last executing test programs: 3.966661248s ago: executing program 1 (id=259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100800000001079004418000904004001c04acae0"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='proc\x00', 0x2000002, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/pid_for_children\x00') (fail_nth: 23) 3.270098679s ago: executing program 1 (id=261): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC=r1, @ANYBLOB="080eff2985a7231c8a87c0c98acecc8bab189f8662b24b74c2179dee5b57fe31035b126fed3f288f972e6fac3c54a205f66c72877111b62b42034433c3dd4ef81ea9879a9d6856ee6998b8f60d7901e9747b3180d099bf6d90578e7bffbeabe56cf4299183dd22", @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r4, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="27b769a8a55f"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000040) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x8, 0x0, 0x0, r3}, 0xc) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@phonet={0x23, 0x6f, 0x3, 0x9}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="3ae1e388329f578b6b531a3eb881ceccaa52176812725ca81212a5e47686c839e99d11cb350f06681103819d1e229ccba98902c42e03e2c71e01a179e2ce3ab42c00ab7816598741b4e26f813cdef4d73ce0a9776cd004b8fabeda1bbb3271bcfa86d35dc926a5303bbc7b7db2201f7e7a66eb1b54c1dffa", 0x78}, {&(0x7f0000000140)="78d466d0efb1380de10ffb44da7f3400c22b4fb550ad99a9b9eab3289a1b9c0c01a7bbb06fe5e80333ea4d6eafa3c4b8ca08bf95ac7fb2a5e5b9d4fda4873c5653d048520836419560b1bed36d8f3f3384a8f70650c4cc5d7d18d74eb66bb0be68dcb10e0ad792092ada7cd09ff602980e30a694774d2f92520077c1d046f5da0c01939add1ea4ce8242ddb70e0311ed2c80b3c813f62e00ac8a2615979aa5c78cf5f34b4b7091faeb48cafd6fab2f59517ba1ad0d930ed72ee0ccfd26fb8ff9eaafec1c71282b18405b96833b621618ba6dc93956702cca94457fb8b7c8f095", 0xe0}, {&(0x7f0000000280)="248ca55d02ad81222ff68b28633dd3c7d656d6445d20e207bf8d3d13c54d30af2c", 0x21}], 0x3, &(0x7f0000000400)=[{0x110, 0x107, 0x10, "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"}], 0x110}, 0x4000005) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r3}, 0xc) 3.24600331s ago: executing program 1 (id=262): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x7ff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) close_range(r1, r1, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) 3.177942854s ago: executing program 1 (id=263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8c0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000280)=[0x5, 0x8026, 0x2, 0x8, 0x6, 0x8, 0xa4, 0x2]) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0xe8, 0xe8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@broadcast, @local, 0x0, 0xff000001, 0xa, 0xe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8002, 0x3, 0x401, 0x79f, 0x0, 0x1000, 'syz_tun\x00', 'nr0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @private}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @empty, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x8000000, &(0x7f00000009c0)="ebbecf81e9af87893e", 0x9, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="712845b04c412344d324abf60192126b19a595eca66342a37e66b4d3b2410800000000000000477cb7051a5b535d90c6e1448e95957c314e6589251d6179e2ec48bff9956c0e3a95ab6e011abd1a16af3ee7b8b9e0c0110d") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x27) r6 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) wait4(0x0, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r8 = eventfd(0x0) read$eventfd(r8, &(0x7f0000000240), 0x8) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="16219045fac3de3df28dce10711ba962951c5db3fb7d0d51f0b8322dbf33ebdab01b5d201bd2821d2a434376f44dbd0c8a65f40e843e854b01ae27aca56ef54f58ccc0530d0becb13800b362357638e84917d474cb3029da47eba0e5f1c9d67bfd", 0x61}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cee000) r9 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000980)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) remap_file_pages(&(0x7f0000d98000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff) 2.782229678s ago: executing program 2 (id=267): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1c, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xfff1, 0x9, 0x1, {0x22, 0x5af}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0x6, 0x40, 0xff, 0x5}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9c, "c5c91a420b19275e2e4667d4df865e09"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x69, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x3, 0xd932}, @ptm_cap={0x3}]}, 0x1, [{0xdf, &(0x7f00000000c0)=@string={0xdf, 0x3, "307a8c67042e0a6357209b4fa146b8cfa622fbfe43fb8252582ef791e0542f42b44029519c1cb37ba2d583cf123ed6f15fee3eda71e7660174a50e11ecbffdfbfc9c3c26f39925505ca8f4fba62ebf95c2b7838c18b471c2136b0cd86288813ed13439f61d359ced548ed41f3b97cabf0f9da383d039f1a099d1b6fd945dd83a88247e769d9470849c02002765434893f1328331f196c206ca309706a2b6c9ff341e754b538753b624b19453049f9e1a30791c0f177ed6b1130e1fe6221c4fa7d08aeef60eda49212a1bf301c79c2d96e7c8f6ac4324fa1c8ae2a4ee25"}}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480), 0x40481, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x70, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x81, 0xc0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a53a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x800, 0xfc00, 0xf7}, {0x6, 0x24, 0x1a, 0x9, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x2, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe3, 0xf7, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xa1, 0x5, 0x1}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x1, 0x9, 0xdb, 0x40, 0x7}, 0x2d, &(0x7f00000002c0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x88, "bf025d95d7463c254514958ebc82ad77"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6c909e25fd4d81ddd7d0d60967bd1151"}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x9cee5379c825d67e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x240a}}, {0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "c0b863374dc0d45b615cbc451f7d3e0eab830971ae77000934edec8c3b27133e329d8da85d850da7f032ddd9b5ff023310b52f8c970190a0c8c3c97d395afae9f395f57cf5a1c8b299485632d21e8de1e00871267bb6863fad5651b3afc8d1eec92a023fad07be26122c7e6b407f4a9b64e468e51cc5d0576c53d0877b9c0543098b5f30c075d1bb"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x81a}}, {0xca, &(0x7f0000000540)=@string={0xca, 0x3, "d5871aa5cf6243272e2d40123086271f07cc3bbb8eb250a2ce5d0bfddfa6aabb4eeb240058d337ad70938638dcf0763abe75c85e84e2e1471d43412078757193f91bd2b9478bd8d49b033a1367753a828a27e86519ed5a25b99a0021d92972706799ac86c48abbeed24332ee0daa210193f45335fb82996627fa1d032ce2d0e3fde450470717092c7c7acf7f370b347bd13a74912890c4b8109043ff99517e634898176a0cb3c58b8ebe78bd45f3968e7cf0d1fa450f812165c0bda7f56374e308dbc9d85cbc7f73"}}, {0xfb, &(0x7f0000000740)=@string={0xfb, 0x3, "ef0ffbbaf27b8a1c0ee08f3bd19bfa52358b60c7d19052d3728873a952731819c50973bbe3da47374fa69ec68dad51152a79351d80dfeed8b7211b466f7ea776b5cba73f2f9d18eeb6686d115b319558beb3010c170b31447d97e1e2307a0534b0dcf9aa27aa010386982013e5abeb9ea5861c61c6d7f487b84abfe98aca8fd114f816034553a521bf14d74dbaae17f6c3a2db0cb9bdcc7fa4526b9bf74369aea493e9cf57e5a703fecc706291293aca0beb08e2107c5090c652b26d10e460eb440862a1cfa2c2ef2d2dd4cd446fc104746a0c6c39bf31a4b2efd870196b25998581cd6eb301441f61c98ba037e0f0d5317613677f379c7487"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3001}}]}) 1.757757547s ago: executing program 3 (id=270): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) r2 = dup(r0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1800}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6c5", 0x2) setsockopt$inet6_int(r5, 0x29, 0x10, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1b5b0cee4e7e5acd000008", @ANYRES16=r7, @ANYBLOB="0100000000000000000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x4894}, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "1ae2977c660233b4", "c528944f13d264d586bf65436479c184", "0baf923c", "076dba2bebe6cb25"}, 0x28) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040001) close(0x3) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x2, r2}) r9 = socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000480)='--.^\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00009d0000/0x4000)=nil, 0x4000, 0xb) sendmsg$netlink(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000810000000000e682000000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES64=0x0, @ANYBLOB="ef001b92c763ad4cdff744792af05008d0d075627fa2b2f471f29f4bd69a21326ac4e8bf525a890d63756f054e38185dbbc0baf45dd574902b6c5a60c466a7e926e3cfd3583b7c1c9ad9363096bc6f21f6e3d1787afca58729d4e290ca0d16202e14d1a544412509994d749bb0a282efbc7f3bd28f7816d1eff2f8"], 0x2c}, {&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\x00'], 0x15c}], 0x2}, 0x0) 1.53432525s ago: executing program 0 (id=273): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x2, {0x19d2, 0x3, 0x4, 0x9, 0x6d, 0x800007}}) 1.53373056s ago: executing program 0 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) close(r3) close_range(r0, 0xffffffffffffffff, 0x0) 1.442463236s ago: executing program 0 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100800000001079004418000904004001c04acae0"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='proc\x00', 0x2000002, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/pid_for_children\x00') setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x80000001, 0x4) 1.420232337s ago: executing program 3 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fspick(0xffffffffffffffff, 0x0, 0xccdd3aaf1369b769) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x1000, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x8080000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x3, 0x2, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x0, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x0, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x8, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x4000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x2, 0x8]}) r3 = inotify_init() poll(&(0x7f0000000000)=[{r3, 0xd408}], 0x1, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)={@val={0xa, 0x10}, @void, @eth={@broadcast, @random="cf3f53f449aa", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x8, 0x2c, 0x0, @private2, @mcast2, {[@fragment={0xc, 0x0, 0xc0, 0x0, 0x0, 0x17, 0x64}]}}}}}}, 0x42) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.230261758s ago: executing program 3 (id=277): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r0, &(0x7f00000001c0)=0xc, 0xfffffdd9) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @code={0xa, 0x60, {"b805000000b9e8d100000f01c1f045802bbdc4417f5edd66b8dc008ed8660f104c878766460f38802cf26764440f01df266743250000008066baf80cb8289d308fef66bafc0cb81c350000ef660f08"}}, @wrmsr={0x1e, 0x20, {0x203, 0xffffffffffffff84}}, @code={0xa, 0x76, {"f3430fbd0cf500800000c423bdcfe300c481e972f50048b800000000000000000f23d00f21f835300000010f23f8f33e3e670f21fbc7442400ad321d6bc744240200000000c7442406000000000f011c240f782e710e6666460f3a210ab9b94b0600000f32"}}, @wr_drn={0x68, 0x20, {0x4, 0x4}}, @code={0xa, 0x64, {"8f891801b304000000b9de0a00000f32f3460faeb4d72b870000362e0fc7b9ac4100002e430f00d6f0211d002000000fc7720066baf80cb89298d58fef66bafc0c66b8121f66efc4639d787b5c0066ba6100ec"}}, @code={0xa, 0x8a, {"48b85f9f0000000000000f23d00f21f835000000020f23f82666400f383e133e440f01c40f20e035080000000f22e00f20c035020000000f22c044e1d748b804000000000000000f23d80f21f835000000100f23f8b805000000b94bb0bb410f01c10fc77900c744240002010000c744240200500000ff1c24"}}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @rdmsr={0x32, 0x18, {0x4b564d00}}, @rdmsr={0x32, 0x18, {0x316}}, @wr_crn={0x46, 0x20, {0x8, 0xffffffffffffff00}}, @wrmsr={0x1e, 0x20, {0x339, 0x7fffffff}}, @code={0xa, 0x58, {"641084b9236400000f746ff866b8a4000f00d8b9040400000f32dcf4b9d40b00000f32c40119599cb06d97676866baf80cb836f2b780ef66bafc0cb0e4eec402359ae9440f01f1"}}, @wr_crn={0x46, 0x20, {0x2, 0x4000000}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @rdmsr={0x32, 0x18, {0x2d3}}, @rdmsr={0x32, 0x18, {0x35c}}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @code={0xa, 0x65, {"8f88308512f066baf80cb83d74568eef66bafc0cec66baf80cb88821e88bef66bafc0cb871050000ef450f01d76566460f3882100f011d0f000000f0876da5660fc7b1030000002e0fc75800460fc79e6e3966eb"}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @wr_crn={0x46, 0x20, {0x4}}, @wrmsr={0x1e, 0x20, {0x340, 0x8}}, @cpuid={0x14, 0x18, {0x401, 0x7}}, @uexit={0x0, 0x18, 0xfffffffffffff701}, @wrmsr={0x1e, 0x20, {0x0, 0x3ff}}, @rdmsr={0x32, 0x18, {0x8b2}}, @rdmsr={0x32, 0x18, {0xbae}}], 0x4f1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 1.19177903s ago: executing program 2 (id=278): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x22000000, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x3]}}) 1.133566744s ago: executing program 2 (id=279): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x140000, &(0x7f0000000400)={[{@metacopy_off}, {@volatile}, {@redirect_dir_on}, {@metacopy_off}, {@uuid_auto}, {@redirect_dir_off}], [{@uid_gt={'uid>', r0}}, {@dont_measure}, {@permit_directio}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setxattr$security_evm(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@sha1={0x1, "2b64cb2c8945d0653b000d6418b3d48b5c466154"}, 0x15, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0xcbbb, 0x0, '\x00', 0x0, 0x0}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000005c0)={0x2, 0x0, [{0x2ea, 0x0, 0x400}, {0x380, 0x0, 0xfffffffffffffff3}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x6, 0xf3b6, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r4, 0xae80, 0x0) listen(r1, 0xfffffffe) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, r2, 0x1263b000) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)='cifs\x00', 0x80a018, &(0x7f0000000580)='uuid=auto') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setresgid(0xffffffffffffffff, 0xee00, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r6, &(0x7f00000076c0)={0x2020}, 0x2020) 426.311275ms ago: executing program 0 (id=280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81801) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x100, 0x64}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) setsockopt(r0, 0x0, 0x9, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 426.106675ms ago: executing program 0 (id=281): timer_create(0x3, 0x0, &(0x7f0000000300)) (async) setrlimit(0x0, &(0x7f0000000180)={0x2, 0x4}) (async) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) (async) unshare(0x40000000) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)) 337.59981ms ago: executing program 3 (id=282): syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x90) sendto$inet(r1, &(0x7f0000000100)="799f7e8abddfc220a7fd085cbd551429a45d3264414f0ad358944236d16a6ae5846e837b2b40e184017deff6b9f6fd7284a0bb27bff4f32e5c8433bd4fe59b6ed4c49d4aca2c48b8bb0036e87078c03ddfb3500a7abf9db93ac1c53052ad2f7fd388c11a2051645df8b2f08447bfebf98d58128ddc43a843aa0a10cc32392d83cbd6fda115a642d872f57c18d4369c1d40", 0x91, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 317.604201ms ago: executing program 3 (id=283): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000002000000825bd7000fedbdf25ff000000ff010000000000000000000000000000000000004e2100074e2205ff0a00202011000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x20004044) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000940)={@private2, 0x4, 0x0, 0x1, 0x9, 0x81, 0x8}, &(0x7f0000000980)=0x20) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000000040)={0xa, 0x2, 0x7, @rand_addr, 0x5}, 0x1c) 246.278806ms ago: executing program 3 (id=284): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0xa, 0x5, 0x9, 0x9b}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000001380)={0xa, 0x4e22, 0x1, @empty, 0x8}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 243.780106ms ago: executing program 2 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x200000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000300)={0xfffffffffffffffc, 0x6, 0x1}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000000000025bd000000000000000004074e224e220300000003000000f803000006000000070000000100000001010000ffffffff", @ANYRES32=0x0, @ANYBLOB="93000000090000000100010003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x12) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000040000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000fc0000000000000000000000000000010000000001030000000000000600000000000000fc010000000000000000000000000000000000003c000000020000000000000000000000000000000000000000000000020000000000000003000000286a8b2700000000000000000000000000000000000000003c"], 0x23c}}, 0x0) unshare(0x6020400) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x26000, 0x8, 0xb, 0x3, 0x4, 0x44, 0xd, 0x0, 0x2e, 0x17}, {0x5000, 0x2, 0x3, 0x6, 0x40, 0x9, 0x7f, 0x15, 0x5, 0x6, 0x3}, {0x80a0000, 0x4000, 0xa, 0x18, 0x3, 0x5, 0x0, 0x60, 0x0, 0xa7, 0x8}, {0x50000, 0x10000, 0xa, 0x3, 0x3, 0x2, 0x9, 0xf8, 0x9, 0x9, 0x6}, {0xeeee0000, 0x3000, 0x10, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0xeee9b000, 0x4000, 0xc, 0xa0, 0xb1, 0x8, 0x0, 0xa4, 0x9, 0x13, 0x1, 0xf}, {0x100000, 0xdddd1000, 0x4, 0x5, 0x0, 0x5, 0x4, 0x5, 0x3, 0x84, 0x3, 0x71}, {0x0, 0x5000, 0xb, 0x5, 0xf, 0x9, 0x1, 0xe2, 0x2, 0x8, 0x7, 0x9}, {0x18002, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x60, 0x3]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042086dd"], 0xfdef) r10 = openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000001400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10012, r6, 0x0) write(r6, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 190.232729ms ago: executing program 2 (id=286): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="99e0c2c86d5db6e936005dc2e6b185e2295711743169ffbce4061ba55d74f486bcae2f1b72fc2bb8601fd4293b96423954aebf8081d7fcf8e2160f4d", 0x3c, 0x2000004, &(0x7f0000000040)={0xa, 0x4e20, 0x30, @private2, 0x6}, 0x1c) openat$incfs(0xffffffffffffffff, &(0x7f0000000480)='.pending_reads\x00', 0x2, 0x145) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x53, [0xfffffff6, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x1ff, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x0, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0xfffffffe, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)='U', 0x1}], 0x1}, 0x48000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write(r0, &(0x7f00000000c0)="8f2a0a65", 0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) 140.514162ms ago: executing program 1 (id=287): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x40000000, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x3]}}) 70.207236ms ago: executing program 1 (id=288): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x1, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x20, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100800000001079004418000904004001c04acae0", @ANYRESOCT=r3], 