stack+0x21/0x30 [ 83.111485][ T1646] dump_stack_lvl+0x140/0x1c0 [ 83.111510][ T1646] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.111536][ T1646] ? __kasan_check_write+0x18/0x20 [ 83.111556][ T1646] ? check_stack_object+0x10f/0x150 [ 83.111586][ T1646] dump_stack+0x19/0x20 [ 83.111609][ T1646] should_fail_ex+0x3c2/0x510 [ 83.111632][ T1646] should_fail+0xf/0x20 [ 83.111653][ T1646] should_fail_usercopy+0x1e/0x30 [ 83.111676][ T1646] _copy_from_user+0x20/0xa0 [ 83.111701][ T1646] __sys_sendto+0x2f8/0x700 [ 83.111723][ T1646] ? __cfi___sys_sendto+0x10/0x10 [ 83.111745][ T1646] ? __kasan_check_write+0x18/0x20 [ 83.111766][ T1646] ? __cfi_ksys_write+0x10/0x10 [ 83.111788][ T1646] __x64_sys_sendto+0xe9/0x100 [ 83.111809][ T1646] x64_sys_call+0x2c2c/0x2ee0 [ 83.111827][ T1646] do_syscall_64+0x57/0xf0 [ 83.111852][ T1646] ? clear_bhb_loop+0x50/0xa0 [ 83.111872][ T1646] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.111900][ T1646] RIP: 0033:0x7f3419d9e0d9 [ 83.111917][ T1646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.111934][ T1646] RSP: 002b:00007f341abda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.111956][ T1646] RAX: ffffffffffffffda RBX: 00007f341a025fa0 RCX: 00007f3419d9e0d9 [ 83.111971][ T1646] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000004 [ 83.111985][ T1646] RBP: 00007f341abda090 R08: 0000200000001100 R09: 000000000000001c [ 83.111999][ T1646] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 83.112011][ T1646] R13: 00007f341a026038 R14: 00007f341a025fa0 R15: 00007ffcc03ea1d8 [ 83.112029][ T1646] [ 83.363968][ T1651] netlink: 180 bytes leftover after parsing attributes in process `syz.0.421'. [ 83.379052][ T1635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.389659][ T1635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.401332][ T1191] usb 2-1: MIDIStreaming interface descriptor not found [ 83.415152][ T1191] usb 2-1: USB disconnect, device number 32 [ 83.429875][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.461720][ T1659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 83.608393][ T1675] FAULT_INJECTION: forcing a failure. [ 83.608393][ T1675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.621698][ T1675] CPU: 0 UID: 0 PID: 1675 Comm: syz.0.430 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 83.621729][ T1675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.621741][ T1675] Call Trace: [ 83.621747][ T1675] [ 83.621756][ T1675] __dump_stack+0x21/0x30 [ 83.621787][ T1675] dump_stack_lvl+0x140/0x1c0 [ 83.621810][ T1675] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.621828][ T1675] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 83.621840][ T1675] dump_stack+0x19/0x20 [ 83.621853][ T1675] should_fail_ex+0x3c2/0x510 [ 83.621865][ T1675] should_fail+0xf/0x20 [ 83.621875][ T1675] should_fail_usercopy+0x1e/0x30 [ 83.621887][ T1675] _copy_from_iter+0x1a6/0x1520 [ 83.621902][ T1675] ? __cfi__copy_from_iter+0x10/0x10 [ 83.621915][ T1675] ? __check_object_size+0xdc/0x870 [ 83.621926][ T1675] ? __cfi___check_object_size+0x10/0x10 [ 83.621936][ T1675] ? __asan_memcpy+0x5a/0x80 [ 83.621947][ T1675] ping_common_sendmsg+0xc0/0x2d0 [ 83.621959][ T1675] ping_v6_sendmsg+0x1ff/0xff0 [ 83.621971][ T1675] ? __cfi_ping_v6_sendmsg+0x10/0x10 [ 83.621981][ T1675] ? _raw_spin_lock_bh+0x96/0x130 [ 83.621995][ T1675] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 83.622009][ T1675] ? _raw_spin_lock_bh+0x96/0x130 [ 83.622025][ T1675] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 83.622038][ T1675] ? _raw_spin_unlock+0x45/0x60 [ 83.622051][ T1675] ? _raw_spin_unlock_bh+0x54/0x60 [ 83.622064][ T1675] ? release_sock+0x171/0x1f0 [ 