last executing test programs: 1.918144937s ago: executing program 3 (id=894): setreuid(0x0, 0xee00) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x3, 0x7ff, 0x0, @mcast2, @empty, 0x8000, 0x7800, 0x92, 0xfffff5f0}}) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x90) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10000000a) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0x40000007, 0x2}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.917408747s ago: executing program 3 (id=895): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000000800)=""/275, 0x113}], 0x7}, 0x4}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 1.917131387s ago: executing program 3 (id=896): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f0000004500)=""/4110, 0x100e}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000000800)=""/275, 0x113}], 0x9}, 0xe}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ff}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) 1.86468372s ago: executing program 3 (id=897): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) chdir(0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x20, r2, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x140, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x16}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x82}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xde}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa76c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24000010}, 0x4400) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@loopback, 0x5d, r4}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80801000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048084) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) 1.86426875s ago: executing program 3 (id=898): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ftruncate(r2, 0x6) 1.781866825s ago: executing program 3 (id=899): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400402, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000d00)) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x89, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x7, 0xf0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'N~M'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x4, 0xb}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@obex={0x5, 0x24, 0x15, 0x21d}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x1c, 0x7, 0x3, 0x7, 0x20}, @dmm={0x7, 0x24, 0x14, 0x180, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xfc, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x48, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x8, 0x6}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x6, 0x7, 0x0, 0x40, 0x3}, 0x2f, &(0x7f00000003c0)={0x5, 0xf, 0x2f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x260e866494db195c, 0x8, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x68, 0x3b, 0x9, 0x7f, 0xb}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x14, &(0x7f0000000600)=@string={0x14, 0x3, "d094384af6dc36a8c6276dd706673ddcaf38"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3409}}, {0xc8, &(0x7f00000006c0)=@string={0xc8, 0x3, "882ba0e5a56dbcb80dc4cfad18564cb2582ec0721995030b3864d8579f924b25f502e70a09b945aa1059f1d6c8c3cfe0f416799b4a295257b531fc09ea31cf1c987a4d39caedd6998affee8e25533e1e86ecfdeda6cfcf612b0b844498a816b109690524b78d954e2f9a271af67938aba4cfeeaedd29264a32be19e4d8dfc436f25755de6c012389f90d63bf48a7b4fdda01357ba5944dda621746036d14704366d74bed9d8d757091820f45bec7fe35f68a6a6bba721c7c114b8433617eff3d4d51df3c2938"}}]}) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x57) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0xd0, 0x4) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x4100, 0x1000, 0x1, 0x9, 0x7, 0x0, 0x3002, 0x0, 0x1, 0x7fff, 0x4, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x400000000000002, 0x3, 0x6, 0xab, 0x5}) unshare(0x62040200) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 1.399264298s ago: executing program 1 (id=908): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f0000004500)=""/4110, 0x100e}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000000800)=""/275, 0x113}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) (fail_nth: 29) 1.037821079s ago: executing program 1 (id=911): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x400, 0x44) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x28000440, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000006e80)="325dd3e449af4b26d8a093aef75eb476190a9f16401c82f7482b4649d5af4805f313a77dee31d96c54077084b5ea4bc7e3d5695a4d1359de0b3f5eb5720614c295c1f80a82f10660cc9ac42d267c07717bbc1d740965b3b48062ecdd327b5cbd4b93fa4c226e6eb79325934162b0105f2151d405f42010f6fec60343970309bea4fe32b4abb4d216682d8911d59b93ec39b3fc066b452b8c5419a144804f1a5cfeb63c6249e0981da9a310480649c7cb26ea09626a7df3c8a3393fbd4058c3eb9599507400a4107247bce003babe98092426ffed71ec30070353bf1162c2009d1fa857cfdd9d33b3f03d0707b9dc1b6df6497b20170b5f625edd4690ceab7d7885b33a02ed6836649a932f8e9a9a1e72af0c43004acd07bec69543799448edb7714c1d29995b83e912827f22d0239e4439c8f94c9c8e68c5dbff7646e7861b06137fe24f4c06d51a4a9cbfa43ca4fc8bd753a2c151c9bd8c32f612dd96dc0e33ae4022515ad2ebcf0b7db8f78d943f77c5cbaca7088ee425d0188e1e8d5503d269bd42e2c32ec50275802733acec3cbc6a56c47584f96d9c6389ed70084bb4f33584f41bdbf23b96ff24b2c686396c44ffd5a625dcbbfbc60fb6fa1809d145cab0b99fcb5a47019c0ca5cb0c70bc83e5328d6431db1a352d6baf12c85a099a1fc25aacf03a78523bc034958a73bc3195aa7d8708b1f1a90c02c1327b13d2e155b040c0e5fa4c508f07bfb852e1ecdab8e63fcf1f8da030d43df17c5981350d5026bc6c2f9b7a5d9bbc19aad4a429a3b75d470735b71ec3442f2f1fe4646edba88917a07b2b916fd1ae6a60ea007c745b7bfcb1c44dabd52b5947c3380b593e2fe8aa38ec719cef952dc6a4093b4b52273e4d57626eddc934fa52c68da7d599338a6c499ad8e2fa392c419d4308d81ce7a7d2178ff61c0dd042d3359939c1afd27d636147668b59393727b714ed10bc30af53f8fe818fa6bcf8eb02e441e2f7b8d8f921c9934a738feba3f75cc81a31671c85bf94ec6a3eff6310e9620f797a28e465420fe6ae309e5af4c0e864edf6d4d3bf6118366604a754627816da8d19304ce7dfd0e94a0f53af130939c5da9d0840b9a32b63ee15f3c9477df9aba4d8705236b4d0c39d1278911df436181a3f317626a9dd1bcb8160ee7b2b0c97a5c6c360b516e5d3ebd2b4813736d8c07fdbd2f10537b7878bf4ceaef5fb2f957ef4fa0eb5fe9f2c830f6fbf88d55dd22acced3b2bab83b9785ab52a703f38522903c4735b77f1bef1c6dcb67a7497b1451ad3fb83b9e62940a7d539a38784c924df30668a226496cb37576c0177723d354c86251f25b31023188c2f4a044ef0fb436b71d2a453d16c5eb239b0e38f79815abc8484a02a57787043a779c185b1ccec9a245e6782c2b16db37f8a43964e4b35e57fa9dac709544b93284865c93318e02b59c8db3d0a72fc04cb0628ff5046d21806f30cbc8ce5101e0aa92b120b0aa54ec2e085fd72648a22999453edb52e8a0afeb6688feaf9ca7d27a3e64f40b33a018c2216e4566e06429584059ec9c83a7140e7bdc8d77df7d576b3b349aaa2d58b13b1ea3204d81afb8d6747dc1b7037da3addd58c405c584c613be25793df7af3a9a75b46fd171417cfd545e461f6e1600b7b902f0f8236f60bd65ed8058ceda4ea9bffe47798125640998e88003e7f5a2d174e6f0f6bf7919e303983cb7c6535315e0c965000b84553d4544099432281b9c83512309aa15904003e8a6513b4e529cd1f790c52b19d8444bcca5dceb3946d3cee5d9fd082af86b5247d58fe1eb249e0f04052628d82badf5c52d9f049907f52c65cccb12ef4efceeb6ae147feab1227bca0070074fbc20106f42c3c72c1d481747168b064ee3283f7636630566e6f40c54f3d1a972572e78c4a3c37870dc1ed3a4d4a5a155ba40e9bdf2be2f9875920b8a612e6d0a7e880ed782348ab1545b6dc4d201acce4420a61f280f3e08911eead982952d5e96a5672fa72d211f019528577127f770392fae1dc8928b941152260641ae236b72d42ae1f57e15fdfa92253866f6b66c14b3bc92406f5388d102cb77bf31edab619748e0bad9869a060dce1c60fabb6e3b6920ca6699c0795dc30b9f304f67757d37998f0d080e6af68e2b348bab428ea400bc986ee3cfe191f8fa08429d727efb0fd2762b3a48444d26e9401636aefbdccbf2d4c4e1d5bba6223a598c82a6468a5d35e65eb3b03822fb352141977441b758387b7c119d6961f3b043723d563e379761946af9b16d5174a07cfa389aec06dd7b1bf631d63e1d59c2a45bf475ee162cd0deb26fdfbff7a66dd458b2305da511492f883c9976ef5cab34fb2ab3c657896f716210afede3f7a7d9892f4d0fc8d50a5b3adacd49d133036dbe518c10d889898aaa5c399fa29d2ea38e112b7ad6ae08c59c22c6d72909455585e8a67f3289317e4943ecf736be5b8f7d84b6a3bf2fccb21eb278b1248bb23dfdd24c285b8fb766e9d4bfd12116d60c9753aed822d32529d7dbe24d14b68c62be1cd0a6884cf93cac56e972b316efeafef2068c61fe980f3de18dab6a2de05e4011caf429120ffc68f709f14829736d5336a846869e45dc478a0202c504f2d5f66cb14c860324de48574ae44d30d99a307a584e9999df47144cd4e5fb6088a5931310b699fc92a8bafacade2339cf8f6f7ed3b4eb04d38ee3325a80d273706e445ff1fc7dc5708bf35f58a6bef6a3c1b0016996fe86ff95e4778796e1f05c9bbb32a1942e4199ae1eb35ba958b4e7d8136fa74661b2478c48d9e4bf31be179fd1eb2baa02d5859b0a26e42b2286de175722a6eaafe898698d875c7e161197ee14aad35d49164f73df4fc18a565ce32355e5527547f9ad80096578c123471d27babacf11ac5dc52a97fdc9dcdf49eee3697478e56a34df39abffefca858e9e9f2cdcad7823aadf42e8b47b93a9384a5148fb70065d59ec7696396067c453c8b3bccaac157e201d42e445e4f890f0498e7138eb655d42ab93c21848ecdd37392c27a2f9434e7c000a716c91121ce4a09eec421efd828cd1578a80a661006d834c1215b56e1210eb3232a37a8d8c1794b205b891b944a630fc9d90c8ca9a7f4a160f064fa13e602b5a8fa5d4e91b827d46d4461ea861a95d9fdff4e169031b5933dc895dcd63428109ec1889dc559f8270520238c0cb4c050dc793adc387ddcbd9421af90e640f6a0a7a3d754075bdeb110d51aa9c3253718a5eac8992bd69caa184e2062b0ed18457dc43052b6e51faab38e63595cfb513514d6ec4f2e6149f74dc0ff3bb6e9ba3287d88e71678d10e1c13d3806c97e06cfe056175a02f6b6638239523cb9614c0d64b460a917eaa5050075b92def8a349f51ec68309af1d63079b41ef73a2468f47eaab8b0c03bd22381e3e2f5b31d68b4dfc0f07fb4ffd32f0a0b736380f92794a5e9481fe9a83cad672ba5c4bfc57fd22bc34b63f828eed9b2eb70527cc69848953e87505fb74097a905744d93b0da73fa7548bd04994380069f50ca8a4f452088aaac31492c2aac8a2b04e38c246c1743c46a96c5fc60dd6c0440ea6964bc7f86d203a6cba2baf7bdaabb1f78563954e71f1c45730d259a643aee5d8eddbf1803dba55e2479531de013c2867ed465dcd21b0f236d985f1cc865480386b55401d882199f779c43bf6a772fa9394070530bfda06fd2810cf12b6e730d982e7644c3dc6ebcbfd029ebc1d861a7bc53394ca3bc4173dd89bc21b1ac67d4f2cbdcde1e2e89352439e00cc7c042749a881803b37da76008aa25c4f04cba65306112964026792b1238a5e8bec20bd9391fc190f73befc4642533777a12ecfda6c09aad168a13d473fdc0d5ed40a1c627a67fd5691acd5523d34a0312d89aa93554b18289c387698b4fa23144278e29f25765bdc99310bc372261ebcee581e5059bd790417a6c43573e488038f620d435cd738658925fad4dbf441ae821a5ce057a0ce24e456eadfe9ae192dec624757723b6bd1751f1358fda0d91e675ef99baa6e4049d5bb9d57c66bf643decf254b74605317b125f521d5459d7e0190715e930e017f6e251a8cbb1331cc745183632cf461b2f8c769a925c7a423ae23b1194d499b610d40ef758fc336faf1406c4cf4401f1b50b7db8976d302dcdc6fcf95e55bba0dc42ee0eee188be602295284e33730f2ec57817b21c99c272110fec53a852c264558e407ae0a2b33ed333fdc87da60eb9a7fbaaec6492d398a0c37dcea909afe8022cb8e90f5f6cbe6f5ce4ec79d0990427a423c695e7ead3db88b0e221aeb0aa611b2f96574d0c91674a941ab856d02538cde646b4518fa6ba9499c9bce1609c4e0e2be658e57ee1f5d6f387fdfee065797027347411be8312f90aec5bd443e67c4833b62ba8798bcea597cbd27bd27c808f27ed2dd432c697dd65cb874c68b047eb82bf4d74b16829c38806c2384c8371227c4b5f04c9756b6a3a614f2e849f6d4ea9b14e6795b55fc68b9e6f9b06cd21ff87b8fb719fcd5f7178d792446d974ceabf554db2c9aa5fc703639cea8c69d7db2c190fa0ab6557536ebb25a7bf4cf5b13414c4bb45e0083b8bb1973d1d0e286cbc2906b2bdce0550732a764b87e1924b5dfe7a756f5facc81d26503934d7b2783d438b6bae718a15affafda3449b7bba555740e463d6f4891c52ee3aae34696d6171e98ec4adb037250024533848d676151622b1b053b0c6f70421ba37f2392350692af9169c7ba06a48d306277cadf018dc2ea736010c05883062a7a0ed27881ba5ec3a5557e3ed05f1795b7fea2344b49bd1a5d7c2289520c292cfa1f1e632c06eb39f23437276b3efb7805d30da5c0265f96832a5d7b2b1bcacaaf009ae8097a75227760d144952360cafd4ec88bf475e24f1b56e8c74cced37f56c1ebd320c849adb30db4ac125a6619e69ea8ee257d73c317d2fc6dac68baf875aa8045f6a69dc68dee403b944c8fb229e2a5f07e23bfc4dadaf0e61ad776a8556d8a97dc4c4c18d423bcf6c6df2820a370906a3672ecc39dbc106a253e36e0cc20a03837c71e1136684e6e0ecc4a5a0af03c2b9d85224accda7d1bdff92a6231cd044715289b8f65a51173e95a01dd1923a2ef20c6fc887b785f9508ce4296c0a4f10d1b6aec4197b0189cce7a9df23521208571e62f2e8dbcca277f7be585980b8b8099b78fd515c9256c26eeda3f35bfff0022919442281291a760ea1ee97f5d6a0f1908687a7eb55aee2af0d80f0917c41e246b34fcba334a2bc0534b1df2c657ba09c652267b85d4be2305429a0b5a40a4fe15a094c336aaed2d7f7deae21eb1d0b3da6dbf5a6e889f14c05aa3416c7f6ae00a8c1722e3eba9f57b463f1efb019d6c0edbd8c0b0d2087493fcbc82c93c358c302879b37a202c2cffaed0e741ed422bc66df77af2314655d798b2d49c7cb4798312d36f37eb0629273f1c2bec7607ee2ef04e26ac2f854d875ee2e14bf2b926fdcff1845f7292454e5d942b954a26c3587cb6709319b995b7a876e0786097629079327f07f9aa61fd5e48d67cb7f69c907f1c7868c03c7781c119092572edd2fbe2aadb50d695dc68097dbf59513507b44026acefcc984bee1b8061493c6b9ddcf2dbdb8f75b271311b521ddb8f46d9822fda5238711b8bd8e8021c95faa203c7e1afa39e0e26cb4d313db929be6caae94f92c9fb5e152b28f883bdefc472f71371f0eab8e9b4bade8a0aa3dc5489e4552c0477f32781cd5545448ee687f6124f5df72ea9771ed64713527e6e9d5dfed5dddb87682732869219956f902f13bf9f8984c97660deaf10d00d5d54e1725a174aa0c2af728053b8d969fed0dcf42badf2cb2817934a5dc430b3506be2ce057316a414405538726d6f0105bbff8098b01c197280fd3ef7cc97759780b0975e81a1b09bce760777ac57683812a8547bbeda4bf6f683a036a2e4f2e70d6c88156d8a4750edc3bfefde4523a0624972fb033dbb9e0b85d4668e85dc24535758d6891d8a8cf42b442d0e2351743d60012d08b0bc961c60f197705d800da8159359939cf678c90a3514a58c67fcb92ae0fd3e2c78a45aa2be00491277e027ffdd7a5f8ef0a644a714a592ed942168fa79f51952e737c11ee8d41873380ae5a191bd6575d97c02689b2319e11eadbe129b739f6aa111315554b2047cfbb32161e3ed2d5ee4f25216749e09b31279dcbfc17de72e6c83ad5868fb99f8f865006d48030685b37bfb1f07dd5981b27d8da16efe2dedc91e356d8237213e5642f3fd2b4605a7960ca3c753168f7e6c1113352a1b705410e787d59f2eb6c88355ae1996836c0d00f8267cd1279485c53ed9c79385e45e0fa7c280080d4c7270b8eb880cca78b9ad4eb7c41b8c0e04655484eab9e84fbc9d92859f8c418c57f9cd2c34fd91ac2429255659d873588a67a58095e88e3c3d78464f5ee79d1d224cc14eee32943d64d86771f2eead1cca73c11d939cb96c3b697f1bf71845c0e50b6fb1aed3fb24f3a51fa9dca9c0bd1a8fcd0488a4589e1419778b2933e855579b486b2abd85c231339d6f47817daa873aea779358f65f1e489ddc06d053291357efce65a417aaeba560ab2f25bd41dd87dfecf6809760feb45cf21af64ff1acff201beaa044dc0975324568f31450b6ade77206bdcbd089710d6d817664e69ddcc1f2868f41661116c05a0828580820c75331a34443753735188c70d9955848d63120a7cd079b88734ffdfbf3767d4d782cb86b20bce7922b2d4cf6bce724839ce6051c483a8900576c088d163899f58f0c7581b0bc6bf71b1fa9f78f7a574b71741208aa5519848d660a0e4dc5e341c3ae0ac0ea35d1f903e4ed45597c33f8eec618766925d7f7c75daa5f242769115a49d0b2dcdcace18ac27f9b741a1d3e2837e398e238f5948de282c03dd875bd5354734c27fcb13ad68e3f2e48cb8f226862e9550db8844fc48d44f1ab6341bd35bfe9475abd6a9123677e94043d307ae76c807eb3e50d397ab6c48e3e10311059bd33b75d3faf7e1aa788991af7914b6ace4855f3eb29b57cc424e1207f18f917b880b4037770d394c418c204c2510085c8c07aa64bc929b23137934e33160ac563d38fa6faf565a7a8bd7f3214b4d38f6b2ae4b226647e9ecff4a00c4b659094af1b2f38b98f9ae7df41a7bbcc011c4a3d250c041cc96cef419c7a1f23ff1d894a3ca68e8fb4282c50e6131c9a3854faae37178b62ef7e48baa908d16781984d73b1d25eb9e174894dfc37a0b07e63df867ecd438801d606e11b580ecca485e4a9cccb271e756ddbdc406a5e5bfac27ea142a5e165618aa247812edb649502e385f5860e7af3eecfdf845d376c494d2de66ebd437fb00fb1cd442855c258c048ecf425d652fa26b106dff8769367cc58c5e8f03c2071e21b8aee0917c47fcc36e161a14c5309715258caf5354a936fe8e51e24cbad62153340f43e8045a0d8df72be4112074a7d86a54b2ee33fdf152be14e74d382046a97ec10b19383cb62bb0271e7af82b0d68c0b516a04f3e941518735ab719ecaa65a41e76a00c3edc96f7ce16a507a53fe847cb17510776bd54faaf209ae2a172778294bd98999e7b081b21a58d472