0x0) unshare(0x2000400) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCSETS(r6, 0x5434, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{0xdddd1000, 0x100000, 0xc, 0x4, 0x4, 0xff, 0x2, 0xf, 0x0, 0x6, 0x5, 0x4}, {0x60000, 0x0, 0xb, 0x4, 0x4, 0xa, 0x4, 0xa, 0x1, 0x6, 0x4, 0x7}, {0xeeef0000, 0xe000, 0x10, 0xf9, 0x4, 0x9, 0x4, 0x4, 0x3, 0x0, 0xd, 0x1}, {0xa000, 0x7000, 0xa, 0x0, 0x0, 0x80, 0xb, 0x2, 0x1, 0x7f, 0x1, 0x4}, {0x4, 0xeeef0000, 0xf, 0x8, 0x6, 0x2, 0xfb, 0x8, 0x3, 0x0, 0x5, 0x3}, {0x58000, 0x200000, 0x10, 0x6, 0x1, 0x2, 0x3, 0x8, 0x4, 0x77, 0xc, 0xee}, {0x1, 0x1, 0x9, 0x4a, 0x4, 0xfd, 0x5, 0x2, 0x1, 0x0, 0x7f, 0xc}, {0x80a0000, 0x2, 0x9, 0x4, 0x87, 0x7, 0x9, 0x6, 0x7, 0x1, 0x6, 0xa}, {0x2000, 0x7}, {0x54000, 0x2}, 0x4, 0x0, 0x800d000, 0x440412, 0x8, 0xcd01, 0x60000, [0x5, 0x4, 0x3, 0x8001]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r8, r8) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='proc\x00', 0x2000002, 0x0) 25.020999ms ago: executing program 2 (id=289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x1}) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r4 = userfaultfd(0x80001) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@private0, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) capset(&(0x7f0000000740)={0x20080522, r1}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) syz_usb_connect$hid(0x2, 0x6c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000009e04000001030000000921000000b7220500090581030000"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) gettid() (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x1}) (async) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async) userfaultfd(0x80001) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@private0, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) (async) capset(&(0x7f0000000740)={0x20080522, r1}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) (async) syz_usb_connect$hid(0x2, 0x6c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000009e04000001030000000921000000b7220500090581030000"], 0x0) (async) 0s ago: executing program 0 (id=290): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r0, &(0x7f00000001c0)=0xc, 0xfffffdd9) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @code={0xa, 0x60, {"b805000000b9e8d100000f01c1f045802bbdc4417f5edd66b8dc008ed8660f104c878766460f38802cf26764440f01df266743250000008066baf80cb8289d308fef66bafc0cb81c350000ef660f08"}}, @wrmsr={0x1e, 0x20, {0x203, 0xffffffffffffff84}}, @uexit={0x0, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x4, 0x4}}, @code={0xa, 0x64, {"8f891801b304000000b9de0a00000f32f3460faeb4d72b870000362e0fc7b9ac4100002e430f00d6f0211d002000000fc7720066baf80cb89298d58fef66bafc0c66b8121f66efc4639d787b5c0066ba6100ec"}}, @code={0xa, 0x8a, {"48b85f9f0000000000000f23d00f21f835000000020f23f82666400f383e133e440f01c40f20e035080000000f22e00f20c035020000000f22c044e1d748b804000000000000000f23d80f21f835000000100f23f8b805000000b94bb0bb410f01c10fc77900c744240002010000c744240200500000ff1c24"}}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @rdmsr={0x32, 0x18, {0x4b564d00}}, @rdmsr={0x32, 0x18, {0x316}}, @wr_crn={0x46, 0x20, {0x8, 0xffffffffffffff00}}, @wrmsr={0x1e, 0x20, {0x339, 0x7fffffff}}, @code={0xa, 0x58, {"641084b9236400000f746ff866b8a4000f00d8b9040400000f32dcf4b9d40b00000f32c40119599cb06d97676866baf80cb836f2b780ef66bafc0cb0e4eec402359ae9440f01f1"}}, @wr_crn={0x46, 0x20, {0x2, 0x4000000}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @rdmsr={0x32, 0x18, {0x2d3}}, @rdmsr={0x32, 0x18, {0x35c}}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @code={0xa, 0x65, {"8f88308512f066baf80cb83d74568eef66bafc0cec66baf80cb88821e88bef66bafc0cb871050000ef450f01d76566460f3882100f011d0f000000f0876da5660fc7b1030000002e0fc75800460fc79e6e3966eb"}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @wr_crn={0x46, 0x20, {0x4}}, @wrmsr={0x1e, 0x20, {0x340, 0x8}}, @cpuid={0x14, 0x18, {0x401, 0x7}}, @uexit={0x0, 0x18, 0xfffffffffffff701}, @wrmsr={0x1e, 0x20, {0x0, 0x3ff}}, @rdmsr={0x32, 0x18, {0x8b2}}, @rdmsr={0x32, 0x18, {0xbae}}], 0x493}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 26.159551][ T36] audit: type=1400 audit(1769897714.160:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.163149][ T282] cgroup: Unknown subsys name 'net' [ 26.182237][ T36] audit: type=1400 audit(1769897714.160:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.209659][ T36] audit: type=1400 audit(1769897714.190:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.210127][ T282] cgroup: Unknown subsys name 'devices' [ 26.369345][ T282] cgroup: Unknown subsys name 'hugetlb' [ 26.374998][ T282] cgroup: Unknown subsys name 'rlimit' [ 26.530292][ T36] audit: type=1400 audit(1769897714.530:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.553898][ T36] audit: type=1400 audit(1769897714.530:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.578933][ T36] audit: type=1400 audit(1769897714.530:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.619149][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.628088][ T36] audit: type=1400 audit(1769897714.630:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.652061][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.653811][ T36] audit: type=1400 audit(1769897714.630:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.688082][ T36] audit: type=1400 audit(1769897714.650:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.713711][ T36] audit: type=1400 audit(1769897714.650:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.164166][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.171328][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.178785][ T289] bridge_slave_0: entered allmulticast mode [ 28.185089][ T289] bridge_slave_0: entered promiscuous mode [ 28.192944][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.200151][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.207343][ T289] bridge_slave_1: entered allmulticast mode [ 28.213597][ T289] bridge_slave_1: entered promiscuous mode [ 28.301496][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.308641][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.315736][ T290] bridge_slave_0: entered allmulticast mode [ 28.322274][ T290] bridge_slave_0: entered promiscuous mode [ 28.331752][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.339227][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.346292][ T290] bridge_slave_1: entered allmulticast mode [ 28.352681][ T290] bridge_slave_1: entered promiscuous mode [ 28.398536][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.405617][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.412788][ T292] bridge_slave_0: entered allmulticast mode [ 28.419124][ T292] bridge_slave_0: entered promiscuous mode [ 28.425621][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.432859][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.439958][ T292] bridge_slave_1: entered allmulticast mode [ 28.446276][ T292] bridge_slave_1: entered promiscuous mode [ 28.458748][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.465807][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.473163][ T291] bridge_slave_0: entered allmulticast mode [ 28.479495][ T291] bridge_slave_0: entered promiscuous mode [ 28.497732][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.504821][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.512166][ T291] bridge_slave_1: entered allmulticast mode [ 28.518518][ T291] bridge_slave_1: entered promiscuous mode [ 28.580790][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.587883][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.595179][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.602251][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.659888][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.666976][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.674258][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.681333][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.734523][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.741703][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.749024][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.756058][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.764854][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.772982][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.780740][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.788268][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.795496][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.802933][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.832485][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.839594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.862858][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.869969][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.898929][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.905992][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.913876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.920938][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.929168][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.936201][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.943896][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.950944][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.958702][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.965736][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.973368][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.980458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.035643][ T291] veth0_vlan: entered promiscuous mode [ 29.043879][ T289] veth0_vlan: entered promiscuous mode [ 29.062510][ T291] veth1_macvtap: entered promiscuous mode [ 29.079215][ T289] veth1_macvtap: entered promiscuous mode [ 29.085903][ T290] veth0_vlan: entered promiscuous mode [ 29.093499][ T292] veth0_vlan: entered promiscuous mode [ 29.125138][ T290] veth1_macvtap: entered promiscuous mode [ 29.133816][ T292] veth1_macvtap: entered promiscuous mode [ 29.159999][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.198484][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.486863][ T66] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.506973][ T46] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 29.517118][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.637940][ T66] usb 2-1: config 95 has an invalid interface number: 213 but max is 0 [ 29.646277][ T66] usb 2-1: config 95 has no interface number 0 [ 29.652892][ T66] usb 2-1: config 95 interface 213 has no altsetting 0 [ 29.661065][ T46] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 29.669382][ T46] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 29.680050][ T46] usb 4-1: config 0 has no interface number 0 [ 29.686267][ T46] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 2304, setting to 64 [ 29.697404][ T66] usb 2-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=e2.44 [ 29.706478][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.714858][ T46] usb 4-1: config 0 interface 46 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.728467][ T66] usb 2-1: Product: syz [ 29.732778][ T66] usb 2-1: Manufacturer: syz [ 29.737522][ T66] usb 2-1: SerialNumber: syz [ 29.742274][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.753605][ T31] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.767459][ T46] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 29.777198][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.785470][ T46] usb 4-1: Product: syz [ 29.789880][ T46] usb 4-1: Manufacturer: syz [ 29.794554][ T46] usb 4-1: SerialNumber: syz [ 29.799891][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.809740][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.818167][ T46] usb 4-1: config 0 descriptor?? [ 29.823265][ T31] usb 3-1: Product: syz [ 29.827557][ T31] usb 3-1: Manufacturer: syz [ 29.827709][ T338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 29.832268][ T31] usb 3-1: SerialNumber: syz [ 29.844613][ T46] ums-karma 4-1:0.46: USB Mass Storage device detected [ 29.854282][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 29.859806][ T31] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 29.867383][ T31] cdc_ncm 3-1:1.0: bind() failure [ 29.873455][ T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 29.880362][ T31] cdc_ncm 3-1:1.1: bind() failure [ 29.988281][ T336] usb usb8: usbfs: process 336 (syz.1.2) did not claim interface 0 before use [ 30.002188][ T66] usb 2-1: USB disconnect, device number 2 [ 30.044742][ T338] tipc: Started in network mode [ 30.050088][ T338] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 30.057615][ T338] tipc: Enabled bearer , priority 2 [ 30.063859][ T46] usb 3-1: USB disconnect, device number 2 [ 30.085047][ T10] usb 4-1: USB disconnect, device number 2 [ 30.122187][ T365] loop2: detected capacity change from 0 to 10 [ 30.132416][ T342] Buffer I/O error on dev loop2, logical block 1, async page read [ 30.243610][ T373] syzkaller0: entered promiscuous mode [ 30.249456][ T373] syzkaller0: entered allmulticast mode [ 30.272329][ T374] Zero length message leads to an empty skb [ 30.497009][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.658117][ T46] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 30.713374][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 30.730399][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.742006][ T46] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 31.098271][ T10] usb 1-1: USB disconnect, device number 2 [ 31.154357][ T392] capability: warning: `syz.3.18' uses deprecated v2 capabilities in a way that may be insecure [ 31.176739][ T366] tipc: Node number set to 10070698 [ 31.211762][ T394] loop2: detected capacity change from 0 to 17 [ 31.215293][ T396] raw_sendmsg: syz.2.20 forgot to set AF_INET. Fix it! [ 31.218105][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 31.218147][ T36] audit: type=1400 audit(1769897719.210:133): avc: denied { write } for pid=395 comm="syz.2.20" lport=42 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.260088][ T342] Buffer I/O error on dev loop2, logical block 2, async page read [ 31.270696][ T399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.383494][ T36] audit: type=1400 audit(1769897719.380:134): avc: denied { mounton } for pid=407 comm="syz.2.24" path="/6/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.405995][ T361] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.424583][ T36] audit: type=1400 audit(1769897719.420:135): avc: denied { create } for pid=409 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.443744][ T36] audit: type=1400 audit(1769897719.420:136): avc: denied { ioctl } for pid=409 comm="syz.2.25" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.492903][ T36] audit: type=1400 audit(1769897719.490:137): avc: denied { read write } for pid=414 comm="syz.2.26" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.516021][ T36] audit: type=1400 audit(1769897719.490:138): avc: denied { open } for pid=414 comm="syz.2.26" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.540455][ T415] overlay: Unknown parameter 'appraise' [ 31.547338][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.567993][ T361] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 31.576123][ T361] usb 4-1: config 1 has no interface number 0 [ 31.582689][ T361] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 31.592726][ T361] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 31.604741][ T361] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 31.613896][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.622078][ T361] usb 4-1: Product: syz [ 31.626281][ T361] usb 4-1: Manufacturer: syz [ 31.631212][ T361] usb 4-1: SerialNumber: syz [ 31.637087][ T392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.644283][ T392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.708567][ T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 31.720046][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.726880][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 31.735934][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.745381][ T10] usb 2-1: config 0 descriptor?? [ 31.906741][ T361] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.056759][ T361] usb 1-1: Using ep0 maxpacket: 16 [ 32.063299][ T36] audit: type=1400 audit(1769897720.060:139): avc: denied { mounton } for pid=418 comm="syz.0.27" path="/proc/15/task" dev="proc" ino=4294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 32.064440][ T419] FAULT_INJECTION: forcing a failure. [ 32.064440][ T419] name failslab, interval 1, probability 0, space 0, times 1 [ 32.098199][ T419] CPU: 1 UID: 0 PID: 419 Comm: syz.0.27 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 32.098242][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 32.098263][ T419] Call Trace: [ 32.098273][ T419] [ 32.098281][ T419] __dump_stack+0x21/0x30 [ 32.098318][ T419] dump_stack_lvl+0x140/0x1c0 [ 32.098347][ T419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.098374][ T419] dump_stack+0x19/0x20 [ 32.098402][ T419] should_fail_ex+0x3d7/0x530 [ 32.098419][ T419] should_failslab+0xac/0x100 [ 32.098457][ T419] __kmalloc_cache_noprof+0x41/0x470 [ 32.098485][ T419] ? proc_self_get_link+0x119/0x290 [ 32.098506][ T419] proc_self_get_link+0x119/0x290 [ 32.098525][ T419] ? security_inode_follow_link+0x7e/0x180 [ 32.098557][ T419] ? __cfi_proc_self_get_link+0x10/0x10 [ 32.098572][ T419] pick_link+0x6d4/0xe80 [ 32.098591][ T419] step_into+0xc68/0xf60 [ 32.098630][ T419] ? __kasan_check_read+0x15/0x20 [ 32.098654][ T419] ? read_word_at_a_time+0x1a/0x40 [ 32.098685][ T419] ? set_root+0x420/0x420 [ 32.098707][ T419] ? lookup_fast+0x167/0x530 [ 32.098725][ T419] ? inode_permission+0xf3/0x4c0 [ 32.098760][ T419] link_path_walk+0x753/0xec0 [ 32.098789][ T419] path_openat+0x287/0x34f0 [ 32.098820][ T419] ? stack_depot_save_flags+0x38/0x800 [ 32.098849][ T419] ? kasan_save_track+0x3e/0x80 [ 32.098879][ T419] ? kasan_save_alloc_info+0x40/0x50 [ 32.098910][ T419] ? do_sys_openat2+0xda/0x1d0 [ 32.098932][ T419] ? __x64_sys_openat+0x13a/0x170 [ 32.098953][ T419] ? x64_sys_call+0xe69/0x2ee0 [ 32.098981][ T419] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.099012][ T419] ? do_filp_open+0x440/0x440 [ 32.099036][ T419] do_filp_open+0x1f5/0x440 [ 32.099086][ T419] ? __cfi_do_filp_open+0x10/0x10 [ 32.099122][ T419] ? alloc_fd+0x4e6/0x5a0 [ 32.099153][ T419] do_sys_openat2+0x134/0x1d0 [ 32.099168][ T419] ? fput+0x1a4/0x240 [ 32.099180][ T419] ? do_sys_open+0x100/0x100 [ 32.099194][ T419] ? ksys_write+0x1f3/0x260 [ 32.099232][ T419] ? __cfi_ksys_write+0x10/0x10 [ 32.099258][ T419] __x64_sys_openat+0x13a/0x170 [ 32.099279][ T419] x64_sys_call+0xe69/0x2ee0 [ 32.099326][ T419] do_syscall_64+0x57/0xf0 [ 32.099357][ T419] ? clear_bhb_loop+0x50/0xa0 [ 32.099388][ T419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.099415][ T419] RIP: 0033:0x7f099375b78e [ 32.099443][ T419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 32.099457][ T419] RSP: 002b:00007f099461fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 32.099479][ T419] RAX: ffffffffffffffda RBX: 00007f09946206c0 RCX: 00007f099375b78e [ 32.099508][ T419] RDX: 0000000000000002 RSI: 00007f099461ff90 RDI: ffffffffffffff9c [ 32.099524][ T419] RBP: 00007f0994620090 R08: 0000000000000000 R09: 0000000000000000 [ 32.099537][ T419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.099549][ T419] R13: 00007f0993a16038 R14: 00007f0993a15fa0 R15: 00007ffc2a290b18 [ 32.099567][ T419] [ 32.101141][ T361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.229397][ T31] usb 4-1: USB disconnect, device number 3 [ 32.233509][ T10] hid (null): invalid report_size 1642739478 [ 32.364672][ T36] audit: type=1400 audit(1769897720.360:140): avc: denied { create } for pid=400 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.371148][ T10] hid (null): invalid report_count 28598 [ 32.383742][ T36] audit: type=1400 audit(1769897720.380:141): avc: denied { write } for pid=400 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.389157][ T361] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 32.479623][ T10] wacom 0003:056A:00BA.0001: invalid report_size 1642739478 [ 32.487006][ T10] wacom 0003:056A:00BA.0001: item 0 4 1 7 parsing failed [ 32.494262][ T10] wacom 0003:056A:00BA.0001: parse failed [ 32.500166][ T10] wacom 0003:056A:00BA.0001: probe with driver wacom failed with error -22 [ 32.510753][ T10] usb 2-1: USB disconnect, device number 3 [ 32.518735][ T361] usb 1-1: can't read configurations, error -71 [ 32.568460][ T36] audit: type=1326 audit(1769897720.570:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb519aeb9 code=0x7ffc0000 [ 32.742908][ T433] overlay: ./bus is not a directory [ 32.749403][ T433] virtiofs: Unknown parameter 'always' [ 32.857452][ T437] loop2: detected capacity change from 0 to 32 [ 32.954141][ T442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.967294][ T442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.136728][ T361] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 33.196764][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.297919][ T361] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 33.308967][ T361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.320322][ T361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 33.331508][ T361] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 33.345772][ T361] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.355248][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.358402][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.364339][ T361] usb 1-1: SerialNumber: syz [ 33.386723][ T66] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.394669][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 33.397123][ T433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.404989][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.424986][ T31] usb 2-1: config 0 descriptor?? [ 33.548212][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.559277][ T66] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.569061][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.580833][ T66] usb 4-1: config 0 descriptor?? [ 33.634603][ T361] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 33.635292][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 33.648401][ T361] usb 1-1: USB disconnect, device number 4 [ 33.651802][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.666012][ T31] usb 2-1: USB disconnect, device number 4 [ 34.387041][ T361] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.406820][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.433969][ T469] loop2: detected capacity change from 0 to 42 [ 34.462543][ T471] bpf: Bad value for 'mode' [ 34.511456][ T473] incfs: ino conflict with backing FS 1 [ 34.518084][ T473] incfs: ino conflict with backing FS 2 [ 34.523771][ T473] incfs: ino conflict with backing FS 3 [ 34.530221][ T473] incfs: ino conflict with backing FS 1 [ 34.537819][ T361] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 34.549056][ T361] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.563180][ T361] usb 2-1: config 1 interface 0 has no altsetting 0 [ 34.566821][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 34.576572][ T361] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 34.577741][ T461] FAULT_INJECTION: forcing a failure. [ 34.577741][ T461] name failslab, interval 1, probability 0, space 0, times 0 [ 34.589883][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.601987][ T461] CPU: 1 UID: 0 PID: 461 Comm: syz.0.38 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 34.602081][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.602121][ T461] Call Trace: [ 34.602142][ T461] [ 34.602164][ T461] __dump_stack+0x21/0x30 [ 34.602249][ T461] dump_stack_lvl+0x140/0x1c0 [ 34.602315][ T461] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.602387][ T461] ? unwind_get_return_address+0x51/0x90 [ 34.602451][ T461] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.602506][ T461] dump_stack+0x19/0x20 [ 34.602575][ T461] should_fail_ex+0x3d7/0x530 [ 34.602631][ T461] should_failslab+0xac/0x100 [ 34.602707][ T461] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 34.602796][ T461] ? __d_alloc+0x42/0x8e0 [ 34.602897][ T461] __d_alloc+0x42/0x8e0 [ 34.602953][ T461] ? kfree_link+0x19/0x30 [ 34.603004][ T461] ? link_path_walk+0x724/0xec0 [ 34.603072][ T461] ? path_openat+0x287/0x34f0 [ 34.603143][ T461] ? do_filp_open+0x1f5/0x440 [ 34.603227][ T461] d_alloc_parallel+0xe4/0x1320 [ 34.603299][ T461] ? avc_has_perm_noaudit+0x26c/0x360 [ 34.603367][ T461] ? __cfi_d_alloc_parallel+0x10/0x10 [ 34.603432][ T461] ? __kasan_check_write+0x18/0x20 [ 34.603500][ T461] ? rwsem_read_trylock+0x274/0x5b0 [ 34.603566][ T461] ? downgrade_write+0x460/0x460 [ 34.603637][ T461] __lookup_slow+0x150/0x420 [ 34.603719][ T461] ? lookup_one_len+0x300/0x300 [ 34.603786][ T461] ? down_read+0x7f/0xe0 [ 34.603840][ T461] lookup_slow+0x57/0x80 [ 34.603916][ T461] link_path_walk+0x990/0xec0 [ 34.603991][ T461] path_openat+0x287/0x34f0 [ 34.604066][ T461] ? stack_depot_save_flags+0x38/0x800 [ 34.604142][ T461] ? kasan_save_track+0x3e/0x80 [ 34.604235][ T461] ? kasan_save_alloc_info+0x40/0x50 [ 34.604311][ T461] ? do_sys_openat2+0xda/0x1d0 [ 34.604364][ T461] ? __x64_sys_openat+0x13a/0x170 [ 34.604419][ T461] ? x64_sys_call+0xe69/0x2ee0 [ 34.604492][ T461] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.604576][ T461] ? do_filp_open+0x440/0x440 [ 34.604660][ T461] do_filp_open+0x1f5/0x440 [ 34.604743][ T461] ? __cfi_do_filp_open+0x10/0x10 [ 34.604830][ T461] ? __cfi_kfree_link+0x10/0x10 [ 34.604892][ T461] ? alloc_fd+0x4e6/0x5a0 [ 34.604965][ T461] do_sys_openat2+0x134/0x1d0 [ 34.605018][ T461] ? fput+0x1a4/0x240 [ 34.605062][ T461] ? do_sys_open+0x100/0x100 [ 34.605108][ T461] ? ksys_write+0x1f3/0x260 [ 34.605174][ T461] ? __cfi_ksys_write+0x10/0x10 [ 34.605237][ T461] ? handle_softirqs+0x54d/0x630 [ 34.605323][ T461] __x64_sys_openat+0x13a/0x170 [ 34.605378][ T461] x64_sys_call+0xe69/0x2ee0 [ 34.605450][ T461] do_syscall_64+0x57/0xf0 [ 34.605530][ T461] ? clear_bhb_loop+0x50/0xa0 [ 34.605624][ T461] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.605699][ T461] RIP: 0033:0x7f099375b78e [ 34.605743][ T461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 34.605787][ T461] RSP: 002b:00007f099461fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 34.605859][ T461] RAX: ffffffffffffffda RBX: 00007f09946206c0 RCX: 00007f099375b78e [ 34.605902][ T461] RDX: 0000000000000002 RSI: 00007f099461ff90 RDI: ffffffffffffff9c [ 34.605941][ T461] RBP: 00007f0994620090 R08: 0000000000000000 R09: 0000000000000000 [ 34.605991][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.606024][ T461] R13: 00007f0993a16038 R14: 00007f0993a15fa0 R15: 00007ffc2a290b18 [ 34.606107][ T461] [ 34.608635][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.635289][ T361] usb 2-1: Product: syz [ 34.653712][ T31] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 34.656933][ T361] usb 2-1: SerialNumber: syz [ 34.661477][ T31] usb 1-1: can't read configurations, error -71 [ 35.396414][ T361] usbhid 2-1:1.0: can't add hid device: -71 [ 35.403241][ T361] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 35.416776][ T361] usb 2-1: USB disconnect, device number 5 [ 35.422836][ T478] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 35.429348][ T478] syzkaller0: owner set to 0 [ 35.758815][ T490] sit0: entered promiscuous mode [ 35.765531][ T490] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 35.773522][ T361] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.781715][ T490] netlink: 1 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.916835][ T361] usb 2-1: device descriptor read/64, error -71 [ 36.036763][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.140256][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 36.146335][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.155661][ T66] usb 4-1: USB disconnect, device number 4 [ 36.161821][ T361] usb 2-1: device descriptor read/64, error -71 [ 36.176814][ T31] usb 1-1: device descriptor read/64, error -71 [ 36.198851][ T495] loop2: detected capacity change from 0 to 42 [ 36.406744][ T361] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.427024][ T31] usb 1-1: device descriptor read/64, error -71 [ 36.499632][ T36] kauditd_printk_skb: 517 callbacks suppressed [ 36.499650][ T36] audit: type=1400 audit(1769897724.500:660): avc: denied { write } for pid=503 comm="syz.2.53" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 36.536758][ T361] usb 2-1: device descriptor read/64, error -71 [ 36.538971][ T31] usb usb1-port1: attempt power cycle [ 36.556787][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.600616][ T508] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.706770][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 36.713383][ T497] FAULT_INJECTION: forcing a failure. [ 36.713383][ T497] name failslab, interval 1, probability 0, space 0, times 0 [ 36.726306][ T497] CPU: 1 UID: 0 PID: 497 Comm: syz.3.51 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 36.726336][ T497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.726348][ T497] Call Trace: [ 36.726355][ T497] [ 36.726363][ T497] __dump_stack+0x21/0x30 [ 36.726399][ T497] dump_stack_lvl+0x140/0x1c0 [ 36.726426][ T497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.726456][ T497] dump_stack+0x19/0x20 [ 36.726482][ T497] should_fail_ex+0x3d7/0x530 [ 36.726507][ T497] should_failslab+0xac/0x100 [ 36.726551][ T497] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 36.726580][ T497] ? proc_alloc_inode+0x48/0x150 [ 36.726606][ T497] proc_alloc_inode+0x48/0x150 [ 36.726630][ T497] ? __cfi_proc_alloc_inode+0x10/0x10 [ 36.726655][ T497] alloc_inode+0x7a/0x270 [ 36.726686][ T497] new_inode+0x25/0x1e0 [ 36.726781][ T497] proc_pid_make_inode+0x25/0x140 [ 36.726811][ T497] proc_pid_instantiate+0x54/0x2c0 [ 36.726843][ T497] proc_pid_lookup+0x18a/0x260 [ 36.726873][ T497] proc_root_lookup+0x24/0x50 [ 36.726901][ T497] __lookup_slow+0x2e5/0x420 [ 36.726932][ T497] ? lookup_one_len+0x300/0x300 [ 36.726961][ T497] ? down_read+0x7f/0xe0 [ 36.726989][ T497] lookup_slow+0x57/0x80 [ 36.727019][ T497] link_path_walk+0x990/0xec0 [ 36.727048][ T497] path_openat+0x287/0x34f0 [ 36.727081][ T497] ? stack_depot_save_flags+0x38/0x800 [ 36.727108][ T497] ? kasan_save_track+0x3e/0x80 [ 36.727136][ T497] ? kasan_save_alloc_info+0x40/0x50 [ 36.727160][ T497] ? do_sys_openat2+0xda/0x1d0 [ 36.727180][ T497] ? __x64_sys_openat+0x13a/0x170 [ 36.727202][ T497] ? x64_sys_call+0xe69/0x2ee0 [ 36.727231][ T497] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.727263][ T497] ? do_filp_open+0x440/0x440 [ 36.727304][ T497] do_filp_open+0x1f5/0x440 [ 36.727338][ T497] ? __cfi_do_filp_open+0x10/0x10 [ 36.727373][ T497] ? __cfi_kfree_link+0x10/0x10 [ 36.727396][ T497] ? alloc_fd+0x4e6/0x5a0 [ 36.727426][ T497] do_sys_openat2+0x134/0x1d0 [ 36.727448][ T497] ? fput+0x1a4/0x240 [ 36.727466][ T497] ? do_sys_open+0x100/0x100 [ 36.727486][ T497] ? ksys_write+0x1f3/0x260 [ 36.727513][ T497] ? __cfi_ksys_write+0x10/0x10 [ 36.727539][ T497] __x64_sys_openat+0x13a/0x170 [ 36.727561][ T497] x64_sys_call+0xe69/0x2ee0 [ 36.727590][ T497] do_syscall_64+0x57/0xf0 [ 36.727620][ T497] ? clear_bhb_loop+0x50/0xa0 [ 36.727650][ T497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.727680][ T497] RIP: 0033:0x7f1e7c35b78e [ 36.727707][ T497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.727725][ T497] RSP: 002b:00007f1e7d2caec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 36.727748][ T497] RAX: ffffffffffffffda RBX: 00007f1e7d2cb6c0 RCX: 00007f1e7c35b78e [ 36.727764][ T497] RDX: 0000000000000002 RSI: 00007f1e7d2caf90 RDI: ffffffffffffff9c [ 36.727779][ T497] RBP: 00007f1e7d2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 36.727793][ T497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.727806][ T497] R13: 00007f1e7c616038 R14: 00007f1e7c615fa0 R15: 00007fff4b923cf8 [ 36.727825][ T497] [ 36.776868][ T361] usb 2-1: device descriptor read/64, error -71 [ 36.798448][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.866895][ T426] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.871923][ T66] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 36.917602][ T361] usb usb2-port1: attempt power cycle [ 36.919841][ T66] usb 4-1: can't read configurations, error -71 [ 37.038580][ T426] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 37.040028][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.043262][ T426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.078438][ T31] usb 1-1: device descriptor read/8, error -71 [ 37.095082][ T426] usb 3-1: config 0 descriptor?? [ 37.228213][ T31] usb 1-1: device descriptor read/8, error -71 [ 37.256740][ T361] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.277724][ T361] usb 2-1: device descriptor read/8, error -71 [ 37.331931][ T510] usb usb6: usbfs: process 510 (syz.3.56) did not claim interface 6 before use [ 37.347004][ T510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 37.402035][ T36] audit: type=1400 audit(1769897725.400:661): avc: denied { create } for pid=516 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 37.422612][ T36] audit: type=1400 audit(1769897725.400:662): avc: denied { setopt } for pid=516 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 37.444142][ T361] usb 2-1: device descriptor read/8, error -71 [ 37.466854][ T36] audit: type=1400 audit(1769897725.460:663): avc: denied { create } for pid=516 comm="syz.3.58" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.467060][ T518] tipc: Can't bind to reserved service type 0 [ 37.494439][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.504621][ T36] audit: type=1400 audit(1769897725.460:664): avc: denied { create } for pid=516 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.537900][ T31] usb 1-1: device descriptor read/8, error -71 [ 37.541245][ T426] dragonrise 0003:0079:0011.0002: hidraw0: USB HID v1.01 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 37.563449][ T36] audit: type=1400 audit(1769897725.470:665): avc: denied { bind } for pid=516 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.583174][ T36] audit: type=1400 audit(1769897725.500:666): avc: denied { ioctl } for pid=516 comm="syz.3.58" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4640 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.609212][ T36] audit: type=1400 audit(1769897725.500:667): avc: denied { mount } for pid=516 comm="syz.3.58" name="/" dev="ramfs" ino=4642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.631910][ T36] audit: type=1400 audit(1769897725.530:668): avc: denied { write } for pid=516 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 37.667988][ T31] usb 1-1: device descriptor read/8, error -71 [ 37.696809][ T361] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 37.727765][ T361] usb 2-1: device descriptor read/8, error -71 [ 37.732896][ T36] audit: type=1326 audit(1769897725.730:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=507 comm="syz.2.