last executing test programs: 6.994467178s ago: executing program 3 (id=2257): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f00001f8000/0x2000)=nil, 0x2000, 0x1000007, 0x8010, r0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, 0x0, 0x8) 6.93767788s ago: executing program 3 (id=2258): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 5.729662558s ago: executing program 3 (id=2268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r3], 0x34}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x5e, {0x5e, 0x0, "bb2d25d8aaae5f88ef16b46cb14845bf370440069ed481c4529e1bd796675fd65cea87cf4bea68ad96974579f54f07c8ff2f1584d6acccb734962977d540626a8a60b1eb0db4bd14bb688106340579a1e10c40627787c970a86c8223"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000000240)=ANY=[@ANYBLOB="000f51000000050f51000520100a052501000000ff000000c0ff00ff0000fe000f408000003f00003000ff000a100300040015e10100141004032300bbca411e679ec2cf09728603100b0b10010c000008030100a1"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x3, 0x3, 0x7, "4c6096bb", "879120bd"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x1, 0x3, 0x6, 0x6, 0x8}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x17, 0xc5, "1a9965faae379fb58e8abae08923817ab01deabf0df49dbdbf67fa58951f282edea78d4199b49c1e6f61f31dd5ceb7df4f74b63ffeaa5d643f85c9438b608a45722efba0b2db5d40e3695fab9fd929b2e0d2a3cc9d1c78800f3e372cbcaf9d775720e882a1e8b0358d30c3270ec5a40d625ae0da0c71c9867fe19fdcc0f4723df329f3d72a3feebb4b933b83506fa31c583855a50a8a5eae27c4c63a45f1ac1a7b7c0d97d18e31673d4e487e586da43f692ab8bd36cc213d11632e35fc67f7f234afa0061c"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x400, 0x80, [0xf000]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "db32"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="b031aa74a386"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "e5b4"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(r5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @mcast1, 0x73}, 0xfffffffffffffecb) syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.621409525s ago: executing program 1 (id=2298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) timer_delete(r1) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r12 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) wait4(0x0, 0x0, 0x0, 0x0) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) setreuid(0x0, 0xee00) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0xc232, 0x10, 0x1, 0x16f, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd35, 0x4, 0x0, 0x364, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff73, 0x4, 0x2, 0x43, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9360, 0x2, 0x1, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc264, 0x4, 0x1, 0x123, 0x0, r5}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r10, '\x00', {0x3, 0xb44, 0x0, 0x0}}, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) 3.217641908s ago: executing program 1 (id=2300): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000440)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r1 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3.216231958s ago: executing program 1 (id=2301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.190527919s ago: executing program 1 (id=2302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.163083649s ago: executing program 1 (id=2303): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) shutdown(r0, 0x1) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001300)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x3, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0xbb20}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x30}}], 0x1, 0x24048840) wait4(0x0, 0x0, 0x8, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x80, 0xe8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x72, 0x0, 0x1, {0x7, 0x25, 0x1, 0x4, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x4, 0xf, {0x7, 0x25, 0x1, 0x8, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x5, &(0x7f0000000b40)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x260028, &(0x7f0000000180)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}]}) 3.057481983s ago: executing program 2 (id=2305): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x80081280, &(0x7f00000002c0)={0xffffffffffffffff, 0x43, {0x2a00, 0x80010000, 0x0, 0x4, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000fffffdfd00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b42000003c5240f45f819e01177d3d458dd4992861ac000400", "f4bd000000801900", [0x800001, 0x9]}}) 3.057207003s ago: executing program 2 (id=2306): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2.666959085s ago: executing program 0 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861657329"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.713616575s ago: executing program 2 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000a80)="0f20d5c441f97f4b780f01f8400f30c4a169ea0d7f570000c744240052000000c7442402d4000000ff2c24c4a2792a141f0f01f866420f38815165f3670f00dc", 0x40}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.600591369s ago: executing program 3 (id=2311): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x2000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x80805, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1d, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x401, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x12e) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320000e0000000000000000000000030006000000000002004e206401010400000000000000000400040001000000feffffffffffffff000000000000000000000000000000000200010000000000000062fd01000080030005000000000002004e21fff7ffff000000001d000000"], 0x70}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000c00)={0x2, [], 0x6, "859ae7f3db0b4f"}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r7, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)={{r7}, 0x979, 0x0, 0x40}) ioctl$EVIOCGABS0(r0, 0x80184520, 0x0) 1.388526506s ago: executing program 0 (id=2309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861657329"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (fail_nth: 3) 1.293636729s ago: executing program 0 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r2, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xd4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x7996c29366ac74b0}, 0x8c1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000200)="1300e0ff000203", 0x7}, {&(0x7f0000000080)="e4041ff31d961a991dbb26aef4e6d5bb93a9ec1e179f033ce4a35e50c58d74275a47f33668f02c4a3d4e571ab025263f69dbf1ce891091b409000000fbeb433a176623e02ae6681100fb", 0x4a}], 0x2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861657329"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.293306909s ago: executing program 2 (id=2313): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='0-1,'], 0x31) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r6}, 0x14) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}], 0x28}}], 0x1, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x63}], 0x1, &(0x7f0000000280), 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={{}, "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"}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_open_dev$loop(&(0x7f0000000040), 0x60, 0x181000) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)) tgkill(r7, r7, 0x9) 1.25286537s ago: executing program 0 (id=2314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @random="183abd4ef200", @val={@val={0x88a8, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x28, 0x65, 0x3e8, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, "b79f9c03315111788ab3e9f675abe612d8f10223"}}}}}, 0x3e) 1.24893231s ago: executing program 2 (id=2315): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40b00) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 1.125686994s ago: executing program 0 (id=2316): socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0xffffff92}], 0x1, 0x0, 0x281}}], 0x1, 0x2400c042) 1.125537484s ago: executing program 0 (id=2317): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 743.563246ms ago: executing program 3 (id=2318): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000000)={0x9, 0x4, 0x3, 0xb259, 0x7fffffff, 0x1, 0xffffffff, 0x5}, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000004c0)=[@uexit={0x0, 0x18, 0xb9}, @in_dx={0x69, 0x20, {0xf2d2, 0x4}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x5336, 0x2, 0x7fff}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x6}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x64, 0x0, 0x7, 0x3}}, @cpuid={0x64, 0x18, {0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x3e, 0x5, 0x7, 0x1}}, @nested_amd_vmsave={0x183, 0x18}, @wr_drn={0x68, 0x20, {0x4, 0x401}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c0a, 0xc2, 0x80000000, 0x1}}], 0x1e0}) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000700)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x34814c44, 0x0, 0x8, 0x3, 0x4, 0x0, 0x0, 0x100}}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) unshare(0x64000600) r6 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000180), 0x3) fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r6, &(0x7f0000000040)='status\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x15c) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='.\x00', 0x51a382, 0x78e22799f4a46e8e) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, r10, &(0x7f00000003c0)={0x6, 0x8, 0x800, 0x2, 0x9, 0x9, 0xa984, 0x0, 0xb27}) 587.570131ms ago: executing program 3 (id=2319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r3], 0x34}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x5e, {0x5e, 0x0, "bb2d25d8aaae5f88ef16b46cb14845bf370440069ed481c4529e1bd796675fd65cea87cf4bea68ad96974579f54f07c8ff2f1584d6acccb734962977d540626a8a60b1eb0db4bd14bb688106340579a1e10c40627787c970a86c8223"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000000240)=ANY=[@ANYBLOB="000f51000000050f51000520100a052501000000ff000000c0ff00ff0000fe000f408000003f00003000ff000a100300040015e10100141004032300bbca411e679ec2cf09728603100b0b10010c000008030100a1"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x3, 0x3, 0x7, "4c6096bb", "879120bd"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x1, 0x3, 0x6, 0x6, 0x8}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x17, 0xc5, "1a9965faae379fb58e8abae08923817ab01deabf0df49dbdbf67fa58951f282edea78d4199b49c1e6f61f31dd5ceb7df4f74b63ffeaa5d643f85c9438b608a45722efba0b2db5d40e3695fab9fd929b2e0d2a3cc9d1c78800f3e372cbcaf9d775720e882a1e8b0358d30c3270ec5a40d625ae0da0c71c9867fe19fdcc0f4723df329f3d72a3feebb4b933b83506fa31c583855a50a8a5eae27c4c63a45f1ac1a7b7c0d97d18e31673d4e487e586da43f692ab8bd36cc213d11632e35fc67f7f234afa0061c"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x400, 0x80, [0xf000]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "db32"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="b031aa74a386"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "e5b4"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(r5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @mcast1, 0x73}, 0xfffffffffffffecb) syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 116.658266ms ago: executing program 1 (id=2320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000005c0)={0x1, 0x0, [{0xc0000081, 0x0, 0x8000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0xfffffffd, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NL80211_CMD_JOIN_IBSS(r7, 0x0, 0x8080) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x1500, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 0s ago: executing program 2 (id=2321): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000040)='./file0\x00', 0xe1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x101000, 0x10c) lseek(r3, 0x3, 0x0) getdents64(r3, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x0, 0x1000000000000}) kernel console output (not intermixed with test programs): 908][ T618] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 207.530982][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.540087][ T618] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 207.548733][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 207.567026][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.576216][ T31] usb 3-1: config 0 descriptor?? [ 207.621074][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.630823][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.639542][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.648314][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.656487][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.665361][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.673645][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.682193][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.690951][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.699642][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.839734][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.846815][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.854626][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.861669][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.867044][ T477] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 207.868727][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.883336][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.890414][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.897477][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.904452][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.911512][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.918609][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.925765][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.932777][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.939880][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.946851][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.953878][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.960914][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.967915][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.974963][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.981991][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.989025][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 207.997061][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 208.004117][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 208.013163][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 208.017049][ T477] usb 4-1: device descriptor read/64, error -71 [ 208.020493][ T11] a4tech 0003:09DA:022B.0027: unknown main item tag 0x0 [ 208.035189][ T11] a4tech 0003:09DA:022B.0027: unbalanced collection at end of report description [ 208.045041][ T11] a4tech 0003:09DA:022B.0027: parse failed [ 208.051865][ T11] a4tech 0003:09DA:022B.0027: probe with driver a4tech failed with error -22 [ 208.065324][ T11] usb 2-1: USB disconnect, device number 103 [ 208.118997][ T5770] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1958'. [ 208.141516][ T5772] ªªªªªª: renamed from vlan0 (while UP) [ 208.155568][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 208.163831][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 208.181496][ T31] usb 3-1: USB disconnect, device number 108 [ 208.188120][ T5774] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1960'. [ 