f51bac95b065eff5eb1d7f528ff90de8b939e191da136f39a60d6f55072e89af801cf5b0d8abd2661816f9f7b2772140a303d3e5eb8e30429dbe7089622cdab35f646e908ddaab0e5d83c9fcfc5fabe572bb4b793fa884a07ea396fd984a9aef613ad23168b843730081f82b84d65dcbe7880934c61dd0ec50ba20cc110feced5b47715ab837d4a6e6e72e20376f5ad1a2cdfe964976587708c92ed22c79e1353e857db2d5f87cb1c0874460f072262041c4344b33893e144f38d35e98abb382001f111f862ba925cf3531045765d2d9382c9ab0ed72ea1cec00fad13b3923e1715f6a7303eb2d51c4739130f788b619a3062fbc1000a82681313923399804a390bfd036a87eee3e6d771cab97cc7e38f194eaa135bdb1558580cd9b82c8b29c83a118223996e07155f04b95610b4a521b705d922bf7ced284a260359e4006d569cf54baf807286997976ca7a1ed8fca31a71e17995e422ca7abf77acf5b198d5afb0848b0e05903045d2a15cadcd39bc5681bed897685e7f8e52ac5f7abf5d339c2654a9f2579cbaecf5c6371f2754d77fe8ff289949c6aa9ca6d24a645ea4dbf71ad83f480e3a2c435b09d8f70f99245f052c1db2abad57108733985c7c52047f3cb1343aa1ca5e1a8fdbb4fd4cc25651ca900299def28f1061793a5a4b8dc4b8a8565a523bc7e8cd5e519f607e685f7a59f5eb18331cd29a3e550710a8f009629ab7beaf340883cad1287970d1b080e27abe1e73c02baa028798d92474f2e0f7da03c0c3ab19a97d7080347f3667c42dee2008d3a59cd3ac56d2d00b1859e51a0ec0f073b6e3aa8d34c533e4c6b1efde2f89f9482a1101a184a87ff756085e5de3dcf7c89542e4a26fd8774dc43d3c63b8de35b2019ff1174b33243548b53b7bb18f4985bdc9dfdf2dcdc3c19ec99d60da850d8cf6716891f59bf904ca5d5b1e68e1ccd34a3faed73c76984512b5c090bebed2b782161465b3349e72a5f5acd1721bb791e9dbb566934f810e293aca85127913113976d6002750fcb3cc2276dd7776138fe44d60f1f264e02ff755baa4a21cedcfe9ac447baa71293d83c250b745775572e34f1546e04d6c2972bd1c5ca74df0428088fc1100bab334b901c272047320c9061d2efd22cd1f36520875baa2d8eaff6579e9a92a9433c6ad4d8dbad51e5ebba8b1d40cbf564b5b6cb29a4815cfc0fb062f06ce1f785ec43f0fbddce18a11e82c00e8736c3e1537eae5119d07f728d2ededaae18c2804f2678c774df5ec7793b916ff05c09153d8ea6a7c3154d43eb672e613f5e287a1d43ee55682ac7a0570138feadf6c7faac2016d77dd0fd287b10604aa5e5ed96c49ddf855712539ccd847c26bf7070fe25bac525c2e905aa31fe0696a0812f2ba305b5cc6f0d9bc6b7aadf453dbd65e60141893a25fcca00f6d468eda17d44cc94ec4d34cc57cd154fbfa05ffaf75836828d6b82155e35329f1103a6f9c8a7899d88b872c490deb78a21ceea38bfcb5b7fff70f638d02171d0fcb853d80765d275ab416b12e010d3b16b75e37380ab9f4a23efcb7d7b0b03691c87b5c1261b666f45b7625350fc47ef4f399f9d7f698e93084bfe2289afffdd213c613701c45629a3adbdcfb90c8bad3ec875b1b61b0973b6a3baa556dfec01d309cb345d8a0ac7c32df747af24557f5aa2d7348bb267c78861ec3761ca5c22f8115217f77dc76f0ca5fbb5baa07ab1cf3eab71a36c61720870a5c1e5f5afbce7848d9a72a2b452b10d7de1dbdd9d060e9c04887d5d6b448f9e8cda175e74951ec16965967cf533a7163b20b419973499cf556168e6c81ebf49563fb845f88e7120e7ba2d413f61e2e738993619af503dcc5a102dc1b86c313460c3eb2210cb218e2fecadce97974226ddcdaf32596f14d2c872fe5668d2eb06ebb533aeecd14c30bd9e1a923f778749fb40d5f163319e0ddc23c5fcdefd9a177d2dc730006ff8dffaafa92a9cd92324721f6abbbc8f3ff32c3363d2b7bc492b0868fd47bc8204dd63085afa5873488e7e67f63ccba68df049962ac240c192edd179a4ab3406e14a0eb82b119eaab7833fba4f03e9dee3079889dad9d1451e5ebecc352d2da88fa9edc33423bb88ebd0e58520ad6eeb4d5774e9a487e043f858d1922f1ec905346fdb62b0f87bae33e507b7a2b8b675ce1d6e5f2c912915497e930c1edd94a895e4753b4ffeab65fd45a1689354127d0a97e0582b2b66fa2608aa229fe04bae57d36ddb3f5964bd22fda36e5fb2dabaaa67ccec5294d0d8217c4cda97b0282ed7027345b7cbea541f1fd3438248feab72ac2bb5f65115cce3095f5975079074354407a5cb4f9a66b60cdb0d0b7fba213ee218b97b04aa9b4a195d4340db8bb84792cb3498364863fdb53de878d0f927f8e850e4b3fa457c63140cfa73faa5e72e42b26fb190318678f4402275eb9b843f80e78e22baa4a6f5b6a6c86a4fe00a1b443e994d310275f2dc2d78d9c1da6c71055ba4df3d97712ba6753b640cae41f4188cd274ae4ea470f0a080b7849e23a70ba4671518bf0410201d6982fedbaf86213466ddf30135bb45344eac988e64e7415619a7b071b4d6a307865e4310fa02973153fbe07e1708a3e985ff3ce75a4a5b5cea39ab9ef45caed8baccd348f87b13cc636947c777ef5d9d01f32fe4c1fe2d63dc2c7fe9a99e765f8c887bd76fcc596759f636b2f8b41ba395732458ce418f55356683bbcc9b17d0c7301c4bdcb06dcec687129cecc227e60d759a4ba08b1005ca8a00083369e96a719765a24658b5876b77f372ccc55e54e1ecd62c44f50b65786c908ecc9df5210852765b9364393090b8be94c8cb68d6118326de20fe4877a26c05ed4ca0fb442abf9544df49d50db69f38b0df00aa0e6c782fb33b323eafb695b46fe1924269452cec8b7f6db6c4d079b3c277874fda6d6c6bddbeb61faa0f3faf391f9479126a7bd9411d0dd4048a3c62395c84bb282733cc2e5e517780d6dadc237770d93618a4c9421bca26be0de2b459d2da64667a7383491616ea73f9f4925d11f68369bbde88d77aa67368b2dbd8e5e7ef3fdef3e09bf8e107adb192855d31d9005f3e4276bed2afa1af6b948fcb41ddc93e8530790ad6f5447d5a215b58eabd690e017ebd9ec922a2fe55bc96745527523d2dedba961114f2836b7ebc8cc055d625b8cae97c4b6189fdb031c707f644d978032d870d979a767cf3ab95625adee128ab17ed0fde26b2c97c0fd8b468eb01dee4bcfbb9bd3cc79ab9c1b0e4b514f40da581661e17e17ee5ae6146c73ae7d6d264df30c770ca005444e68a1e5ab82e2e1745bc4d76f902f4b9f84142242cfbc1f1eb2c5546b3236979e4c7d4d46403f9f78d33e20e2376dd49f58429809367115aed9d42ece9276e8dd325a2b86af2f7cde8784e32d0384b5051ecf6c818572bd115546cecbebbfc8c0f634c8cbb8af6c53c36f095fb783800ad730374397deae43e7f5d181d0bfe99a43f2dc09d8ca2f95203c103520911e0c46923cfda1a0610f5ada25fc74f05db823b7f1ef39eb2c9b5689106dd6e59dc61b46f84747179ba2bef414a8df1de3217b583d3915ba9403449d2ea480745437abd314f1c05c83621b138af6937b8940710e0e7d2d56c4f7b219dff15f24f0630b522b17b7349ee915892620dede45d1af1d593d7ddf8dab7558c5bd40430e5fda51ee62520043f9b6b9b6d74417a9625fd2f8ec4273fecb18070349088311f191d78b4d50e11666fbde61e41612693dea9f30b12d5d15686da28c259a0eb3e0787e71a40b9cd643a54550ce8efe35a900025155c926a964cef968afa93c087c9729ca91077b31df909654ee772f90fdb89967ae513b3028807c179e343c90b7c5999ff9a02f21c6cd54dd8193d7c0ad556c634c65d83c2ee7d841d063bb7b8b65a21670e327ca6a95161720d8b20ec61bee64885d3afbc31ea", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x0, 0x2, 0x7, 0x3, 0x8, 0x7e0, {0x0, 0x3d727124, 0x7ff, 0x0, 0x653, 0xd9c, 0x0, 0x1d3, 0x3, 0x6000, 0x8, r3, r4, 0x5, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x24, &(0x7f00000000c0)={@multicast1}, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x5}, 0x4) r9 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r9, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x0, 0x31, 0x32, {0x32, 0x22, "b967adc7cb0ffc90228ef4f4a1cdc3d7d60013eca15fbfe3c954232a7c3f97a8a646003da848f8058af3cc5f3c14f47c"}}, &(0x7f0000001800)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "dd57d6ef0dae0194150f4ce7010531c3a0e44c7a7cc35747231e87468981d47c1563549b592f222b6c0cda3f46893f3761cd97506924808c898bbb6f040b2880011d706ea38101d021099d61bc81fe998884f51d0e668c618da7be3d215969ab1ee1083a27115d32ff428ec7cd4f45ffffffffffffff5440ec8b870e89b3805cb45e3d5f2d604422a6e671ee8ce006d11ba34abdda781f96fc6ac1a605ca7e4ac0c70b20adcbf433f7ec8d0ff9ee4a1f3cb834d20d3baae31d456bb051c5840ee3dc1aa1d3bef5ae0845adf9c46eed578a28d5"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f1500ffde050f15000110100a0d8100000000f0080030400000"], &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x4a, 0x6, "dccf848b", "5b3aa912"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x4, 0x80, 0x8, 0x7ff, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0xf, 0xcb, "2d4d11c93c0de7212af9f45123024b8d6b5f1c39819349b43e5c025e7767e3b44e0dfa2d88098e200dbbae6143c302b0aeb0ec882ce7b3556bcadd78ba8e4b6ecf3127f21151fdb0b0430708c67fd2bd365b793287e5acb6a61b81e5217e893ca5127d85274ebe889a79b31f0981b9506fd1131a05f003a4988eb408fbc62cc7a88062c48d5d1f5c9326202284f6ef15e30e9c8d7457869ed6adaf7502603c8a4f76147bc623ed046a7f13aab72106c2d5115527e74f7a477db4a251c7b27439ecaaa1ab9e389d91bd9dfa"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x12}, &(0x7f0000000500)={0x40, 0xb, 0x2, "af88"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'f\t'}, &(0x7f0000000640)={0x40, 0x1a, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xc}}) 392.512347ms ago: executing program 2 (id=924): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0xf1468000) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$pokeuser(0x6, r2, 0x358, 0x5) (async) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x0, 0x3, 0x2, 0xdf, r2}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000140)=0x1) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002d8f38000100feff0200030003000000970f000008000000000000000d000000000000000000000000000000e500000000000000010000000000000003000000000000006a9fe57002c4113e5711835991c02e44e159b63b9bb9e2595b126d68187a8542465f22e01043be889a882ffda9fa37f47ddb699e6165081933b7f30c5dce98d3940491ca105e6d5d0fd3e0a401b3d411f1b709"], 0x78) (async) close(r4) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) r5 = socket(0x1e, 0x4, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/71) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0xf4) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x3) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "84de55a2", {0x3, 0x104, 0x0, 0x84, 0x9, 0xd2, 0xf8}}) 392.403437ms ago: executing program 2 (id=925): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f0000004500)=""/4110, 0x100e}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000000800)=""/275, 0x113}], 0x9}, 0xe}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd021}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) 391.891157ms ago: executing program 2 (id=926): unshare(0x28000600) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x44fd4b3b}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000870200000000", 0x58}], 0x1) 389.523117ms ago: executing program 2 (id=927): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/275, 0x113}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 378.612198ms ago: executing program 2 (id=928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x2, 0x4, 0x5, 0x4}, {0x6, 0x7, 0x3, 0x2}]}) (async) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'sit0\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$pokeuser(0x6, r5, 0x378, 0x7) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x30, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @nested={0x14, 0x5, 0x0, 0x1, [@nested={0x10, 0xce, 0x0, 0x1, [@nested={0xc, 0x13e, 0x0, 0x1, [@nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x61}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) (async) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x60) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r12, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x2, 0x0, 0x3, 0x89, 0xf4, 0x5, 0xc, 0x5, 0x5, 0x1, 0x1}, {0x78, 0xcc84, 0x8, 0x9, 0x8, 0x1, 0xf7, 0x7, 0x8, 0x5, 0x6, 0x2, 0x10000}, {0x1, 0x4, 0x1, 0x1, 0x8, 0x9, 0x3, 0xa, 0x8, 0x8, 0xb7, 0xe, 0x7}], 0x7}) 319.951751ms ago: executing program 0 (id=929): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x1011}, {&(0x7f0000004500)=""/4110, 0x100e}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000000800)=""/275, 0x113}], 0x9, 0x0, 0xd900}, 0xe}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) 260.702085ms ago: executing program 0 (id=930): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x11, @broadcast}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @empty}, 0x7c, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x100000005, 0x26}) 260.528305ms ago: executing program 0 (id=931): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0xeaff) 259.721365ms ago: executing program 0 (id=932): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000000800)=""/275, 0x113}], 0x8}, 0xe}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 259.628085ms ago: executing program 2 (id=933): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x1a1081, 0x18) write$khugepaged_scan(r2, &(0x7f0000000000), 0x8) getdents64(r2, &(0x7f0000000000)=""/54, 0x36) 259.544485ms ago: executing program 0 (id=934): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 249.413175ms ago: executing program 0 (id=935): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}, 0x80001}, 0x1c) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d002be10ac0501852a520102030109021b00016a75609de75c03342b7b00c8b2b7e900010e0100000905010c0000000000"], 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f0000004500)=""/4110, 0x100e}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x65}, {&(0x7f0000000800)=""/275, 0x113}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x800}], 0x8, 0x40000100, 0x0) 63.214067ms ago: executing program 1 (id=936): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/275, 0x113}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 53.080637ms ago: executing program 1 (id=937): setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x7) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005180), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x5207, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00001ab000/0x2000)=nil, 0x2000, 0x1000002, 0x11012, r1, 0x108000) 120.45µs ago: executing program 1 (id=938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x4c000000}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, 0x0}, 0x10}], 0x3c, 0x0, &(0x7f00000002c0)="9eff9513f494af3a9be492c4dfe6d3d715b617a8bdc9ce7af96450fce9b534cd6537c305e307d1e3e24ee712a4f18c4ab27ca9efd0bc6e8a61f0131f"}) 0s ago: executing program 1 (id=939): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x6b, 0x0, 0x9}]}}}], 0x30}}], 0x1, 0x4042895) syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x8040) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) kernel console output (not intermixed with test programs): ): avc: denied { set_context_mgr } for pid=1109 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 41.925786][ T330] cdc_ncm 3-1:1.0: bind() failure [ 41.941611][ T330] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 41.952567][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 41.981045][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.991595][ T330] cdc_ncm 3-1:1.1: bind() failure [ 42.007763][ T330] usb 3-1: USB disconnect, device number 11 [ 42.024151][ T9] usb 1-1: config 0 has no interface number 0 [ 42.045448][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 42.064917][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.095023][ T9] usb 1-1: Product: syz [ 42.099418][ T9] usb 1-1: Manufacturer: syz [ 42.111785][ T9] usb 1-1: SerialNumber: syz [ 42.131994][ T9] usb 1-1: config 0 descriptor?? [ 42.731793][ T330] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 42.901787][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 42.925868][ T330] usb 3-1: config 6 has an invalid interface number: 250 but max is 0 [ 42.943394][ T330] usb 3-1: config 6 has no interface number 0 [ 42.969689][ T330] usb 3-1: config 6 interface 250 has no altsetting 0 [ 42.992255][ T330] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=a9.d1 [ 43.006515][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.034918][ T330] usb 3-1: Product: syz [ 43.051397][ T330] usb 3-1: Manufacturer: syz [ 43.068310][ T330] usb 3-1: SerialNumber: syz [ 43.289586][ T330] snd-usb-audio 3-1:6.250: probe with driver snd-usb-audio failed with error -71 [ 43.323266][ T330] usb 3-1: USB disconnect, device number 12 [ 44.271803][ T330] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.454457][ T9] usb 1-1: USB disconnect, device number 10 [ 44.460496][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 44.495422][ T330] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 32 [ 44.529739][ T330] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.575471][ T330] usb 3-1: config 1 interface 0 has no altsetting 0 [ 44.599154][ T330] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 44.608538][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.626649][ T330] usb 3-1: Product: ᰁ [ 44.640947][ T330] usb 3-1: Manufacturer: Х [ 44.645798][ T330] usb 3-1: SerialNumber: ꑷ碽뽖乬쏖俈㥅철ࢷ䴩낔덲Ⱛ鋴١텲욐팕㪛鹹┉ἓꏠ섔쩵碢椗䌚삖ᒊ딭䎏윮봓꺵{ꇢ《뜙䭬퀯ၮ䴑뻬槇㢐ⲃ➓㪍鷑䔻疻ॽ偮ᶫ緝㌄㠛꼱樔肧飍ࡎ둤捻됰瀺Ⓦ [ 44.712039][ T1128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.719377][ T1128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.759712][ T36] audit: type=1400 audit(1769163441.596:233): avc: denied { getopt } for pid=1144 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.831885][ T332] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 44.851906][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 44.937971][ T36] audit: type=1400 audit(1769163441.776:234): avc: denied { ioctl } for pid=1127 comm="syz.2.321" path="pid:[4026532294]" dev="nsfs" ino=4026532294 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.983112][ T332] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 44.995004][ T332] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 45.006357][ T332] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.020745][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.028751][ T842] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 45.036771][ T332] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 45.048159][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 45.056294][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.064642][ T332] usb 2-1: Product: syz [ 45.068998][ T332] usb 2-1: Manufacturer: syz [ 45.074342][ T332] usb 2-1: SerialNumber: syz [ 45.074413][ T9] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 45.091545][ T332] usb 2-1: config 0 descriptor?? [ 45.096866][ T9] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 45.110552][ T330] usblp0: Disabling reads from problematic bidirectional printer [ 45.120119][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 45.127645][ T330] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 2 proto 1 vid 0x03F0 pid 0x0004 [ 45.139915][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.149250][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.158279][ T330] usb 3-1: USB disconnect, device number 13 [ 45.164371][ T9] usb 1-1: Product: syz [ 45.168542][ T9] usb 1-1: Manufacturer: syz [ 45.173677][ T9] usb 1-1: SerialNumber: syz [ 45.178618][ T330] usblp0: removed [ 45.185976][ T1133] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 45.203285][ T842] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 45.211575][ T842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.221967][ T842] usb 4-1: config 0 has no interface number 0 [ 45.229572][ T842] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 45.239181][ T842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.247310][ T842] usb 4-1: Product: syz [ 45.251691][ T842] usb 4-1: Manufacturer: syz [ 45.256348][ T842] usb 4-1: SerialNumber: syz [ 45.262042][ T842] usb 4-1: config 0 descriptor?? [ 45.320217][ T842] usb 2-1: USB disconnect, device number 13 [ 45.459484][ T9] usb 1-1: bad CDC descriptors [ 45.465939][ T9] usb 1-1: USB disconnect, device number 11 [ 45.851552][ T36] audit: type=1400 audit(1769163442.686:235): avc: denied { map } for pid=1169 comm="syz.1.340" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.875888][ T36] audit: type=1400 audit(1769163442.686:236): avc: denied { read write } for pid=1169 comm="syz.1.340" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.901247][ T36] audit: type=1400 audit(1769163442.696:237): avc: denied { bind } for pid=1169 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.920708][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 45.920908][ T36] audit: type=1400 audit(1769163442.696:238): avc: denied { listen } for pid=1169 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.947811][ T36] audit: type=1400 audit(1769163442.706:239): avc: denied { accept } for pid=1169 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.072316][ T9] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 46.086647][ T9] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 46.095985][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.104861][ T9] usb 3-1: config 0 descriptor?? [ 46.211845][ T842] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 46.311811][ T9] usb 3-1: USB disconnect, device number 14 [ 46.361868][ T842] usb 1-1: Using ep0 maxpacket: 16 [ 46.368353][ T842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.378833][ T842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.389477][ T842] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.398742][ T842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.407360][ T842] usb 1-1: Product: syz [ 46.411847][ T842] usb 1-1: Manufacturer: syz [ 46.416695][ T842] usb 1-1: SerialNumber: syz [ 46.626988][ T842] usb 1-1: cannot find UAC_HEADER [ 46.633573][ T842] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.643611][ T842] usb 1-1: USB disconnect, device number 12 [ 46.648979][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.772700][ T36] audit: type=1400 audit(1769163443.616:240): avc: denied { read write } for pid=1174 comm="syz.1.342" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.773093][ T1175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 46.797297][ T36] audit: type=1400 audit(1769163443.616:241): avc: denied { open } for pid=1174 comm="syz.1.342" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.851092][ T1181] wireguard: wg2: Could not create IPv4 socket [ 47.081902][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 47.121919][ T842] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 47.232976][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.244259][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 47.255927][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.265141][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.273386][ T842] usb 2-1: Using ep0 maxpacket: 16 [ 47.278593][ T9] usb 3-1: Product: syz [ 47.282980][ T9] usb 3-1: Manufacturer: syz [ 47.287746][ T9] usb 3-1: SerialNumber: syz [ 47.293590][ T842] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.305049][ T842] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.315448][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 47.320854][ T842] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 47.331939][ T842] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 47.341655][ T842] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 47.354958][ T842] usb 2-1: config 7 interface 0 has no altsetting 0 [ 47.361576][ T842] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 47.370761][ T842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.411801][ T330] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 47.515917][ T1180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.571806][ T330] usb 1-1: Using ep0 maxpacket: 8 [ 47.578213][ T330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.586894][ T330] usb 1-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 47.599997][ T330] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.613026][ T330] usb 1-1: string descriptor 0 read error: -22 [ 47.619354][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.628922][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.794134][ T330] usb 4-1: USB disconnect, device number 18 [ 47.806297][ T842] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0004/input/input5 [ 47.832857][ T36] audit: type=1400 audit(1769163444.676:242): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=541 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.850031][ T332] usb 1-1: USB disconnect, device number 13 [ 47.857152][ T36] audit: type=1400 audit(1769163444.676:243): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=541 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.885525][ T842] kye 0003:0458:5010.0004: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 47.902254][ T36] audit: type=1400 audit(1769163444.746:244): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=541 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.933720][ T1180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.942357][ T1180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.950889][ T1180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.959602][ T1180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.967827][ T1180] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 47.992307][ T842] usb 2-1: USB disconnect, device number 14 [ 48.178047][ T1180] process 'syz.2.344' launched './file0' with NULL argv: empty string added [ 48.187332][ T1180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.195002][ T330] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 48.202790][ T9] cdc_mbim 3-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 48.210322][ T9] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 48.361850][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 48.367970][ T330] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 48.376283][ T330] usb 4-1: config 0 has no interface number 0 [ 48.391409][ T330] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 48.415728][ T330] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 48.429391][ T9] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 48.441441][ T9] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 48.452601][ T330] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 48.467430][ T9] wwan wwan0: port wwan0mbim0 attached [ 48.473112][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.481208][ T330] usb 4-1: Product: syz [ 48.491722][ T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fe:92:6b:ec:68:ad [ 48.509829][ T36] audit: type=1400 audit(1769163445.356:245): avc: denied { bind } for pid=1215 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.510678][ T1216] tipc: Started in network mode [ 48.531796][ T36] audit: type=1400 audit(1769163445.356:246): avc: denied { accept } for pid=1215 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.533872][ T330] usb 4-1: Manufacturer: syz [ 48.553736][ T36] audit: type=1400 audit(1769163445.356:247): avc: denied { setopt } for pid=1215 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.567735][ T330] usb 4-1: SerialNumber: syz [ 48.587481][ T36] audit: type=1400 audit(1769163445.426:248): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.589118][ T1216] tipc: Node identity 4, cluster identity 4711 [ 48.615660][ T1216] tipc: Node number set to 4 [ 48.620534][ T330] usb 4-1: config 0 descriptor?? [ 48.625971][ T1202] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.637502][ T332] usb 3-1: USB disconnect, device number 15 [ 48.643918][ T332] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 48.652838][ T1202] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.705580][ T332] wwan wwan0: port wwan0mbim0 disconnected [ 48.821834][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 48.861155][ T1202] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.868749][ T1202] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.971907][ T842] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.980635][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 48.988970][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.999254][ T9] usb 2-1: config 0 has no interface number 0 [ 49.006846][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 49.016232][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.024531][ T9] usb 2-1: Product: syz [ 49.028904][ T9] usb 2-1: Manufacturer: syz [ 49.033687][ T9] usb 2-1: SerialNumber: syz [ 49.039253][ T9] usb 2-1: config 0 descriptor?? [ 49.077585][ T330] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 49.121865][ T842] usb 1-1: Using ep0 maxpacket: 16 [ 49.128116][ T842] usb 1-1: config 1 has an invalid interface number: 84 but max is 0 [ 49.136511][ T842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.151792][ T842] usb 1-1: config 1 has no interface number 0 [ 49.158763][ T842] usb 1-1: config 1 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.172061][ T842] usb 1-1: config 1 interface 84 has no altsetting 0 [ 49.180514][ T842] usb 1-1: New USB device found, idVendor=10c4, idProduct=8a5b, bcdDevice=6e.74 [ 49.189945][ T842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.198040][ T842] usb 1-1: Product: syz [ 49.202428][ T842] usb 1-1: Manufacturer: syz [ 49.207066][ T842] usb 1-1: SerialNumber: syz [ 49.262081][ T1234] netlink: 68 bytes leftover after parsing attributes in process `syz.2.367'. [ 49.488790][ T1202] __vm_enough_memory: pid: 1202, comm: syz.3.354, bytes: 18014402804453376 not enough memory for the allocation [ 49.501504][ T1202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.510201][ T1202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.223351][ T330] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 50.249771][ T330] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 50.291878][ T330] asix 4-1:0.34: probe with driver asix failed with error -71 [ 50.319220][ T330] usb 4-1: USB disconnect, device number 19 [ 50.472405][ T36] audit: type=1400 audit(1769163447.316:249): avc: denied { read } for pid=1303 comm="syz.3.393" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.591208][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 50.650028][ T1337] netlink: 'syz.3.405': attribute type 3 has an invalid length. [ 50.662738][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 50.718458][ T1349] netlink: 92 bytes leftover after parsing attributes in process `syz.2.410'. [ 50.971834][ T842] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 51.123159][ T842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.134432][ T842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.144305][ T842] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 51.153830][ T842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.163531][ T842] usb 3-1: config 0 descriptor?? [ 51.571314][ T842] isku 0003:1E7D:319C.0005: item fetching failed at offset 5/7 [ 51.587712][ T842] isku 0003:1E7D:319C.0005: parse failed [ 51.603783][ T375] usb 2-1: USB disconnect, device number 15 [ 51.615091][ T842] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -22 [ 51.710341][ T9] usb 1-1: USB disconnect, device number 14 [ 51.772409][ T842] usb 3-1: USB disconnect, device number 16 [ 51.810015][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 51.881857][ T330] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 52.041976][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 52.048329][ T330] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.059723][ T330] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.071172][ T330] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 52.087637][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 52.099756][ T330] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 52.111955][ T375] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 52.126620][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.147638][ T330] usb 4-1: config 0 descriptor?? [ 52.272807][ T375] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 52.281070][ T375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.295030][ T375] usb 2-1: config 0 has no interface number 0 [ 52.309347][ T375] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 52.321797][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.338010][ T375] usb 2-1: Product: syz [ 52.345912][ T375] usb 2-1: Manufacturer: syz [ 52.350547][ T375] usb 2-1: SerialNumber: syz [ 52.356923][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 52.356944][ T36] audit: type=1400 audit(1769163449.196:252): avc: denied { load_policy } for pid=1402 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.358054][ T375] usb 2-1: config 0 descriptor?? [ 52.401072][ T842] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 52.557940][ T330] wacom 0003:056A:0094.0006: Using device in hidraw-only mode [ 52.566344][ T330] wacom 0003:056A:0094.0006: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 52.577697][ T842] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.589380][ T842] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 52.600955][ T842] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.671856][ T375] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 52.767493][ T332] usb 4-1: USB disconnect, device number 20 [ 52.801826][ T375] usb 3-1: device descriptor read/64, error -71 [ 53.041815][ T375] usb 3-1: device descriptor read/64, error -71 [ 53.281867][ T375] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 53.373855][ T36] audit: type=1400 audit(1769163450.216:253): avc: denied { create } for pid=1425 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 53.421813][ T375] usb 3-1: device descriptor read/64, error -71 [ 53.661941][ T375] usb 3-1: device descriptor read/64, error -71 [ 53.771967][ T375] usb usb3-port1: attempt power cycle [ 53.811793][ T332] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 53.963120][ T332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.971378][ T332] usb 4-1: not running at top speed; connect to a high speed hub [ 53.980399][ T332] usb 4-1: string descriptor 0 read error: -22 [ 53.986792][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.996008][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.111799][ T375] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 54.132774][ T375] usb 3-1: device descriptor read/8, error -71 [ 54.206505][ T332] cdc_ncm 4-1:1.0: bind() failure [ 54.212580][ T332] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 54.219451][ T332] cdc_ncm 4-1:1.1: bind() failure [ 54.225795][ T332] usb 4-1: USB disconnect, device number 21 [ 54.262820][ T375] usb 3-1: device descriptor read/8, error -71 [ 54.501847][ T375] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 54.522823][ T375] usb 3-1: device descriptor read/8, error -71 [ 54.652843][ T375] usb 3-1: device descriptor read/8, error -71 [ 54.735485][ T1448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1448 comm=syz.3.448 [ 54.761925][ T375] usb usb3-port1: unable to enumerate USB device [ 54.874180][ T375] usb 2-1: USB disconnect, device number 16 [ 54.979317][ T36] audit: type=1400 audit(1769163451.816:254): avc: denied { connect } for pid=1456 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.991824][ T332] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 55.168907][ T842] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 55.184989][ T842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.198450][ T332] usb 4-1: config 1 has an invalid interface number: 253 but max is 1 [ 55.209464][ T332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.228318][ T842] usb 1-1: config 0 descriptor?? [ 55.235783][ T842] usb 1-1: can't set config #0, error -71 [ 55.243422][ T332] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 55.263555][ T842] usb 1-1: USB disconnect, device number 15 [ 55.279910][ T332] usb 4-1: config 1 has no interface number 2 [ 55.286751][ T332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.297768][ T375] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 55.313460][ T1475] kvm_intel: kvm [1474]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x93cd [ 55.323409][ T332] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 55.335756][ T1475] kvm: kvm [1474]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x2e0f [ 55.344986][ T332] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 55.361933][ T332] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.381341][ T1475] kvm: kvm [1474]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x36c8 [ 55.390542][ T332] usb 4-1: config 1 interface 1 has no altsetting 0 [ 55.398725][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.409745][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.419629][ T1475] kvm: kvm [1474]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x2fee [ 55.428521][ T332] usb 4-1: Product: syz [ 55.442891][ T1475] kvm: kvm [1474]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xc722 [ 55.451821][ T332] usb 4-1: Manufacturer: syz [ 55.456579][ T332] usb 4-1: SerialNumber: syz [ 55.471119][ T375] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 55.479418][ T375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.500200][ T332] cdc_ncm 4-1:1.253: CDC Union missing and no IAD found [ 55.515131][ T375] usb 2-1: config 0 has no interface number 0 [ 55.524821][ T332] cdc_ncm 4-1:1.253: bind() failure [ 55.547931][ T375] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 55.557511][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.577661][ T375] usb 2-1: Product: syz [ 55.586949][ T375] usb 2-1: Manufacturer: syz [ 55.601170][ T375] usb 2-1: SerialNumber: syz [ 55.622103][ T375] usb 2-1: config 0 descriptor?? [ 55.669223][ T1498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.681591][ T36] audit: type=1400 audit(1769163452.526:255): avc: denied { ioctl } for pid=1497 comm="syz.2.469" path="socket:[11280]" dev="sockfs" ino=11280 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.682733][ T1498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 55.927161][ T1450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.941927][ T1450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.960727][ T375] usb 4-1: USB disconnect, device number 22 [ 56.051846][ T332] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 56.201830][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 56.208253][ T332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.220334][ T332] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 56.229828][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.238080][ T332] usb 1-1: Product: syz [ 56.242380][ T332] usb 1-1: Manufacturer: syz [ 56.246980][ T332] usb 1-1: SerialNumber: syz [ 56.252236][ T332] usb 1-1: config 0 descriptor?? [ 56.258042][ T332] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 56.266232][ T332] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 56.460973][ T332] usb 1-1: USB disconnect, device number 16 [ 56.506051][ T36] audit: type=1400 audit(1769163709.349:256): avc: denied { ioctl } for pid=1537 comm="syz.3.483" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.668768][ T1555] GUP no longer grows the stack in syz.3.490 (1555): 200000005000-200000008000 (200000004000) [ 56.680191][ T1555] CPU: 0 UID: 0 PID: 1555 Comm: syz.3.490 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 56.680217][ T1555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.680225][ T1555] Call Trace: [ 56.680232][ T1555] [ 56.680239][ T1555] __dump_stack+0x21/0x30 [ 56.680262][ T1555] dump_stack_lvl+0x140/0x1c0 [ 56.680284][ T1555] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.680297][ T1555] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 56.680314][ T1555] dump_stack+0x19/0x20 [ 56.680327][ T1555] fixup_user_fault+0x62a/0x6b0 [ 56.680342][ T1555] fault_in_user_writeable+0x75/0xe0 [ 56.680354][ T1555] futex_lock_pi+0x2d7/0xa70 [ 56.680368][ T1555] ? __cfi_futex_lock_pi+0x10/0x10 [ 56.680381][ T1555] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.680396][ T1555] ? futex_setup_timer+0xb4/0xd0 [ 56.680406][ T1555] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.680420][ T1555] ? sock_do_ioctl+0x1d5/0x330 [ 56.680435][ T1555] do_futex+0x270/0x510 [ 56.680445][ T1555] ? raw_setsockopt+0xf4/0x1a0 [ 56.680455][ T1555] ? __cfi_do_futex+0x10/0x10 [ 56.680466][ T1555] __se_sys_futex+0x13c/0x320 [ 56.680477][ T1555] ? __x64_sys_futex+0x110/0x110 [ 56.680488][ T1555] ? __kasan_check_write+0x18/0x20 [ 56.680503][ T1555] __x64_sys_futex+0xe9/0x110 [ 56.680516][ T1555] x64_sys_call+0x227f/0x2ee0 [ 56.680529][ T1555] do_syscall_64+0x57/0xf0 [ 56.680543][ T1555] ? clear_bhb_loop+0x50/0xa0 [ 56.680555][ T1555] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.680567][ T1555] RIP: 0033:0x7f6bf639acb9 [ 56.680577][ T1555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.680587][ T1555] RSP: 002b:00007f6bf4df7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.680600][ T1555] RAX: ffffffffffffffda RBX: 00007f6bf6615fa0 RCX: 00007f6bf639acb9 [ 56.680608][ T1555] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 56.680615][ T1555] RBP: 00007f6bf6408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 56.680621][ T1555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.680627][ T1555] R13: 00007f6bf6616038 R14: 00007f6bf6615fa0 R15: 00007ffd32b492c8 [ 56.680636][ T1555] [ 57.141883][ T332] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 57.271857][ T332] usb 4-1: device descriptor read/64, error -71 [ 57.511881][ T332] usb 4-1: device descriptor read/64, error -71 [ 57.531977][ T1573] netlink: 152 bytes leftover after parsing attributes in process `syz.2.498'. [ 57.581861][ T842] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 57.732032][ T842] usb 1-1: Using ep0 maxpacket: 32 [ 57.738686][ T842] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 57.747095][ T842] usb 1-1: config 0 has no interface number 0 [ 57.753364][ T332] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 57.761026][ T842] usb 1-1: config 0 interface 230 has no altsetting 0 [ 57.769251][ T842] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 57.778638][ T842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.786824][ T842] usb 1-1: Product: syz [ 57.791129][ T842] usb 1-1: Manufacturer: syz [ 57.795837][ T375] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 57.803721][ T842] usb 1-1: SerialNumber: syz [ 57.809604][ T842] usb 1-1: config 0 descriptor?? [ 57.815750][ T842] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 57.824218][ T842] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 57.891874][ T332] usb 4-1: device descriptor read/64, error -71 [ 57.952886][ T375] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.962906][ T375] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.972739][ T375] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.987093][ T375] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 57.996361][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.004589][ T375] usb 3-1: Product: syz [ 58.009022][ T375] usb 3-1: Manufacturer: syz [ 58.013811][ T375] usb 3-1: SerialNumber: syz [ 58.020831][ T375] hub 3-1:1.0: bad descriptor, ignoring hub [ 58.026961][ T375] hub 3-1:1.0: probe with driver hub failed with error -5 [ 58.068540][ T9] usb 2-1: USB disconnect, device number 17 [ 58.141927][ T332] usb 4-1: device descriptor read/64, error -71 [ 58.221671][ T375] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 58.252409][ T332] usb usb4-port1: attempt power cycle [ 58.411873][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.423360][ T36] audit: type=1400 audit(1769163711.269:257): avc: denied { read write } for pid=1576 comm="syz.2.500" name="lp0" dev="devtmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 58.446847][ T36] audit: type=1400 audit(1769163711.269:258): avc: denied { open } for pid=1576 comm="syz.2.500" path="/dev/usb/lp0" dev="devtmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 58.512042][ T375] usb 3-1: USB disconnect, device number 21 [ 58.518745][ T375] usblp0: removed [ 58.561879][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 58.568373][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.577480][ T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 58.585687][ T9] usb 2-1: config 0 has no interface number 0 [ 58.592092][ T332] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 58.599938][ T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 58.611299][ T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 58.621386][ T9] usb 2-1: config 0 interface 88 has no altsetting 0 [ 58.628653][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 58.638614][ T332] usb 4-1: device descriptor read/8, error -71 [ 58.646966][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 58.656338][ T9] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 58.664552][ T9] usb 2-1: Product: syz [ 58.668841][ T9] usb 2-1: SerialNumber: syz [ 58.674146][ T9] usb 2-1: config 0 descriptor?? [ 58.772917][ T332] usb 4-1: device descriptor read/8, error -71 [ 58.883758][ T1586] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29440 sclass=netlink_xfrm_socket pid=1586 comm=syz.1.503 [ 59.011889][ T332] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 59.042827][ T332] usb 4-1: device descriptor read/8, error -71 [ 59.172775][ T332] usb 4-1: device descriptor read/8, error -71 [ 59.281973][ T332] usb usb4-port1: unable to enumerate USB device [ 59.321845][ T330] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 59.473412][ T330] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 59.490348][ T330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.503296][ T1616] FAULT_INJECTION: forcing a failure. [ 59.503296][ T1616] name failslab, interval 1, probability 0, space 0, times 0 [ 59.516252][ T330] usb 3-1: config 0 has no interface number 0 [ 59.522499][ T1616] CPU: 0 UID: 0 PID: 1616 Comm: syz.1.514 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 59.522535][ T1616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.522552][ T1616] Call Trace: [ 59.522558][ T1616] [ 59.522564][ T1616] __dump_stack+0x21/0x30 [ 59.522597][ T1616] dump_stack_lvl+0x140/0x1c0 [ 59.522616][ T1616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.522637][ T1616] dump_stack+0x19/0x20 [ 59.522657][ T1616] should_fail_ex+0x3d7/0x530 [ 59.522677][ T1616] ? iovec_from_user+0x94/0x310 [ 59.522699][ T1616] should_failslab+0xac/0x100 [ 59.522724][ T1616] __kmalloc_noprof+0x69/0x500 [ 59.522744][ T1616] ? is_bpf_text_address+0x17b/0x1a0 [ 59.522765][ T1616] ? iovec_from_user+0x94/0x310 [ 59.522787][ T1616] iovec_from_user+0x94/0x310 [ 59.522807][ T1616] ? unwind_get_return_address+0x51/0x90 [ 59.522827][ T1616] __import_iovec+0x154/0x7c0 [ 59.522849][ T1616] import_iovec+0x80/0xb0 [ 59.522870][ T1616] ___sys_recvmsg+0x4bf/0x590 [ 59.522892][ T1616] ? __sys_recvmsg+0x290/0x290 [ 59.522913][ T1616] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 59.522931][ T1616] ? selinux_file_permission+0x318/0xb60 [ 59.522950][ T1616] ? __fget_files+0x2c5/0x340 [ 59.522976][ T1616] do_recvmmsg+0x380/0x830 [ 59.522998][ T1616] ? __sys_recvmmsg+0x2a0/0x2a0 [ 59.523018][ T1616] ? __cfi_vfs_write+0x10/0x10 [ 59.523041][ T1616] ? fput+0x1a4/0x240 [ 59.523064][ T1616] __x64_sys_recvmmsg+0x199/0x250 [ 59.523087][ T1616] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 59.523109][ T1616] ? __kasan_check_read+0x15/0x20 [ 59.523130][ T1616] x64_sys_call+0x292c/0x2ee0 [ 59.523154][ T1616] do_syscall_64+0x57/0xf0 [ 59.523176][ T1616] ? clear_bhb_loop+0x50/0xa0 [ 59.523198][ T1616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.523218][ T1616] RIP: 0033:0x7f88f379acb9 [ 59.523234][ T1616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.523248][ T1616] RSP: 002b:00007f88f46fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 59.523269][ T1616] RAX: ffffffffffffffda RBX: 00007f88f3a15fa0 RCX: 00007f88f379acb9 [ 59.523282][ T1616] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 59.523294][ T1616] RBP: 00007f88f46fc090 R08: 0000000000000000 R09: 0000000000000000 [ 59.523306][ T1616] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 59.523318][ T1616] R13: 00007f88f3a16038 R14: 00007f88f3a15fa0 R15: 00007ffcfb550b28 [ 59.523333][ T1616] [ 59.525879][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 59.802452][ T1620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.811017][ T1620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.823867][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.832247][ T330] usb 3-1: Product: syz [ 59.836443][ T330] usb 3-1: Manufacturer: syz [ 59.841047][ T330] usb 3-1: SerialNumber: syz [ 59.846588][ T330] usb 3-1: config 0 descriptor?? [ 60.024644][ T36] audit: type=1400 audit(1769163712.869:259): avc: denied { read } for pid=1619 comm="syz.1.516" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.047510][ T36] audit: type=1400 audit(1769163712.869:260): avc: denied { open } for pid=1619 comm="syz.1.516" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.211942][ T1645] FAULT_INJECTION: forcing a failure. [ 60.211942][ T1645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.268115][ T1645] CPU: 0 UID: 0 PID: 1645 Comm: syz.3.524 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 60.268143][ T1645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.268151][ T1645] Call Trace: [ 60.268155][ T1645] [ 60.268160][ T1645] __dump_stack+0x21/0x30 [ 60.268182][ T1645] dump_stack_lvl+0x140/0x1c0 [ 60.268194][ T1645] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.268207][ T1645] dump_stack+0x19/0x20 [ 60.268221][ T1645] should_fail_ex+0x3d7/0x530 [ 60.268232][ T1645] should_fail+0xf/0x20 [ 60.268241][ T1645] should_fail_usercopy+0x1e/0x30 [ 60.268252][ T1645] _copy_to_iter+0x3b8/0x1510 [ 60.268266][ T1645] ? __cfi__copy_to_iter+0x10/0x10 [ 60.268276][ T1645] ? __check_object_size+0x527/0x830 [ 60.268290][ T1645] ? __cfi___check_object_size+0x10/0x10 [ 60.268302][ T1645] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 60.268315][ T1645] __skb_datagram_iter+0x103/0x930 [ 60.268325][ T1645] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 60.268337][ T1645] skb_copy_datagram_iter+0x44/0x160 [ 60.268347][ T1645] netlink_recvmsg+0x2d4/0xe60 [ 60.268369][ T1645] ? __cfi_netlink_recvmsg+0x10/0x10 [ 60.268383][ T1645] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 60.268398][ T1645] ? security_socket_recvmsg+0x44/0x130 [ 60.268413][ T1645] ? __cfi_netlink_recvmsg+0x10/0x10 [ 60.268424][ T1645] sock_recvmsg+0x219/0x270 [ 60.268445][ T1645] ____sys_recvmsg+0x1e7/0x4a0 [ 60.268458][ T1645] ? __sys_recvmsg_sock+0x60/0x60 [ 60.268471][ T1645] ? import_iovec+0x80/0xb0 [ 60.268484][ T1645] ___sys_recvmsg+0x216/0x590 [ 60.268497][ T1645] ? __sys_recvmsg+0x290/0x290 [ 60.268509][ T1645] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 60.268519][ T1645] ? selinux_file_permission+0x318/0xb60 [ 60.268530][ T1645] ? __fget_files+0x2c5/0x340 [ 60.268545][ T1645] do_recvmmsg+0x380/0x830 [ 60.268557][ T1645] ? __sys_recvmmsg+0x2a0/0x2a0 [ 60.268569][ T1645] ? __cfi_vfs_write+0x10/0x10 [ 60.268582][ T1645] ? fput+0x1a4/0x240 [ 60.268595][ T1645] __x64_sys_recvmmsg+0x199/0x250 [ 60.268607][ T1645] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 60.268619][ T1645] ? __kasan_check_read+0x15/0x20 [ 60.268632][ T1645] x64_sys_call+0x292c/0x2ee0 [ 60.268645][ T1645] do_syscall_64+0x57/0xf0 [ 60.268658][ T1645] ? clear_bhb_loop+0x50/0xa0 [ 60.268672][ T1645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.268684][ T1645] RIP: 0033:0x7f6bf639acb9 [ 60.268695][ T1645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.268704][ T1645] RSP: 002b:00007f6bf4df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 60.268718][ T1645] RAX: ffffffffffffffda RBX: 00007f6bf6615fa0 RCX: 00007f6bf639acb9 [ 60.268725][ T1645] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 60.268732][ T1645] RBP: 00007f6bf4df7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.268739][ T1645] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 60.268746][ T1645] R13: 00007f6bf6616038 R14: 00007f6bf6615fa0 R15: 00007ffd32b492c8 [ 60.268755][ T1645] [ 60.853292][ T842] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 60.863250][ T842] usb 1-1: USB disconnect, device number 17 [ 60.904204][ T1658] netlink: 224 bytes leftover after parsing attributes in process `syz.1.530'. [ 60.942086][ T1664] netlink: 104 bytes leftover after parsing attributes in process `syz.1.533'. [ 60.970399][ T1668] FAULT_INJECTION: forcing a failure. [ 60.970399][ T1668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.998269][ T1668] CPU: 0 UID: 0 PID: 1668 Comm: syz.3.535 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 60.998295][ T1668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.998303][ T1668] Call Trace: [ 60.998307][ T1668] [ 60.998312][ T1668] __dump_stack+0x21/0x30 [ 60.998335][ T1668] dump_stack_lvl+0x140/0x1c0 [ 60.998347][ T1668] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.998360][ T1668] dump_stack+0x19/0x20 [ 60.998371][ T1668] should_fail_ex+0x3d7/0x530 [ 60.998383][ T1668] should_fail+0xf/0x20 [ 60.998391][ T1668] should_fail_usercopy+0x1e/0x30 [ 60.998402][ T1668] _copy_to_iter+0x56b/0x1510 [ 60.998415][ T1668] ? __cfi__copy_to_iter+0x10/0x10 [ 60.998425][ T1668] ? __check_object_size+0x527/0x830 [ 60.998439][ T1668] ? __cfi___check_object_size+0x10/0x10 [ 60.998450][ T1668] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 60.998464][ T1668] __skb_datagram_iter+0x103/0x930 [ 60.998474][ T1668] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 60.998485][ T1668] skb_copy_datagram_iter+0x44/0x160 [ 60.998496][ T1668] netlink_recvmsg+0x2d4/0xe60 [ 60.998510][ T1668] ? __cfi_netlink_recvmsg+0x10/0x10 [ 60.998523][ T1668] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 60.998538][ T1668] ? security_socket_recvmsg+0x44/0x130 [ 60.998553][ T1668] ? __cfi_netlink_recvmsg+0x10/0x10 [ 60.998569][ T1668] sock_recvmsg+0x219/0x270 [ 60.998585][ T1668] ____sys_recvmsg+0x1e7/0x4a0 [ 60.998598][ T1668] ? __sys_recvmsg_sock+0x60/0x60 [ 60.998612][ T1668] ? import_iovec+0x80/0xb0 [ 60.998625][ T1668] ___sys_recvmsg+0x216/0x590 [ 60.998637][ T1668] ? __sys_recvmsg+0x290/0x290 [ 60.998649][ T1668] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 60.998659][ T1668] ? selinux_file_permission+0x318/0xb60 [ 60.998670][ T1668] ? __fget_files+0x2c5/0x340 [ 60.998685][ T1668] do_recvmmsg+0x380/0x830 [ 60.998697][ T1668] ? __sys_recvmmsg+0x2a0/0x2a0 [ 60.998708][ T1668] ? __cfi_vfs_write+0x10/0x10 [ 60.998722][ T1668] ? fput+0x1a4/0x240 [ 60.998735][ T1668] __x64_sys_recvmmsg+0x199/0x250 [ 60.998747][ T1668] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 60.998760][ T1668] ? __kasan_check_read+0x15/0x20 [ 60.998772][ T1668] x64_sys_call+0x292c/0x2ee0 [ 60.998784][ T1668] do_syscall_64+0x57/0xf0 [ 60.998798][ T1668] ? clear_bhb_loop+0x50/0xa0 [ 60.998812][ T1668] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.998823][ T1668] RIP: 0033:0x7f6bf639acb9 [ 60.998834][ T1668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.998843][ T1668] RSP: 002b:00007f6bf4df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 60.998856][ T1668] RAX: ffffffffffffffda RBX: 00007f6bf6615fa0 RCX: 00007f6bf639acb9 [ 60.998864][ T1668] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 60.998871][ T1668] RBP: 00007f6bf4df7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.998878][ T1668] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 60.998885][ T1668] R13: 00007f6bf6616038 R14: 00007f6bf6615fa0 R15: 00007ffd32b492c8 [ 60.998894][ T1668] [ 61.388519][ T36] audit: type=1400 audit(1769163714.229:261): avc: denied { watch watch_reads } for pid=1677 comm="syz.3.540" path="/136" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.702068][ T1688] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 61.751826][ T842] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 61.832284][ T1697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65381 sclass=netlink_route_socket pid=1697 comm=syz.1.545 [ 61.901852][ T842] usb 1-1: Using ep0 maxpacket: 16 [ 61.910269][ T842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.920665][ T842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.931690][ T842] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.941070][ T842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.949520][ T842] usb 1-1: Product: syz [ 61.962564][ T842] usb 1-1: Manufacturer: syz [ 61.969427][ T842] usb 1-1: SerialNumber: syz [ 62.051816][ T332] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 62.094024][ T330] usb 3-1: USB disconnect, device number 22 [ 62.115630][ T1712] netlink: 'syz.2.549': attribute type 27 has an invalid length. [ 62.144668][ T1712] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.151914][ T1712] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.179709][ T842] usb 1-1: cannot find UAC_HEADER [ 62.186480][ T842] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.200259][ T842] usb 1-1: USB disconnect, device number 18 [ 62.204721][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.208308][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.237500][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.248587][ T332] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 62.259016][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.305452][ T36] audit: type=1400 audit(1769163715.149:262): avc: denied { create } for pid=1723 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.326683][ T36] audit: type=1400 audit(1769163715.149:263): avc: denied { ioctl } for pid=1723 comm="syz.2.554" path="socket:[12283]" dev="sockfs" ino=12283 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.328800][ T332] usb 4-1: config 0 descriptor?? [ 62.355055][ T36] audit: type=1400 audit(1769163715.149:264): avc: denied { setopt } for pid=1723 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.560779][ T36] audit: type=1400 audit(1769163715.399:265): avc: denied { mounton } for pid=1740 comm="syz.1.561" path="/171/file0" dev="incremental-fs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.618249][ T36] audit: type=1400 audit(1769163715.459:266): avc: denied { setopt } for pid=1748 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.641817][ T842] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 62.776376][ T332] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 62.793888][ T332] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 62.805742][ T842] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 62.814820][ T332] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 62.821840][ T842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.832658][ T332] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 62.839688][ T332] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 62.850577][ T842] usb 3-1: config 0 has no interface number 0 [ 62.857089][ T332] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 62.864207][ T332] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 62.873082][ T842] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 62.895687][ T332] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 62.909777][ T842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.928071][ T842] usb 3-1: Product: syz [ 62.936747][ T842] usb 3-1: Manufacturer: syz [ 62.941463][ T842] usb 3-1: SerialNumber: syz [ 62.946910][ T842] usb 3-1: config 0 descriptor?? [ 62.971843][ T330] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 62.992189][ T332] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 63.013840][ T1786] FAULT_INJECTION: forcing a failure. [ 63.013840][ T1786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.027186][ T1786] CPU: 0 UID: 0 PID: 1786 Comm: syz.1.578 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 63.027217][ T1786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.027225][ T1786] Call Trace: [ 63.027233][ T1786] [ 63.027239][ T1786] __dump_stack+0x21/0x30 [ 63.027260][ T1786] dump_stack_lvl+0x140/0x1c0 [ 63.027272][ T1786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.027284][ T1786] dump_stack+0x19/0x20 [ 63.027295][ T1786] should_fail_ex+0x3d7/0x530 [ 63.027307][ T1786] should_fail+0xf/0x20 [ 63.027316][ T1786] should_fail_usercopy+0x1e/0x30 [ 63.027326][ T1786] _copy_from_user+0x20/0xa0 [ 63.027339][ T1786] ___sys_recvmsg+0x176/0x590 [ 63.027352][ T1786] ? __sys_recvmsg+0x290/0x290 [ 63.027364][ T1786] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 63.027375][ T1786] ? selinux_file_permission+0x318/0xb60 [ 63.027386][ T1786] ? __fget_files+0x2c5/0x340 [ 63.027402][ T1786] do_recvmmsg+0x380/0x830 [ 63.027414][ T1786] ? __sys_recvmmsg+0x2a0/0x2a0 [ 63.027426][ T1786] ? __cfi_vfs_write+0x10/0x10 [ 63.027440][ T1786] ? fput+0x1a4/0x240 [ 63.027453][ T1786] __x64_sys_recvmmsg+0x199/0x250 [ 63.027466][ T1786] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 63.027478][ T1786] ? __kasan_check_read+0x15/0x20 [ 63.027492][ T1786] x64_sys_call+0x292c/0x2ee0 [ 63.027504][ T1786] do_syscall_64+0x57/0xf0 [ 63.027519][ T1786] ? clear_bhb_loop+0x50/0xa0 [ 63.027533][ T1786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.027545][ T1786] RIP: 0033:0x7f88f379acb9 [ 63.027555][ T1786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.027564][ T1786] RSP: 002b:00007f88f46fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 63.027577][ T1786] RAX: ffffffffffffffda RBX: 00007f88f3a15fa0 RCX: 00007f88f379acb9 [ 63.027586][ T1786] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 63.027593][ T1786] RBP: 00007f88f46fc090 R08: 0000000000000000 R09: 0000000000000000 [ 63.027599][ T1786] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 63.027606][ T1786] R13: 00007f88f3a16038 R14: 00007f88f3a15fa0 R15: 00007ffcfb550b28 [ 63.027615][ T1786] [ 63.269012][ T1790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.277909][ T1790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.331845][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 63.338050][ T330] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 63.346356][ T330] usb 1-1: config 0 has no interface number 0 [ 63.352806][ T330] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 63.363495][ T330] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 63.373611][ T330] usb 1-1: config 0 interface 41 has no altsetting 0 [ 