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cb519aeb9 code=0x0 [ 37.776938][ T31] usb usb1-port1: unable to enumerate USB device [ 37.857884][ T361] usb 2-1: device descriptor read/8, error -71 [ 37.966982][ T361] usb usb2-port1: unable to enumerate USB device [ 38.963184][ T537] loop2: detected capacity change from 0 to 85 [ 38.993921][ T540] incfs: mount failed -22 [ 38.999216][ T540] incfs: mount failed -22 [ 39.004781][ T540] incfs: mount failed -22 [ 39.076748][ T31] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 39.238072][ T31] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.249995][ T31] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 39.261520][ T31] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 39.266887][ T426] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.272182][ T31] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 39.288381][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.426805][ T426] usb 4-1: device descriptor read/64, error -71 [ 39.501889][ T31] usb 1-1: string descriptor 0 read error: -71 [ 39.510223][ T31] hub 1-1:32.0: USB hub found [ 39.519342][ T31] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 39.547822][ T31] usb 1-1: USB disconnect, device number 9 [ 39.607926][ T479] usb 3-1: USB disconnect, device number 3 [ 39.666890][ T426] usb 4-1: device descriptor read/64, error -71 [ 39.700037][ T553] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 39.708013][ T553] netlink: 1 bytes leftover after parsing attributes in process `syz.2.69'. [ 39.740787][ T555] netlink: 164 bytes leftover after parsing attributes in process `syz.2.70'. [ 39.786104][ T555] netlink: 164 bytes leftover after parsing attributes in process `syz.2.70'. [ 39.828177][ T560] kvm: user requested TSC rate below hardware speed [ 39.916812][ T426] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.040013][ T565] VFS: Mount too revealing [ 40.044482][ T566] VFS: Mount too revealing [ 40.049049][ T426] usb 4-1: device descriptor read/64, error -71 [ 40.076771][ T479] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.196788][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.228679][ T479] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 40.237418][ T479] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 40.247670][ T479] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 40.256654][ T479] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 40.267917][ T479] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 40.280496][ T479] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 40.289838][ T479] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 40.297007][ T426] usb 4-1: device descriptor read/64, error -71 [ 40.298514][ T479] usb 3-1: Product: syz [ 40.308341][ T479] usb 3-1: Manufacturer: syz [ 40.314997][ T479] cdc_wdm 3-1:1.0: skipping garbage [ 40.320543][ T479] cdc_wdm 3-1:1.0: skipping garbage [ 40.326570][ T479] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 40.332588][ T479] cdc_wdm 3-1:1.0: Unknown control protocol [ 40.357855][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 13807, setting to 64 [ 40.368825][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 40.380210][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 40.389337][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.397497][ T31] usb 2-1: Product: syz [ 40.401689][ T31] usb 2-1: Manufacturer: syz [ 40.406293][ T31] usb 2-1: SerialNumber: syz [ 40.411775][ T31] usb 2-1: config 0 descriptor?? [ 40.418622][ T31] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 40.419720][ T426] usb usb4-port1: attempt power cycle [ 40.567337][ T366] usb 3-1: USB disconnect, device number 4 [ 40.591556][ T571] loop2: detected capacity change from 0 to 100 [ 40.766902][ T426] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.787973][ T426] usb 4-1: device descriptor read/8, error -71 [ 40.918960][ T426] usb 4-1: device descriptor read/8, error -71 [ 40.976770][ T479] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.126727][ T479] usb 1-1: Using ep0 maxpacket: 16 [ 41.133691][ T579] FAULT_INJECTION: forcing a failure. [ 41.133691][ T579] name failslab, interval 1, probability 0, space 0, times 0 [ 41.146441][ T579] CPU: 0 UID: 0 PID: 579 Comm: syz.0.76 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 41.146477][ T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.146492][ T579] Call Trace: [ 41.146502][ T579] [ 41.146511][ T579] __dump_stack+0x21/0x30 [ 41.146543][ T579] dump_stack_lvl+0x140/0x1c0 [ 41.146573][ T579] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.146597][ T579] dump_stack+0x19/0x20 [ 41.146636][ T579] should_fail_ex+0x3d7/0x530 [ 41.146659][ T579] should_failslab+0xac/0x100 [ 41.146692][ T579] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 41.146721][ T579] ? __kasan_check_write+0x18/0x20 [ 41.146739][ T579] ? __d_alloc+0x42/0x8e0 [ 41.146756][ T579] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 41.146801][ T579] __d_alloc+0x42/0x8e0 [ 41.146826][ T579] d_alloc_parallel+0xe4/0x1320 [ 41.146852][ T579] ? _raw_spin_unlock+0x45/0x60 [ 41.146882][ T579] ? __kasan_check_write+0x18/0x20 [ 41.146910][ T579] ? avc_has_perm_noaudit+0x26c/0x360 [ 41.146931][ T579] ? __asan_memcpy+0x5a/0x80 [ 41.146972][ T579] ? __cfi_d_alloc_parallel+0x10/0x10 [ 41.146998][ T579] ? __kasan_check_write+0x18/0x20 [ 41.147024][ T579] ? rwsem_read_trylock+0x274/0x5b0 [ 41.147050][ T579] ? downgrade_write+0x460/0x460 [ 41.147070][ T579] __lookup_slow+0x150/0x420 [ 41.147109][ T579] ? generic_permission+0x1e6/0x580 [ 41.147138][ T579] ? lookup_one_len+0x300/0x300 [ 41.147166][ T579] ? down_read+0x7f/0xe0 [ 41.147192][ T579] ? __cfi_proc_pid_permission+0x10/0x10 [ 41.147215][ T579] lookup_slow+0x57/0x80 [ 41.147251][ T579] link_path_walk+0x990/0xec0 [ 41.147280][ T579] path_openat+0x287/0x34f0 [ 41.147310][ T579] ? stack_depot_save_flags+0x38/0x800 [ 41.147346][ T579] ? kasan_save_track+0x3e/0x80 [ 41.147366][ T579] ? kasan_save_alloc_info+0x40/0x50 [ 41.147383][ T579] ? do_sys_openat2+0xda/0x1d0 [ 41.147417][ T579] ? __x64_sys_openat+0x13a/0x170 [ 41.147438][ T579] ? x64_sys_call+0xe69/0x2ee0 [ 41.147467][ T579] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.147499][ T579] ? do_filp_open+0x440/0x440 [ 41.147523][ T579] do_filp_open+0x1f5/0x440 [ 41.147566][ T579] ? __cfi_do_filp_open+0x10/0x10 [ 41.147598][ T579] ? __cfi_kfree_link+0x10/0x10 [ 41.147619][ T579] ? alloc_fd+0x4e6/0x5a0 [ 41.147649][ T579] do_sys_openat2+0x134/0x1d0 [ 41.147664][ T579] ? fput+0x1a4/0x240 [ 41.147676][ T579] ? do_sys_open+0x100/0x100 [ 41.147706][ T579] ? ksys_write+0x1f3/0x260 [ 41.147732][ T579] ? __cfi_ksys_write+0x10/0x10 [ 41.147757][ T579] __x64_sys_openat+0x13a/0x170 [ 41.147778][ T579] x64_sys_call+0xe69/0x2ee0 [ 41.147807][ T579] do_syscall_64+0x57/0xf0 [ 41.147829][ T579] ? clear_bhb_loop+0x50/0xa0 [ 41.147868][ T579] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.147898][ T579] RIP: 0033:0x7f099375b78e [ 41.147916][ T579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.147933][ T579] RSP: 002b:00007f099461fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.147955][ T579] RAX: ffffffffffffffda RBX: 00007f09946206c0 RCX: 00007f099375b78e [ 41.147975][ T579] RDX: 0000000000000002 RSI: 00007f099461ff90 RDI: ffffffffffffff9c [ 41.147986][ T579] RBP: 00007f0994620090 R08: 0000000000000000 R09: 0000000000000000 [ 41.147996][ T579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.148024][ T579] R13: 00007f0993a16038 R14: 00007f0993a15fa0 R15: 00007ffc2a290b18 [ 41.148044][ T579] [ 41.496107][ T426] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.506936][ T479] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.515299][ T479] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 41.522929][ T479] usb 1-1: can't read configurations, error -71 [ 41.528404][ T426] usb 4-1: device descriptor read/8, error -71 [ 41.556762][ T572] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.658129][ T426] usb 4-1: device descriptor read/8, error -71 [ 41.708043][ T572] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 41.716766][ T572] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 41.727004][ T572] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 41.735998][ T572] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 41.747121][ T572] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 41.759498][ T572] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 41.768631][ T572] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 41.776709][ T572] usb 3-1: Product: syz [ 41.781005][ T572] usb 3-1: Manufacturer: syz [ 41.786315][ T426] usb usb4-port1: unable to enumerate USB device [ 41.794692][ T572] cdc_wdm 3-1:1.0: skipping garbage [ 41.799995][ T572] cdc_wdm 3-1:1.0: skipping garbage [ 41.805906][ T572] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 41.811892][ T572] cdc_wdm 3-1:1.0: Unknown control protocol [ 42.021800][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 42.021816][ T36] audit: type=1400 audit(1769897730.020:690): avc: denied { append } for pid=581 comm="syz.0.77" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.075623][ T36] audit: type=1400 audit(1769897730.070:691): avc: denied { read } for pid=583 comm="syz.3.79" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.098943][ T585] netlink: 'syz.0.78': attribute type 21 has an invalid length. [ 42.100773][ T36] audit: type=1400 audit(1769897730.070:692): avc: denied { create } for pid=584 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.126925][ T586] netlink: 748 bytes leftover after parsing attributes in process `syz.3.79'. [ 42.127997][ T36] audit: type=1400 audit(1769897730.070:693): avc: denied { setopt } for pid=584 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.155262][ T36] audit: type=1400 audit(1769897730.070:694): avc: denied { bind } for pid=584 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.174830][ T36] audit: type=1400 audit(1769897730.100:695): avc: denied { open } for pid=583 comm="syz.3.79" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.596787][ T479] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 42.778671][ T479] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.787031][ T479] usb 1-1: not running at top speed; connect to a high speed hub [ 42.795319][ T479] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 42.804703][ T479] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 42.812737][ T479] usb 1-1: can't read configurations, error -61 [ 42.819782][ T479] usb usb1-port1: attempt power cycle [ 42.927635][ T31] usb 2-1: USB disconnect, device number 10 [ 42.945709][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.082620][ T36] audit: type=1400 audit(1769897731.080:696): avc: denied { map } for pid=595 comm="syz.3.82" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.105532][ T36] audit: type=1400 audit(1769897731.080:697): avc: denied { execute } for pid=595 comm="syz.3.82" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.136262][ T598] loop2: detected capacity change from 0 to 119 [ 43.156770][ T479] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 43.165000][ T36] audit: type=1400 audit(1769897731.160:698): avc: denied { write } for pid=599 comm="syz.3.84" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.186593][ T600] mmap: syz.3.84 (600) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.202238][ T600] process 'syz.3.84' launched './file0' with NULL argv: empty string added [ 43.203554][ T479] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.211446][ T36] audit: type=1400 audit(1769897731.200:699): avc: denied { execute } for pid=599 comm="syz.3.84" name="file0" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.219343][ T479] usb 1-1: not running at top speed; connect to a high speed hub [ 43.250225][ T479] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 43.259214][ T479] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 43.266955][ T479] usb 1-1: can't read configurations, error -61 [ 43.291325][ T602] syzkaller0: entered promiscuous mode [ 43.297024][ T602] syzkaller0: entered allmulticast mode [ 43.306742][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.396792][ T479] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 43.408431][ T426] usb 3-1: USB disconnect, device number 5 [ 43.418738][ T479] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.427269][ T479] usb 1-1: not running at top speed; connect to a high speed hub [ 43.437013][ T479] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 43.448011][ T479] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 43.455699][ T479] usb 1-1: can't read configurations, error -61 [ 43.462391][ T479] usb usb1-port1: unable to enumerate USB device [ 43.470398][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.486730][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.498533][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.506576][ T31] usb 2-1: Product: syz [ 43.512406][ T31] usb 2-1: Manufacturer: syz [ 43.517119][ T31] usb 2-1: SerialNumber: syz [ 43.616757][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.766740][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 43.773737][ T605] FAULT_INJECTION: forcing a failure. [ 43.773737][ T605] name failslab, interval 1, probability 0, space 0, times 0 [ 43.786488][ T605] CPU: 0 UID: 0 PID: 605 Comm: syz.3.86 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 43.786523][ T605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.786537][ T605] Call Trace: [ 43.786545][ T605] [ 43.786554][ T605] __dump_stack+0x21/0x30 [ 43.786586][ T605] dump_stack_lvl+0x140/0x1c0 [ 43.786614][ T605] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.786635][ T605] dump_stack+0x19/0x20 [ 43.786677][ T605] should_fail_ex+0x3d7/0x530 [ 43.786703][ T605] should_failslab+0xac/0x100 [ 43.786734][ T605] kmem_cache_alloc_noprof+0x42/0x410 [ 43.786765][ T605] ? security_inode_alloc+0x51/0x230 [ 43.786786][ T605] ? __cfi_make_kgid+0x10/0x10 [ 43.786802][ T605] security_inode_alloc+0x51/0x230 [ 43.786842][ T605] inode_init_always_gfp+0x756/0x9e0 [ 43.786874][ T605] ? __cfi_proc_alloc_inode+0x10/0x10 [ 43.786897][ T605] alloc_inode+0xc5/0x270 [ 43.786928][ T605] new_inode+0x25/0x1e0 [ 43.786950][ T605] proc_pid_make_inode+0x25/0x140 [ 43.786987][ T605] proc_pid_instantiate+0x54/0x2c0 [ 43.787019][ T605] proc_pid_lookup+0x18a/0x260 [ 43.787047][ T605] proc_root_lookup+0x24/0x50 [ 43.787075][ T605] __lookup_slow+0x2e5/0x420 [ 43.787098][ T605] ? lookup_one_len+0x300/0x300 [ 43.787134][ T605] ? down_read+0x7f/0xe0 [ 43.787168][ T605] lookup_slow+0x57/0x80 [ 43.787196][ T605] link_path_walk+0x990/0xec0 [ 43.787226][ T605] path_openat+0x287/0x34f0 [ 43.787249][ T605] ? stack_depot_save_flags+0x38/0x800 [ 43.787283][ T605] ? kasan_save_track+0x3e/0x80 [ 43.787312][ T605] ? kasan_save_alloc_info+0x40/0x50 [ 43.787335][ T605] ? do_sys_openat2+0xda/0x1d0 [ 43.787355][ T605] ? __x64_sys_openat+0x13a/0x170 [ 43.787377][ T605] ? x64_sys_call+0xe69/0x2ee0 [ 43.787400][ T605] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.787439][ T605] ? do_filp_open+0x440/0x440 [ 43.787472][ T605] do_filp_open+0x1f5/0x440 [ 43.787503][ T605] ? __cfi_do_filp_open+0x10/0x10 [ 43.787535][ T605] ? __cfi_kfree_link+0x10/0x10 [ 43.787551][ T605] ? alloc_fd+0x4e6/0x5a0 [ 43.787586][ T605] do_sys_openat2+0x134/0x1d0 [ 43.787608][ T605] ? fput+0x1a4/0x240 [ 43.787626][ T605] ? do_sys_open+0x100/0x100 [ 43.787645][ T605] ? ksys_write+0x1f3/0x260 [ 43.787673][ T605] ? __cfi_ksys_write+0x10/0x10 [ 43.787693][ T605] __x64_sys_openat+0x13a/0x170 [ 43.787709][ T605] x64_sys_call+0xe69/0x2ee0 [ 43.787749][ T605] do_syscall_64+0x57/0xf0 [ 43.787778][ T605] ? clear_bhb_loop+0x50/0xa0 [ 43.787806][ T605] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.787835][ T605] RIP: 0033:0x7f1e7c35b78e [ 43.787849][ T605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.787862][ T605] RSP: 002b:00007f1e7d2caec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.787895][ T605] RAX: ffffffffffffffda RBX: 00007f1e7d2cb6c0 RCX: 00007f1e7c35b78e [ 43.787912][ T605] RDX: 0000000000000002 RSI: 00007f1e7d2caf90 RDI: ffffffffffffff9c [ 43.787926][ T605] RBP: 00007f1e7d2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 43.787939][ T605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.787951][ T605] R13: 00007f1e7c616038 R14: 00007f1e7c615fa0 R15: 00007fff4b923cf8 [ 43.787973][ T605] [ 44.113630][ T426] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 44.119548][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.131153][ T46] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 44.138948][ T46] usb 4-1: can't read configurations, error -71 [ 44.266738][ T426] usb 3-1: Using ep0 maxpacket: 16 [ 44.276405][ T426] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.284809][ T426] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 44.292439][ T426] usb 3-1: can't read configurations, error -71 [ 44.715427][ T31] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 44.722250][ T31] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 44.729907][ T31] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 44.915868][ T31] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 44.924293][ T31] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 44.940247][ T31] usb 2-1: USB disconnect, device number 11 [ 44.947550][ T31] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 44.976772][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 45.110913][ T46] usb 4-1: device descriptor read/64, error -71 [ 45.356742][ T46] usb 4-1: device descriptor read/64, error -71 [ 45.449989][ T623] incfs: mount failed -22 [ 45.466982][ T46] usb usb4-port1: attempt power cycle [ 45.483952][ T625] loop2: detected capacity change from 0 to 127 [ 45.816780][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.837986][ T46] usb 4-1: device descriptor read/8, error -71 [ 45.968021][ T46] usb 4-1: device descriptor read/8, error -71 [ 46.016772][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.166741][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 46.173508][ T634] FAULT_INJECTION: forcing a failure. [ 46.173508][ T634] name failslab, interval 1, probability 0, space 0, times 0 [ 46.186232][ T634] CPU: 0 UID: 0 PID: 634 Comm: syz.2.96 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 46.186266][ T634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.186282][ T634] Call Trace: [ 46.186293][ T634] [ 46.186300][ T634] __dump_stack+0x21/0x30 [ 46.186324][ T634] dump_stack_lvl+0x140/0x1c0 [ 46.186361][ T634] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.186391][ T634] dump_stack+0x19/0x20 [ 46.186416][ T634] should_fail_ex+0x3d7/0x530 [ 46.186440][ T634] should_failslab+0xac/0x100 [ 46.186468][ T634] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 46.186488][ T634] ? __d_lookup_rcu+0x334/0x3c0 [ 46.186533][ T634] ? proc_alloc_inode+0x48/0x150 [ 46.186558][ T634] proc_alloc_inode+0x48/0x150 [ 46.186581][ T634] ? __cfi_proc_alloc_inode+0x10/0x10 [ 46.186607][ T634] alloc_inode+0x7a/0x270 [ 46.186629][ T634] new_inode+0x25/0x1e0 [ 46.186651][ T634] proc_pid_make_inode+0x25/0x140 [ 46.186698][ T634] proc_pident_instantiate+0x6d/0x2c0 [ 46.186729][ T634] proc_pident_lookup+0x1c7/0x270 [ 46.186806][ T634] proc_tgid_base_lookup+0x2f/0x40 [ 46.186916][ T634] __lookup_slow+0x2e5/0x420 [ 46.186946][ T634] ? lookup_one_len+0x300/0x300 [ 46.186975][ T634] ? down_read+0x7f/0xe0 [ 46.187000][ T634] ? __cfi_proc_pid_permission+0x10/0x10 [ 46.187041][ T634] lookup_slow+0x57/0x80 [ 46.187070][ T634] link_path_walk+0x990/0xec0 [ 46.187101][ T634] path_openat+0x287/0x34f0 [ 46.187142][ T634] ? stack_depot_save_flags+0x38/0x800 [ 46.187170][ T634] ? kasan_save_track+0x3e/0x80 [ 46.187197][ T634] ? kasan_save_alloc_info+0x40/0x50 [ 46.187225][ T634] ? do_sys_openat2+0xda/0x1d0 [ 46.187240][ T634] ? __x64_sys_openat+0x13a/0x170 [ 46.187255][ T634] ? x64_sys_call+0xe69/0x2ee0 [ 46.187278][ T634] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.187323][ T634] ? do_filp_open+0x440/0x440 [ 46.187357][ T634] do_filp_open+0x1f5/0x440 [ 46.187389][ T634] ? __cfi_do_filp_open+0x10/0x10 [ 46.187413][ T634] ? __cfi_kfree_link+0x10/0x10 [ 46.187444][ T634] ? alloc_fd+0x4e6/0x5a0 [ 46.187474][ T634] do_sys_openat2+0x134/0x1d0 [ 46.187494][ T634] ? fput+0x1a4/0x240 [ 46.187512][ T634] ? do_sys_open+0x100/0x100 [ 46.187534][ T634] ? ksys_write+0x1f3/0x260 [ 46.187553][ T634] ? __cfi_ksys_write+0x10/0x10 [ 46.187572][ T634] __x64_sys_openat+0x13a/0x170 [ 46.187606][ T634] x64_sys_call+0xe69/0x2ee0 [ 46.187636][ T634] do_syscall_64+0x57/0xf0 [ 46.187666][ T634] ? clear_bhb_loop+0x50/0xa0 [ 46.187696][ T634] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.187717][ T634] RIP: 0033:0x7f2cb515b78e [ 46.187731][ T634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.187764][ T634] RSP: 002b:00007f2cb5ff1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.187786][ T634] RAX: ffffffffffffffda RBX: 00007f2cb5ff26c0 RCX: 00007f2cb515b78e [ 46.187801][ T634] RDX: 0000000000000002 RSI: 00007f2cb5ff1f90 RDI: ffffffffffffff9c [ 46.187815][ T634] RBP: 00007f2cb5ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 46.187836][ T634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.187845][ T634] R13: 00007f2cb5416038 R14: 00007f2cb5415fa0 R15: 00007fff07b99198 [ 46.187859][ T634] [ 46.257532][ T46] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.523092][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.531454][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 46.539143][ T31] usb 3-1: can't read configurations, error -71 [ 46.546732][ T46] usb 4-1: device