208.257058][ T477] usb 4-1: device descriptor read/64, error -71 [ 208.497043][ T477] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 208.627092][ T477] usb 4-1: device descriptor read/64, error -71 [ 208.647040][ T31] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 208.797045][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 208.803486][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.816217][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 208.825745][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.834085][ T31] usb 3-1: Product: syz [ 208.838313][ T31] usb 3-1: Manufacturer: syz [ 208.843016][ T31] usb 3-1: SerialNumber: syz [ 208.867045][ T477] usb 4-1: device descriptor read/64, error -71 [ 208.917097][ T11] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 208.977582][ T477] usb usb4-port1: attempt power cycle [ 209.053070][ T31] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 209.060687][ T31] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 209.069200][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 209.077043][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 209.079495][ T31] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 209.084668][ T11] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 209.090829][ T31] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 209.099296][ T11] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 209.107560][ T31] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 209.116774][ T11] usb 2-1: config 179 has no interface number 0 [ 209.126726][ T31] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 209.131947][ T11] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 209.139407][ T31] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 209.149402][ T11] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 209.170022][ T11] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 209.179091][ T31] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 209.179261][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.191037][ T31] usb 3-1: USB disconnect, device number 109 [ 209.206930][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 209.317062][ T477] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 209.338205][ T477] usb 4-1: device descriptor read/8, error -71 [ 209.431949][ T618] usb 2-1: USB disconnect, device number 104 [ 209.468143][ T477] usb 4-1: device descriptor read/8, error -71 [ 209.640331][ T5791] FAULT_INJECTION: forcing a failure. [ 209.640331][ T5791] name failslab, interval 1, probability 0, space 0, times 0 [ 209.651867][ T618] usb 1-1: USB disconnect, device number 106 [ 209.653453][ T5791] CPU: 1 UID: 0 PID: 5791 Comm: syz.2.1968 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 209.653484][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 209.653497][ T5791] Call Trace: [ 209.653504][ T5791] [ 209.653512][ T5791] __dump_stack+0x21/0x30 [ 209.653545][ T5791] dump_stack_lvl+0x140/0x1c0 [ 209.653572][ T5791] ? __cfi_dump_stack_lvl+0x10/0x10 [ 209.653600][ T5791] ? __cfi_avc_has_perm+0x10/0x10 [ 209.653622][ T5791] ? kasan_save_alloc_info+0x40/0x50 [ 209.653642][ T5791] dump_stack+0x19/0x20 [ 209.653668][ T5791] should_fail_ex+0x3d7/0x530 [ 209.653693][ T5791] should_failslab+0xac/0x100 [ 209.653717][ T5791] __kmalloc_cache_noprof+0x41/0x470 [ 209.653739][ T5791] ? vhost_task_create+0x12c/0x400 [ 209.653761][ T5791] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 209.653786][ T5791] vhost_task_create+0x12c/0x400 [ 209.653806][ T5791] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 209.653839][ T5791] ? __cfi_vhost_task_create+0x10/0x10 [ 209.653862][ T5791] ? __cfi_vhost_task_fn+0x10/0x10 [ 209.653883][ T5791] ? __kasan_check_write+0x18/0x20 [ 209.653903][ T5791] ? mutex_lock+0x97/0x1d0 [ 209.653923][ T5791] ? __cfi_mutex_lock+0x10/0x10 [ 209.653942][ T5791] ? kernel_text_address+0xa9/0xe0 [ 209.653970][ T5791] kvm_mmu_post_init_vm+0x161/0x300 [ 209.653998][ T5791] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 209.654026][ T5791] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 209.654053][ T5791] ? kstrtoull+0x13b/0x1e0 [ 209.654075][ T5791] ? kstrtouint+0x78/0xf0 [ 209.654098][ T5791] ? ioctl_has_perm+0x1bc/0x500 [ 209.654116][ T5791] ? __asan_memcpy+0x5a/0x80 [ 209.654135][ T5791] ? ioctl_has_perm+0x408/0x500 [ 209.654154][ T5791] ? has_cap_mac_admin+0xd0/0xd0 [ 209.654172][ T5791] ? __kasan_check_write+0x18/0x20 [ 209.654191][ T5791] ? mutex_lock_killable+0x97/0x1d0 [ 209.654213][ T5791] ? __cfi_mutex_lock_killable+0x10/0x10 [ 209.654233][ T5791] ? proc_fail_nth_write+0x184/0x220 [ 209.654262][ T5791] kvm_vcpu_ioctl+0xa48/0x1000 [ 209.654282][ T5791] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 209.654303][ T5791] ? __cfi_vfs_write+0x10/0x10 [ 209.654324][ T5791] ? __kasan_check_write+0x18/0x20 [ 209.654343][ T5791] ? mutex_unlock+0x90/0x240 [ 209.654363][ T5791] ? __cfi_mutex_unlock+0x10/0x10 [ 209.654383][ T5791] ? __fget_files+0x2c5/0x340 [ 209.654407][ T5791] ? __fget_files+0x2c5/0x340 [ 209.654430][ T5791] ? bpf_lsm_file_ioctl+0xd/0x20 [ 209.654455][ T5791] ? security_file_ioctl+0x3e/0x110 [ 209.654483][ T5791] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 209.654502][ T5791] __se_sys_ioctl+0x132/0x1b0 [ 209.654526][ T5791] __x64_sys_ioctl+0x7f/0xa0 [ 209.654550][ T5791] x64_sys_call+0x1878/0x2ee0 [ 209.654570][ T5791] do_syscall_64+0x57/0xf0 [ 209.654596][ T5791] ? clear_bhb_loop+0x50/0xa0 [ 209.654616][ T5791] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 209.654646][ T5791] RIP: 0033:0x7f1bd899ce59 [ 209.654664][ T5791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.654681][ T5791] RSP: 002b:00007f1bd9915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.654705][ T5791] RAX: ffffffffffffffda RBX: 00007f1bd8c15fa0 RCX: 00007f1bd899ce59 [ 209.654720][ T5791] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 209.654733][ T5791] RBP: 00007f1bd9915090 R08: 0000000000000000 R09: 0000000000000000 [ 209.654747][ T5791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.654760][ T5791] R13: 00007f1bd8c16038 R14: 00007f1bd8c15fa0 R15: 00007fffe4639ba8 [ 209.654777][ T5791] [ 209.707039][ T477] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 210.027064][ T618] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 210.038099][ T477] usb 4-1: device descriptor read/8, error -71 [ 210.157101][ T618] usb 1-1: device descriptor read/64, error -71 [ 210.179630][ T477] usb 4-1: device descriptor read/8, error -71 [ 210.219401][ T5812] rust_binder: Failure in copy_transaction_data: EFAULT [ 210.219431][ T5812] rust_binder: 5811:5812 transaction to 5811 failed: EFAULT [ 210.226804][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 210.253236][ T5814] hub 8-0:1.0: USB hub found [ 210.258402][ T5814] hub 8-0:1.0: 1 port detected [ 210.287111][ T477] usb usb4-port1: unable to enumerate USB device [ 210.397109][ T618] usb 1-1: device descriptor read/64, error -71 [ 210.417061][ T5087] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 210.567042][ T5087] usb 3-1: Using ep0 maxpacket: 32 [ 210.573393][ T5087] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 210.582180][ T5087] usb 3-1: config 0 has no interface number 0 [ 210.588416][ T5087] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 210.598652][ T5087] usb 3-1: config 0 interface 196 has no altsetting 0 [ 210.606879][ T5087] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 210.616119][ T5087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.627018][ T5087] usb 3-1: Product: syz [ 210.631202][ T5087] usb 3-1: Manufacturer: syz [ 210.635904][ T5087] usb 3-1: SerialNumber: syz [ 210.643273][ T5087] usb 3-1: config 0 descriptor?? [ 210.647054][ T618] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 210.650208][ T5810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.777031][ T618] usb 1-1: device descriptor read/64, error -71 [ 211.017086][ T618] usb 1-1: device descriptor read/64, error -71 [ 211.076436][ T5087] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 211.085604][ T5087] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 211.127144][ T618] usb usb1-port1: attempt power cycle [ 211.207032][ T11] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 211.358083][ T11] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 211.366540][ T11] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 211.374664][ T11] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 211.383738][ T11] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 211.394578][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 211.405931][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 211.416757][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 211.432209][ T11] usb 2-1: string descriptor 0 read error: -22 [ 211.438475][ T11] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 211.447688][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.456431][ T11] usb 2-1: config 0 descriptor?? [ 211.461727][ T5833] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 211.471814][ T11] hub 2-1:0.0: bad descriptor, ignoring hub [ 211.477899][ T11] hub 2-1:0.0: probe with driver hub failed with error -5 [ 211.485899][ T11] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 211.497331][ T618] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 211.518176][ T618] usb 1-1: device descriptor read/8, error -71 [ 211.648079][ T618] usb 1-1: device descriptor read/8, error -71 [ 211.720851][ T5833] kvm: kvm [5832]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 211.729855][ T5833] kvm: kvm [5832]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 211.852607][ T5087] usb 2-1: USB disconnect, device number 105 [ 211.887067][ T618] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 211.908283][ T618] usb 1-1: device descriptor read/8, error -71 [ 212.038026][ T618] usb 1-1: device descriptor read/8, error -71 [ 212.087072][ T11] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 212.147163][ T618] usb usb1-port1: unable to enumerate USB device [ 212.238149][ T11] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 212.246369][ T11] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 212.256713][ T11] usb 4-1: config 8 has no interface number 0 [ 212.262855][ T11] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 212.272716][ T11] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.287216][ T11] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 212.296439][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.304775][ T11] usb 4-1: Product: syz [ 212.309093][ T11] usb 4-1: Manufacturer: syz [ 212.313702][ T11] usb 4-1: SerialNumber: syz [ 212.387740][ T5850] tipc: Enabling of bearer rejected, already enabled [ 212.397528][ T5850] tipc: Enabling of bearer rejected, already enabled [ 212.406623][ T5850] tipc: Enabling of bearer rejected, already enabled [ 212.546606][ T5864] binder: Bad value for 'stats' [ 212.568840][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.578425][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.709291][ T11] usb 4-1: USB disconnect, device number 112 [ 213.037061][ T5087] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 213.186357][ T832] usb 3-1: USB disconnect, device number 110 [ 213.190835][ T5087] usb 1-1: Using ep0 maxpacket: 8 [ 213.203481][ T5087] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 213.217248][ T5087] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.223904][ T5087] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 213.233408][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.244097][ T5087] usb 1-1: config 0 descriptor?? [ 213.347046][ T11] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 213.498158][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.508559][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.525421][ T11] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.534744][ T832] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 213.542470][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.551460][ T11] usb 4-1: config 0 descriptor?? [ 213.558487][ T11] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 213.697274][ T832] usb 3-1: Using ep0 maxpacket: 16 [ 213.703636][ T832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.713958][ T832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.724601][ T832] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.734587][ T832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.742747][ T832] usb 3-1: Product: syz [ 213.746908][ T832] usb 3-1: Manufacturer: syz [ 213.751701][ T832] usb 3-1: SerialNumber: syz [ 213.759676][ T477] usb 4-1: USB disconnect, device number 113 [ 213.961458][ T832] usb 3-1: 0:2 : does not exist [ 213.969960][ T832] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 213.983310][ T832] usb 3-1: USB disconnect, device number 111 [ 213.994566][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.172019][ T5880] fuse: Unknown parameter '' [ 214.178375][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.186962][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.207058][ T477] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 214.358098][ T477] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.368365][ T477] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.381480][ T477] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 214.390794][ T477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.399596][ T477] usb 4-1: config 0 descriptor?? [ 214.409730][ T477] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 214.418868][ T477] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 214.719840][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.728623][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.248794][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 215.327058][ T477] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 215.453131][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.461718][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.487032][ T477] usb 3-1: Using ep0 maxpacket: 32 [ 215.493239][ T477] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 215.501625][ T477] usb 3-1: config 0 has no interface number 0 [ 215.507788][ T477] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 215.518018][ T477] usb 3-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 215.528945][ T477] usb 3-1: config 0 interface 196 has no altsetting 0 [ 215.537236][ T477] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 215.546492][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.554677][ T477] usb 3-1: Product: syz [ 215.558896][ T477] usb 3-1: Manufacturer: syz [ 215.563518][ T477] usb 3-1: SerialNumber: syz [ 215.569011][ T477] usb 3-1: config 0 descriptor?? [ 215.574242][ T5895] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 215.784610][ T477] ipheth 3-1:0.196: Unable to find endpoints [ 215.793933][ T477] usb 3-1: USB disconnect, device number 112 [ 216.006285][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.015096][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.536767][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.545493][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.557055][ T832] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 216.702923][ T11] usb 4-1: USB disconnect, device number 114 [ 216.709021][ T832] usb 3-1: Using ep0 maxpacket: 32 [ 216.717043][ T832] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 216.725277][ T832] usb 3-1: config 0 has no interface number 0 [ 216.731488][ T832] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 216.742084][ T832] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.752707][ T832] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 216.762801][ T832] usb 3-1: config 0 interface 196 has no altsetting 0 [ 216.772686][ T832] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 216.781814][ T832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.790180][ T832] usb 3-1: Product: syz [ 216.794454][ T832] usb 3-1: Manufacturer: syz [ 216.799247][ T832] usb 3-1: SerialNumber: syz [ 216.804528][ T832] usb 3-1: config 0 descriptor?? [ 216.810081][ T5916] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 217.087057][ T11] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 217.220074][ T832] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 5 bytes [ 217.229335][ T832] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 217.257023][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 217.263412][ T11] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 217.271769][ T11] usb 4-1: config 0 has no interface number 0 [ 217.277940][ T11] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 217.288048][ T11] usb 4-1: config 0 interface 196 has no altsetting 0 [ 217.298541][ T11] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 217.307668][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.315855][ T11] usb 4-1: Product: syz [ 217.320209][ T11] usb 4-1: Manufacturer: syz [ 217.325079][ T11] usb 4-1: SerialNumber: syz [ 217.331077][ T11] usb 4-1: config 0 descriptor?? [ 217.336415][ T5922] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 217.377978][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.387261][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.422276][ T832] usb 3-1: USB disconnect, device number 113 [ 217.746324][ T11] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 3 bytes [ 217.755554][ T11] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 217.922089][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.931108][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.142140][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.150729][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.187238][ T31] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 218.339159][ T31] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 218.349489][ T31] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 218.360597][ T31] usb 3-1: string descriptor 0 read error: -22 [ 218.367172][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 218.376263][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.620210][ T11] usb 3-1: USB disconnect, device number 114 [ 218.737509][ T5087] usbhid 1-1:0.0: can't add hid device: -32 [ 218.743530][ T5087] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 218.846136][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.855025][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.037063][ T832] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 219.064895][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.073663][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.187113][ T832] usb 2-1: Using ep0 maxpacket: 16 [ 219.193705][ T832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.204561][ T832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.215143][ T832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.225122][ T832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.233268][ T832] usb 2-1: Product: syz [ 219.237554][ T832] usb 2-1: Manufacturer: syz [ 219.242192][ T832] usb 2-1: SerialNumber: syz [ 219.387022][ T11] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 219.450309][ T832] usb 2-1: 0:2 : does not exist [ 219.457290][ T832] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 219.470026][ T832] usb 2-1: USB disconnect, device number 106 [ 219.481408][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.547037][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 219.554432][ T11] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 219.562711][ T11] usb 3-1: config 0 has no interface number 0 [ 219.569051][ T11] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 219.579635][ T11] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.589958][ T11] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.600153][ T11] usb 3-1: config 0 interface 196 has no altsetting 0 [ 219.608862][ T11] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 219.618674][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.626793][ T11] usb 3-1: Product: syz [ 219.631431][ T11] usb 3-1: Manufacturer: syz [ 219.636416][ T11] usb 3-1: SerialNumber: syz [ 219.642326][ T11] usb 3-1: config 0 descriptor?? [ 219.648047][ T5970] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 219.711206][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.720815][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.776199][ T5087] usb 4-1: USB disconnect, device number 115 [ 219.967407][ T36] audit: type=1400 audit(1798045266.402:400): avc: denied { setopt } for pid=5989 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 220.057382][ T11] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 5 bytes [ 220.066487][ T11] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 220.106084][ T6004] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2058'. [ 220.119398][ T5087] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 220.259077][ T31] usb 3-1: USB disconnect, device number 115 [ 220.284651][ T5087] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.292241][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.295968][ T5087] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.305004][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.314022][ T5087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.329966][ T5087] usb 4-1: config 0 descriptor?? [ 220.339076][ T5087] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 220.357080][ T11] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 220.527079][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 220.533357][ T11] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 220.546137][ T11] usb 2-1: config 0 has no interface number 0 [ 220.553317][ T832] usb 4-1: USB disconnect, device number 116 [ 220.559980][ T11] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 220.570608][ T11] usb 2-1: config 0 interface 196 has no altsetting 0 [ 220.578983][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 220.588219][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.596487][ T11] usb 2-1: Product: syz [ 220.600716][ T11] usb 2-1: Manufacturer: syz [ 220.605341][ T11] usb 2-1: SerialNumber: syz [ 220.610776][ T11] usb 2-1: config 0 descriptor?? [ 220.616249][ T6006] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 220.970441][ T36] audit: type=1400 audit(1798045267.402:401): avc: denied { mounton } for pid=6020 comm="syz.0.2065" path="/520/file0" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.971436][ T6021] fuse: blksize only supported for fuseblk [ 220.997274][ T832] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 221.007882][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 221.026806][ T11] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 3 bytes [ 221.036178][ T11] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 221.148270][ T6031] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2068'. [ 221.168080][ T832] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.181127][ T832] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 221.191719][ T832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.201791][ T832] usb 4-1: config 0 descriptor?? [ 221.208522][ T832] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 221.217976][ T832] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 221.239446][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.248085][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.417051][ T31] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 221.568886][ T31] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 221.579466][ T31] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 221.590965][ T31] usb 3-1: string descriptor 0 read error: -22 [ 221.597252][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 221.606382][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.768409][ T36] audit: type=1400 audit(1798045268.202:402): avc: denied { write } for pid=6038 comm="syz.0.2071" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 221.838670][ T36] audit: type=1326 audit(1798045268.272:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.2071" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faabad9ce59 code=0x0 [ 221.849673][ T832] usb 3-1: USB disconnect, device number 116 [ 221.889708][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.898507][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.637058][ T832] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 222.787039][ T832] usb 3-1: Using ep0 maxpacket: 16 [ 222.793523][ T832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.803704][ T832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.814164][ T832] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.823371][ T832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.831510][ T832] usb 3-1: Product: syz [ 222.835780][ T832] usb 3-1: Manufacturer: syz [ 222.840471][ T832] usb 3-1: SerialNumber: syz [ 223.048326][ T832] usb 3-1: 0:2 : does not exist [ 223.055263][ T832] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 223.068031][ T832] usb 3-1: USB disconnect, device number 117 [ 223.080984][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 223.138578][ T11] usb 2-1: USB disconnect, device number 107 [ 223.174442][ T6052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2075'. [ 223.197278][ T6054] erspan0: entered allmulticast mode [ 223.471774][ T11] usb 4-1: USB disconnect, device number 117 [ 223.524234][ T6057] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2077'. [ 223.563788][ T6064] Invalid logical block size (67) [ 223.887056][ T11] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 223.997043][ T832] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 224.038398][ T11] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 224.046544][ T11] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 224.057063][ T11] usb 4-1: config 0 has no interface number 0 [ 224.064773][ T11] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 224.074229][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.082505][ T11] usb 4-1: Product: syz [ 224.087017][ T11] usb 4-1: Manufacturer: syz [ 224.091794][ T11] usb 4-1: SerialNumber: syz [ 224.097933][ T11] usb 4-1: config 0 descriptor?? [ 224.122970][ T6074] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2085'. [ 224.147046][ T832] usb 2-1: Using ep0 maxpacket: 32 [ 224.153623][ T832] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 224.162198][ T832] usb 2-1: config 0 has no interface number 0 [ 224.169060][ T832] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 224.179583][ T832] usb 2-1: config 0 interface 196 has no altsetting 0 [ 224.188198][ T832] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 224.198009][ T832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.206939][ T832] usb 2-1: Product: syz [ 224.211662][ T832] usb 2-1: Manufacturer: syz [ 224.218450][ T832] usb 2-1: SerialNumber: syz [ 224.224770][ T832] usb 2-1: config 0 descriptor?? [ 224.230750][ T6068] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.387051][ T31] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 224.506537][ T11] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 224.513318][ T11] usb 4-1: No valid video chain found. [ 224.548177][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.559143][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.568414][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.577472][ T31] usb 3-1: config 0 descriptor?? [ 224.583414][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 224.641044][ T832] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 5 bytes [ 224.650201][ T832] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 224.748235][ T832] usb 4-1: USB disconnect, device number 118 [ 224.784754][ T11] usb 3-1: USB disconnect, device number 118 [ 224.797897][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.807927][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.829602][ T36] audit: type=1400 audit(1798045271.262:404): avc: denied { ioctl } for pid=6086 comm="syz.3.2090" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.287071][ T11] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 225.343239][ T6096] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2094'. [ 225.361961][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.374256][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.438397][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.449624][ T11] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 225.458907][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.467737][ T11] usb 3-1: config 0 descriptor?? [ 225.473639][ T11] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 225.482652][ T11] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 225.627062][ T832] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 225.777063][ T832] usb 4-1: Using ep0 maxpacket: 16 [ 225.783874][ T832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.792543][ T832] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 225.804196][ T832] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.813364][ T832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.821420][ T832] usb 4-1: Product: syz [ 225.825605][ T832] usb 4-1: Manufacturer: syz [ 225.830229][ T832] usb 4-1: SerialNumber: syz [ 225.835820][ T6100] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 226.044783][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.053506][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.062882][ T832] usb 4-1: bad CDC descriptors [ 226.069032][ T832] usb 4-1: USB disconnect, device number 119 [ 226.582918][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 226.766036][ T832] usb 2-1: USB disconnect, device number 108 [ 226.847033][ T31] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 226.997050][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 227.003520][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.014066][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.024535][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.033763][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.041837][ T31] usb 4-1: Product: syz [ 227.046102][ T31] usb 4-1: Manufacturer: syz [ 227.050715][ T31] usb 4-1: SerialNumber: syz [ 227.258713][ T31] usb 4-1: 0:2 : does not exist [ 227.265601][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 227.277963][ T31] usb 4-1: USB disconnect, device number 120 [ 227.289106][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.445540][ T6126] FAULT_INJECTION: forcing a failure. [ 227.445540][ T6126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.459623][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.1.2107 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 