83.622075][ T1675] ? inet_send_prepare+0x1e7/0x4e0 [ 83.622089][ T1675] ? __cfi_ping_v6_sendmsg+0x10/0x10 [ 83.622099][ T1675] inet_sendmsg+0x116/0x120 [ 83.622112][ T1675] ? __cfi_inet_sendmsg+0x10/0x10 [ 83.622125][ T1675] __sys_sendto+0x5ea/0x700 [ 83.622136][ T1675] ? __cfi___sys_sendto+0x10/0x10 [ 83.622147][ T1675] ? __kasan_check_write+0x18/0x20 [ 83.622158][ T1675] ? __cfi_ksys_write+0x10/0x10 [ 83.622169][ T1675] __x64_sys_sendto+0xe9/0x100 [ 83.622180][ T1675] x64_sys_call+0x2c2c/0x2ee0 [ 83.622189][ T1675] do_syscall_64+0x57/0xf0 [ 83.622203][ T1675] ? clear_bhb_loop+0x50/0xa0 [ 83.622213][ T1675] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.622229][ T1675] RIP: 0033:0x7f843959e0d9 [ 83.622239][ T1675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.622249][ T1675] RSP: 002b:00007f843a4a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.622260][ T1675] RAX: ffffffffffffffda RBX: 00007f8439825fa0 RCX: 00007f843959e0d9 [ 83.622268][ T1675] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000004 [ 83.622276][ T1675] RBP: 00007f843a4a4090 R08: 0000200000001100 R09: 000000000000001c [ 83.622283][ T1675] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 83.622289][ T1675] R13: 00007f8439826038 R14: 00007f8439825fa0 R15: 00007ffc6d238448 [ 83.622298][ T1675] [ 83.724292][ T314] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 84.000870][ T65] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 84.059340][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.069527][ T314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.079713][ T314] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.088778][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.096826][ T314] usb 4-1: Product: syz [ 84.100996][ T314] usb 4-1: Manufacturer: syz [ 84.105576][ T314] usb 4-1: SerialNumber: syz [ 84.145165][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.156139][ T65] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.165318][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.174080][ T65] usb 1-1: config 0 descriptor?? [ 84.229927][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 84.371161][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.379781][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 84.380426][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.386124][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 84.403562][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 84.417116][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 84.426296][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.435080][ T9] usb 3-1: config 0 descriptor?? [ 84.800509][ T314] usb 4-1: 0:2 : does not exist [ 84.810826][ T314] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 84.825021][ T314] usb 4-1: USB disconnect, device number 33 [ 84.841483][ T9] apple 0003:05AC:027C.000E: unknown main item tag 0x7 [ 84.849858][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.865629][ T9] apple 0003:05AC:027C.000E: ignoring exceeding usage max [ 84.879873][ T9] apple 0003:05AC:027C.000E: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 84.896699][ T1695] tipc: Failed to remove unknown binding: 66,0,0/0:2928677730/2928677731 [ 84.898391][ T1699] FAULT_INJECTION: forcing a failure. [ 84.898391][ T1699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.907768][ T1695] tipc: Failed to remove unknown binding: 66,0,0/0:2928677730/2928677731 [ 84.924198][ T1699] CPU: 1 UID: 0 PID: 1699 Comm: syz.1.439 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 84.924226][ T1699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.924238][ T1699] Call Trace: [ 84.924244][ T1699] [ 