descriptor read/8, error -71 [ 46.677779][ T46] usb 4-1: device descriptor read/8, error -71 [ 46.786777][ T426] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.787364][ T46] usb usb4-port1: unable to enumerate USB device [ 46.946780][ T426] usb 2-1: Using ep0 maxpacket: 32 [ 46.957867][ T426] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 46.978352][ T426] usb 2-1: config 0 interface 0 has no altsetting 0 [ 46.985701][ T426] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 46.994833][ T426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.003732][ T426] usb 2-1: config 0 descriptor?? [ 47.172923][ T652] loop2: detected capacity change from 0 to 127 [ 47.203487][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 47.203506][ T36] audit: type=1400 audit(1769897735.200:717): avc: denied { unlink } for pid=653 comm="syz.2.103" name="#1" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.233662][ T36] audit: type=1400 audit(1769897735.200:718): avc: denied { mount } for pid=653 comm="syz.2.103" name="/" dev="overlay" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.287919][ T426] usbhid 2-1:0.0: can't add hid device: -71 [ 47.293951][ T426] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 47.303151][ T426] usb 2-1: USB disconnect, device number 12 [ 47.586730][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.724212][ T657] x_tables: duplicate underflow at hook 2 [ 47.736727][ T46] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 47.744505][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 47.751173][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.761376][ T31] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 47.770534][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 47.781424][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.791857][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.804254][ T31] usb 3-1: config 1 interface 1 has no altsetting 0 [ 47.812599][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.821837][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.830042][ T31] usb 3-1: Product: syz [ 47.834243][ T31] usb 3-1: Manufacturer: syz [ 47.838898][ T31] usb 3-1: SerialNumber: syz [ 47.906730][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 47.913011][ T46] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 47.925884][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 47.932574][ T46] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 47.941662][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.950430][ T46] usb 2-1: config 0 descriptor?? [ 48.126855][ T66] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 48.251819][ T654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.260415][ T654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.269131][ T31] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 48.278441][ T31] usb 3-1: 2:1 : format type 9 is not supported yet [ 48.286107][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 48.295587][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.307845][ T31] usb 3-1: USB disconnect, device number 9 [ 48.318347][ T66] usb 4-1: config 0 descriptor?? [ 48.320909][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.364140][ T46] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0003/input/input6 [ 48.377962][ T36] audit: type=1400 audit(1769897736.380:719): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=510 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.380249][ T46] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 48.417261][ T36] audit: type=1400 audit(1769897736.380:720): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=510 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.559908][ T31] usb 2-1: USB disconnect, device number 13 [ 48.732871][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.741952][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.752835][ T66] kye 0003:0458:0138.0004: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 48.785117][ T36] audit: type=1400 audit(1769897736.780:721): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.953364][ T31] usb 4-1: USB disconnect, device number 15 [ 49.098737][ T672] netlink: 'syz.1.108': attribute type 13 has an invalid length. [ 49.124504][ T36] audit: type=1400 audit(1769897737.120:722): avc: denied { mount } for pid=671 comm="syz.1.108" name="/" dev="ramfs" ino=6388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.157016][ T36] audit: type=1400 audit(1769897737.120:723): avc: denied { mounton } for pid=671 comm="syz.1.108" path="/19/file0" dev="ramfs" ino=6388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 49.179595][ T36] audit: type=1400 audit(1769897737.150:724): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.286723][ T572] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.436756][ T572] usb 1-1: Using ep0 maxpacket: 16 [ 49.448040][ T669] FAULT_INJECTION: forcing a failure. [ 49.448040][ T669] name failslab, interval 1, probability 0, space 0, times 0 [ 49.460961][ T669] CPU: 1 UID: 0 PID: 669 Comm: syz.0.107 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 49.461004][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.461019][ T669] Call Trace: [ 49.461028][ T669] [ 49.461043][ T669] __dump_stack+0x21/0x30 [ 49.461086][ T669] dump_stack_lvl+0x140/0x1c0 [ 49.461124][ T669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.461162][ T669] dump_stack+0x19/0x20 [ 49.461197][ T669] should_fail_ex+0x3d7/0x530 [ 49.461227][ T669] should_failslab+0xac/0x100 [ 49.461270][ T669] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 49.461308][ T669] ? __d_alloc+0x42/0x8e0 [ 49.461340][ T669] __d_alloc+0x42/0x8e0 [ 49.461371][ T669] ? __cfi_selinux_inode_permission+0x10/0x10 [ 49.461419][ T669] d_alloc_parallel+0xe4/0x1320 [ 49.461454][ T669] ? make_vfsuid+0x4d/0xa0 [ 49.461501][ T669] ? __kasan_check_write+0x18/0x20 [ 49.461535][ T669] ? rwsem_read_trylock+0x274/0x5b0 [ 49.461568][ T669] ? security_inode_permission+0x77/0x150 [ 49.461598][ T669] ? downgrade_write+0x460/0x460 [ 49.461625][ T669] ? make_vfsuid+0x4d/0xa0 [ 49.461655][ T669] ? __cfi_d_alloc_parallel+0x10/0x10 [ 49.461685][ T669] ? down_read+0x7f/0xe0 [ 49.461719][ T669] ? __cfi_down_read+0x10/0x10 [ 49.461753][ T669] path_openat+0xa28/0x34f0 [ 49.461795][ T669] ? stack_depot_save_flags+0x38/0x800 [ 49.461840][ T669] ? do_sys_openat2+0xda/0x1d0 [ 49.461870][ T669] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.461913][ T669] ? do_filp_open+0x440/0x440 [ 49.461958][ T669] do_filp_open+0x1f5/0x440 [ 49.462003][ T669] ? __cfi_do_filp_open+0x10/0x10 [ 49.462047][ T669] ? __cfi_kfree_link+0x10/0x10 [ 49.462075][ T669] ? alloc_fd+0x4e6/0x5a0 [ 49.462114][ T669] do_sys_openat2+0x134/0x1d0 [ 49.462144][ T669] ? fput+0x1a4/0x240 [ 49.462169][ T669] ? do_sys_open+0x100/0x100 [ 49.462195][ T669] ? ksys_write+0x1f3/0x260 [ 49.462230][ T669] ? __cfi_ksys_write+0x10/0x10 [ 49.462266][ T669] __x64_sys_openat+0x13a/0x170 [ 49.462299][ T669] x64_sys_call+0xe69/0x2ee0 [ 49.462337][ T669] do_syscall_64+0x57/0xf0 [ 49.462377][ T669] ? clear_bhb_loop+0x50/0xa0 [ 49.462415][ T669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.462452][ T669] RIP: 0033:0x7f099375b78e [ 49.462473][ T669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.462498][ T669] RSP: 002b:00007f099461fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.462526][ T669] RAX: ffffffffffffffda RBX: 00007f09946206c0 RCX: 00007f099375b78e [ 49.462549][ T669] RDX: 0000000000000002 RSI: 00007f099461ff90 RDI: ffffffffffffff9c [ 49.462574][ T669] RBP: 00007f0994620090 R08: 0000000000000000 R09: 0000000000000000 [ 49.462602][ T669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.462619][ T669] R13: 00007f0993a16038 R14: 00007f0993a15fa0 R15: 00007ffc2a290b18 [ 49.462644][ T669] [ 49.463615][ T572] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.486908][ T66] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.497458][ T572] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 49.656840][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 49.661535][ T572] usb 1-1: can't read configurations, error -71 [ 49.678862][ T66] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 49.801096][ T66] usb 2-1: config 0 has no interface number 0 [ 49.809952][ T66] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 49.819069][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.827118][ T66] usb 2-1: Product: syz [ 49.831298][ T66] usb 2-1: Manufacturer: syz [ 49.835967][ T66] usb 2-1: SerialNumber: syz [ 49.845302][ T66] usb 2-1: config 0 descriptor?? [ 49.852745][ T66] smsc95xx v2.0.0 [ 49.903642][ T36] audit: type=1400 audit(1769897737.900:725): avc: denied { setopt } for pid=680 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.948835][ T683] loop2: detected capacity change from 0 to 127 [ 49.975134][ T36] audit: type=1400 audit(1769897737.970:726): avc: denied { write } for pid=688 comm="syz.3.113" path="socket:[6473]" dev="sockfs" ino=6473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.999199][ T690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'. [ 50.252582][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 50.263458][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.286836][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 50.456715][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 50.465963][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.475434][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 50.485343][ T31] usb 4-1: can't read configurations, error -71 [ 50.996624][ T717] loop2: detected capacity change from 0 to 256 [ 51.146750][ T572] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 51.188649][ T731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 51.291569][ T676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.300302][ T676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.308109][ T572] usb 1-1: Using ep0 maxpacket: 32 [ 51.314713][ T572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 51.321707][ T572] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 51.331056][ T572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.340052][ T572] usb 1-1: config 0 descriptor?? [ 51.526770][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 51.676729][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 51.683753][ T730] FAULT_INJECTION: forcing a failure. [ 51.683753][ T730] name failslab, interval 1, probability 0, space 0, times 0 [ 51.696708][ T730] CPU: 0 UID: 0 PID: 730 Comm: syz.3.125 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 51.696743][ T730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.696761][ T730] Call Trace: [ 51.696770][ T730] [ 51.696784][ T730] __dump_stack+0x21/0x30 [ 51.696810][ T730] dump_stack_lvl+0x140/0x1c0 [ 51.696830][ T730] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.696874][ T730] ? __kasan_slab_alloc+0x73/0x90 [ 51.696904][ T730] dump_stack+0x19/0x20 [ 51.696930][ T730] should_fail_ex+0x3d7/0x530 [ 51.696952][ T730] should_failslab+0xac/0x100 [ 51.696974][ T730] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 51.697012][ T730] ? d_alloc_parallel+0x11c0/0x1320 [ 51.697040][ T730] ? proc_alloc_inode+0x48/0x150 [ 51.697065][ T730] proc_alloc_inode+0x48/0x150 [ 51.697092][ T730] ? __cfi_proc_alloc_inode+0x10/0x10 [ 51.697110][ T730] alloc_inode+0x7a/0x270 [ 51.697131][ T730] new_inode+0x25/0x1e0 [ 51.697175][ T730] ? __cfi_d_alloc_parallel+0x10/0x10 [ 51.697201][ T730] proc_pid_make_inode+0x25/0x140 [ 51.697231][ T730] proc_ns_dir_lookup+0x577/0x6c0 [ 51.697251][ T730] path_openat+0x1315/0x34f0 [ 51.697279][ T730] ? do_filp_open+0x440/0x440 [ 51.697325][ T730] do_filp_open+0x1f5/0x440 [ 51.697358][ T730] ? __cfi_do_filp_open+0x10/0x10 [ 51.697398][ T730] ? __cfi_kfree_link+0x10/0x10 [ 51.697414][ T730] ? alloc_fd+0x4e6/0x5a0 [ 51.697435][ T730] do_sys_openat2+0x134/0x1d0 [ 51.697469][ T730] ? fput+0x1a4/0x240 [ 51.697487][ T730] ? do_sys_open+0x100/0x100 [ 51.697507][ T730] ? ksys_write+0x1f3/0x260 [ 51.697538][ T730] ? __cfi_ksys_write+0x10/0x10 [ 51.697558][ T730] __x64_sys_openat+0x13a/0x170 [ 51.697574][ T730] x64_sys_call+0xe69/0x2ee0 [ 51.697612][ T730] do_syscall_64+0x57/0xf0 [ 51.697643][ T730] ? clear_bhb_loop+0x50/0xa0 [ 51.697673][ T730] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.697702][ T730] RIP: 0033:0x7f1e7c35b78e [ 51.697721][ T730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.697739][ T730] RSP: 002b:00007f1e7d2caec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.697763][ T730] RAX: ffffffffffffffda RBX: 00007f1e7d2cb6c0 RCX: 00007f1e7c35b78e [ 51.697780][ T730] RDX: 0000000000000002 RSI: 00007f1e7d2caf90 RDI: ffffffffffffff9c [ 51.697794][ T730] RBP: 00007f1e7d2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 51.697807][ T730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.697826][ T730] R13: 00007f1e7c616038 R14: 00007f1e7c615fa0 R15: 00007fff4b923cf8 [ 51.697841][ T730] [ 51.699272][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.761963][ T572] logitech 0003:046D:C623.0005: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 51.767099][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 51.962493][ T572] usb 1-1: USB disconnect, device number 16 [ 51.965572][ T31] usb 4-1: can't read configurations, error -71 [ 52.005177][ T31] usb usb4-port1: attempt power cycle [ 52.338384][ T757] input: syz0 as /devices/virtual/input/input7 [ 52.367479][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 52.367497][ T36] audit: type=1400 audit(1769897740.370:734): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=529 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.414608][ T36] audit: type=1400 audit(1769897740.410:735): avc: denied { append } for pid=760 comm="syz.3.133" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.438043][ T36] audit: type=1400 audit(1769897740.410:736): avc: denied { read } for pid=760 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.467069][ T36] audit: type=1400 audit(1769897740.470:737): avc: denied { write } for pid=760 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.511771][ T36] audit: type=1400 audit(1769897740.510:738): avc: denied { map } for pid=765 comm="syz.0.134" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.546650][ T36] audit: type=1400 audit(1769897740.510:739): avc: denied { read write } for pid=765 comm="syz.0.134" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.595298][ T771] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 52.602845][ T771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 52.638094][ T768] kvm: pic: non byte read [ 52.643128][ T36] audit: type=1400 audit(1769897740.640:740): avc: denied { read } for pid=767 comm="syz.3.135" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.651176][ T768] kvm: pic: non byte read [ 52.660552][ T36] audit: type=1400 audit(1769897740.640:741): avc: denied { open } for pid=767 comm="syz.3.135" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.679921][ T768] kvm: pic: non byte write [ 52.845327][ T783] loop2: detected capacity change from 0 to 2047 [ 52.938046][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 52.948984][ T66] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 52.965096][ T66] usb 2-1: USB disconnect, device number 14 [ 52.976737][ T572] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.126754][ T426] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 53.134406][ T572] usb 3-1: Using ep0 maxpacket: 16 [ 53.152315][ T572] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.167328][ T572] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 53.175202][ T572] usb 3-1: can't read configurations, error -71 [ 53.296752][ T426] usb 4-1: Using ep0 maxpacket: 16 [ 53.308102][ T785] FAULT_INJECTION: forcing a failure. [ 53.308102][ T785] name failslab, interval 1, probability 0, space 0, times 0 [ 53.320964][ T785] CPU: 1 UID: 0 PID: 785 Comm: syz.3.141 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 53.321010][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.321028][ T785] Call Trace: [ 53.321037][ T785] [ 53.321050][ T785] __dump_stack+0x21/0x30 [ 53.321093][ T785] dump_stack_lvl+0x140/0x1c0 [ 53.321129][ T785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.321166][ T785] ? __kasan_slab_alloc+0x73/0x90 [ 53.321208][ T785] dump_stack+0x19/0x20 [ 53.321251][ T785] should_fail_ex+0x3d7/0x530 [ 53.321284][ T785] should_failslab+0xac/0x100 [ 53.321325][ T785] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 53.321362][ T785] ? d_alloc_parallel+0x11c0/0x1320 [ 53.321398][ T785] ? proc_alloc_inode+0x48/0x150 [ 53.321432][ T785] proc_alloc_inode+0x48/0x150 [ 53.321465][ T785] ? __cfi_proc_alloc_inode+0x10/0x10 [ 53.321496][ T785] alloc_inode+0x7a/0x270 [ 53.321539][ T785] new_inode+0x25/0x1e0 [ 53.321588][ T785] ? __cfi_d_alloc_parallel+0x10/0x10 [ 53.321624][ T785] proc_pid_make_inode+0x25/0x140 [ 53.321662][ T785] proc_ns_dir_lookup+0x577/0x6c0 [ 53.321693][ T785] path_openat+0x1315/0x34f0 [ 53.321744][ T785] ? do_filp_open+0x440/0x440 [ 53.321787][ T785] do_filp_open+0x1f5/0x440 [ 53.321833][ T785] ? __cfi_do_filp_open+0x10/0x10 [ 53.321877][ T785] ? __cfi_kfree_link+0x10/0x10 [ 53.321913][ T785] ? alloc_fd+0x4e6/0x5a0 [ 53.321952][ T785] do_sys_openat2+0x134/0x1d0 [ 53.321982][ T785] ? fput+0x1a4/0x240 [ 53.322006][ T785] ? do_sys_open+0x100/0x100 [ 53.322035][ T785] ? ksys_write+0x1f3/0x260 [ 53.322074][ T785] ? __cfi_ksys_write+0x10/0x10 [ 53.322110][ T785] __x64_sys_openat+0x13a/0x170 [ 53.322146][ T785] x64_sys_call+0xe69/0x2ee0 [ 53.322186][ T785] do_syscall_64+0x57/0xf0 [ 53.322227][ T785] ? clear_bhb_loop+0x50/0xa0 [ 53.322267][ T785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.322305][ T785] RIP: 0033:0x7f1e7c35b78e [ 53.322328][ T785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.322353][ T785] RSP: 002b:00007f1e7d2caec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.322386][ T785] RAX: ffffffffffffffda RBX: 00007f1e7d2cb6c0 RCX: 00007f1e7c35b78e [ 53.322407][ T785] RDX: 0000000000000002 RSI: 00007f1e7d2caf90 RDI: ffffffffffffff9c [ 53.322430][ T785] RBP: 00007f1e7d2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 53.322452][ T785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.322471][ T785] R13: 00007f1e7c616038 R14: 00007f1e7c615fa0 R15: 00007fff4b923cf8 [ 53.322498][ T785] [ 53.323411][ T426] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.595299][ T426] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 53.602947][ T426] usb 4-1: can't read configurations, error -71 [ 53.668252][ T791] tipc: Started in network mode [ 53.673181][ T791] tipc: Node identity , cluster identity 4711 [ 53.681181][ T791] tipc: Failed to obtain node identity [ 53.687113][ T791] tipc: Enabling of bearer rejected, failed to enable media [ 53.986762][ T366] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 54.066811][ T572] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.138308][ T366] usb 1-1: config 