227.459652][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.459660][ T6126] Call Trace: [ 227.459665][ T6126] [ 227.459670][ T6126] __dump_stack+0x21/0x30 [ 227.459695][ T6126] dump_stack_lvl+0x140/0x1c0 [ 227.459714][ T6126] ? __cfi_dump_stack_lvl+0x10/0x10 [ 227.459732][ T6126] ? check_stack_object+0x12b/0x150 [ 227.459746][ T6126] dump_stack+0x19/0x20 [ 227.459790][ T6126] should_fail_ex+0x3d7/0x530 [ 227.459818][ T6126] should_fail+0xf/0x20 [ 227.459842][ T6126] should_fail_usercopy+0x1e/0x30 [ 227.459868][ T6126] _copy_from_user+0x20/0xa0 [ 227.459880][ T6126] __copy_msghdr+0x3ec/0x5d0 [ 227.459898][ T6126] ___sys_sendmsg+0x214/0x370 [ 227.459914][ T6126] ? __sys_sendmsg+0x2a0/0x2a0 [ 227.459930][ T6126] ? kstrtouint+0x78/0xf0 [ 227.459948][ T6126] __sys_sendmmsg+0x2b4/0x4e0 [ 227.459965][ T6126] ? __cfi___sys_sendmmsg+0x10/0x10 [ 227.459985][ T6126] ? __cfi_ksys_write+0x10/0x10 [ 227.459999][ T6126] __x64_sys_sendmmsg+0xa4/0xc0 [ 227.460016][ T6126] x64_sys_call+0xfec/0x2ee0 [ 227.460029][ T6126] do_syscall_64+0x57/0xf0 [ 227.460047][ T6126] ? clear_bhb_loop+0x50/0xa0 [ 227.460065][ T6126] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.460095][ T6126] RIP: 0033:0x7fdc4479ce59 [ 227.460114][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.460129][ T6126] RSP: 002b:00007fdc4570a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 227.460144][ T6126] RAX: ffffffffffffffda RBX: 00007fdc44a15fa0 RCX: 00007fdc4479ce59 [ 227.460155][ T6126] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 227.460163][ T6126] RBP: 00007fdc4570a090 R08: 0000000000000000 R09: 0000000000000000 [ 227.460172][ T6126] R10: 00000000000008d0 R11: 0000000000000246 R12: 0000000000000001 [ 227.460181][ T6126] R13: 00007fdc44a16038 R14: 00007fdc44a15fa0 R15: 00007ffe21783558 [ 227.460192][ T6126] [ 227.750588][ T832] usb 3-1: USB disconnect, device number 119 [ 228.017079][ T11] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 228.167043][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 228.173429][ T11] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 228.181826][ T11] usb 4-1: config 0 has no interface number 0 [ 228.188186][ T11] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 228.198808][ T11] usb 4-1: config 0 interface 196 has no altsetting 0 [ 228.207475][ T11] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 228.217461][ T832] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 228.225171][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.240157][ T11] usb 4-1: Product: syz [ 228.244596][ T11] usb 4-1: Manufacturer: syz [ 228.249593][ T11] usb 4-1: SerialNumber: syz [ 228.257296][ T11] usb 4-1: config 0 descriptor?? [ 228.262799][ T6133] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.376672][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.385776][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.395504][ T832] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 228.405892][ T832] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 228.417145][ T832] usb 3-1: string descriptor 0 read error: -22 [ 228.423363][ T832] usb 3-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 228.432909][ T832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.567037][ T618] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 228.595038][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.603616][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.673144][ T11] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 5 bytes [ 228.682495][ T11] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 228.685204][ T31] usb 3-1: USB disconnect, device number 120 [ 228.727053][ T618] usb 2-1: Using ep0 maxpacket: 16 [ 228.733818][ T618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.744280][ T618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.754682][ T618] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.764054][ T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.772302][ T618] usb 2-1: Product: syz [ 228.776628][ T618] usb 2-1: Manufacturer: syz [ 228.781511][ T618] usb 2-1: SerialNumber: syz [ 228.988364][ T618] usb 2-1: 0:2 : does not exist [ 228.995536][ T618] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 229.007128][ T618] usb 2-1: USB disconnect, device number 109 [ 229.015377][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.229695][ T6168] fuse: Bad value for 'user_id' [ 229.234608][ T6168] fuse: Bad value for 'user_id' [ 229.263087][ T6173] FAULT_INJECTION: forcing a failure. [ 229.263087][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 229.275940][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.0.2127 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 229.275977][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.275990][ T6173] Call Trace: [ 229.275997][ T6173] [ 229.276006][ T6173] __dump_stack+0x21/0x30 [ 229.276041][ T6173] dump_stack_lvl+0x140/0x1c0 [ 229.276072][ T6173] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.276102][ T6173] ? release_sock+0x171/0x1f0 [ 229.276126][ T6173] dump_stack+0x19/0x20 [ 229.276154][ T6173] should_fail_ex+0x3d7/0x530 [ 229.276181][ T6173] should_failslab+0xac/0x100 [ 229.276207][ T6173] kmem_cache_alloc_node_noprof+0x45/0x420 [ 229.276229][ T6173] ? netlink_data_ready+0x20/0x20 [ 229.276256][ T6173] ? __alloc_skb+0x108/0x370 [ 229.276279][ T6173] __alloc_skb+0x108/0x370 [ 229.276302][ T6173] netlink_alloc_large_skb+0xf7/0x1b0 [ 229.276327][ T6173] netlink_sendmsg+0x594/0xb10 [ 229.276355][ T6173] ? __cfi_netlink_sendmsg+0x10/0x10 [ 229.276383][ T6173] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 229.276409][ T6173] ? security_socket_sendmsg+0x3d/0x100 [ 229.276437][ T6173] ? __cfi_netlink_sendmsg+0x10/0x10 [ 229.276464][ T6173] ____sys_sendmsg+0x9e1/0xa30 [ 229.276492][ T6173] ? __import_iovec+0x5ad/0x7c0 [ 229.276513][ T6173] ? __sys_sendmsg_sock+0x50/0x50 [ 229.276540][ T6173] ? import_iovec+0x80/0xb0 [ 229.276561][ T6173] ___sys_sendmsg+0x2a6/0x370 [ 229.276590][ T6173] ? __sys_sendmsg+0x2a0/0x2a0 [ 229.276617][ T6173] ? proc_fail_nth_write+0x184/0x220 [ 229.276646][ T6173] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 229.276683][ T6173] __x64_sys_sendmsg+0x1fb/0x2d0 [ 229.276710][ T6173] ? fput+0x1a4/0x240 [ 229.276746][ T6173] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 229.276773][ T6173] ? ksys_write+0x1f3/0x260 [ 229.276797][ T6173] ? __kasan_check_read+0x15/0x20 [ 229.276820][ T6173] x64_sys_call+0x2a4c/0x2ee0 [ 229.276841][ T6173] do_syscall_64+0x57/0xf0 [ 229.276871][ T6173] ? clear_bhb_loop+0x50/0xa0 [ 229.276893][ T6173] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.276925][ T6173] RIP: 0033:0x7faabad9ce59 [ 229.276944][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.276967][ T6173] RSP: 002b:00007faab97f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.276992][ T6173] RAX: ffffffffffffffda RBX: 00007faabb015fa0 RCX: 00007faabad9ce59 [ 229.277009][ T6173] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 229.277024][ T6173] RBP: 00007faab97f7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.277039][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.277053][ T6173] R13: 00007faabb016038 R14: 00007faabb015fa0 R15: 00007ffe9251a698 [ 229.277072][ T6173] [ 229.649293][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.657908][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.767052][ T31] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 229.917975][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.929029][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.938930][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 229.948052][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.957437][ T31] usb 2-1: config 0 descriptor?? [ 230.165943][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 230.173130][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.185398][ T31] usb 2-1: USB disconnect, device number 110 [ 230.235617][ T6199] tipc: Enabling of bearer rejected, already enabled [ 230.245468][ T6199] tipc: Enabling of bearer rejected, already enabled [ 230.254323][ T6199] tipc: Enabling of bearer rejected, failed to enable media [ 230.467058][ T618] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 230.627058][ T618] usb 3-1: Using ep0 maxpacket: 16 [ 230.633654][ T618] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.643909][ T618] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.654560][ T618] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.663847][ T618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.667581][ T31] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 230.672066][ T618] usb 3-1: Product: syz [ 230.684382][ T618] usb 3-1: Manufacturer: syz [ 230.689063][ T618] usb 3-1: SerialNumber: syz [ 230.775966][ T5087] usb 4-1: USB disconnect, device number 121 [ 230.828092][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.839166][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.848970][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 230.858230][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.868405][ T31] usb 2-1: config 0 descriptor?? [ 230.897216][ T618] usb 3-1: 0:2 : does not exist [ 230.907654][ T618] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 230.928649][ T618] usb 3-1: USB disconnect, device number 121 [ 230.940165][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.140084][ T36] audit: type=1400 audit(1798045277.572:405): avc: denied { write } for pid=6225 comm="syz.0.2145" path="socket:[58489]" dev="sockfs" ino=58489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 231.206265][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.217673][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.487074][ T618] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 231.637046][ T618] usb 4-1: Using ep0 maxpacket: 8 [ 231.643383][ T618] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 231.647027][ T5087] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 231.657056][ T618] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.671224][ T618] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 231.677378][ T31] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 231.680418][ T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.688430][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 231.696320][ T618] usb 4-1: config 0 descriptor?? [ 231.721731][ T31] usb 2-1: USB disconnect, device number 111 [ 231.787038][ T5087] usb 3-1: device descriptor read/64, error -71 [ 231.812550][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.821338][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.926822][ T618] usbhid 4-1:0.0: can't add hid device: -71 [ 231.939901][ T618] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 231.952156][ T618] usb 4-1: USB disconnect, device number 122 [ 231.998477][ T36] audit: type=1400 audit(1798045278.432:406): avc: denied { mounton } for pid=6246 comm="syz.3.2155" path="/491/file0" dev="tmpfs" ino=2574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.998491][ T6247] fuseblk: Bad value for 'fd' [ 232.022156][ T6247] netlink: 'syz.3.2155': attribute type 4 has an invalid length. [ 232.037029][ T5087] usb 3-1: device descriptor read/64, error -71 [ 232.117107][ T6251] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2157'. [ 232.287074][ T5087] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 232.344333][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.353285][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.367118][ T31] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 232.417062][ T5087] usb 3-1: device descriptor read/64, error -71 [ 232.497088][ T618] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 232.527078][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 232.533596][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.544116][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.554797][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.564037][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.572265][ T31] usb 4-1: Product: syz [ 232.576800][ T31] usb 4-1: Manufacturer: syz [ 232.581634][ T31] usb 4-1: SerialNumber: syz [ 232.649035][ T618] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 232.659551][ T618] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 232.670768][ T618] usb 2-1: string descriptor 0 read error: -22 [ 232.677070][ T5087] usb 3-1: device descriptor read/64, error -71 [ 232.677286][ T618] usb 2-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 232.693350][ T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.787144][ T5087] usb usb3-port1: attempt power cycle [ 232.795345][ T31] usb 4-1: 0:2 : does not exist [ 232.802099][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 232.814186][ T31] usb 4-1: USB disconnect, device number 123 [ 232.824082][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 232.949533][ T618] usb 2-1: USB disconnect, device number 112 [ 233.026720][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.035931][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.127090][ T5087] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 233.158077][ T5087] usb 3-1: device descriptor read/8, error -71 [ 233.298213][ T5087] usb 3-1: device descriptor read/8, error -71 [ 233.320891][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.329676][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.557079][ T31] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 233.564938][ T5087] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 233.573059][ T6291] FAULT_INJECTION: forcing a failure. [ 233.573059][ T6291] name failslab, interval 1, probability 0, space 0, times 0 [ 233.586209][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.1.2174 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 233.586243][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.586256][ T6291] Call Trace: [ 233.586264][ T6291] [ 233.586272][ T6291] __dump_stack+0x21/0x30 [ 233.586307][ T6291] dump_stack_lvl+0x140/0x1c0 [ 233.586336][ T6291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 233.586367][ T6291] dump_stack+0x19/0x20 [ 233.586393][ T6291] should_fail_ex+0x3d7/0x530 [ 233.586419][ T6291] should_failslab+0xac/0x100 [ 233.586436][ T6291] kmem_cache_alloc_node_noprof+0x45/0x420 [ 233.586451][ T6291] ? dup_task_struct+0xc1/0xd80 [ 233.586467][ T6291] ? kasan_save_alloc_info+0x40/0x50 [ 233.586479][ T6291] ? __kasan_kmalloc+0x96/0xb0 [ 233.586494][ T6291] ? __kmalloc_cache_noprof+0x23c/0x470 [ 233.586509][ T6291] dup_task_struct+0xc1/0xd80 [ 233.586525][ T6291] ? __kasan_check_write+0x18/0x20 [ 233.586537][ T6291] ? _raw_spin_lock_irq+0x93/0x120 [ 233.586556][ T6291] ? copy_process+0x32a0/0x32a0 [ 233.586571][ T6291] ? __kasan_check_write+0x18/0x20 [ 233.586585][ T6291] copy_process+0x55a/0x32a0 [ 233.586602][ T6291] ? __cfi_copy_process+0x10/0x10 [ 233.586618][ T6291] ? __kmalloc_cache_noprof+0x23c/0x470 [ 233.586631][ T6291] ? __kasan_check_write+0x18/0x20 [ 233.586644][ T6291] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 233.586660][ T6291] vhost_task_create+0x1f7/0x400 [ 233.586675][ T6291] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 233.586690][ T6291] ? __cfi_vhost_task_create+0x10/0x10 [ 233.586705][ T6291] ? __cfi_vhost_task_fn+0x10/0x10 [ 233.586718][ T6291] ? __kasan_check_write+0x18/0x20 [ 233.586739][ T6291] ? mutex_lock+0x97/0x1d0 [ 