84.924251][ T1699] __dump_stack+0x21/0x30 [ 84.924281][ T1699] dump_stack_lvl+0x140/0x1c0 [ 84.924304][ T1699] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.924328][ T1699] ? check_stack_object+0x138/0x150 [ 84.924348][ T1699] dump_stack+0x19/0x20 [ 84.924369][ T1699] should_fail_ex+0x3c2/0x510 [ 84.924389][ T1699] should_fail+0xf/0x20 [ 84.924408][ T1699] should_fail_usercopy+0x1e/0x30 [ 84.924428][ T1699] _copy_to_user+0x24/0xa0 [ 84.924451][ T1699] simple_read_from_buffer+0xed/0x160 [ 84.924476][ T1699] proc_fail_nth_read+0x1aa/0x220 [ 84.924502][ T1699] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.924526][ T1699] ? bpf_lsm_file_permission+0xd/0x20 [ 84.924549][ T1699] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.924572][ T1699] vfs_read+0x288/0xc70 [ 84.924590][ T1699] ? __kasan_check_write+0x18/0x20 [ 84.924609][ T1699] ? __cfi_vfs_read+0x10/0x10 [ 84.924625][ T1699] ? __kasan_check_write+0x18/0x20 [ 84.924642][ T1699] ? mutex_lock+0x97/0x1d0 [ 84.924660][ T1699] ? __cfi_mutex_lock+0x10/0x10 [ 84.924678][ T1699] ksys_read+0x145/0x260 [ 84.924696][ T1699] ? __cfi_ksys_read+0x10/0x10 [ 84.924715][ T1699] ? __kasan_check_read+0x15/0x20 [ 84.924732][ T1699] __x64_sys_read+0x7f/0x90 [ 84.924750][ T1699] x64_sys_call+0x2638/0x2ee0 [ 84.924766][ T1699] do_syscall_64+0x57/0xf0 [ 84.924788][ T1699] ? clear_bhb_loop+0x50/0xa0 [ 84.924806][ T1699] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.924831][ T1699] RIP: 0033:0x7f0ce5b5e90e [ 84.924847][ T1699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.924863][ T1699] RSP: 002b:00007f0ce69affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.924883][ T1699] RAX: ffffffffffffffda RBX: 00007f0ce69b06c0 RCX: 00007f0ce5b5e90e [ 84.924904][ T1699] RDX: 000000000000000f RSI: 00007f0ce69b00a0 RDI: 0000000000000005 [ 84.924917][ T1699] RBP: 00007f0ce69b0090 R08: 0000000000000000 R09: 0000000000000000 [ 84.924928][ T1699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.924943][ T1699] R13: 00007f0ce5e26038 R14: 00007f0ce5e25fa0 R15: 00007fff9dd659c8 [ 84.924958][ T1699] [ 85.040276][ T314] usb 3-1: USB disconnect, device number 21 [ 85.399985][ T1714] incfs: Options parsing error. -22 [ 85.405982][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 85.406010][ T36] audit: type=1326 audit(1787321395.937:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.3.444" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c81f9e0d9 code=0x0 [ 85.406026][ T1714] incfs: mount failed -22 [ 85.531888][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 85.684136][ T9] usb 2-1: unable to get BOS descriptor set [ 85.691008][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 85.706060][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.715565][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.723851][ T9] usb 2-1: Product: syz [ 85.728259][ T9] usb 2-1: Manufacturer: 涡鎦窋贌簾䲪ᦂ揗뼼꼇≼끶杻ꎜ鉍㭕鄖攸ﱏഝ׸䢐璎戨鿾鮔Ɦ铨쒈䱆㈖뫳衸౗Ⰱꉶ눥㖻၊往ꔃ필෥ꃳ [ 85.745719][ T9] usb 2-1: SerialNumber: syz [ 85.955600][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 85.967512][ T9] usb 2-1: USB disconnect, device number 33 [ 86.257472][ T36] audit: type=1400 audit(1787321396.783:387): avc: denied { read append } for pid=1721 comm="syz.3.446" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.284395][ T36] audit: type=1400 audit(1787321396.783:388): avc: denied { open } for pid=1721 comm="syz.3.446" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.321968][ T36] audit: type=1400 audit(1787321396.803:389): avc: denied { map } for pid=1721 comm="syz.3.446" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.425848][ T36] audit: type=1400 audit(1787321396.942:390): avc: denied { write } for pid=1729 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.447938][ T36] audit: type=1400 audit(1787321396.971:391): avc: denied { getopt } for pid=1729 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.470592][ T36] audit: type=1400 audit(1787321396.991:392): avc: denied { create } for pid=1729 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.586889][ T36] audit: type=1400 audit(1787321397.109:393): avc: denied { write } for pid=1738 comm="syz.2.451" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.627624][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 86.636959][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 86.648912][ T65] usb 1-1: USB disconnect, device number 29 [ 86.660749][ T36] audit: type=1400 audit(1787321397.177:394): avc: denied { nlmsg_write } for pid=1729 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 86.700750][ T36] audit: type=1400 audit(1787321397.216:395): avc: denied { setopt } for pid=1729 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.857835][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 86.868687][ T1752] dummy_hcd dummy_hcd.0: remove, state 4 [ 86.874385][ T1752] usb usb1: USB disconnect, device number 1 [ 86.883550][ T1752] dummy_hcd dummy_hcd.0: stopped [ 86.888653][ T1752] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 86.980641][ T45] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 86.990872][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.113892][ T45] usb 3-1: device descriptor read/64, error -71 [ 87.236918][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.380452][ T45] usb 3-1: device descriptor read/64, error -71 [ 87.493207][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 87.638556][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.638556][ T45] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 87.743800][ T1760] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 87.756430][ T1760] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 87.764850][ T1760] CPU: 0 UID: 0 PID: 1760 Comm: syz.0.457 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 87.776303][ T1760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.786362][ T1760] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 87.792380][ T1760] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4a a5 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 31 a5 26 fe 41 be 58 11 00 00 4d [ 87.812091][ T1760] RSP: 0018:ffffc9000f0ff738 EFLAGS: 00010246 [ 87.815257][ T45] usb 3-1: device descriptor read/64, error -71 [ 87.818154][ T1760] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 87.832360][ T1760] RDX: ffff888120a58000 RSI: 0000000000000003 RDI: 0000000000000005 [ 87.840325][ T1760] RBP: ffffc9000f0ff758 R08: ffff888101653467 R09: 1ffff110202ca68c [ 87.848294][ T1760] R10: 0000000000000000 R11: ffffffff83b9a800 R12: dffffc0000000000 [ 87.856255][ T1760] R13: ffff8881161a64f0 R14: ffff888104b8d160 R15: 0000000000000000 [ 87.864212][ T1760] FS: 00007f843a4a46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 87.873130][ T1760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.879701][ T1760] CR2: 00007f8439588f40 CR3: 000000011d510000 CR4: 00000000003526b0 [ 87.887669][ T1760] Call Trace: [ 87.890934][ T1760] [ 87.893887][ T1760] ? __cfi_dummy_set_selfpowered+0x10/0x10 [ 87.899713][ T1760] usb_gadget_set_selfpowered+0x84/0x1a0 [ 87.905336][ T1760] composite_dev_prepare+0x2f8/0x3e0 [ 87.910620][ T1760] ? up_write+0x66/0x280 [ 87.914855][ T1760] configfs_composite_bind+0xa8/0x15f0 [ 87.920302][ T1760] ? __kasan_check_write+0x18/0x20 [ 87.925399][ T1760] ? mutex_unlock+0x90/0x240 [ 87.929977][ T1760] ? kernfs_put+0x314/0x360 [ 87.934493][ T1760] ? __cfi_configfs_composite_bind+0x10/0x10 [ 87.940470][ T1760] gadget_bind_driver+0x301/0x9c0 [ 87.945550][ T1760] ? sysfs_create_link+0x6c/0x90 [ 87.950567][ T1760] ? __cfi_gadget_bind_driver+0x10/0x10 [ 87.956143][ T1760] really_probe+0x2e1/0x8b0 [ 87.960638][ T1760] __driver_probe_device+0x193/0x280 [ 87.965945][ T1760] driver_probe_device+0x54/0x3f0 [ 87.970962][ T1760] __driver_attach+0x422/0x5e0 [ 87.975721][ T1760] bus_for_each_dev+0x249/0x2d0 [ 87.980562][ T1760] ? __cfi___driver_attach+0x10/0x10 [ 87.985860][ T1760] ? __cfi_bus_for_each_dev+0x10/0x10 [ 87.991598][ T1760] ? _raw_spin_unlock+0x45/0x60 [ 87.997829][ T1760] ? klist_add_tail+0x1dd/0x220 [ 88.002680][ T1760] driver_attach+0x46/0x50 [ 88.007089][ T1760] bus_add_driver+0x393/0x730 [ 88.011762][ T1760] driver_register+0x2b7/0x3c0 [ 88.016518][ T1760] usb_gadget_register_driver_owner+0xfc/0x270 [ 88.022657][ T1760] gadget_dev_desc_UDC_store+0x224/0x350 [ 88.028414][ T1760] configfs_write_iter+0x32c/0x490 [ 88.033558][ T1760] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 88.039708][ T1760] vfs_write+0x75f/0xfd0 [ 88.043954][ T1760] ? __cfi_vfs_write+0x10/0x10 [ 88.048757][ T1760] ? __cfi_mutex_lock+0x10/0x10 [ 88.053606][ T1760] ksys_write+0x145/0x260 [ 88.057935][ T1760] ? xfd_validate_state+0x68/0x140 [ 88.063044][ T1760] ? __cfi_ksys_write+0x10/0x10 [ 88.067882][ T1760] ? __kasan_check_write+0x18/0x20 [ 88.072985][ T1760] ? fpregs_restore_userregs+0x11c/0x260 [ 88.078871][ T1760] __x64_sys_write+0x7f/0x90 [ 88.083470][ T1760] x64_sys_call+0x271c/0x2ee0 [ 88.088141][ T1760] do_syscall_64+0x57/0xf0 [ 88.092552][ T1760] ? clear_bhb_loop+0x50/0xa0 [ 88.097248][ T1760] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.103172][ T1760] RIP: 0033:0x7f843959e0d9 [ 88.107751][ T1760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.127381][ T1760] RSP: 002b:00007f843a4a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.135793][ T1760] RAX: ffffffffffffffda RBX: 00007f8439825fa0 RCX: 00007f843959e0d9 [ 88.143764][ T1760] RDX: 000000000000000b RSI: 0000200000000740 RDI: 0000000000000005 [ 88.151842][ T1760] RBP: 00007f8439635024 R08: 0000000000000000 R09: 0000000000000000 [ 88.159832][ T1760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.167907][ T1760] R13: 00007f8439826038 R14: 00007f8439825fa0 R15: 00007ffc6d238448 [ 88.168633][ T45] usb 3-1: device descriptor read/64, error -71 [ 88.175879][ T1760] [ 88.175894][ T1760] Modules linked in: [ 88.176374][ T1760] ---[ end trace 0000000000000000 ]--- [ 88.195057][ T1760] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 88.202405][ T1760] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4a a5 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 31 a5 26 fe 41 be 58 11 00 00 4d [ 88.222412][ T1760] RSP: 0018:ffffc9000f0ff738 EFLAGS: 00010246 [ 88.228575][ T1760] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 88.236680][ T1760] RDX: ffff888120a58000 RSI: 0000000000000003 RDI: 0000000000000005 [ 88.244689][ T1760] RBP: ffffc9000f0ff758 R08: ffff888101653467 R09: 1ffff110202ca68c [ 88.252799][ T1760] R10: 0000000000000000 R11: ffffffff83b9a800 R12: dffffc0000000000 [ 88.260784][ T1760] R13: ffff8881161a64f0 R14: ffff888104b8d160 R15: 0000000000000000 [ 88.268863][ T1760] FS: 00007f843a4a46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 88.277843][ T1760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.284508][ T1760] CR2: 00007f84395eb7c0 CR3: 000000011d510000 CR4: 00000000003526b0 [ 88.292493][ T1760] Kernel panic - not syncing: Fatal exception [ 88.298722][ T1760] Kernel Offset: disabled [ 88.303050][ T1760] Rebooting in 86400 seconds..