16 has an invalid interface number: 19 but max is 0 [ 54.146644][ T366] usb 1-1: config 16 has no interface number 0 [ 54.154876][ T366] usb 1-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 54.164087][ T366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.172239][ T366] usb 1-1: Product: syz [ 54.176486][ T366] usb 1-1: Manufacturer: syz [ 54.181418][ T366] usb 1-1: SerialNumber: syz [ 54.218285][ T572] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 54.228367][ T572] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 54.237540][ T426] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 54.245294][ T572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.256294][ T572] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 54.395998][ T366] usb 1-1: USB disconnect, device number 17 [ 54.404182][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.415382][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.425464][ T426] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 54.425476][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.425499][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.460350][ T794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.468914][ T794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.480767][ T426] usb 4-1: config 0 descriptor?? [ 54.906260][ T808] loop2: detected capacity change from 0 to 2048 [ 54.947423][ T810] tipc: Enabling of bearer rejected, failed to enable media [ 54.956000][ T810] loop9: detected capacity change from 0 to 7 [ 54.962545][ T810] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.970778][ T810] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.978959][ T810] loop9: unable to read partition table [ 54.984825][ T810] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 54.984825][ T810] ) failed (rc=-5) [ 54.989864][ T342] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.006473][ T342] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.015966][ T342] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.024608][ T342] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.032921][ T342] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.090583][ T426] usb 4-1: string descriptor 0 read error: -22 [ 55.292729][ T426] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input9 [ 55.318232][ T426] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 55.378490][ T36] audit: type=1400 audit(1769897743.380:742): avc: denied { read } for pid=820 comm="syz.1.153" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.428171][ T36] audit: type=1400 audit(1769897743.380:743): avc: denied { open } for pid=820 comm="syz.1.153" path="/23/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.497008][ T31] usb 4-1: USB disconnect, device number 20 [ 55.666726][ T341] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 55.796744][ T341] usb 2-1: device descriptor read/64, error -71 [ 55.876825][ T66] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 56.026726][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 56.036776][ T341] usb 2-1: device descriptor read/64, error -71 [ 56.044969][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.054160][ T66] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 56.061914][ T66] usb 1-1: can't read configurations, error -71 [ 56.276767][ T341] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 56.416773][ T341] usb 2-1: device descriptor read/64, error -71 [ 56.605510][ T839] loop2: detected capacity change from 0 to 2560 [ 56.657260][ T341] usb 2-1: device descriptor read/64, error -71 [ 56.693717][ T46] usb 3-1: USB disconnect, device number 11 [ 56.786856][ T341] usb usb2-port1: attempt power cycle [ 57.106741][ T66] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 57.136725][ T341] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.157949][ T341] usb 2-1: device descriptor read/8, error -71 [ 57.258712][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.271405][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.280815][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.289887][ T66] usb 1-1: Product: syz [ 57.294386][ T66] usb 1-1: Manufacturer: syz [ 57.299555][ T66] usb 1-1: SerialNumber: syz [ 57.304235][ T341] usb 2-1: device descriptor read/8, error -71 [ 57.446757][ T366] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 57.546721][ T341] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 57.567711][ T341] usb 2-1: device descriptor read/8, error -71 [ 57.596719][ T366] usb 3-1: Using ep0 maxpacket: 16 [ 57.596742][ T31] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 57.603440][ T366] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 57.617763][ T366] usb 3-1: config 0 has no interface number 0 [ 57.623905][ T366] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.634822][ T366] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.644754][ T366] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 57.653889][ T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.662832][ T366] usb 3-1: config 0 descriptor?? [ 57.697980][ T341] usb 2-1: device descriptor read/8, error -71 [ 57.758021][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.769204][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 6893, setting to 64 [ 57.780804][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 57.789935][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.798001][ T31] usb 4-1: SerialNumber: syz [ 57.804283][ T854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 57.811628][ T341] usb usb2-port1: unable to enumerate USB device [ 58.018808][ T854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 58.071016][ T852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.079993][ T852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.230135][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 58.238844][ T31] usb-storage 4-1:1.0: USB Mass Storage device detected [ 58.247473][ T31] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 58.255647][ T31] scsi host1: usb-storage 4-1:1.0 [ 58.263347][ T31] usb 4-1: USB disconnect, device number 21 [ 58.295331][ T366] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 58.304347][ T366] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 58.312555][ T366] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 58.315141][ T66] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 58.320053][ T366] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 58.326383][ T66] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 58.334113][ T366] uclogic 0003:28BD:0071.0007: probe with driver uclogic failed with error -71 [ 58.342374][ T66] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 58.356225][ T366] usb 3-1: USB disconnect, device number 12 [ 58.425457][ T859] netlink: 5 bytes leftover after parsing attributes in process `syz.1.166'. [ 58.435320][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 58.435342][ T36] audit: type=1400 audit(1769897746.430:746): avc: denied { map } for pid=858 comm="syz.1.166" path="pipe:[1561]" dev="pipefs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 58.515371][ T66] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 58.523406][ T66] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 58.539596][ T66] usb 1-1: USB disconnect, device number 19 [ 58.546093][ T66] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 58.776785][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 58.870684][ T870] loop2: detected capacity change from 0 to 16383 [ 58.881373][ T342] Buffer I/O error on dev loop2, logical block 2047, async page read [ 58.926762][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 58.933506][ T864] FAULT_INJECTION: forcing a failure. [ 58.933506][ T864] name failslab, interval 1, probability 0, space 0, times 0 [ 58.946416][ T864] CPU: 0 UID: 0 PID: 864 Comm: syz.1.167 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 58.946459][ T864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.946480][ T864] Call Trace: [ 58.946489][ T864] [ 58.946498][ T864] __dump_stack+0x21/0x30 [ 58.946543][ T864] dump_stack_lvl+0x140/0x1c0 [ 58.946563][ T864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.946585][ T864] dump_stack+0x19/0x20 [ 58.946619][ T864] should_fail_ex+0x3d7/0x530 [ 58.946643][ T864] should_failslab+0xac/0x100 [ 58.946677][ T864] kmem_cache_alloc_noprof+0x42/0x410 [ 58.946705][ T864] ? getname_flags+0xc5/0x700 [ 58.946724][ T864] ? __kasan_slab_free+0x6a/0x80 [ 58.946747][ T864] getname_flags+0xc5/0x700 [ 58.946788][ T864] getname+0x1b/0x30 [ 58.946814][ T864] do_sys_openat2+0xda/0x1d0 [ 58.946835][ T864] ? fput+0x1a4/0x240 [ 58.946861][ T864] ? do_sys_open+0x100/0x100 [ 58.946876][ T864] ? ksys_write+0x1f3/0x260 [ 58.946894][ T864] ? __cfi_ksys_write+0x10/0x10 [ 58.946930][ T864] __x64_sys_openat+0x13a/0x170 [ 58.946954][ T864] x64_sys_call+0xe69/0x2ee0 [ 58.946983][ T864] do_syscall_64+0x57/0xf0 [ 58.947014][ T864] ? clear_bhb_loop+0x50/0xa0 [ 58.947037][ T864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.947072][ T864] RIP: 0033:0x7f2b9775b78e [ 58.947091][ T864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.947110][ T864] RSP: 002b:00007f2b985d4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.947133][ T864] RAX: ffffffffffffffda RBX: 00007f2b985d56c0 RCX: 00007f2b9775b78e [ 58.947154][ T864] RDX: 0000000000000000 RSI: 00007f2b985d4f90 RDI: ffffffffffffff9c [ 58.947166][ T864] RBP: 00007f2b985d5090 R08: 0000000000000000 R09: 0000000000000000 [ 58.947176][ T864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.947187][ T864] R13: 00007f2b97a16038 R14: 00007f2b97a15fa0 R15: 00007ffd1ec17df8 [ 58.947201][ T864] [ 58.955016][ T868] netlink: 'syz.3.168': attribute type 3 has an invalid length. [ 59.016457][ T36] audit: type=1400 audit(1769897747.010:747): avc: denied { watch watch_reads } for pid=866 comm="syz.3.168" path="/51" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.018523][ T868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 59.191379][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.202715][ T46] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 59.210621][ T46] usb 2-1: can't read configurations, error -71 [ 59.214989][ T366] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 59.231492][ T36] audit: type=1400 audit(1769897747.230:748): avc: denied { bpf } for pid=881 comm="syz.0.172" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.261228][ T882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=882 comm=syz.0.172 [ 59.377962][ T366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.389354][ T366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.399167][ T366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.412010][ T366] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 59.421257][ T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.430190][ T366] usb 3-1: config 0 descriptor?? [ 59.516738][ T426] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 59.666716][ T426] usb 1-1: Using ep0 maxpacket: 32 [ 59.673816][ T426] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 59.686696][ T36] audit: type=1400 audit(1769897747.670:749): avc: denied { append } for pid=890 comm="syz.3.175" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 59.716715][ T426] usb 1-1: config 0 has no interface number 0 [ 59.722887][ T426] usb 1-1: config 0 interface 184 has no altsetting 0 [ 59.746759][ T36] audit: type=1400 audit(1769897747.690:750): avc: denied { setattr } for pid=890 comm="syz.3.175" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.760203][ T426] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 59.778649][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.786763][ T426] usb 1-1: Product: syz [ 59.791076][ T426] usb 1-1: Manufacturer: syz [ 59.796032][ T426] usb 1-1: SerialNumber: syz [ 59.817389][ T426] usb 1-1: config 0 descriptor?? [ 59.823529][ T426] smsc75xx v1.0.0 [ 59.851602][ T366] input: HID 28bd:0933 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.0008/input/input10 [ 59.875744][ T366] uclogic 0003:28BD:0933.0008: input,hidraw0: USB HID vf.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 60.049955][ T66] usb 3-1: USB disconnect, device number 13 [ 60.106745][ T31] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 60.194146][ T36] audit: type=1400 audit(1769897748.190:751): avc: denied { append } for pid=898 comm="syz.1.177" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.231913][ T907] bridge0: port 3(vlan1) entered blocking state [ 60.238551][ T907] bridge0: port 3(vlan1) entered disabled state [ 60.244999][ T907] vlan1: entered allmulticast mode [ 60.250399][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.256773][ T907] veth0_vlan: entered allmulticast mode [ 60.263986][ T907] vlan1: entered promiscuous mode [ 60.269580][ T907] bridge0: port 3(vlan1) entered blocking state [ 60.275882][ T907] bridge0: port 3(vlan1) entered forwarding state [ 60.296519][ T912] loop2: detected capacity change from 0 to 32768 [ 60.323786][ T426] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 60.340918][ T426] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.355851][ T426] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 60.366790][ T426] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 60.376496][ T426] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 60.387074][ T426] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 60.396715][ T426] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 60.406133][ T426] usb 1-1: USB disconnect, device number 20 [ 60.526986][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.586729][ T66] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 60.746766][ T426] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 60.748441][ T66] usb 2-1: config 6 has no interfaces? [ 60.760119][ T66] usb 2-1: New USB device found, idVendor=19d2, idProduct=1144, bcdDevice=5b.d5 [ 60.769224][ T31] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 60.776857][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.866698][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 60.896922][ T426] usb 1-1: Using ep0 maxpacket: 16 [ 60.904034][ T919] FAULT_INJECTION: forcing a failure. [ 60.904034][ T919] name failslab, interval 1, probability 0, space 0, times 0 [ 60.916821][ T919] CPU: 0 UID: 0 PID: 919 Comm: syz.0.182 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 60.916852][ T919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.916865][ T919] Call Trace: [ 60.916873][ T919] [ 60.916887][ T919] __dump_stack+0x21/0x30 [ 60.916920][ T919] dump_stack_lvl+0x140/0x1c0 [ 60.916948][ T919] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.916978][ T919] dump_stack+0x19/0x20 [ 60.917004][ T919] should_fail_ex+0x3d7/0x530 [ 60.917029][ T919] should_failslab+0xac/0x100 [ 60.917061][ T919] kmem_cache_alloc_noprof+0x42/0x410 [ 60.917089][ T919] ? getname_flags+0xc5/0x700 [ 60.917117][ T919] ? __kasan_slab_free+0x6a/0x80 [ 60.917148][ T919] getname_flags+0xc5/0x700 [ 60.917178][ T919] getname+0x1b/0x30 [ 60.917205][ T919] do_sys_openat2+0xda/0x1d0 [ 60.917227][ T919] ? fput+0x1a4/0x240 [ 60.917245][ T919] ? do_sys_open+0x100/0x100 [ 60.917265][ T919] ? ksys_write+0x1f3/0x260 [ 60.917291][ T919] ? __cfi_ksys_write+0x10/0x10 [ 60.917316][ T919] __x64_sys_openat+0x13a/0x170 [ 60.917337][ T919] x64_sys_call+0xe69/0x2ee0 [ 60.917366][ T919] do_syscall_64+0x57/0xf0 [ 60.917397][ T919] ? clear_bhb_loop+0x50/0xa0 [ 60.917442][ T919] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.917472][ T919] RIP: 0033:0x7f099375b78e [ 60.917491][ T919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.917510][ T919] RSP: 002b:00007f099461fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.917534][ T919] RAX: ffffffffffffffda RBX: 00007f09946206c0 RCX: 00007f099375b78e [ 60.917550][ T919] RDX: 0000000000000000 RSI: 00007f099461ff90 RDI: ffffffffffffff9c [ 60.917565][ T919] RBP: 00007f0994620090 R08: 0000000000000000 R09: 0000000000000000 [ 60.917580][ T919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.917594][ T919] R13: 00007f0993a16038 R14: 00007f0993a15fa0 R15: 00007ffc2a290b18 [ 60.917613][ T919] [ 60.919172][ T426] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.926845][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.934075][ T426] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 60.990199][ T66] usb 2-1: string descriptor 0 read error: -71 [ 60.996210][ T426] usb 1-1: can't read configurations, error -71 [ 61.009493][ T66] usb 2-1: USB disconnect, device number 21 [ 61.163701][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.174960][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.185845][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.198897][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.208368][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.218588][ T46] usb 3-1: config 0 descriptor?? [ 61.224602][ T46] hub 3-1:0.0: USB hub found [ 61.296814][ T31] usb 4-1: device descriptor read/64, error -71 [ 61.407940][ T31] usb usb4-port1: attempt power cycle [ 61.424950][ T46] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 61.429554][ T929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.445455][ T929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.674343][ T36] audit: type=1400 audit(1769897749.670:752): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.699461][ T36] audit: type=1400 audit(1769897749.670:753): avc: denied { open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.723589][ T36] audit: type=1400 audit(1769897749.670:754): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.749728][ T36] audit: type=1400 audit(1769897749.700:755): avc: denied { create } for pid=937 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.752095][ T66] usb 3-1: USB disconnect, device number 14 [ 61.774889][ T31] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 61.798569][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.849383][ T947] loop2: detected capacity change from 0 to 65536 [ 61.928142][ T31] usb 4-1: device descriptor read/8, error -71 [ 62.106804][ T66] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.126777][ T426] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 62.166727][ T31] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 62.188413][ T31] usb 4-1: device descriptor read/8, error -71 [ 62.266843][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 62.272922][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 62.281483][ T66] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.287005][ T426] usb 1-1: Using ep0 maxpacket: 32 [ 62.294592][ T66] usb 2-1: config 1 interface 0 has no altsetting 0 [ 62.301902][ T426] usb 1-1: config 1 interface 0 has no altsetting 0 [ 62.313740][ T426] usb 1-1: string descriptor 0 read error: -71 [ 62.322839][ T66] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 62.324366][ T426] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 