233.586752][ T6291] ? __cfi_mutex_lock+0x10/0x10 [ 233.586765][ T6291] ? kernel_text_address+0xa9/0xe0 [ 233.586783][ T6291] kvm_mmu_post_init_vm+0x161/0x300 [ 233.586802][ T6291] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 233.586821][ T6291] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 233.586838][ T6291] ? kstrtoull+0x13b/0x1e0 [ 233.586853][ T6291] ? kstrtouint+0x78/0xf0 [ 233.586868][ T6291] ? ioctl_has_perm+0x1bc/0x500 [ 233.586881][ T6291] ? __asan_memcpy+0x5a/0x80 [ 233.586893][ T6291] ? ioctl_has_perm+0x408/0x500 [ 233.586905][ T6291] ? has_cap_mac_admin+0xd0/0xd0 [ 233.586918][ T6291] ? __kasan_check_write+0x18/0x20 [ 233.586930][ T6291] ? mutex_lock_killable+0x97/0x1d0 [ 233.586951][ T6291] ? __cfi_mutex_lock_killable+0x10/0x10 [ 233.586974][ T6291] ? proc_fail_nth_write+0x184/0x220 [ 233.587005][ T6291] kvm_vcpu_ioctl+0xa48/0x1000 [ 233.587027][ T6291] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 233.587048][ T6291] ? __cfi_vfs_write+0x10/0x10 [ 233.587067][ T6291] ? __kasan_check_write+0x18/0x20 [ 233.587080][ T6291] ? mutex_unlock+0x90/0x240 [ 233.587092][ T6291] ? __cfi_mutex_unlock+0x10/0x10 [ 233.587105][ T6291] ? __fget_files+0x2c5/0x340 [ 233.587121][ T6291] ? __fget_files+0x2c5/0x340 [ 233.587136][ T6291] ? bpf_lsm_file_ioctl+0xd/0x20 [ 233.587153][ T6291] ? security_file_ioctl+0x3e/0x110 [ 233.587172][ T6291] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 233.587184][ T6291] __se_sys_ioctl+0x132/0x1b0 [ 233.587200][ T6291] __x64_sys_ioctl+0x7f/0xa0 [ 233.587215][ T6291] x64_sys_call+0x1878/0x2ee0 [ 233.587228][ T6291] do_syscall_64+0x57/0xf0 [ 233.587248][ T6291] ? clear_bhb_loop+0x50/0xa0 [ 233.587262][ T6291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 233.587281][ T6291] RIP: 0033:0x7fdc4479ce59 [ 233.587294][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.587305][ T6291] RSP: 002b:00007fdc4570a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.587321][ T6291] RAX: ffffffffffffffda RBX: 00007fdc44a15fa0 RCX: 00007fdc4479ce59 [ 233.587332][ T6291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 233.587340][ T6291] RBP: 00007fdc4570a090 R08: 0000000000000000 R09: 0000000000000000 [ 233.587349][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.587358][ T6291] R13: 00007fdc44a16038 R14: 00007fdc44a15fa0 R15: 00007ffe21783558 [ 233.587369][ T6291] [ 233.598015][ T5087] usb 3-1: device descriptor read/8, error -71 [ 233.853914][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.928203][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.943681][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.952093][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.039957][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.049190][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.060560][ T5087] usb 3-1: device descriptor read/8, error -71 [ 234.069033][ T31] usb 4-1: config 0 descriptor?? [ 234.072400][ T36] audit: type=1400 audit(1798045280.502:407): avc: denied { append } for pid=6296 comm="syz.1.2176" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 234.167120][ T5087] usb usb3-port1: unable to enumerate USB device [ 234.276671][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 234.282732][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.292698][ T31] usb 4-1: USB disconnect, device number 124 [ 234.457077][ T618] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 234.607222][ T618] usb 2-1: Using ep0 maxpacket: 16 [ 234.614234][ T618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.625320][ T618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.636120][ T618] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.645972][ T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.654898][ T618] usb 2-1: Product: syz [ 234.659204][ T618] usb 2-1: Manufacturer: syz [ 234.664586][ T618] usb 2-1: SerialNumber: syz [ 234.737201][ T11] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 234.762103][ T36] audit: type=1326 audit(1798045281.192:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.2182" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabad9ce59 code=0x7fc00000 [ 234.776091][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.793636][ T36] audit: type=1326 audit(1798045281.202:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.2182" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faabad9ce59 code=0x7fc00000 [ 234.807231][ T5087] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 234.829652][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.872873][ T618] usb 2-1: 0:2 : does not exist [ 234.880306][ T618] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 234.892437][ T618] usb 2-1: USB disconnect, device number 113 [ 234.899977][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.911266][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.923744][ T11] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 234.933890][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.943768][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.957715][ T11] usb 4-1: config 0 descriptor?? [ 234.998734][ T5087] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 235.009546][ T5087] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 235.021747][ T5087] usb 3-1: string descriptor 0 read error: -22 [ 235.028270][ T5087] usb 3-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 235.037776][ T5087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.306736][ T618] usb 3-1: USB disconnect, device number 126 [ 235.637009][ T5087] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 235.777928][ T11] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 235.792624][ T11] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 235.797422][ T5087] usb 2-1: Using ep0 maxpacket: 32 [ 235.813037][ T11] usb 4-1: USB disconnect, device number 125 [ 235.829616][ T5087] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 235.857019][ T5087] usb 2-1: config 0 has no interface number 0 [ 235.863239][ T5087] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 235.883661][ T5087] usb 2-1: config 0 interface 196 has no altsetting 0 [ 235.898399][ T5087] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 235.917012][ T5087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.926992][ T5087] usb 2-1: Product: syz [ 235.931291][ T5087] usb 2-1: Manufacturer: syz [ 235.937191][ T36] audit: type=1400 audit(1798045282.362:410): avc: denied { execute } for pid=6315 comm="syz.2.2184" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.946119][ T5087] usb 2-1: SerialNumber: syz [ 235.988609][ T5087] usb 2-1: config 0 descriptor?? [ 236.004479][ T6314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 236.075835][ T36] audit: type=1326 audit(1798045282.502:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.2184" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bd899ce59 code=0x0 [ 236.616444][ T5087] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 236.626890][ T5087] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 236.677008][ T31] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 236.837784][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 236.848604][ T5087] usb 2-1: USB disconnect, device number 114 [ 236.855722][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.871554][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.882374][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.897217][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.906609][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.926373][ T31] usb 4-1: config 0 descriptor?? [ 236.936657][ T5087] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 237.267013][ T11] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 237.344709][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0028/input/input41 [ 237.369441][ T31] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 237.438301][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.457360][ T11] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 237.484023][ T11] usb 3-1: string descriptor 0 read error: -22 [ 237.490392][ T11] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 237.499724][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.548948][ T832] usb 4-1: USB disconnect, device number 126 [ 237.620387][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.628941][ T618] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 237.637717][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.787029][ T618] usb 2-1: Using ep0 maxpacket: 16 [ 237.793314][ T618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.804026][ T618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.814251][ T618] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.823451][ T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.831541][ T618] usb 2-1: Product: syz [ 237.835735][ T618] usb 2-1: Manufacturer: syz [ 237.840361][ T618] usb 2-1: SerialNumber: syz [ 237.915430][ T11] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 237.935255][ T11] usb 3-1: USB disconnect, device number 127 [ 238.048372][ T618] usb 2-1: 0:2 : does not exist [ 238.055676][ T618] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 238.068446][ T618] usb 2-1: USB disconnect, device number 115 [ 238.100562][ T6372] mmap: syz.3.2195 (6372): VmData 29147136 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 238.227059][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 238.260999][ T6384] kvm: kvm [6383]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 238.270067][ T6384] kvm: kvm [6383]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 238.387918][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.388670][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.398643][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.408071][ T11] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.427135][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.436318][ T11] usb 3-1: config 0 descriptor?? [ 238.447044][ T31] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 238.566034][ T6392] tipc: Enabling of bearer rejected, already enabled [ 238.575940][ T6392] tipc: Enabling of bearer rejected, already enabled [ 238.584859][ T6392] tipc: Enabling of bearer rejected, already enabled [ 238.607007][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 238.613390][ T31] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 238.622058][ T31] usb 4-1: config 0 has no interface number 0 [ 238.628619][ T31] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 238.639046][ T31] usb 4-1: config 0 interface 196 has no altsetting 0 [ 238.650173][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 238.651319][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 238.660710][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.667649][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 238.674023][ T31] usb 4-1: Product: syz [ 238.686846][ T11] usb 3-1: USB disconnect, device number 2 [ 238.692757][ T31] usb 4-1: Manufacturer: syz [ 238.692783][ T31] usb 4-1: SerialNumber: syz [ 238.696903][ T31] usb 4-1: config 0 descriptor?? [ 238.707953][ T6382] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 239.317966][ T31] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 239.327003][ T31] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 239.531498][ T31] usb 4-1: USB disconnect, device number 127 [ 239.573862][ T31] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 239.667034][ T618] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 239.818675][ T618] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 239.829013][ T618] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 239.840884][ T618] usb 2-1: string descriptor 0 read error: -22 [ 239.847150][ T618] usb 2-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 239.856305][ T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.864483][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 240.017027][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 240.023483][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.033781][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.044390][ T11] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.054314][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.063237][ T11] usb 3-1: Product: syz [ 240.065236][ T6442] FAULT_INJECTION: forcing a failure. [ 240.065236][ T6442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.068030][ T11] usb 3-1: Manufacturer: syz [ 240.089143][ T11] usb 3-1: SerialNumber: syz [ 240.093487][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.3.2215 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 240.093523][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.093536][ T6442] Call Trace: [ 240.093544][ T6442] [ 240.093552][ T6442] __dump_stack+0x21/0x30 [ 240.093585][ T6442] dump_stack_lvl+0x140/0x1c0 [ 240.093611][ T6442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 240.093639][ T6442] ? kernel_text_address+0xa9/0xe0 [ 240.093666][ T6442] dump_stack+0x19/0x20 [ 240.093692][ T6442] should_fail_ex+0x3d7/0x530 [ 240.093718][ T6442] should_fail+0xf/0x20 [ 240.093741][ T6442] should_fail_usercopy+0x1e/0x30 [ 240.093767][ T6442] _copy_from_user+0x20/0xa0 [ 240.093785][ T6442] ___sys_sendmsg+0x1c7/0x370 [ 240.093812][ T6442] ? __sys_sendmsg+0x2a0/0x2a0 [ 240.093836][ T6442] ? kstrtouint+0x78/0xf0 [ 240.093863][ T6442] __sys_sendmmsg+0x2b4/0x4e0 [ 240.093891][ T6442] ? __cfi___sys_sendmmsg+0x10/0x10 [ 240.093921][ T6442] ? __cfi_ksys_write+0x10/0x10 [ 240.093944][ T6442] __x64_sys_sendmmsg+0xa4/0xc0 [ 240.093969][ T6442] x64_sys_call+0xfec/0x2ee0 [ 240.093988][ T6442] do_syscall_64+0x57/0xf0 [ 240.094015][ T6442] ? clear_bhb_loop+0x50/0xa0 [ 240.094036][ T6442] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 240.094066][ T6442] RIP: 0033:0x7f341399ce59 [ 240.094084][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.094101][ T6442] RSP: 002b:00007f34148ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.094124][ T6442] RAX: ffffffffffffffda RBX: 00007f3413c15fa0 RCX: 00007f341399ce59 [ 240.094139][ T6442] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 240.094153][ T6442] RBP: 00007f34148ac090 R08: 0000000000000000 R09: 0000000000000000 [ 240.094166][ T6442] R10: 00000000000008d0 R11: 0000000000000246 R12: 0000000000000001 [ 240.094188][ T6442] R13: 00007f3413c16038 R14: 00007f3413c15fa0 R15: 00007ffe531dd9d8 [ 240.094205][ T6442] [ 240.154940][ T31] usb 2-1: USB disconnect, device number 116 [ 240.237964][ T6448] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2218'. [ 240.257077][ T36] audit: type=1400 audit(1798045286.672:412): avc: denied { nlmsg_read } for pid=6447 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.382448][ T11] usb 3-1: 0:2 : does not exist [ 240.389755][ T11] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 240.403347][ T11] usb 3-1: USB disconnect, device number 3 [ 240.414816][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 240.577075][ T618] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 240.723539][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 240.741009][ T618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.753027][ T618] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.763212][ T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.777386][ T618] usb 4-1: config 0 descriptor?? [ 240.855451][ T6459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2222'. [ 240.985975][ T618] usbhid 4-1:0.0: can't add hid device: -71 [ 240.993306][ T618] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 241.002459][ T618] usb 4-1: USB disconnect, device number 2 [ 241.137012][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 241.307006][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 241.317722][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 241.326197][ T31] usb 3-1: config 0 has no interface number 0 [ 241.357019][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 241.377987][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 241.386307][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 241.395458][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.403656][ T31] usb 3-1: Product: syz [ 241.408007][ T31] usb 3-1: Manufacturer: syz [ 241.412665][ T31] usb 3-1: SerialNumber: syz [ 241.418266][ T31] usb 3-1: config 0 descriptor?? [ 241.423517][ T6462] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 241.454800][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.464627][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.472974][ T6466] FAULT_INJECTION: forcing a failure. [ 241.472974][ T6466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.489990][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.2225 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 241.490027][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.490040][ T6466] Call Trace: [ 241.490048][ T6466] [ 241.490057][ T6466] __dump_stack+0x21/0x30 [ 241.490094][ T6466] dump_stack_lvl+0x140/0x1c0 [ 241.490123][ T6466] ? __cfi_dump_stack_lvl+0x10/0x10 [ 241.490153][ T6466] ? check_stack_object+0x12b/0x150 [ 241.490176][ T6466] dump_stack+0x19/0x20 [ 241.490205][ T6466] should_fail_ex+0x3d7/0x530 [ 241.490233][ T6466] should_fail+0xf/0x20 [ 241.490258][ T6466] should_fail_usercopy+0x1e/0x30 [ 241.490286][ T6466] _copy_to_user+0x24/0xa0 [ 241.490306][ T6466] simple_read_from_buffer+0xed/0x160 [ 241.490336][ T6466] proc_fail_nth_read+0x1aa/0x220 [ 241.490368][ T6466] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 241.490399][ T6466] ? bpf_lsm_file_permission+0xd/0x20 [ 241.490426][ T6466] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 241.490457][ T6466] vfs_read+0x289/0xcb0 [ 241.490480][ T6466] ? __cfi_handle_mm_fault+0x10/0x10 [ 241.490506][ T6466] ? __cfi_vfs_read+0x10/0x10 [ 241.490528][ T6466] ? __kasan_check_write+0x18/0x20 [ 241.490550][ T6466] ? mutex_lock+0x97/0x1d0 [ 241.490571][ T6466] ? __cfi_mutex_lock+0x10/0x10 [ 241.490593][ T6466] ? __fget_files+0x2c5/0x340 [ 241.490621][ T6466] ksys_read+0x145/0x260 [ 241.490643][ T6466] ? __cfi_ksys_read+0x10/0x10 [ 241.490675][ T6466] ? __kasan_check_read+0x15/0x20 [ 241.490697][ T6466] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 241.490726][ T6466] __x64_sys_read+0x7f/0x90 [ 241.490748][ T6466] x64_sys_call+0x2638/0x2ee0 [ 241.490771][ T6466] do_syscall_64+0x57/0xf0 [ 241.490799][ T6466] ? clear_bhb_loop+0x50/0xa0 [ 241.490821][ T6466] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 241.490853][ T6466] RIP: 0033:0x7faabad5d68e [ 241.490872][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.490892][ T6466] RSP: 002b:00007faab97f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.490918][ T6466] RAX: ffffffffffffffda RBX: 00007faab97f76c0 RCX: 00007faabad5d68e [ 241.490936][ T6466] RDX: 000000000000000f RSI: 00007faab97f70a0 RDI: 0000000000000004 [ 241.490951][ T6466] RBP: 00007faab97f7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.490965][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.490979][ T6466] R13: 00007faabb016038 R14: 00007faabb015fa0 R15: 00007ffe9251a698 [ 241.490998][ T6466] [ 241.786416][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.796336][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.039904][ T31] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 242.049031][ T31] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 242.167070][ T5087] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 242.207064][ T618] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 242.249201][ C1] ipheth 3-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 242.327066][ T5087] usb 2-1: Using ep0 maxpacket: 32 [ 242.333337][ T5087] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 242.341629][ T5087] usb 2-1: config 0 has no interface number 0 [ 242.347941][ T5087] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 242.358804][ T5087] usb 2-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 242.367064][ T618] usb 4-1: Using ep0 maxpacket: 32 [ 242.370513][ T5087] usb 2-1: config 0 interface 196 has no altsetting 0 [ 242.383696][ T618] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 242.384745][ T5087] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 242.401577][ T618] usb 4-1: config 0 has no interface number 0 [ 242.401872][ T5087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.425157][ T5087] usb 2-1: Product: syz [ 242.425255][ T618] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 242.429933][ T5087] usb 2-1: Manufacturer: syz [ 242.444955][ T5087] usb 2-1: SerialNumber: syz [ 242.446587][ T618] usb 4-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 242.450482][ T31] usb 3-1: USB disconnect, device number 4 [ 242.461551][ T618] usb 4-1: config 0 interface 196 has no altsetting 0 [ 242.470217][ T5087] usb 2-1: config 0 descriptor?? [ 242.477512][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.491819][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.494101][ T6480] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.500251][ T618] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 242.518944][ T618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.528350][ T618] usb 4-1: Product: syz [ 242.528457][ T31] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 242.533062][ T618] usb 4-1: Manufacturer: syz [ 242.533081][ T618] usb 4-1: SerialNumber: syz [ 242.558831][ T618] usb 4-1: config 0 descriptor?? [ 242.566699][ T6482] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 242.720967][ T5087] ipheth 2-1:0.196: Unable to find endpoints [ 242.729793][ T5087] usb 2-1: USB disconnect, device number 117 [ 242.780557][ T618] ipheth 4-1:0.196: Unable to find endpoints [ 242.790808][ T618] usb 4-1: USB disconnect, device number 3 [ 243.075249][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 243.198359][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.207282][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.248034][ T6533] FAULT_INJECTION: forcing a failure. [ 243.248034][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 243.262256][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.1.2242 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 243.262292][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.262305][ T6533] Call Trace: [ 243.262313][ T6533] [ 243.262322][ T6533] __dump_stack+0x21/0x30 [ 243.262357][ T6533] dump_stack_lvl+0x140/0x1c0 [ 243.262376][ T6533] ? __cfi_dump_stack_lvl+0x10/0x10 [ 243.262394][ T6533] ? ipv4_dst_check+0xfc/0x170 [ 243.262411][ T6533] dump_stack+0x19/0x20 [ 243.262428][ T6533] should_fail_ex+0x3d7/0x530 [ 243.262445][ T6533] should_failslab+0xac/0x100 [ 243.262461][ T6533] kmem_cache_alloc_node_noprof+0x45/0x420 [ 243.262476][ T6533] ? __alloc_skb+0x108/0x370 [ 243.262490][ T6533] __alloc_skb+0x108/0x370 [ 243.262503][ T6533] tcp_stream_alloc_skb+0x43/0x370 [ 243.262519][ T6533] ? __asan_memset+0x39/0x50 [ 243.262532][ T6533] tcp_connect+0x16f7/0x5a90 [ 243.262550][ T6533] ? __kasan_slab_alloc+0x73/0x90 [ 243.262568][ T6533] ? __cfi_tcp_connect+0x10/0x10 [ 243.262584][ T6533] ? ip_route_output_key_hash_rcu+0x1697/0x1f90 [ 243.262603][ T6533] ? tcp_fastopen_defer_connect+0x105/0x480 [ 243.262623][ T6533] ? __cfi_tcp_fastopen_defer_connect+0x10/0x10 [ 243.262642][ T6533] ? sk_setup_caps+0x687/0x8e0 [ 243.262679][ T6533] tcp_v4_connect+0xfb1/0x19e0 [ 243.262691][ T6533] ? ____sys_sendmsg+0x864/0xa30 [ 243.262708][ T6533] ? __cfi_tcp_v4_connect+0x10/0x10 [ 243.262721][ T6533] __inet_stream_connect+0x27a/0xee0 [ 243.262740][ T6533] ? stack_depot_save_flags+0x38/0x800 [ 243.262757][ T6533] ? __cfi___inet_stream_connect+0x10/0x10 [ 243.262776][ T6533] ? __kasan_kmalloc+0x96/0xb0 [ 243.262790][ T6533] ? __kmalloc_cache_noprof+0x23c/0x470 [ 243.262804][ T6533] ? kasan_save_alloc_info+0x40/0x50 [ 243.262824][ T6533] ? tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 243.262840][ T6533] tcp_sendmsg_fastopen+0x3b0/0x6e0 [ 243.262856][ T6533] ? do_syscall_64+0x57/0xf0 [ 243.262873][ T6533] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 243.262894][ T6533] tcp_sendmsg_locked+0x44d9/0x4b70 [ 243.262910][ T6533] ? __asan_memcpy+0x5a/0x80 [ 243.262924][ T6533] ? __kasan_check_write+0x18/0x20 [ 243.262936][ T6533] ? _raw_spin_lock_bh+0x96/0x130 [ 243.262953][ T6533] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 243.262971][ T6533] ? _raw_spin_unlock_bh+0x54/0x60 [ 243.262988][ T6533] ? lock_sock_nested+0x21b/0x2b0 [ 243.263006][ T6533] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 243.263023][ T6533] ? __cfi_tcp_sendmsg+0x10/0x10 [ 243.263038][ T6533] tcp_sendmsg+0x3e/0xd0 [ 243.263053][ T6533] ? __cfi_tcp_sendmsg+0x10/0x10 [ 243.263069][ T6533] inet_sendmsg+0xb7/0x120 [ 243.263086][ T6533] ? __cfi_inet_sendmsg+0x10/0x10 [ 243.263104][ T6533] ____sys_sendmsg+0x864/0xa30 [ 243.263120][ T6533] ? __import_iovec+0x5ad/0x7c0 [ 243.263133][ T6533] ? __sys_sendmsg_sock+0x50/0x50 [ 243.263150][ T6533] ? import_iovec+0x80/0xb0 [ 243.263166][ T6533] ___sys_sendmsg+0x2a6/0x370 [ 243.263183][ T6533] ? __sys_sendmsg+0x2a0/0x2a0 [ 243.263199][ T6533] ? kstrtouint+0x78/0xf0 [ 243.263216][ T6533] __sys_sendmmsg+0x2b4/0x4e0 [ 243.263233][ T6533] ? __cfi___sys_sendmmsg+0x10/0x10 [ 243.263251][ T6533] ? __cfi_ksys_write+0x10/0x10 [ 243.263266][ T6533] __x64_sys_sendmmsg+0xa4/0xc0 [ 243.263282][ T6533] x64_sys_call+0xfec/0x2ee0 [ 243.263295][ T6533] do_syscall_64+0x57/0xf0 [ 243.263312][ T6533] ? clear_bhb_loop+0x50/0xa0 [ 243.263325][ T6533] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 243.263345][ T6533] RIP: 0033:0x7fdc4479ce59 [ 243.263358][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.263370][ T6533] RSP: 002b:00007fdc4570a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.263386][ T6533] RAX: ffffffffffffffda RBX: 00007fdc44a15fa0 RCX: 00007fdc4479ce59 [ 243.263397][ T6533] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000006 [ 243.263406][ T6533] RBP: 00007fdc4570a090 R08: 0000000000000000 R09: 0000000000000000 [ 243.263415][ T6533] R10: 000000002400c042 R11: 0000000000000246 R12: 0000000000000001 [ 243.263424][ T6533] R13: 00007fdc44a16038 R14: 00007fdc44a15fa0 R15: 00007ffe21783558 [ 243.263435][ T6533] [ 243.387053][ T5087] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 243.439437][ T6537] incfs: Options parsing error. -22 [ 243.608079][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.637121][ T6537] incfs: mount failed -22 [ 243.638266][ T5087] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.722377][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.731697][ T5087] usb 3-1: config 0 descriptor?? [ 243.736998][ T618] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 243.808815][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.818007][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.886985][ T618] usb 4-1: Using ep0 maxpacket: 16 [ 243.906526][ T618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.929840][ T618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.950701][ T5087] usbhid 3-1:0.0: can't add hid device: -71 [ 243.956807][ T5087] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 243.959004][ T618] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.987024][ T618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.987981][ T5087] usb 3-1: USB disconnect, device number 5 [ 244.012436][ T618] usb 4-1: Product: syz [ 244.016932][ T618] usb 4-1: Manufacturer: syz [ 244.032664][ T618] usb 4-1: SerialNumber: syz [ 244.094978][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.104097][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.111499][ T6550] bridge_slave_0: entered allmulticast mode [ 244.118080][ T6550] bridge_slave_0: entered promiscuous mode [ 244.124993][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.132690][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.140221][ T6550] bridge_slave_1: entered allmulticast mode [ 244.147276][ T6550] bridge_slave_1: entered promiscuous mode [ 244.217066][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.225040][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.233025][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.240918][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.249346][ T618] usb 4-1: 0:2 : does not exist [ 244.259926][ T618] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 244.272835][ T618] usb 4-1: USB disconnect, device number 4 [ 244.286356][ T820] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.286597][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.309758][ T820] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.329443][ T820] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.336602][ T820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.344869][ T820] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.352064][ T820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.385245][ T6550] veth0_vlan: entered promiscuous mode [ 244.396292][ T6550] veth1_macvtap: entered promiscuous mode [ 244.416248][ T297] tipc: Disabling bearer [ 244.422416][ T36] audit: type=1400 audit(1798045290.852:413): avc: denied { mounton } for pid=6550 comm="syz-executor" path="/root/syzkaller.ItA9zn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 244.447205][ T297] tipc: Disabling bearer [ 244.459822][ T297] tipc: Left network mode [ 244.465869][ T297] veth1_macvtap: left promiscuous mode [ 244.472525][ T297] veth0_vlan: left promiscuous mode [ 244.520539][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.530479][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.551245][ T6561] FAULT_INJECTION: forcing a failure. [ 244.551245][ T6561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.564815][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.1.2253 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 244.564852][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.564867][ T6561] Call Trace: [ 244.564875][ T6561] [ 244.564883][ T6561] __dump_stack+0x21/0x30 [ 244.564919][ T6561] dump_stack_lvl+0x140/0x1c0 [ 244.564950][ T6561] ? __cfi_dump_stack_lvl+0x10/0x10 [ 244.564981][ T6561] ? _parse_integer+0x2e/0x40 [ 244.565007][ T6561] ? kstrtoull+0x13b/0x1e0 [ 244.565032][ T6561] dump_stack+0x19/0x20 [ 244.565060][ T6561] should_fail_ex+0x3d7/0x530 [ 244.565088][ T6561] should_fail+0xf/0x20 [ 244.565113][ T6561] should_fail_usercopy+0x1e/0x30 [ 244.565142][ T6561] _copy_from_user+0x20/0xa0 [ 244.565161][ T6561] ___sys_sendmsg+0x1c7/0x370 [ 244.565191][ T6561] ? __sys_sendmsg+0x2a0/0x2a0 [ 244.565218][ T6561] ? proc_fail_nth_write+0x184/0x220 [ 244.565297][ T6561] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 244.565334][ T6561] __x64_sys_sendmsg+0x1fb/0x2d0 [ 244.565362][ T6561] ? fput+0x1a4/0x240 [ 244.565391][ T6561] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 244.565419][ T6561] ? ksys_write+0x1f3/0x260 [ 244.565443][ T6561] ? __kasan_check_read+0x15/0x20 [ 244.565467][ T6561] x64_sys_call+0x2a4c/0x2ee0 [ 244.565489][ T6561] do_syscall_64+0x57/0xf0 [ 244.565518][ T6561] ? clear_bhb_loop+0x50/0xa0 [ 244.565540][ T6561] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.565573][ T6561] RIP: 0033:0x7f4c9f39ce59 [ 244.565593][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.565611][ T6561] RSP: 002b:00007f4ca031a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.565636][ T6561] RAX: ffffffffffffffda RBX: 00007f4c9f615fa0 RCX: 00007f4c9f39ce59 [ 244.565664][ T6561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 244.565679][ T6561] RBP: 00007f4ca031a090 R08: 0000000000000000 R09: 0000000000000000 [ 244.565694][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.565709][ T6561] R13: 00007f4c9f616038 R14: 00007f4c9f615fa0 R15: 00007ffe3012c828 [ 244.565728][ T6561] [ 245.057442][ T31] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 245.097016][ T618] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 245.218634][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.229872][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.256998][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.258815][ T618] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 245.270793][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.285551][ T618] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 245.292714][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.304522][ T618] usb 4-1: string descriptor 0 read error: -22 [ 245.314426][ T618] usb 4-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 245.317235][ T31] usb 2-1: config 0 descriptor?? [ 245.324159][ T618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.346064][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2262'. [ 245.376937][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.386289][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.556582][ T11] usb 4-1: USB disconnect, device number 5 [ 245.597132][ T618] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 245.735910][ T31] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 245.746826][ T31] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 245.767012][ T618] usb 3-1: Using ep0 maxpacket: 32 [ 245.774563][ T618] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 245.784433][ T618] usb 3-1: config 0 has no interface number 0 [ 245.790676][ T618] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 245.800859][ T618] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.811214][ T618] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.821378][ T618] usb 3-1: config 0 interface 196 has no altsetting 0 [ 245.829702][ T618] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 245.838809][ T618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.846980][ T618] usb 3-1: Product: syz [ 245.851349][ T618] usb 3-1: Manufacturer: syz [ 245.855953][ T618] usb 3-1: SerialNumber: syz [ 245.862350][ T618] usb 3-1: config 0 descriptor?? [ 245.867724][ T6582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.087559][ T618] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 246.101074][ T36] audit: type=1400 audit(1798045292.532:414): avc: denied { shutdown } for pid=6569 comm="syz.1.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.123012][ T618] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 246.139986][ T618] usb 3-1: USB disconnect, device number 6 [ 246.187663][ T31] usb 2-1: USB disconnect, device number 118 [ 246.377057][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.528378][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.539434][ T11] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 246.548781][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.558095][ T11] usb 4-1: config 0 descriptor?? [ 246.669216][ T6601] Invalid logical block size (67) [ 246.765211][ T11] usbhid 4-1:0.0: can't add hid device: -71 [ 246.771941][ T11] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 246.783442][ T11] usb 4-1: USB disconnect, device number 6 [ 246.835979][ T6620] FAULT_INJECTION: forcing a failure. [ 246.835979][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.849463][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.2277 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 246.849493][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.849502][ T6620] Call Trace: [ 246.849508][ T6620] [ 246.849514][ T6620] __dump_stack+0x21/0x30 [ 246.849538][ T6620] dump_stack_lvl+0x140/0x1c0 [ 246.849555][ T6620] ? __cfi_dump_stack_lvl+0x10/0x10 [ 246.849574][ T6620] ? vfs_write+0x9a4/0xf90 [ 246.849588][ T6620] dump_stack+0x19/0x20 [ 246.849606][ T6620] should_fail_ex+0x3d7/0x530 [ 246.849629][ T6620] should_fail+0xf/0x20 [ 246.849644][ T6620] should_fail_usercopy+0x1e/0x30 [ 246.849662][ T6620] _copy_from_user+0x20/0xa0 [ 246.849673][ T6620] get_timespec64+0x97/0x1b0 [ 246.849692][ T6620] ? __cfi_get_timespec64+0x10/0x10 [ 246.849710][ T6620] __x64_sys_recvmmsg+0x14c/0x250 [ 246.849729][ T6620] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 246.849746][ T6620] ? __kasan_check_read+0x15/0x20 [ 246.849760][ T6620] x64_sys_call+0x292c/0x2ee0 [ 246.849773][ T6620] do_syscall_64+0x57/0xf0 [ 246.849791][ T6620] ? clear_bhb_loop+0x50/0xa0 [ 246.849804][ T6620] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 246.849823][ T6620] RIP: 0033:0x7faabad9ce59 [ 246.849836][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.849848][ T6620] RSP: 002b:00007faab97f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 246.849863][ T6620] RAX: ffffffffffffffda RBX: 00007faabb015fa0 RCX: 00007faabad9ce59 [ 246.849873][ T6620] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 246.849883][ T6620] RBP: 00007faab97f7090 R08: 0000200000003700 R09: 0000000000000000 [ 246.849892][ T6620] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 246.849901][ T6620] R13: 00007faabb016038 R14: 00007faabb015fa0 R15: 00007ffe9251a698 [ 246.849912][ T6620] [ 247.027160][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 247.117051][ T477] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 247.136535][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.145246][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.158052][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.167653][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.176218][ T6630] syzkaller1: entered promiscuous mode [ 247.181831][ T6630] syzkaller1: entered allmulticast mode [ 247.217050][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 247.224271][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.235820][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.247282][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.256627][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.265220][ T31] usb 3-1: Product: syz [ 247.269642][ T31] usb 3-1: Manufacturer: syz [ 247.274245][ T31] usb 3-1: SerialNumber: syz [ 247.282131][ T477] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 247.292378][ T477] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 247.303751][ T477] usb 2-1: string descriptor 0 read error: -22 [ 247.310178][ T477] usb 2-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 247.319438][ T477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.357046][ T11] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 247.482593][ T31] usb 3-1: 0:2 : does not exist [ 247.490438][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 247.501755][ T31] usb 3-1: USB disconnect, device number 7 [ 247.509407][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.522444][ T11] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 247.529617][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.533421][ T618] usb 2-1: USB disconnect, device number 119 [ 247.553819][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.563025][ T11] usb 4-1: config 0 descriptor?? [ 247.789499][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 247.818525][ T6640] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 247.818556][ T6640] rust_binder: 6639:6640 transaction to 6639 failed: BR_DEAD_REPLY [ 247.829601][ T6640] netlink: 'syz.0.2286': attribute type 16 has an invalid length. [ 247.845477][ T6640] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2286'. [ 247.867444][ T36] audit: type=1400 audit(1798045294.302:415): avc: denied { getopt } for pid=6641 comm="syz.0.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.900733][ T6644] FAULT_INJECTION: forcing a failure. [ 247.900733][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 247.914005][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.0.2288 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 247.914043][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.914060][ T6644] Call Trace: [ 247.914068][ T6644] [ 247.914077][ T6644] __dump_stack+0x21/0x30 [ 247.914112][ T6644] dump_stack_lvl+0x140/0x1c0 [ 247.914141][ T6644] ? __cfi_dump_stack_lvl+0x10/0x10 [ 247.914171][ T6644] dump_stack+0x19/0x20 [ 247.914199][ T6644] should_fail_ex+0x3d7/0x530 [ 247.914224][ T6644] should_failslab+0xac/0x100 [ 247.914246][ T6644] kmem_cache_alloc_noprof+0x42/0x410 [ 247.914268][ T6644] ? find_exception+0x106/0x4c0 [ 247.914296][ T6644] ? dst_alloc+0x13c/0x250 [ 247.914323][ T6644] dst_alloc+0x13c/0x250 [ 247.914350][ T6644] ip_route_output_key_hash_rcu+0x1302/0x1f90 [ 247.914380][ T6644] ? ip_route_output_key_hash_rcu+0x1681/0x1f90 [ 247.914410][ T6644] ip_route_output_flow+0xff/0x2a0 [ 247.914435][ T6644] ? proc_pid_make_inode+0x25/0x140 [ 247.914458][ T6644] ? proc_pident_instantiate+0x6d/0x2c0 [ 247.914483][ T6644] ? proc_tid_base_lookup+0x2f/0x40 [ 247.914503][ T6644] ? __cfi_ip_route_output_flow+0x10/0x10 [ 247.914530][ T6644] ? get_random_u32+0x2ef/0x4e0 [ 247.914551][ T6644] ? selinux_sk_getsecid+0x2e/0xd0 [ 247.914579][ T6644] udp_sendmsg+0x126d/0x23f0 [ 247.914606][ T6644] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 247.914632][ T6644] ? __cfi_udp_sendmsg+0x10/0x10 [ 247.914655][ T6644] ? ip4_datagram_release_cb+0x638/0x810 [ 247.914669][ T6644] ? __cfi_udp_lib_get_port+0x10/0x10 [ 247.914684][ T6644] ? _raw_spin_unlock_bh+0x54/0x60 [ 247.914712][ T6644] ? release_sock+0x171/0x1f0 [ 247.914726][ T6644] ? inet_send_prepare+0x1e7/0x4e0 [ 247.914744][ T6644] ? __cfi_udp_sendmsg+0x10/0x10 [ 247.914759][ T6644] inet_sendmsg+0xef/0x120 [ 247.914777][ T6644] ? __cfi_inet_sendmsg+0x10/0x10 [ 247.914796][ T6644] ____sys_sendmsg+0x864/0xa30 [ 247.914813][ T6644] ? __import_iovec+0x3ef/0x7c0 [ 247.914826][ T6644] ? __sys_sendmsg_sock+0x50/0x50 [ 247.914842][ T6644] ? import_iovec+0x80/0xb0 [ 247.914855][ T6644] ___sys_sendmsg+0x2a6/0x370 [ 247.914872][ T6644] ? __sys_sendmsg+0x2a0/0x2a0 [ 247.914888][ T6644] ? kstrtouint+0x78/0xf0 [ 247.914906][ T6644] __sys_sendmmsg+0x2b4/0x4e0 [ 247.914922][ T6644] ? __cfi___sys_sendmmsg+0x10/0x10 [ 247.914941][ T6644] ? __cfi_ksys_write+0x10/0x10 [ 247.914956][ T6644] __x64_sys_sendmmsg+0xa4/0xc0 [ 247.914972][ T6644] x64_sys_call+0xfec/0x2ee0 [ 247.914985][ T6644] do_syscall_64+0x57/0xf0 [ 247.915002][ T6644] ? clear_bhb_loop+0x50/0xa0 [ 247.915015][ T6644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 247.915035][ T6644] RIP: 0033:0x7faabad9ce59 [ 247.915049][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.915061][ T6644] RSP: 002b:00007faab97f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.915078][ T6644] RAX: ffffffffffffffda RBX: 00007faabb015fa0 RCX: 00007faabad9ce59 [ 247.915088][ T6644] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 247.915097][ T6644] RBP: 00007faab97f7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.915106][ T6644] R10: 00000000000008d0 R11: 0000000000000246 R12: 0000000000000001 [ 247.915115][ T6644] R13: 00007faabb016038 R14: 00007faabb015fa0 R15: 00007ffe9251a698 [ 247.915126][ T6644] [ 248.049758][ T6654] FAULT_INJECTION: forcing a failure. [ 248.049758][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.060217][ T11] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 248.067798][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.2.2293 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 248.067831][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.067844][ T6654] Call Trace: [ 248.067851][ T6654] [ 248.067858][ T6654] __dump_stack+0x21/0x30 [ 248.067892][ T6654] dump_stack_lvl+0x140/0x1c0 [ 248.067919][ T6654] ? __cfi_dump_stack_lvl+0x10/0x10 [ 248.067946][ T6654] ? vfs_write+0x9a4/0xf90 [ 248.067968][ T6654] dump_stack+0x19/0x20 [ 248.067994][ T6654] should_fail_ex+0x3d7/0x530 [ 248.068020][ T6654] should_fail+0xf/0x20 [ 248.068043][ T6654] should_fail_usercopy+0x1e/0x30 [ 248.068069][ T6654] _copy_from_user+0x20/0xa0 [ 248.068087][ T6654] get_timespec64+0x97/0x1b0 [ 248.068114][ T6654] ? __cfi_get_timespec64+0x10/0x10 [ 248.068142][ T6654] __x64_sys_recvmmsg+0x14c/0x250 [ 248.068169][ T6654] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 248.068195][ T6654] ? __kasan_check_read+0x15/0x20 [ 248.068216][ T6654] x64_sys_call+0x292c/0x2ee0 [ 248.068236][ T6654] do_syscall_64+0x57/0xf0 [ 248.068262][ T6654] ? clear_bhb_loop+0x50/0xa0 [ 248.068283][ T6654] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 248.068312][ T6654] RIP: 0033:0x7f1bd899ce59 [ 248.068329][ T6654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.068348][ T6654] RSP: 002b:00007f1bd9915028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 248.068371][ T6654] RAX: ffffffffffffffda RBX: 00007f1bd8c15fa0 RCX: 00007f1bd899ce59 [ 248.068389][ T6654] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 248.068404][ T6654] RBP: 00007f1bd9915090 R08: 0000200000003700 R09: 0000000000000000 [ 248.068419][ T6654] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 248.068432][ T6654] R13: 00007f1bd8c16038 R14: 00007f1bd8c15fa0 R15: 00007fffe4639ba8 [ 248.068449][ T6654] [ 248.134576][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.139159][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002A/input/input43 [ 248.150908][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.465109][ T11] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 248.805592][ T36] audit: type=1400 audit(1798045295.232:416): avc: denied { read } for pid=6686 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 248.837469][ T36] audit: type=1400 audit(1798045295.272:417): avc: denied { ioctl } for pid=6676 comm="syz.1.2303" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.967011][ T477] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 248.987012][ T11] usb 3-1: new low-speed USB device number 8 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 203) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... [ 249.117052][ T477] usb 2-1: Using ep0 maxpacket: 32 stopped /sbin/dhcpcd (pid 148) [ 249.131987][ T477] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 114, changing to 7 [ 249.146358][ T477] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.170226][ T477] usb 2-1: string descriptor 0 read error: -22 [ 249.176738][ T477] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 249.187656][ T11] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 249.202972][ T477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Stopping network: [ 249.232839][ T11] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 249.267068][ T31] usb 1-1: USB disconnect, device number 111 [ 249.278623][ T11] usb 3-1: string