62.341124][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.341708][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.357280][ T66] usb 2-1: Product: syz [ 62.362053][ T31] usb 4-1: device descriptor read/8, error -71 [ 62.368624][ T426] usb 1-1: can't set config #1, error -71 [ 62.374461][ T66] usb 2-1: Manufacturer: syz [ 62.378141][ T426] usb 1-1: USB disconnect, device number 23 [ 62.379322][ T66] usb 2-1: SerialNumber: syz [ 62.476853][ T31] usb usb4-port1: unable to enumerate USB device [ 62.486753][ T366] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 62.636724][ T366] usb 3-1: Using ep0 maxpacket: 16 [ 62.644259][ T959] FAULT_INJECTION: forcing a failure. [ 62.644259][ T959] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.657484][ T959] CPU: 1 UID: 0 PID: 959 Comm: syz.2.193 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 62.657521][ T959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.657536][ T959] Call Trace: [ 62.657547][ T959] [ 62.657555][ T959] __dump_stack+0x21/0x30 [ 62.657587][ T959] dump_stack_lvl+0x140/0x1c0 [ 62.657614][ T959] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.657641][ T959] dump_stack+0x19/0x20 [ 62.657666][ T959] should_fail_ex+0x3d7/0x530 [ 62.657689][ T959] should_fail+0xf/0x20 [ 62.657709][ T959] should_fail_usercopy+0x1e/0x30 [ 62.657734][ T959] strncpy_from_user+0x29/0x270 [ 62.657756][ T959] getname_flags+0x101/0x700 [ 62.657783][ T959] getname+0x1b/0x30 [ 62.657807][ T959] do_sys_openat2+0xda/0x1d0 [ 62.657826][ T959] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 62.657858][ T959] ? do_sys_open+0x100/0x100 [ 62.657880][ T959] ? handle_softirqs+0x54d/0x630 [ 62.657910][ T959] __x64_sys_openat+0x13a/0x170 [ 62.657933][ T959] x64_sys_call+0xe69/0x2ee0 [ 62.657960][ T959] do_syscall_64+0x57/0xf0 [ 62.657989][ T959] ? clear_bhb_loop+0x50/0xa0 [ 62.658020][ T959] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.658048][ T959] RIP: 0033:0x7f2cb515b78e [ 62.658066][ T959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.658085][ T959] RSP: 002b:00007f2cb5ff1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.658108][ T959] RAX: ffffffffffffffda RBX: 00007f2cb5ff26c0 RCX: 00007f2cb515b78e [ 62.658124][ T959] RDX: 0000000000000000 RSI: 00007f2cb5ff1f90 RDI: ffffffffffffff9c [ 62.658138][ T959] RBP: 00007f2cb5ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 62.658153][ T959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.658167][ T959] R13: 00007f2cb5416038 R14: 00007f2cb5415fa0 R15: 00007fff07b99198 [ 62.658186][ T959] [ 62.659826][ T366] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.667962][ T66] usbhid 2-1:1.0: can't add hid device: -71 [ 62.680233][ T366] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 62.681742][ T66] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 62.684800][ T366] usb 3-1: can't read configurations, error -71 [ 62.691307][ T66] usb 2-1: USB disconnect, device number 22 [ 63.181104][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 63.212698][ T979] loop2: detected capacity change from 0 to 98304 [ 63.337802][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.351157][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.363880][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.374111][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.382349][ T9] usb 1-1: Product: syz [ 63.398183][ T9] usb 1-1: Manufacturer: syz [ 63.406303][ T9] usb 1-1: SerialNumber: syz [ 63.467014][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 63.467034][ T36] audit: type=1400 audit(1769897751.470:786): avc: denied { execute } for pid=980 comm="syz.1.200" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.527774][ T36] audit: type=1400 audit(1769897751.490:787): avc: denied { execute_no_trans } for pid=980 comm="syz.1.200" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.564633][ T36] audit: type=1400 audit(1769897751.520:788): avc: denied { sys_module } for pid=982 comm="syz.2.201" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.629494][ T9] cdc_ncm 1-1:1.0: bind() failure [ 63.662681][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 63.669586][ T36] audit: type=1400 audit(1769897751.660:789): avc: denied { create } for pid=1000 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.706759][ T9] cdc_ncm 1-1:1.1: bind() failure [ 63.714339][ T36] audit: type=1400 audit(1769897751.660:790): avc: denied { write } for pid=1000 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.734073][ T9] usb 1-1: USB disconnect, device number 24 [ 63.745123][ T36] audit: type=1400 audit(1769897751.740:791): avc: denied { mounton } for pid=1004 comm="syz.3.207" path="/60/file0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.786714][ T36] audit: type=1400 audit(1769897751.740:792): avc: denied { mount } for pid=1004 comm="syz.3.207" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.808751][ T36] audit: type=1400 audit(1769897751.790:793): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.076731][ T366] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 64.096729][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 64.113677][ T1010] loop2: detected capacity change from 0 to 131072 [ 64.160780][ T36] audit: type=1400 audit(1769897752.160:794): avc: denied { name_bind } for pid=1011 comm="syz.1.210" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 64.190323][ T36] audit: type=1400 audit(1769897752.160:795): avc: denied { create } for pid=1011 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.236704][ T366] usb 4-1: Using ep0 maxpacket: 16 [ 64.248014][ T1007] FAULT_INJECTION: forcing a failure. [ 64.248014][ T1007] name failslab, interval 1, probability 0, space 0, times 0 [ 64.265117][ T1007] CPU: 1 UID: 0 PID: 1007 Comm: syz.3.208 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 64.265154][ T1007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.265169][ T1007] Call Trace: [ 64.265176][ T1007] [ 64.265185][ T1007] __dump_stack+0x21/0x30 [ 64.265217][ T1007] dump_stack_lvl+0x140/0x1c0 [ 64.265261][ T1007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.265291][ T1007] dump_stack+0x19/0x20 [ 64.265317][ T1007] should_fail_ex+0x3d7/0x530 [ 64.265341][ T1007] should_failslab+0xac/0x100 [ 64.265382][ T1007] kmem_cache_alloc_noprof+0x42/0x410 [ 64.265410][ T1007] ? security_file_alloc+0x49/0x220 [ 64.265431][ T1007] ? kasan_save_alloc_info+0x40/0x50 [ 64.265456][ T1007] security_file_alloc+0x49/0x220 [ 64.265477][ T1007] init_file+0x9e/0x210 [ 64.265510][ T1007] alloc_empty_file+0xd9/0x270 [ 64.265543][ T1007] path_openat+0xfe/0x34f0 [ 64.265575][ T1007] ? stack_depot_save_flags+0x38/0x800 [ 64.265601][ T1007] ? kasan_save_track+0x3e/0x80 [ 64.265629][ T1007] ? kasan_save_alloc_info+0x40/0x50 [ 64.265653][ T1007] ? __kasan_slab_alloc+0x73/0x90 [ 64.265683][ T1007] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 64.265710][ T1007] ? getname+0x1b/0x30 [ 64.265735][ T1007] ? do_sys_openat2+0xda/0x1d0 [ 64.265757][ T1007] ? __x64_sys_openat+0x13a/0x170 [ 64.265778][ T1007] ? x64_sys_call+0xe69/0x2ee0 [ 64.265809][ T1007] ? do_syscall_64+0x57/0xf0 [ 64.265840][ T1007] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.265872][ T1007] ? do_filp_open+0x440/0x440 [ 64.265905][ T1007] do_filp_open+0x1f5/0x440 [ 64.265940][ T1007] ? __cfi_do_filp_open+0x10/0x10 [ 64.265977][ T1007] ? alloc_fd+0x4e6/0x5a0 [ 64.266006][ T1007] do_sys_openat2+0x134/0x1d0 [ 64.266027][ T1007] ? fput+0x1a4/0x240 [ 64.266046][ T1007] ? do_sys_open+0x100/0x100 [ 64.266068][ T1007] ? ksys_write+0x1f3/0x260 [ 64.266095][ T1007] ? __cfi_ksys_write+0x10/0x10 [ 64.266123][ T1007] __x64_sys_openat+0x13a/0x170 [ 64.266150][ T1007] x64_sys_call+0xe69/0x2ee0 [ 64.266180][ T1007] do_syscall_64+0x57/0xf0 [ 64.266209][ T1007] ? clear_bhb_loop+0x50/0xa0 [ 64.266241][ T1007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.266270][ T1007] RIP: 0033:0x7f1e7c35b78e [ 64.266289][ T1007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.266308][ T1007] RSP: 002b:00007f1e7d2caec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.266332][ T1007] RAX: ffffffffffffffda RBX: 00007f1e7d2cb6c0 RCX: 00007f1e7c35b78e [ 64.266356][ T1007] RDX: 0000000000000000 RSI: 00007f1e7d2caf90 RDI: ffffffffffffff9c [ 64.266373][ T1007] RBP: 00007f1e7d2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 64.266388][ T1007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.266401][ T1007] R13: 00007f1e7c616038 R14: 00007f1e7c615fa0 R15: 00007fff4b923cf8 [ 64.266421][ T1007] [ 64.266896][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 64.527743][ T343] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.536916][ T366] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.579113][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.597069][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 64.604839][ T366] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 64.612494][ T366] usb 4-1: can't read configurations, error -71 [ 64.626716][ T9] usb 1-1: can't read configurations, error -71 [ 64.736760][ T343] usb 2-1: Using ep0 maxpacket: 8 [ 64.743340][ T343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.750355][ T343] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 64.759832][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.769599][ T343] usb 2-1: config 0 descriptor?? [ 64.815512][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 64.908319][ T1023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 64.919348][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.938612][ T1023] bridge_slave_0 (unregistering): left allmulticast mode [ 64.945743][ T1023] bridge_slave_0 (unregistering): left promiscuous mode [ 64.956365][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.096371][ T343] usbhid 2-1:0.0: can't add hid device: -71 [ 65.103215][ T343] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 65.112747][ T1031] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.217'. [ 65.118401][ T343] usb 2-1: USB disconnect, device number 23 [ 65.186741][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 65.250622][ T1034] loop2: detected capacity change from 0 to 196608 [ 65.316769][ T31] usb 3-1: device descriptor read/64, error -71 [ 65.446775][ T366] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 65.556738][ T31] usb 3-1: device descriptor read/64, error -71 [ 65.596736][ T366] usb 4-1: Using ep0 maxpacket: 16 [ 65.603485][ T366] usb 4-1: unable to get BOS descriptor or descriptor too short [ 65.612397][ T366] usb 4-1: config 13 has an invalid interface number: 98 but max is 0 [ 65.621001][ T366] usb 4-1: config 13 has no interface number 0 [ 65.627698][ T366] usb 4-1: config 13 interface 98 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 65.638066][ T366] usb 4-1: config 13 interface 98 altsetting 167 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 65.649389][ T366] usb 4-1: config 13 interface 98 has no altsetting 0 [ 65.657918][ T366] usb 4-1: New USB device found, idVendor=12d1, idProduct=16ff, bcdDevice=e8.9c [ 65.667081][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 65.674817][ T366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.683730][ T366] usb 4-1: Product: syz [ 65.688237][ T366] usb 4-1: Manufacturer: Ъ [ 65.692837][ T366] usb 4-1: SerialNumber: syz [ 65.698697][ T1028] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 65.796745][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 65.826748][ T9] usb 1-1: device descriptor read/64, error -71 [ 65.906927][ T343] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 65.916184][ T366] usb 4-1: USB disconnect, device number 27 [ 65.926955][ T31] usb 3-1: device descriptor read/64, error -71 [ 66.068932][ T9] usb 1-1: device descriptor read/64, error -71 [ 66.076891][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 66.083702][ T1040] FAULT_INJECTION: forcing a failure. [ 66.083702][ T1040] name failslab, interval 1, probability 0, space 0, times 0 [ 66.096608][ T1040] CPU: 1 UID: 0 PID: 1040 Comm: syz.1.221 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 66.096639][ T1040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.096656][ T1040] Call Trace: [ 66.096663][ T1040] [ 66.096672][ T1040] __dump_stack+0x21/0x30 [ 66.096703][ T1040] dump_stack_lvl+0x140/0x1c0 [ 66.096729][ T1040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.096756][ T1040] dump_stack+0x19/0x20 [ 66.096780][ T1040] should_fail_ex+0x3d7/0x530 [ 66.096804][ T1040] should_failslab+0xac/0x100 [ 66.096836][ T1040] __kmalloc_cache_noprof+0x41/0x470 [ 66.096864][ T1040] ? proc_self_get_link+0x119/0x290 [ 66.096888][ T1040] proc_self_get_link+0x119/0x290 [ 66.096908][ T1040] ? security_inode_follow_link+0x7e/0x180 [ 66.096941][ T1040] ? __cfi_proc_self_get_link+0x10/0x10 [ 66.096963][ T1040] pick_link+0x6d4/0xe80 [ 66.097003][ T1040] step_into+0xc68/0xf60 [ 66.097029][ T1040] ? __kasan_check_read+0x15/0x20 [ 66.097054][ T1040] ? read_word_at_a_time+0x1a/0x40 [ 66.097094][ T1040] ? set_root+0x420/0x420 [ 66.097120][ T1040] ? lookup_fast+0x167/0x530 [ 66.097145][ T1040] ? inode_permission+0xf3/0x4c0 [ 66.097171][ T1040] link_path_walk+0x753/0xec0 [ 66.097196][ T1040] path_openat+0x287/0x34f0 [ 66.097229][ T1040] ? stack_depot_save_flags+0x38/0x800 [ 66.097256][ T1040] ? kasan_save_track+0x3e/0x80 [ 66.097283][ T1040] ? kasan_save_alloc_info+0x40/0x50 [ 66.097308][ T1040] ? do_sys_openat2+0xda/0x1d0 [ 66.097329][ T1040] ? __x64_sys_openat+0x13a/0x170 [ 66.097351][ T1040] ? x64_sys_call+0xe69/0x2ee0 [ 66.097382][ T1040] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.097442][ T1040] ? do_filp_open+0x440/0x440 [ 66.097476][ T1040] do_filp_open+0x1f5/0x440 [ 66.097517][ T1040] ? __cfi_do_filp_open+0x10/0x10 [ 66.097554][ T1040] ? alloc_fd+0x4e6/0x5a0 [ 66.097585][ T1040] do_sys_openat2+0x134/0x1d0 [ 66.097606][ T1040] ? fput+0x1a4/0x240 [ 66.097626][ T1040] ? do_sys_open+0x100/0x100 [ 66.097646][ T1040] ? ksys_write+0x1f3/0x260 [ 66.097672][ T1040] ? __cfi_ksys_write+0x10/0x10 [ 66.097700][ T1040] __x64_sys_openat+0x13a/0x170 [ 66.097723][ T1040] x64_sys_call+0xe69/0x2ee0 [ 66.097752][ T1040] do_syscall_64+0x57/0xf0 [ 66.097792][ T1040] ? clear_bhb_loop+0x50/0xa0 [ 66.097822][ T1040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.097852][ T1040] RIP: 0033:0x7f2b9775b78e [ 66.097872][ T1040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.097893][ T1040] RSP: 002b:00007f2b985d4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.097916][ T1040] RAX: ffffffffffffffda RBX: 00007f2b985d56c0 RCX: 00007f2b9775b78e [ 66.097933][ T1040] RDX: 0000000000000000 RSI: 00007f2b985d4f90 RDI: ffffffffffffff9c [ 66.097948][ T1040] RBP: 00007f2b985d5090 R08: 0000000000000000 R09: 0000000000000000 [ 66.097962][ T1040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.097976][ T1040] R13: 00007f2b97a16038 R14: 00007f2b97a15fa0 R15: 00007ffd1ec17df8 [ 66.097995][ T1040] [ 66.227520][ T9] usb usb1-port1: attempt power cycle [ 66.250287][ T343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.413558][ T31] usb 3-1: device descriptor read/64, error -71 [ 66.420656][ T343] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 66.428315][ T343] usb 2-1: can't read configurations, error -71 [ 66.526967][ T31] usb usb3-port1: attempt power cycle [ 66.606806][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 66.627871][ T9] usb 1-1: device descriptor read/8, error -71 [ 66.686822][ T366] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 66.762683][ T9] usb 1-1: device descriptor read/8, error -71 [ 66.780825][ T1045] rust_binder: 125: no such ref 3 [ 66.785950][ T1045] rust_binder: 125: no such ref 1 [ 66.791127][ T1045] rust_binder: Write failure EFAULT in pid:125 [ 66.839603][ T366] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 66.854177][ T366] usb 4-1: config 0 has no interface number 0 [ 66.860488][ T366] usb 4-1: config 0 interface 41 has no altsetting 0 [ 66.869011][ T366] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 66.876860][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 66.879019][ T366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.893906][ T366] usb 4-1: Product: syz [ 66.898162][ T366] usb 4-1: Manufacturer: syz [ 66.902792][ T366] usb 4-1: SerialNumber: syz [ 66.908936][ T366] usb 4-1: config 0 descriptor?? [ 66.917824][ T31] usb 3-1: device descriptor read/8, error -71 [ 67.006712][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 67.047800][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.048095][ T31] usb 3-1: device descriptor read/8, error -71 [ 67.187788][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.296752][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 67.297097][ T9] usb usb1-port1: unable to enumerate USB device [ 67.317900][ T31] usb 3-1: device descriptor read/8, error -71 [ 67.447966][ T31] usb 3-1: device descriptor read/8, error -71 [ 67.476808][ T343] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 67.556903][ T31] usb usb3-port1: unable to enumerate USB device [ 67.626770][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 67.635233][ T343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 67.644090][ T343] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 67.651793][ T343] usb 2-1: can't read configurations, error -71 [ 67.658477][ T343] usb usb2-port1: attempt power cycle [ 67.716619][ T366] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 67.934004][ T1043] : renamed from vlan0 (while UP) [ 67.967725][ T366] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 67.980152][ T366] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 67.990322][ T366] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 68.001681][ T366] usb 4-1: USB disconnect, device number 28 [ 68.099453][ T1064] loop2: detected capacity change from 0 to 262144 [ 68.356765][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 68.494829][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 68.494848][ T36] audit: type=1400 audit(1769897756.490:822): avc: denied { read write } for pid=1073 comm="syz.3.232" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.525349][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 68.530582][ T36] audit: type=1400 audit(1769897756.490:823): avc: denied { open } for pid=1073 comm="syz.3.232" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.554545][ T36] audit: type=1400 audit(1769897756.490:824): avc: denied { ioctl } for pid=1073 comm="syz.3.232" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.555666][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.587421][ T31] usb 3-1: config 0 has no interface number 0 [ 68.595144][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 68.606157][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.614395][ T31] usb 3-1: Product: syz [ 68.618720][ T31] usb 3-1: Manufacturer: syz [ 68.623481][ T31] usb 3-1: SerialNumber: syz [ 68.629176][ T31] usb 3-1: config 0 descriptor?? [ 68.638724][ T31] smsc95xx v2.0.0 [ 68.645750][ T36] audit: type=1400 audit(1769897756.640:825): avc: denied { create } for pid=1078 comm="syz.3.233" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.666921][ T36] audit: type=1400 audit(1769897756.650:826): avc: denied { read } for pid=1078 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.726731][ T366] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 68.763356][ T36] audit: type=1400 audit(1769897756.760:827): avc: denied { getopt } for pid=1078 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.809610][ T36] audit: type=1400 audit(1769897756.810:828): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.876733][ T366] usb 1-1: Using ep0 maxpacket: 16 [ 68.890587][ T366] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.907354][ T366] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 68.914994][ T366] usb 1-1: can't read configurations, error -71 [ 69.037711][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 69.048691][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.246789][ T341] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 69.282765][ T36] audit: type=1400 audit(1769897757.280:829): avc: denied { append } for pid=1087 comm="syz.3.236" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.368178][ T1093] ======================================================= [ 69.368178][ T1093] WARNING: The mand mount option has been deprecated and [ 69.368178][ T1093] and is ignored by this kernel. Remove the mand [ 69.368178][ T1093] option from the mount to silence this warning. [ 69.368178][ T1093] ======================================================= [ 69.404121][ T36] audit: type=1400 audit(1769897757.410:830): avc: denied { mount } for pid=1092 comm="syz.3.237" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.426739][ T341] usb 2-1: Using ep0 maxpacket: 8 [ 69.427750][ T36] audit: type=1400 audit(1769897757.410:831): avc: denied { unmount } for pid=1092 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.462202][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.465008][ T1086] netlink: 'syz.1.235': attribute type 2 has an invalid length. [ 69.482926][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.494858][ T1095] loop2: detected capacity change from 0 to 294912 [ 69.505652][ T341] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.513649][ T341] usb 2-1: no configurations [ 69.519552][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 69.533504][ T341] usb 2-1: can't read configurations, error -22 [ 69.540530][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 69.550463][ T31] usb 3-1: USB disconnect, device number 21 [ 69.966749][ T366] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 70.116760][ T366] usb 1-1: Using ep0 maxpacket: 32 [ 70.127553][ T366] usb 1-1: config 0 has an invalid interface number: 241 but max is 0 [ 70.135767][ T366] usb 1-1: config 0 has no interface number 0 [ 70.146817][ T366] usb 1-1: config 0 interface 241 has no altsetting 0 [ 70.157950][ T366] usb 1-1: New USB device found, idVendor=12d1, idProduct=7151, bcdDevice=58.91 [ 70.167088][ T366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.175397][ T366] usb 1-1: Product: syz [ 70.179690][ T366] usb 1-1: Manufacturer: syz [ 70.184420][ T366] usb 1-1: SerialNumber: syz [ 70.194672][ T366] usb 1-1: config 0 descriptor?? [ 70.316721][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 70.376801][ T341] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 70.416930][ T1119] loop2: detected capacity change from 0 to 425984 [ 70.466757][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 70.480795][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.489357][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 70.497219][ T31] usb 4-1: can't read configurations, error -71 [ 70.538289][ T341] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.546859][ T341] usb 2-1: not running at top speed; connect to a high speed hub [ 70.555392][ T341] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 70.565778][ T341] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 70.574761][ T341] usb 2-1: config 2 has no interface number 0 [ 70.581129][ T341] usb 2-1: config 2 has no interface number 1 [ 70.587461][ T341] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 70.591327][ T1124] 9p: Unknown Cache mode or invalid value fs [ 70.599449][ T341] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 70.615431][ T341] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 70.627011][ T341] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 70.638752][ T341] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 70.648860][ T341] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.662193][ T341] usb 2-1: config 2 interface 212 has no altsetting 0 [ 70.671233][ T341] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 70.681232][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.689476][ T341] usb 2-1: Product: syz [ 70.693722][ T341] usb 2-1: Manufacturer: syz [ 70.698632][ T341] usb 2-1: SerialNumber: syz [ 70.914680][ T341] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input11 [ 70.940220][ T341] usb 2-1: USB disconnect, device number 28 [ 71.022767][ T1129] kvm: kvm [1128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 71.031858][ T1129] kvm: kvm [1128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 71.506711][ T9] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 71.536735][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 71.656778][ T9] usb 3-1: device descriptor read/64, error -71 [ 71.688172][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.699326][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.709115][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.722080][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.731264][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.740380][ T31] usb 4-1: config 0 descriptor?? [ 71.746506][ T31] hub 4-1:0.0: USB hub found [ 71.896827][ T9] usb 3-1: device descriptor read/64, error -71 [ 71.947946][ T31] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 72.136780][ T9] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 72.256874][ T31] usb 4-1: USB disconnect, device number 30 [ 72.266957][ T9] usb 3-1: device descriptor read/64, error -71 [ 72.506731][ T9] usb 3-1: device descriptor read/64, error -71 [ 72.617349][ T9] usb usb3-port1: attempt power cycle [ 72.916726][ T361] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 72.966713][ T9] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 72.987966][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.067250][ T361] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 73.083377][ T361] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 73.092926][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 73.101413][ T361] usb 4-1: Product: syz [ 73.106142][ T361] usb 4-1: Manufacturer: syz [ 73.110829][ T361] usb 4-1: SerialNumber: syz [ 73.112057][ T1155] loop2: detected capacity change from 0 to 589824 [ 73.123997][ T361] usb 4-1: config 0 descriptor?? [ 73.133926][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.145476][ T361] cdc_acm 4-1:0.0: Zero length descriptor references [ 73.156819][ T361] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 73.185604][ T341] usb 1-1: USB disconnect, device number 30 [ 73.348357][ T361] usb 4-1: USB disconnect, device number 31 [ 73.376737][ T9] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 73.396741][ T343] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 73.398178][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.516779][ T341] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 73.538075][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.556743][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 73.563467][ T1157] FAULT_INJECTION: forcing a failure. [ 73.563467][ T1157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.576596][ T1157] CPU: 1 UID: 0 PID: 1157 Comm: syz.1.259 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 73.576623][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.576635][ T1157] Call Trace: [ 73.576647][ T1157] [ 73.576655][ T1157] __dump_stack+0x21/0x30 [ 73.576687][ T1157] dump_stack_lvl+0x140/0x1c0 [ 73.576712][ T1157] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.576737][ T1157] ? check_stack_object+0x12b/0x150 [ 73.576763][ T1157] dump_stack+0x19/0x20 [ 73.576797][ T1157] should_fail_ex+0x3d7/0x530 [ 73.576822][ T1157] should_fail+0xf/0x20 [ 73.576841][ T1157] should_fail_usercopy+0x1e/0x30 [ 73.576878][ T1157] _copy_to_user+0x24/0xa0 [ 73.576906][ T1157] simple_read_from_buffer+0xed/0x160 [ 73.576940][ T1157] proc_fail_nth_read+0x1aa/0x220 [ 73.576963][ T1157] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 73.576987][ T1157] ? bpf_lsm_file_permission+0xd/0x20 [ 73.577008][ T1157] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 73.577030][ T1157] vfs_read+0x286/0xcb0 [ 73.577057][ T1157] ? __cfi_vfs_read+0x10/0x10 [ 73.577083][ T1157] ? __kasan_check_write+0x18/0x20 [ 73.577109][ T1157] ? mutex_lock+0x97/0x1d0 [ 73.577133][ T1157] ? __cfi_mutex_lock+0x10/0x10 [ 73.577155][ T1157] ? __fget_files+0x2c5/0x340 [ 73.577187][ T1157] ksys_read+0x145/0x260 [ 73.577213][ T1157] ? __cfi_ksys_read+0x10/0x10 [ 73.577240][ T1157] ? __kasan_check_read+0x15/0x20 [ 73.577267][ T1157] __x64_sys_read+0x7f/0x90 [ 73.577294][ T1157] x64_sys_call+0x2638/0x2ee0 [ 73.577322][ T1157] do_syscall_64+0x57/0xf0 [ 73.577350][ T1157] ? clear_bhb_loop+0x50/0xa0 [ 73.577379][ T1157] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.577405][ T1157] RIP: 0033:0x7f2b9775b78e [ 73.577422][ T1157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.577439][ T1157] RSP: 002b:00007f2b985d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.577460][ T1157] RAX: ffffffffffffffda RBX: 00007f2b985d56c0 RCX: 00007f2b9775b78e [ 73.577487][ T1157] RDX: 000000000000000f RSI: 00007f2b985d50a0 RDI: 0000000000000006 [ 73.577501][ T1157] RBP: 00007f2b985d5090 R08: 0000000000000000 R09: 0000000000000000 [ 73.577514][ T1157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.577527][ T1157] R13: 00007f2b97a16038 R14: 00007f2b97a15fa0 R15: 00007ffd1ec17df8 [ 73.577546][ T1157] [ 73.697284][ T9] usb usb3-port1: unable to enumerate USB device [ 73.764790][ T343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 73.765781][ T343] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 73.838322][ T343] usb 2-1: can't read configurations, error -71 [ 73.850907][ T1162] bridge0: entered allmulticast mode [ 73.865425][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.876413][ T341] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.892766][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.901688][ T341] usb 1-1: config 0 descriptor?? [ 73.921570][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 73.921588][ T36] audit: type=1400 audit(1769897761.920:855): avc: denied { read } for pid=1165 comm="syz.1.263" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.950255][ T36] audit: type=1400 audit(1769897761.940:856): avc: denied { open } for pid=1165 comm="syz.1.263" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.974957][ T36] audit: type=1400 audit(1769897761.940:857): avc: denied { ioctl } for pid=1165 comm="syz.1.263" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.037988][ T1171] kvm: kvm [1170]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x407460 [ 74.047329][ T1171] kvm: kvm [1170]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x40f380 [ 74.073405][ T36] audit: type=1400 audit(1769897762.070:858): avc: denied { ioctl } for pid=1170 comm="syz.3.265" path="socket:[10285]" dev="sockfs" ino=10285 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.277212][ T343] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 74.314265][ T341] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 74.333878][ T341] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input12 [ 74.412141][ T341] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 74.456742][ T343] usb 2-1: Using ep0 maxpacket: 8 [ 74.463479][ T343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.472102][ T343] usb 2-1: config 9 has an invalid interface number: 5 but max is 0 [ 74.480569][ T343] usb 2-1: config 9 has no interface number 0 [ 74.486974][ T343] usb 2-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 74.503968][ T343] usb 2-1: config 9 interface 5 has no altsetting 0 [ 74.512654][ T343] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 74.525012][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.533722][ T343] usb 2-1: Product: syz [ 74.538395][ T343] usb 2-1: Manufacturer: syz [ 74.543440][ T343] usb 2-1: SerialNumber: syz [ 74.666956][ T36] audit: type=1400 audit(1769897762.670:859): avc: denied { read } for pid=1180 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 74.772669][ T36] audit: type=1400 audit(1769897762.770:860): avc: denied { getopt } for pid=1165 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.848052][ T66] usb 1-1: USB disconnect, device number 31 [ 74.856990][ T341] usb 3-1: new full-speed USB device number 26 using dummy_hcd Stopping sshd: stopped /usr/sbi[ 75.028709][ T341] usb 3-1: config 1 interface 0 has no altsetting 0 n/sshd (pid 201) OK [ 75.046071][ T341] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.40 [ 75.065061][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Stopping crond: [ 75.082506][ T341] usb 3-1: Product: syz [ 75.088461][ T1190] loop2: detected capacity change from 0 to 622592 [ 75.095078][ T341] usb 3-1: Manufacturer: syz [ 75.106706][ T341] usb 3-1: SerialNumber: syz stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 75.200959][ T36] audit: type=1400 audit(1769897763.200:861): avc: denied { search } for pid=1197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 75.330046][ T36] audit: type=1400 audit(1769897763.330:862): avc: denied { append } for pid=1178 comm="syz.2.267" name="pfkey" dev="proc" ino=4026532582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.357452][ T1179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.366048][ T1179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.408320][ T36] audit: type=1400 audit(1769897763.330:863): avc: denied { read write } for pid=1206 comm="ip" path="/dev/console" dev="rootfs" ino=25 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 75.431607][ T36] audit: type=1400 audit(1769897763.390:864): avc: denied { write } for pid=149 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.467060][ T341] usbhid 3-1:1.0: can't add hid device: -71 [ 75.473396][ T341] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 75.482764][ T341] usb 3-1: USB disconnect, device number 26 OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK [ 75.937735][ T1249] loop2: detected capacity change from 0 to 1114112 Stopping acpid: [ 75.951591][ T341] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 76.106725][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 76.115951][ T341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.125049][ T341] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 76.132843][ T341] usb 1-1: can't read configurations, error -71 [ 76.800001][ T1264] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 76.807746][ T1264] SELinux: failed to load policy [ 76.975901][ T343] usb 2-1: USB disconnect, device number 30 [ 76.982748][ T1275] loop2: detected capacity change from 0 to 2097152 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only [ 77.316781][ T343] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 77.426709][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 77.487835][ T343] usb 2-1: Using ep0 maxpacket: 16 Connection to 10.128.0.82 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy [ 77.591489][ T9] usb 3-1: config 0 has an invalid descriptor of length 158, skipping remainder of the config - remounted read-only umount: can't remount /dev/root read-only[ 77.607590][ T343] usb 2-1: unable to get BOS descriptor or descriptor too short The system is going down NOW! [ 77.630128][ T343] usb 2-1: unable to read config index 0 descriptor/start: -71 Sent SIGTERM to[ 77.638151][ T343] usb 2-1: can't read configurations, error -71 all processes [ 77.646781][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.655807][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 77.682675][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.693143][ T9] usb 3-1: config 0 descriptor?? [ 77.704707][ T9] usb 3-1: can't set config #0, error -71 [ 77.711516][ T9] usb 3-1: USB disconnect, device number 27 [ 77.899584][ T330] vlan1: left allmulticast mode [ 77.904501][ T330] veth0_vlan: left allmulticast mode [ 77.909849][ T330] vlan1: left promiscuous mode [ 77.914831][ T330] bridge0: port 3(vlan1) entered disabled state [ 77.921697][ T330] bridge_slave_1: left allmulticast mode [ 77.927418][ T330] bridge_slave_1: left promiscuous mode [ 77.933111][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.940779][ T330] bridge_slave_0: left allmulticast mode [ 77.946426][ T330] bridge_slave_0: left promiscuous mode [ 77.952202][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.988106][ T330] bridge0 (unregistering): left allmulticast mode [ 78.081386][ T330] veth1_macvtap: left promiscuous mode [ 78.086998][ T330] veth0_vlan: left promiscuous mode [ 78.380199][ T330] bridge_slave_1: left allmulticast mode [ 78.385878][ T330] bridge_slave_1: left promiscuous mode [ 78.391611][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.399220][ T330] bridge_slave_0: left allmulticast mode [ 78.405005][ T330] bridge_slave_0: left promiscuous mode [ 78.410666][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.418458][ T330] bridge_slave_1: left allmulticast mode [ 78.424134][ T330] bridge_slave_1: left promiscuous mode [ 78.430088][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.437996][ T330] bridge_slave_1: left allmulticast mode [ 78.443650][ T330] bridge_slave_1: left promiscuous mode [ 78.449536][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.461568][ T330] bridge_slave_0: left allmulticast mode [ 78.467370][ T330] bridge_slave_0: left promiscuous mode [ 78.472992][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.700320][ T330] tipc: Disabling bearer [ 78.705849][ T330] tipc: Left network mode [ 78.712767][ T330] veth1_macvtap: left promiscuous mode [ 78.718335][ T330] veth0_vlan: left promiscuous mode Sent SIGKILL to[ 78.724162][ T330] veth1_macvtap: left promiscuous mode all processes [ 78.731027][ T330] veth0_vlan: left promiscuous mode [ 78.737632][ T330] veth1_macvtap: left promiscuous mode [ 78.743221][ T330] veth0_vlan: left promiscuous mode Requesting system poweroff [ 79.752447][ T1292] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 79.759310][ T1292] ACPI: PM: Preparing to enter system sleep state S5 [ 79.766376][ T1292] kvm: exiting hardware virtualization [ 79.771973][ T1292] reboot: Power down serialport: VM disconnected.