descriptor 0 read error: -22 [ 249.285082][ T11] usb 3-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 249.304249][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.333728][ T36] audit: type=1400 audit(1798045295.762:418): avc: denied { read write } for pid=6711 comm="ip" path="/dev/console" dev="rootfs" ino=113 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 249.421516][ T36] audit: type=1400 audit(1798045295.852:419): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 249.447984][ T6677] /dev/rnullb0: Can't open blockdev [ 249.486996][ T36] audit: type=1326 audit(1798045295.892:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 OK [ 249.539681][ T11] usb 3-1: USB disconnect, device number 8 [ 249.547961][ T36] audit: type=1326 audit(1798045295.892:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 Stopping iptables: [ 249.599573][ T6718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.607345][ T36] audit: type=1326 audit(1798045295.892:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 OK [ 249.653840][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.671556][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state Stopping system message bus: [ 249.685664][ T6716] bridge_slave_0: entered allmulticast mode [ 249.737181][ T6716] bridge_slave_0: entered promiscuous mode [ 249.763248][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.791346][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.817554][ T6716] bridge_slave_1: entered allmulticast mode [ 249.839662][ T6716] bridge_slave_1: entered promiscuous mode done [ 250.023095][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.030419][ T6716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.037991][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.045132][ T6716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.076267][ T806] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.104301][ T806] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.126368][ T31] usb 4-1: USB disconnect, device number 7 [ 250.152758][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.159864][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.193359][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.200651][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.232962][ T6729] syzkaller0: entered promiscuous mode [ 250.247806][ T6729] syzkaller0: entered allmulticast mode [ 250.288616][ T6734] tipc: Enabled bearer , priority 0 [ 250.316643][ T6729] tipc: Resetting bearer [ 250.330248][ T6716] veth0_vlan: entered promiscuous mode Stopping klogd: [ 250.370563][ T6716] veth1_macvtap: entered promiscuous mode [ 250.397150][ T6728] tipc: Resetting bearer [ 250.415536][ T6728] tipc: Disabling bearer OK Stopping acpid: [ 250.817092][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 250.937043][ T618] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 250.977046][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 250.984576][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.007629][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.019300][ T11] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.029787][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.038379][ T11] usb 3-1: Product: syz [ 251.043088][ T11] usb 3-1: Manufacturer: syz [ 251.048017][ T11] usb 3-1: SerialNumber: syz [ 251.088899][ T618] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 251.099581][ T618] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 251.109045][ T36] kauditd_printk_skb: 7279 callbacks suppressed [ 251.109066][ T36] audit: type=1326 audit(1798045297.512:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.146718][ T36] audit: type=1326 audit(1798045297.542:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.172411][ T36] audit: type=1326 audit(1798045297.542:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.200190][ T36] audit: type=1326 audit(1798045297.542:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.228440][ T618] usb 1-1: string descriptor 0 read error: -22 [ 251.234783][ T618] usb 1-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 251.244207][ T618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.252938][ T36] audit: type=1326 audit(1798045297.542:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.280802][ T36] audit: type=1326 audit(1798045297.542:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.306776][ T36] audit: type=1326 audit(1798045297.542:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.332097][ T11] usb 3-1: 0:2 : does not exist [ 251.337139][ T36] audit: type=1326 audit(1798045297.542:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.362578][ T36] audit: type=1326 audit(1798045297.542:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.398760][ T36] audit: type=1326 audit(1798045297.542:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.2303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9f39ce59 code=0x50000 [ 251.425537][ T11] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 251.437329][ T11] usb 3-1: USB disconnect, device number 9 [ 251.467002][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.483057][ T311] usb 1-1: USB disconnect, device number 112 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 251.620058][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.647535][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 251.657976][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.668559][ T31] usb 4-1: config 0 descriptor?? [ 251.688839][ T477] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 251.696893][ T477] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found umount: can't remount debugfs read-only [ 251.710020][ T6770] tipc: Started in network mode [ 251.711386][ T477] usb 2-1: USB disconnect, device number 120 [ 251.725626][ T6770] tipc: Node identity 7f000001, cluster identity 4711 [ 251.737241][ T6770] tipc: Enabled bearer , priority 10 [ 251.748307][ T6770] tipc: Enabling of bearer rejected, already enabled [ 251.757818][ T6770] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 251.766849][ T6770] tipc: Enabled bearer , priority 10 Connection to 10.128.1.27 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 251.880353][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 251.886381][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 251.927631][ T31] usb 4-1: USB disconnect, device number 8 [ 252.090049][ T297] bridge_slave_1: left allmulticast mode [ 252.096640][ T297] bridge_slave_1: left promiscuous mode [ 252.113401][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.121660][ T297] bridge_slave_0: left allmulticast mode [ 252.127765][ T297] bridge_slave_0: left promiscuous mode [ 252.133540][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.259344][ T297] veth1_macvtap: left promiscuous mode [ 252.265019][ T297] veth0_vlan: left promiscuous mode [ 252.508682][ T297] bridge_slave_1: left allmulticast mode [ 252.514891][ T297] bridge_slave_1: left promiscuous mode [ 252.520991][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.528930][ T297] bridge_slave_0: left allmulticast mode [ 252.534582][ T297] bridge_slave_0: left promiscuous mode [ 252.540261][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.547925][ T297] bridge_slave_1: left allmulticast mode [ 252.553654][ T297] bridge_slave_1: left promiscuous mode [ 252.559374][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.567043][ T297] bridge_slave_0: left allmulticast mode [ 252.572923][ T297] bridge_slave_0: left promiscuous mode [ 252.578734][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.586726][ T297] bridge_slave_1: left allmulticast mode [ 252.592484][ T297] bridge_slave_1: left promiscuous mode [ 252.598334][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.606001][ T297] bridge_slave_0: left allmulticast mode [ 252.611828][ T297] bridge_slave_0: left promiscuous mode [ 252.617566][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.849706][ T297] tipc: Disabling bearer [ 252.855047][ T297] tipc: Disabling bearer [ 252.860474][ T31] tipc: Node number set to 2130706433 [ 252.866004][ T297] tipc: Left network mode [ 252.870760][ T297] tipc: Left network mode [ 252.875324][ T297] tipc: Disabling bearer [ 252.880622][ T297] tipc: Disabling bearer [ 252.885827][ T297] tipc: Left network mode [ 252.892420][ T297] veth1_macvtap: left promiscuous mode [ 252.898033][ T297] veth0_vlan: left promiscuous mode [ 252.903820][ T297] veth1_macvtap: left promiscuous mode [ 252.909380][ T297] veth0_vlan: left promiscuous mode Sent SIGKILL to[ 252.915205][ T297] veth1_macvtap: left promiscuous mode all processes[ 252.921612][ T297] veth0_vlan: left promiscuous mode Requesting system poweroff [ 253.478701][ T297] ------------[ cut here ]------------ [ 253.484211][ T297] WARNING: CPU: 1 PID: 297 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 253.494460][ T297] Modules linked in: [ 253.498453][ T297] CPU: 1 UID: 0 PID: 297 Comm: kworker/u8:3 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 253.510132][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.520696][ T297] Workqueue: netns cleanup_net [ 253.525619][ T297] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 253.531688][ T297] Code: e8 61 b1 d2 fc 4b 83 3c 3e 00 75 19 e8 f5 fd 79 fc 49 81 ff f8 07 00 00 74 1b e8 e7 fd 79 fc 49 83 c7 08 eb c9 e8 dc fd 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 253.552297][ T297] RSP: 0018:ffffc9000b66fb90 EFLAGS: 00010293 [ 253.558666][ T297] RAX: ffffffff850dc3d4 RBX: ffff888104b611c0 RCX: ffff88812bb70000 [ 253.566849][ T297] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881047a4000 [ 253.574880][ T297] RBP: ffffc9000b66fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 253.583109][ T297] R10: dffffc0000000000 R11: fffff520016cdf04 R12: dffffc0000000000 [ 253.591181][ T297] R13: dffffc0000000000 R14: ffff8881047a4000 R15: 0000000000000000 [ 253.610966][ T297] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 253.619954][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.636236][ T297] CR2: 00007f1bd9748060 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 253.644297][ T297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.652479][ T297] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 253.660655][ T297] Call Trace: [ 253.663974][ T297] [ 253.667038][ T297] cleanup_net+0x6bd/0xc90 [ 253.671510][ T297] ? __cfi_cleanup_net+0x10/0x10 [ 253.676469][ T297] process_scheduled_works+0x7d4/0x1020 [ 253.682251][ T297] worker_thread+0xc51/0x1370 [ 253.687013][ T297] kthread+0x2c9/0x370 [ 253.691124][ T297] ? __cfi_worker_thread+0x10/0x10 [ 253.696431][ T297] ? __cfi_kthread+0x10/0x10 [ 253.701372][ T297] ret_from_fork+0x67/0xa0 [ 253.705805][ T297] ? __cfi_kthread+0x10/0x10 [ 253.710644][ T297] ret_from_fork_asm+0x1a/0x30 [ 253.715539][ T297] [ 253.718707][ T297] ---[ end trace 0000000000000000 ]--- [ 253.725018][ T297] ------------[ cut here ]------------ [ 253.730800][ T297] WARNING: CPU: 0 PID: 297 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 253.741122][ T297] Modules linked in: [ 253.745089][ T297] CPU: 0 UID: 0 PID: 297 Comm: kworker/u8:3 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 253.758487][ T297] Tainted: [W]=WARN [ 253.762321][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.772490][ T297] Workqueue: netns cleanup_net [ 253.777819][ T297] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 253.783895][ T297] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 a0 fd 79 fc 49 81 ff f8 07 00 00 74 1b e8 92 fd 79 fc 49 83 c7 08 eb c5 e8 87 fd 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 77 fd 79 fc 5b 41 5c 41 5e 41 [ 253.804189][ T297] RSP: 0018:ffffc9000b66fb90 EFLAGS: 00010293 [ 253.810313][ T297] RAX: ffffffff850dc429 RBX: ffff8881047a4800 RCX: ffff88812bb70000 [ 253.818339][ T297] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881047a4808 [ 253.826389][ T297] RBP: ffffc9000b66fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 253.834417][ T297] R10: dffffc0000000000 R11: fffff520016cdf04 R12: dffffc0000000000 [ 253.842751][ T297] R13: dffffc0000000000 R14: ffff8881047a4000 R15: 0000000000000008 [ 253.851032][ T297] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 253.860062][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.866683][ T297] CR2: 000000110c2e4174 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 253.874813][ T297] Call Trace: [ 253.878135][ T297] [ 253.881078][ T297] cleanup_net+0x6bd/0xc90 [ 253.885583][ T297] ? __cfi_cleanup_net+0x10/0x10 [ 253.890798][ T297] process_scheduled_works+0x7d4/0x1020 [ 253.897588][ T297] worker_thread+0xc51/0x1370 [ 253.902594][ T297] kthread+0x2c9/0x370 [ 253.906813][ T297] ? __cfi_worker_thread+0x10/0x10 [ 253.912004][ T297] ? __cfi_kthread+0x10/0x10 [ 253.916725][ T297] ret_from_fork+0x67/0xa0 [ 253.921655][ T297] ? __cfi_kthread+0x10/0x10 [ 253.926316][ T297] ret_from_fork_asm+0x1a/0x30 [ 253.931254][ T297] [ 253.934383][ T297] ---[ end trace 0000000000000000 ]--- [ 253.941011][ T6773] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 253.949362][ T6773] ACPI: PM: Preparing to enter system sleep state S5 [ 253.950945][ T297] ------------[ cut here ]------------ [ 253.962256][ T297] WARNING: CPU: 0 PID: 297 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 253.972802][ T297] Modules linked in: [ 253.977057][ T297] CPU: 0 UID: 0 PID: 297 Comm: kworker/u8:3 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 253.990622][ T297] Tainted: [W]=WARN [ 253.994442][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.005604][ T297] Workqueue: netns cleanup_net [ 254.010599][ T297] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 254.016191][ T297] Code: 3c 20 00 74 08 48 89 df e8 2f 8c ed fc 48 8b 3b e8 27 82 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 d8 94 fc <0f> 0b e9 b0 fd ff ff e8 a6 d8 94 fc 0f 0b e9 18 fe ff ff e8 9a d8 [ 254.036221][ T297] RSP: 0018:ffffc9000b66fb70 EFLAGS: 00010293 [ 254.042478][ T297] RAX: ffffffff84f2e8fe RBX: ffff888104b611c0 RCX: ffff88812bb70000 [ 254.050546][ T297] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88812bb70000 [ 254.058784][ T297] RBP: ffffc9000b66fb98 R08: ffffffff87d4a4c7 R09: 1ffffffff0fa9498 [ 254.068325][ T297] R10: dffffc0000000000 R11: fffffbfff0fa9499 R12: 1ffffffff0fa91e8 [ 254.076442][ T297] R13: dffffc0000000000 R14: ffff888104b61dc0 R15: dffffc0000000000 [ 254.084741][ T297] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 254.093793][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.100842][ T297] CR2: 000000110c2e4174 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 254.109445][ T297] Call Trace: [ 254.112772][ T297] [ 254.115810][ T297] xfrm_net_exit+0x31/0x80 [ 254.120309][ T297] cleanup_net+0x6bd/0xc90 [ 254.125619][ T297] ? __cfi_cleanup_net+0x10/0x10 [ 254.130628][ T297] process_scheduled_works+0x7d4/0x1020 [ 254.136605][ T297] worker_thread+0xc51/0x1370 [ 254.141377][ T297] kthread+0x2c9/0x370 [ 254.145494][ T297] ? __cfi_worker_thread+0x10/0x10 [ 254.151179][ T297] ? __cfi_kthread+0x10/0x10 [ 254.155814][ T297] ret_from_fork+0x67/0xa0 [ 254.160299][ T297] ? __cfi_kthread+0x10/0x10 [ 254.164918][ T297] ret_from_fork_asm+0x1a/0x30 [ 254.170031][ T297] [ 254.173122][ T297] ---[ end trace 0000000000000000 ]--- [ 254.178843][ T6773] kvm: exiting hardware virtualization [ 254.184450][ T6773] reboot: Power down serialport: VM disconnected.