63.381560][ T330] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 63.390693][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.398861][ T330] usb 1-1: Product: syz [ 63.403071][ T330] usb 1-1: Manufacturer: syz [ 63.407681][ T330] usb 1-1: SerialNumber: syz [ 63.413419][ T330] usb 1-1: config 0 descriptor?? [ 63.418721][ T1764] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 63.426372][ T1764] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 63.459443][ T332] cp2112 0003:10C4:EA90.0007: error reading lock byte: -32 [ 63.497774][ T332] usb 3-1: USB disconnect, device number 23 [ 63.634630][ T1764] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 63.644317][ T1764] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 63.700321][ T330] Error reading MAC address [ 63.712405][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 63.712425][ T36] audit: type=1400 audit(1769163716.559:268): avc: denied { setattr } for pid=1698 comm="syz.3.541" name="" dev="pipefs" ino=12703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 63.713217][ T330] sr9700 1-1:0.41: probe with driver sr9700 failed with error -71 [ 63.772720][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input7 [ 63.784703][ T330] usb 1-1: USB disconnect, device number 19 [ 63.807376][ T345] udevd[345]: Error opening device "/dev/input/event3": Input/output error [ 63.816461][ T345] udevd[345]: Unable to EVIOCGABS device "/dev/input/event3" [ 63.831083][ T345] udevd[345]: Unable to EVIOCGABS device "/dev/input/event3" [ 64.101822][ T330] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 64.221817][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 64.261799][ T842] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 64.381843][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 64.391703][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.409081][ T9] usb 1-1: config 13 has an invalid interface number: 51 but max is 1 [ 64.421817][ T9] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 64.434896][ T842] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 64.448751][ T842] usb 3-1: config 0 has no interface number 0 [ 64.457159][ T9] usb 1-1: config 13 has no interface number 0 [ 64.467608][ T842] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 64.481815][ T9] usb 1-1: config 13 interface 51 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 64.501844][ T842] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 64.514170][ T9] usb 1-1: config 13 interface 51 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 64.537270][ T842] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 64.550833][ T842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.560155][ T9] usb 1-1: config 13 interface 51 has no altsetting 0 [ 64.574725][ T842] usb 3-1: Product: syz [ 64.582907][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=d7.f7 [ 64.593268][ T842] usb 3-1: Manufacturer: syz [ 64.600064][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.612607][ T842] usb 3-1: SerialNumber: syz [ 64.621676][ T9] usb 1-1: Product: syz [ 64.628272][ T842] usb 3-1: config 0 descriptor?? [ 64.636622][ T9] usb 1-1: Manufacturer: syz [ 64.642851][ T1822] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 64.652500][ T842] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 64.661605][ T9] usb 1-1: SerialNumber: syz [ 64.693060][ T842] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 64.832115][ T36] audit: type=1400 audit(1769163717.679:269): avc: denied { read } for pid=1830 comm="syz.3.592" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.855586][ T36] audit: type=1400 audit(1769163717.679:270): avc: denied { open } for pid=1830 comm="syz.3.592" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.859154][ T1822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.879502][ T36] audit: type=1400 audit(1769163717.679:271): avc: denied { ioctl } for pid=1830 comm="syz.3.592" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.967863][ T1822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.005979][ T1841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.017149][ T10] usb 3-1: USB disconnect, device number 24 [ 65.034835][ T1841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.451781][ T330] usb 4-1: device descriptor read/64, error -71 [ 65.562355][ T330] usb 4-1: device reset changed ep0 maxpacket size! [ 65.579719][ T332] usb 4-1: USB disconnect, device number 27 [ 65.645655][ T36] audit: type=1400 audit(1769163718.489:272): avc: denied { bind } for pid=1854 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.711798][ T332] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 65.720125][ T36] audit: type=1400 audit(1769163718.559:273): avc: denied { create } for pid=1862 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.745369][ T36] audit: type=1400 audit(1769163718.569:274): avc: denied { create } for pid=1862 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.886477][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 65.900984][ T332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.933205][ T332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.964073][ T332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.984389][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.002878][ T332] usb 4-1: Product: syz [ 66.011827][ T332] usb 4-1: Manufacturer: syz [ 66.021794][ T332] usb 4-1: SerialNumber: syz [ 66.041810][ T330] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 66.212461][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 66.230246][ T330] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 66.256089][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.277276][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.302473][ T330] usb 3-1: Product: 웲㇣줨漟ꤎ牷蒌▿䐗嫹 [ 66.324761][ T330] usb 3-1: Manufacturer: ы [ 66.329332][ T330] usb 3-1: SerialNumber: 㰊 [ 66.338270][ T1928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.357610][ T1928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.375754][ T1928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.394477][ T1928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.427428][ T1933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.622'. [ 66.501277][ T332] usb 4-1: cannot find UAC_HEADER [ 66.510784][ T332] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 66.532139][ T332] usb 4-1: USB disconnect, device number 28 [ 66.535970][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.579474][ T1935] batadv_slave_1: entered promiscuous mode [ 66.594598][ T1935] batadv_slave_1: left promiscuous mode [ 66.620083][ T330] cdc_ncm 3-1:1.0: bind() failure [ 66.625899][ T1935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.639610][ T330] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 66.650901][ T1935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.663156][ T330] cdc_ncm 3-1:1.1: bind() failure [ 66.675799][ T330] usb 3-1: USB disconnect, device number 25 [ 66.936127][ T9] hub 1-1:13.51: bad descriptor, ignoring hub [ 66.942845][ T9] hub 1-1:13.51: probe with driver hub failed with error -5 [ 66.972013][ T9] usb 1-1: USB disconnect, device number 20 [ 67.146860][ T1947] FAULT_INJECTION: forcing a failure. [ 67.146860][ T1947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.181643][ T1947] CPU: 0 UID: 0 PID: 1947 Comm: syz.2.626 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 67.181669][ T1947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.181677][ T1947] Call Trace: [ 67.181682][ T1947] [ 67.181689][ T1947] __dump_stack+0x21/0x30 [ 67.181711][ T1947] dump_stack_lvl+0x140/0x1c0 [ 67.181723][ T1947] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.181735][ T1947] ? unwind_get_return_address+0x51/0x90 [ 67.181756][ T1947] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 67.181771][ T1947] dump_stack+0x19/0x20 [ 67.181787][ T1947] should_fail_ex+0x3d7/0x530 [ 67.181802][ T1947] should_fail+0xf/0x20 [ 67.181815][ T1947] should_fail_usercopy+0x1e/0x30 [ 67.181829][ T1947] _copy_from_user+0x20/0xa0 [ 67.181849][ T1947] ___sys_recvmsg+0x176/0x590 [ 67.181863][ T1947] ? __sys_recvmsg+0x290/0x290 [ 67.181875][ T1947] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 67.181885][ T1947] ? selinux_file_permission+0x318/0xb60 [ 67.181896][ T1947] ? __fget_files+0x2c5/0x340 [ 67.181912][ T1947] do_recvmmsg+0x380/0x830 [ 67.181925][ T1947] ? __sys_recvmmsg+0x2a0/0x2a0 [ 67.181936][ T1947] ? __cfi_vfs_write+0x10/0x10 [ 67.181950][ T1947] ? fput+0x1a4/0x240 [ 67.181964][ T1947] __x64_sys_recvmmsg+0x199/0x250 [ 67.181976][ T1947] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 67.181988][ T1947] ? __kasan_check_read+0x15/0x20 [ 67.182001][ T1947] x64_sys_call+0x292c/0x2ee0 [ 67.182014][ T1947] do_syscall_64+0x57/0xf0 [ 67.182027][ T1947] ? clear_bhb_loop+0x50/0xa0 [ 67.182042][ T1947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.182053][ T1947] RIP: 0033:0x7fd83f59acb9 [ 67.182064][ T1947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.182074][ T1947] RSP: 002b:00007fd84044e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 67.182090][ T1947] RAX: ffffffffffffffda RBX: 00007fd83f815fa0 RCX: 00007fd83f59acb9 [ 67.182098][ T1947] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 67.182105][ T1947] RBP: 00007fd84044e090 R08: 0000000000000000 R09: 0000000000000000 [ 67.182112][ T1947] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 67.182119][ T1947] R13: 00007fd83f816038 R14: 00007fd83f815fa0 R15: 00007fff5e930648 [ 67.182128][ T1947] [ 67.693451][ T1960] capability: warning: `syz.3.631' uses deprecated v2 capabilities in a way that may be insecure [ 67.748665][ T36] audit: type=1400 audit(1769163720.589:275): avc: denied { connect } for pid=1949 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.769966][ T36] audit: type=1400 audit(1769163720.589:276): avc: denied { write } for pid=1949 comm="syz.0.627" name="unix" dev="proc" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.005907][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.246529][ T1985] batadv_slave_1: entered promiscuous mode [ 68.264550][ T36] audit: type=1400 audit(1769163721.109:277): avc: denied { lock } for pid=1992 comm="syz.0.643" path="socket:[13616]" dev="sockfs" ino=13616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.265646][ T1985] batadv_slave_1: left promiscuous mode [ 68.389386][ T2005] FAULT_INJECTION: forcing a failure. [ 68.389386][ T2005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.405836][ T2005] CPU: 0 UID: 0 PID: 2005 Comm: syz.3.649 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 68.405862][ T2005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.405870][ T2005] Call Trace: [ 68.405874][ T2005] [ 68.405879][ T2005] __dump_stack+0x21/0x30 [ 68.405899][ T2005] dump_stack_lvl+0x140/0x1c0 [ 68.405911][ T2005] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.405924][ T2005] ? __sys_recvmsg_sock+0x60/0x60 [ 68.405938][ T2005] dump_stack+0x19/0x20 [ 68.405949][ T2005] should_fail_ex+0x3d7/0x530 [ 68.405960][ T2005] should_fail+0xf/0x20 [ 68.405970][ T2005] should_fail_usercopy+0x1e/0x30 [ 68.405980][ T2005] _copy_from_user+0x20/0xa0 [ 68.405993][ T2005] ___sys_recvmsg+0x176/0x590 [ 68.406005][ T2005] ? __sys_recvmsg+0x290/0x290 [ 68.406017][ T2005] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 68.406027][ T2005] ? selinux_file_permission+0x318/0xb60 [ 68.406039][ T2005] ? __fget_files+0x2c5/0x340 [ 68.406054][ T2005] do_recvmmsg+0x380/0x830 [ 68.406066][ T2005] ? __sys_recvmmsg+0x2a0/0x2a0 [ 68.406078][ T2005] ? __cfi_vfs_write+0x10/0x10 [ 68.406091][ T2005] ? fput+0x1a4/0x240 [ 68.406104][ T2005] __x64_sys_recvmmsg+0x199/0x250 [ 68.406116][ T2005] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 68.406129][ T2005] ? __kasan_check_read+0x15/0x20 [ 68.406141][ T2005] x64_sys_call+0x292c/0x2ee0 [ 68.406154][ T2005] do_syscall_64+0x57/0xf0 [ 68.406167][ T2005] ? clear_bhb_loop+0x50/0xa0 [ 68.406181][ T2005] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.406193][ T2005] RIP: 0033:0x7f6bf639acb9 [ 68.406203][ T2005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.406214][ T2005] RSP: 002b:00007f6bf4df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 68.406228][ T2005] RAX: ffffffffffffffda RBX: 00007f6bf6615fa0 RCX: 00007f6bf639acb9 [ 68.406236][ T2005] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 68.406243][ T2005] RBP: 00007f6bf4df7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.406249][ T2005] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000002 [ 68.406256][ T2005] R13: 00007f6bf6616038 R14: 00007f6bf6615fa0 R15: 00007ffd32b492c8 [ 68.406265][ T2005] [ 68.745410][ T2012] netlink: 224 bytes leftover after parsing attributes in process `syz.0.653'. [ 68.781818][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 68.796047][ T2018] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 68.804968][ T2018] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 68.941856][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 68.959037][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.978852][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.995790][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.010325][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.026123][ T9] usb 3-1: Product: syz [ 69.034679][ T9] usb 3-1: Manufacturer: syz [ 69.044782][ T9] usb 3-1: SerialNumber: syz [ 69.090412][ T2043] FAULT_INJECTION: forcing a failure. [ 69.090412][ T2043] name failslab, interval 1, probability 0, space 0, times 0 [ 69.103450][ T2043] CPU: 0 UID: 0 PID: 2043 Comm: syz.3.663 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 69.103470][ T2043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.103477][ T2043] Call Trace: [ 69.103486][ T2043] [ 69.103491][ T2043] __dump_stack+0x21/0x30 [ 69.103513][ T2043] dump_stack_lvl+0x140/0x1c0 [ 69.103525][ T2043] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.103538][ T2043] dump_stack+0x19/0x20 [ 69.103548][ T2043] should_fail_ex+0x3d7/0x530 [ 69.103561][ T2043] ? iovec_from_user+0x94/0x310 [ 69.103574][ T2043] should_failslab+0xac/0x100 [ 69.103595][ T2043] __kmalloc_noprof+0x69/0x500 [ 69.103608][ T2043] ? is_bpf_text_address+0x17b/0x1a0 [ 69.103621][ T2043] ? iovec_from_user+0x94/0x310 [ 69.103633][ T2043] iovec_from_user+0x94/0x310 [ 69.103645][ T2043] ? unwind_get_return_address+0x51/0x90 [ 69.103658][ T2043] __import_iovec+0x154/0x7c0 [ 69.103671][ T2043] import_iovec+0x80/0xb0 [ 69.103683][ T2043] ___sys_recvmsg+0x4bf/0x590 [ 69.103698][ T2043] ? __sys_recvmsg+0x290/0x290 [ 69.103710][ T2043] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 69.103720][ T2043] ? selinux_file_permission+0x318/0xb60 [ 69.103732][ T2043] ? __fget_files+0x2c5/0x340 [ 69.103747][ T2043] do_recvmmsg+0x380/0x830 [ 69.103760][ T2043] ? __sys_recvmmsg+0x2a0/0x2a0 [ 69.103771][ T2043] ? __cfi_vfs_write+0x10/0x10 [ 69.103785][ T2043] ? fput+0x1a4/0x240 [ 69.103798][ T2043] __x64_sys_recvmmsg+0x199/0x250 [ 69.103811][ T2043] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 69.103823][ T2043] ? __kasan_check_read+0x15/0x20 [ 69.103834][ T2043] x64_sys_call+0x292c/0x2ee0 [ 69.103847][ T2043] do_syscall_64+0x57/0xf0 [ 69.103861][ T2043] ? clear_bhb_loop+0x50/0xa0 [ 69.103876][ T2043] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.103887][ T2043] RIP: 0033:0x7f6bf639acb9 [ 69.103897][ T2043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.103906][ T2043] RSP: 002b:00007f6bf4df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 69.103918][ T2043] RAX: ffffffffffffffda RBX: 00007f6bf6615fa0 RCX: 00007f6bf639acb9 [ 69.103926][ T2043] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 69.103933][ T2043] RBP: 00007f6bf4df7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.103939][ T2043] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 69.103945][ T2043] R13: 00007f6bf6616038 R14: 00007f6bf6615fa0 R15: 00007ffd32b492c8 [ 69.103954][ T2043] [ 69.621790][ T332] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 69.736043][ T2056] 9pnet_fd: Insufficient options for proto=fd [ 69.771778][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 69.778008][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.789191][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.799015][ T332] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.808250][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.816936][ T332] usb 4-1: config 0 descriptor?? [ 69.832793][ T332] hub 4-1:0.0: USB hub found [ 70.032676][ T2050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.041397][ T2050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.041801][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.049559][ T2050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.055221][ T1978] Bluetooth: hci0: command 0x1003 tx timeout [ 70.078574][ T9] usb 3-1: cannot find UAC_HEADER [ 70.092508][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.107063][ T2050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.122771][ T9] usb 3-1: USB disconnect, device number 26 [ 70.129186][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.133492][ T2050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.201657][ T2050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.223226][ T2075] FAULT_INJECTION: forcing a failure. [ 70.223226][ T2075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.240325][ T2050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.253980][ T2050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.261970][ T2078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.270544][ T2075] CPU: 0 UID: 0 PID: 2075 Comm: syz.2.677 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 70.270565][ T2075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.270573][ T2075] Call Trace: [ 70.270577][ T2075] [ 70.270586][ T2075] __dump_stack+0x21/0x30 [ 70.270604][ T2075] dump_stack_lvl+0x140/0x1c0 [ 70.270616][ T2075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.270629][ T2075] dump_stack+0x19/0x20 [ 70.270639][ T2075] should_fail_ex+0x3d7/0x530 [ 70.270651][ T2075] should_fail+0xf/0x20 [ 70.270659][ T2075] should_fail_usercopy+0x1e/0x30 [ 70.270670][ T2075] _copy_to_iter+0x3b8/0x1510 [ 70.270683][ T2075] ? __cfi__copy_to_iter+0x10/0x10 [ 70.270693][ T2075] ? __check_object_size+0x527/0x830 [ 70.270707][ T2075] ? __cfi___check_object_size+0x10/0x10 [ 70.270718][ T2075] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 70.270731][ T2075] __skb_datagram_iter+0x103/0x930 [ 70.270742][ T2075] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 70.270753][ T2075] skb_copy_datagram_iter+0x44/0x160 [ 70.270764][ T2075] netlink_recvmsg+0x2d4/0xe60 [ 70.270778][ T2075] ? __cfi_netlink_recvmsg+0x10/0x10 [ 70.270791][ T2075] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 70.270805][ T2075] ? security_socket_recvmsg+0x44/0x130 [ 70.270820][ T2075] ? __cfi_netlink_recvmsg+0x10/0x10 [ 70.270831][ T2075] sock_recvmsg+0x219/0x270 [ 70.270848][ T2075] ____sys_recvmsg+0x1e7/0x4a0 [ 70.270860][ T2075] ? __sys_recvmsg_sock+0x60/0x60 [ 70.270873][ T2075] ? import_iovec+0x80/0xb0 [ 70.270885][ T2075] ___sys_recvmsg+0x216/0x590 [ 70.270897][ T2075] ? __sys_recvmsg+0x290/0x290 [ 70.270909][ T2075] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 70.270918][ T2075] ? selinux_file_permission+0x318/0xb60 [ 70.270930][ T2075] ? __fget_files+0x2c5/0x340 [ 70.270944][ T2075] do_recvmmsg+0x380/0x830 [ 70.270956][ T2075] ? __sys_recvmmsg+0x2a0/0x2a0 [ 70.270967][ T2075] ? __cfi_vfs_write+0x10/0x10 [ 70.270980][ T2075] ? fput+0x1a4/0x240 [ 70.270993][ T2075] __x64_sys_recvmmsg+0x199/0x250 [ 70.271005][ T2075] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 70.271020][ T2075] ? __kasan_check_read+0x15/0x20 [ 70.271032][ T2075] x64_sys_call+0x292c/0x2ee0 [ 70.271044][ T2075] do_syscall_64+0x57/0xf0 [ 70.271057][ T2075] ? clear_bhb_loop+0x50/0xa0 [ 70.271069][ T2075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.271081][ T2075] RIP: 0033:0x7fd83f59acb9 [ 70.271091][ T2075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.271100][ T2075] RSP: 002b:00007fd84044e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 70.271112][ T2075] RAX: ffffffffffffffda RBX: 00007fd83f815fa0 RCX: 00007fd83f59acb9 [ 70.271120][ T2075] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 70.271126][ T2075] RBP: 00007fd84044e090 R08: 0000000000000000 R09: 0000000000000000 [ 70.271133][ T2075] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 70.271140][ T2075] R13: 00007fd83f816038 R14: 00007fd83f815fa0 R15: 00007fff5e930648 [ 70.271148][ T2075] [ 70.576243][ T2078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.584991][ T2050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.593574][ T2050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.616228][ T332] hub 4-1:0.0: 29 ports detected [ 70.622221][ T332] hub 4-1:0.0: insufficient power available to use all downstream ports [ 70.636796][ T332] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 70.643203][ T332] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 70.651817][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 70.657790][ T332] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 70.682317][ T332] usb 4-1: USB disconnect, device number 29 [ 70.718213][ T2081] batadv_slave_1: entered promiscuous mode [ 70.724607][ T2081] batadv_slave_1: left promiscuous mode [ 70.961811][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 71.051835][ T332] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 71.111794][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 71.122202][ T2107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.130849][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.141290][ T2107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.149493][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.160918][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.170273][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.178570][ T9] usb 1-1: Product: syz [ 71.183170][ T9] usb 1-1: Manufacturer: syz [ 71.188092][ T9] usb 1-1: SerialNumber: syz [ 71.202893][ T332] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.214151][ T332] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.224404][ T332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.231217][ T332] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 71.240745][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.249792][ T332] usb 4-1: config 0 descriptor?? [ 71.256318][ T332] usbhid 4-1:0.0: can't add hid device: -22 [ 71.262549][ T332] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 71.456824][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.465632][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.475102][ T332] usb 4-1: USB disconnect, device number 30 [ 71.603593][ T2110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463 [ 71.981219][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.007565][ T2156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 72.048285][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.061018][ T2161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.712'. [ 72.089158][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.100424][ T2163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 72.112920][ T9] usb 1-1: cannot find UAC_HEADER [ 72.120968][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.154773][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.165274][ T9] usb 1-1: USB disconnect, device number 21 [ 72.170241][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.256020][ T36] audit: type=1400 audit(1769163725.099:278): avc: denied { mounton } for pid=2176 comm="syz.0.720" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 72.256186][ T2177] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 72.471984][ T332] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 72.621882][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 72.633121][ T332] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 72.641506][ T332] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 72.650516][ T332] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 72.661603][ T2187] batadv_slave_1: entered promiscuous mode [ 72.667568][ T332] usb 4-1: config 220 has no interface number 2 [ 72.674510][ T2187] batadv_slave_1: left promiscuous mode [ 72.680348][ T332] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 72.694969][ T332] usb 4-1: config 220 interface 0 has no altsetting 0 [ 72.711496][ T332] usb 4-1: config 220 interface 76 has no altsetting 0 [ 72.725300][ T332] usb 4-1: config 220 interface 1 has no altsetting 0 [ 72.743280][ T332] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 72.752945][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.760948][ T332] usb 4-1: Product: syz [ 72.774965][ T9] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 72.789721][ T332] usb 4-1: Manufacturer: syz [ 72.794752][ T36] audit: type=1400 audit(1769163725.639:279): avc: denied { map } for pid=2196 comm="syz.1.729" path="socket:[14534]" dev="sockfs" ino=14534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 72.795212][ T9] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.827974][ T332] usb 4-1: SerialNumber: syz [ 72.849001][ T2201] FAULT_INJECTION: forcing a failure. [ 72.849001][ T2201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.862317][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 72.869062][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 72.878295][ T2201] CPU: 0 UID: 0 PID: 2201 Comm: syz.1.731 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 72.878320][ T2201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.878331][ T2201] Call Trace: [ 72.878336][ T2201] [ 72.878342][ T2201] __dump_stack+0x21/0x30 [ 72.878368][ T2201] dump_stack_lvl+0x140/0x1c0 [ 72.878389][ T2201] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.878407][ T2201] ? dump_stack+0xd/0x20 [ 72.878427][ T2201] dump_stack+0x19/0x20 [ 72.878440][ T2201] should_fail_ex+0x3d7/0x530 [ 72.878451][ T2201] should_fail+0xf/0x20 [ 72.878460][ T2201] should_fail_usercopy+0x1e/0x30 [ 72.878470][ T2201] _copy_to_iter+0x56b/0x1510 [ 72.878482][ T2201] ? __cfi__copy_to_iter+0x10/0x10 [ 72.878493][ T2201] ? __check_object_size+0x527/0x830 [ 72.878505][ T2201] ? __cfi___check_object_size+0x10/0x10 [ 72.878517][ T2201] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 72.878529][ T2201] __skb_datagram_iter+0x103/0x930 [ 72.878540][ T2201] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 72.878551][ T2201] skb_copy_datagram_iter+0x44/0x160 [ 72.878561][ T2201] netlink_recvmsg+0x2d4/0xe60 [ 72.878574][ T2201] ? __cfi_netlink_recvmsg+0x10/0x10 [ 72.878587][ T2201] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 72.878601][ T2201] ? security_socket_recvmsg+0x44/0x130 [ 72.878614][ T2201] ? __cfi_netlink_recvmsg+0x10/0x10 [ 72.878625][ T2201] sock_recvmsg+0x219/0x270 [ 72.878639][ T2201] ____sys_recvmsg+0x1e7/0x4a0 [ 72.878652][ T2201] ? __sys_recvmsg_sock+0x60/0x60 [ 72.878664][ T2201] ? import_iovec+0x80/0xb0 [ 72.878677][ T2201] ___sys_recvmsg+0x216/0x590 [ 72.878688][ T2201] ? __sys_recvmsg+0x290/0x290 [ 72.878700][ T2201] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 72.878710][ T2201] ? selinux_file_permission+0x318/0xb60 [ 72.878720][ T2201] ? __fget_files+0x2c5/0x340 [ 72.878734][ T2201] do_recvmmsg+0x380/0x830 [ 72.878746][ T2201] ? __sys_recvmmsg+0x2a0/0x2a0 [ 72.878758][ T2201] ? __cfi_vfs_write+0x10/0x10 [ 72.878771][ T2201] ? fput+0x1a4/0x240 [ 72.878785][ T2201] __x64_sys_recvmmsg+0x199/0x250 [ 72.878797][ T2201] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 72.878808][ T2201] ? __kasan_check_read+0x15/0x20 [ 72.878820][ T2201] x64_sys_call+0x292c/0x2ee0 [ 72.878833][ T2201] do_syscall_64+0x57/0xf0 [ 72.878845][ T2201] ? clear_bhb_loop+0x50/0xa0 [ 72.878858][ T2201] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.878869][ T2201] RIP: 0033:0x7f88f379acb9 [ 72.878879][ T2201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.878893][ T2201] RSP: 002b:00007f88f46fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.878904][ T2201] RAX: ffffffffffffffda RBX: 00007f88f3a15fa0 RCX: 00007f88f379acb9 [ 72.878912][ T2201] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 72.878919][ T2201] RBP: 00007f88f46fc090 R08: 0000000000000000 R09: 0000000000000000 [ 72.878925][ T2201] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 72.878932][ T2201] R13: 00007f88f3a16038 R14: 00007f88f3a15fa0 R15: 00007ffcfb550b28 [ 72.878940][ T2201] [ 73.189954][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.199157][ T9] usb 1-1: config 0 descriptor?? [ 73.208239][ T332] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 73.214781][ T332] usb 4-1: No valid video chain found. [ 73.220315][ T332] usb 4-1: selecting invalid altsetting 0 [ 73.234976][ T332] usb 4-1: USB disconnect, device number 31 [ 73.251809][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 73.461825][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 73.468031][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.478397][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.489147][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.498325][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.506362][ T10] usb 3-1: Product: syz [ 73.510529][ T10] usb 3-1: Manufacturer: syz [ 73.515620][ T10] usb 3-1: SerialNumber: syz [ 73.608772][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 73.614871][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.625787][ T9] usb 1-1: USB disconnect, device number 22 [ 73.742248][ T2209] syz.3.734: attempt to access beyond end of device [ 73.742248][ T2209] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 73.755534][ T2209] FAT-fs (loop3): unable to read boot sector [ 73.923074][ T10] usb 3-1: cannot find UAC_HEADER [ 73.929808][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.944409][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.121795][ T332] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 74.130645][ T36] audit: type=1400 audit(1769163726.969:280): avc: denied { search } for pid=2239 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.156127][ T36] audit: type=1400 audit(1769163726.999:281): avc: denied { read } for pid=2241 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.168917][ T2244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.191781][ T36] audit: type=1400 audit(1769163726.999:282): avc: denied { open } for pid=2241 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.196808][ T2244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.231549][ T36] audit: type=1400 audit(1769163726.999:283): avc: denied { getattr } for pid=2241 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.271955][ T36] audit: type=1400 audit(1769163726.999:284): avc: denied { getattr } for pid=2241 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.301682][ T36] audit: type=1400 audit(1769163727.039:285): avc: denied { read } for pid=2246 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.301787][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 74.324018][ T36] audit: type=1400 audit(1769163727.039:286): avc: denied { open } for pid=2246 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.350755][ T332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.371789][ T332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.391797][ T36] audit: type=1400 audit(1769163727.209:287): avc: denied { write } for pid=2239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.392678][ T332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.444170][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.456953][ T332] usb 4-1: Product: syz [ 74.461279][ T332] usb 4-1: Manufacturer: syz [ 74.466024][ T332] usb 4-1: SerialNumber: syz [ 74.640609][ T10] usb 3-1: USB disconnect, device number 27 [ 74.673167][ T2224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.687829][ T2224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.705882][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.713198][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.720473][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.730615][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.738022][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.745331][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.753707][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.761003][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.780707][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.788387][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 74.795580][ T332] usb 4-1: cannot find UAC_HEADER [ 74.805168][ T332] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.837071][ T332] usb 4-1: USB disconnect, device number 32 [ 74.839771][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.850910][ T2277] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 75.080431][ T2283] batadv_slave_1: entered promiscuous mode [ 75.087347][ T2283] batadv_slave_1: left promiscuous mode [ 75.094270][ T2283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.103188][ T2283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.206753][ T2312] rust_binder: Error while translating object. [ 75.206791][ T2312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.213261][ T2312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 75.231810][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 75.251623][ T332] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 75.270725][ T332] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.411800][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 75.420816][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 75.438119][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.456722][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.466514][ T2339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=2339 comm=syz.0.781 [ 75.484921][ T10] usb 3-1: Product: 웲㇣줨漟ꤎ牷蒌▿䐗嫹 [ 75.498949][ T2339] bpf: Bad value for 'uid' [ 75.504110][ T2343] FAULT_INJECTION: forcing a failure. [ 75.504110][ T2343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.517353][ T10] usb 3-1: Manufacturer: ы [ 75.525071][ T10] usb 3-1: SerialNumber: 铐䨸꠶⟆흭朆㢯 [ 75.539221][ T2343] CPU: 0 UID: 0 PID: 2343 Comm: syz.3.783 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 75.539252][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.539263][ T2343] Call Trace: [ 75.539269][ T2343] [ 75.539276][ T2343] __dump_stack+0x21/0x30 [ 75.539303][ T2343] dump_stack_lvl+0x140/0x1c0 [ 75.539324][ T2343] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.539347][ T2343] dump_stack+0x19/0x20 [ 75.539383][ T2343] should_fail_ex+0x3d7/0x530 [ 75.539400][ T2343] should_fail+0xf/0x20 [ 75.539413][ T2343] should_fail_usercopy+0x1e/0x30 [ 75.539429][ T2343] _copy_from_user+0x20/0xa0 [ 75.539444][ T2343] ___sys_recvmsg+0x176/0x590 [ 75.539458][ T2343] ? __sys_recvmsg+0x290/0x290 [ 75.539471][ T2343] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 75.539481][ T2343] ? selinux_file_permission+0x318/0xb60 [ 75.539492][ T2343] ? __fget_files+0x2c5/0x340 [ 75.539507][ T2343] do_recvmmsg+0x380/0x830 [ 75.539519][ T2343] ? __sys_recvmmsg+0x2a0/0x2a0 [ 75.539530][ T2343] ? __cfi_vfs_write+0x10/0x10 [ 75.539543][ T2343] ? fput+0x1a4/0x240 [ 75.539557][ T2343] __x64_sys_recvmmsg+0x199/0x250 [ 75.539569][ T2343] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 75.539581][ T2343] ? __kasan_check_read+0x15/0x20 [ 75.539593][ T2343] x64_sys_call+0x292c/0x2ee0 [ 75.539606][ T2343] do_syscall_64+0x57/0xf0 [ 75.539618][ T2343] ? clear_bhb_loop+0x50/0xa0 [ 75.539630][ T2343] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.539642][ T2343] RIP: 0033:0x7f6bf639acb9 [ 75.539651][ T2343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.539660][ T2343] RSP: 002b:00007f6bf4df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 75.539672][ T2343] RAX: ffffffffffffffda RBX: 00007f6bf6615fa0 RCX: 00007f6bf639acb9 [ 75.539680][ T2343] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 75.539687][ T2343] RBP: 00007f6bf4df7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.539694][ T2343] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 75.539700][ T2343] R13: 00007f6bf6616038 R14: 00007f6bf6615fa0 R15: 00007ffd32b492c8 [ 75.539716][ T2343] [ 75.819377][ T2355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 75.847395][ T10] cdc_ncm 3-1:1.0: bind() failure [ 75.853168][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 75.859962][ T10] cdc_ncm 3-1:1.1: bind() failure [ 75.866138][ T10] usb 3-1: USB disconnect, device number 28 [ 75.908314][ T2373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.916918][ T2373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.925522][ T2373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.933991][ T2373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.049308][ T2375] batadv_slave_1: entered promiscuous mode [ 76.056020][ T2375] batadv_slave_1: left promiscuous mode [ 76.081867][ T332] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 76.233033][ T332] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 76.241159][ T332] usb 1-1: config 0 has no interface number 0 [ 76.249070][ T332] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 76.258473][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.266686][ T332] usb 1-1: Product: syz [ 76.270944][ T332] usb 1-1: Manufacturer: syz [ 76.275543][ T332] usb 1-1: SerialNumber: syz [ 76.280796][ T332] usb 1-1: config 0 descriptor?? [ 76.302093][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 76.462024][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 76.473637][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.496756][ T332] uvcvideo 1-1:0.64: Found Unit with invalid ID 0 [ 76.505934][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.521922][ T332] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 76.530594][ T332] usb 1-1: No valid video chain found. [ 76.540515][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.553811][ T332] usb 1-1: USB disconnect, device number 23 [ 76.561814][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.571843][ T330] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 76.587163][ T10] usb 4-1: Product: syz [ 76.594942][ T2387] mmap: syz.1.801 (2387): VmData 17448960 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 76.607546][ T10] usb 4-1: Manufacturer: syz [ 76.612193][ T10] usb 4-1: SerialNumber: syz [ 76.731795][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 76.742934][ T330] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 76.754519][ T330] usb 3-1: config 0 has no interface number 0 [ 76.772767][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 76.783216][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.799881][ T330] usb 3-1: Product: syz [ 76.808506][ T330] usb 3-1: Manufacturer: syz [ 76.818315][ T330] usb 3-1: SerialNumber: syz [ 76.829151][ T330] usb 3-1: config 0 descriptor?? [ 77.023851][ T10] usb 4-1: cannot find UAC_HEADER [ 77.030666][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.050207][ T330] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 77.059326][ T330] usb 3-1: No streaming interface found for terminal 6. [ 77.075976][ T330] usb 3-1: Failed to create links for entity 5 [ 77.077257][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.088857][ T330] usb 3-1: Failed to register entities (-22). [ 77.123746][ T330] usb 3-1: USB disconnect, device number 29 [ 77.301788][ T332] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 77.461781][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 77.473916][ T332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 77.491416][ T332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.501781][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.509870][ T332] usb 1-1: Product: 웲㇣줨漟ꤎ牷蒌▿䐗嫹 [ 77.533806][ T332] usb 1-1: Manufacturer: ы [ 77.557234][ T2405] fuse: Bad value for 'user_id' [ 77.566837][ T2405] fuse: Bad value for 'user_id' [ 77.614490][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 77.734757][ T330] usb 4-1: USB disconnect, device number 33 [ 77.799988][ T332] cdc_ncm 1-1:1.0: bind() failure [ 77.816231][ T332] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 77.847271][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 77.847290][ T36] audit: type=1400 audit(1769163730.683:310): avc: denied { setattr } for pid=2432 comm="syz.3.822" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.847338][ T2434] usb usb8: usbfs: process 2434 (syz.3.822) did not claim interface 0 before use [ 77.887191][ T332] cdc_ncm 1-1:1.1: bind() failure [ 77.906695][ T332] usb 1-1: USB disconnect, device number 24 [ 77.944598][ T2439] kvm: kvm [2437]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 77.961079][ T2439] kvm: kvm [2437]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 78.011138][ T2444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 78.064809][ T2446] kvm: kvm [2445]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000011) = 0x80000007 [ 78.083232][ T36] audit: type=1400 audit(1769163730.923:311): avc: denied { accept } for pid=2445 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 78.141773][ T36] audit: type=1400 audit(1769163730.973:312): avc: denied { read } for pid=2451 comm="syz.3.828" name="file0" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.183400][ T2449] batadv_slave_1: entered promiscuous mode [ 78.194309][ T2449] batadv_slave_1: left promiscuous mode [ 78.204220][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.222481][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.571823][ T330] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 78.581859][ T332] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 78.742033][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 78.750919][ T332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.770809][ T330] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.784637][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.796370][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.807794][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.820423][ T330] usb 1-1: Product: syz [ 78.825508][ T332] usb 4-1: Product: syz [ 78.829837][ T330] usb 1-1: Manufacturer: syz [ 78.834605][ T332] usb 4-1: Manufacturer: syz [ 78.839355][ T330] usb 1-1: SerialNumber: syz [ 78.844406][ T332] usb 4-1: SerialNumber: syz [ 78.851180][ T330] r8152-cfgselector 1-1: Unknown version 0x0000 [ 78.859057][ T330] r8152-cfgselector 1-1: config 0 descriptor?? [ 78.876839][ T2488] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 78.895485][ T2493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.904398][ T2493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.072380][ T2476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.081217][ T2476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.090109][ T36] audit: type=1400 audit(1769163731.934:313): avc: denied { read } for pid=2475 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.314087][ T2497] FAULT_INJECTION: forcing a failure. [ 79.314087][ T2497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.327897][ T2497] CPU: 0 UID: 0 PID: 2497 Comm: syz.2.844 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 79.327927][ T2497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.327935][ T2497] Call Trace: [ 79.327939][ T2497] [ 79.327944][ T2497] __dump_stack+0x21/0x30 [ 79.327965][ T2497] dump_stack_lvl+0x140/0x1c0 [ 79.327978][ T2497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.327990][ T2497] ? __sys_recvmsg_sock+0x60/0x60 [ 79.328004][ T2497] dump_stack+0x19/0x20 [ 79.328015][ T2497] should_fail_ex+0x3d7/0x530 [ 79.328026][ T2497] should_fail+0xf/0x20 [ 79.328035][ T2497] should_fail_usercopy+0x1e/0x30 [ 79.328046][ T2497] _copy_from_user+0x20/0xa0 [ 79.328059][ T2497] ___sys_recvmsg+0x176/0x590 [ 79.328071][ T2497] ? __sys_recvmsg+0x290/0x290 [ 79.328082][ T2497] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 79.328101][ T2497] ? selinux_file_permission+0x318/0xb60 [ 79.328112][ T2497] ? __fget_files+0x2c5/0x340 [ 79.328128][ T2497] do_recvmmsg+0x380/0x830 [ 79.328140][ T2497] ? __sys_recvmmsg+0x2a0/0x2a0 [ 79.328151][ T2497] ? __cfi_vfs_write+0x10/0x10 [ 79.328165][ T2497] ? fput+0x1a4/0x240 [ 79.328178][ T2497] __x64_sys_recvmmsg+0x199/0x250 [ 79.328191][ T2497] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 79.328203][ T2497] ? __kasan_check_read+0x15/0x20 [ 79.328216][ T2497] x64_sys_call+0x292c/0x2ee0 [ 79.328229][ T2497] do_syscall_64+0x57/0xf0 [ 79.328243][ T2497] ? clear_bhb_loop+0x50/0xa0 [ 79.328257][ T2497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.328268][ T2497] RIP: 0033:0x7fd83f59acb9 [ 79.328278][ T2497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.328288][ T2497] RSP: 002b:00007fd84044e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 79.328301][ T2497] RAX: ffffffffffffffda RBX: 00007fd83f815fa0 RCX: 00007fd83f59acb9 [ 79.328309][ T2497] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 79.328316][ T2497] RBP: 00007fd84044e090 R08: 0000000000000000 R09: 0000000000000000 [ 79.328328][ T2497] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000002 [ 79.328334][ T2497] R13: 00007fd83f816038 R14: 00007fd83f815fa0 R15: 00007fff5e930648 [ 79.328346][ T2497] [ 79.569145][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 79.588276][ T36] audit: type=1400 audit(1769163732.424:314): avc: denied { associate } for pid=2500 comm="syz.1.847" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.590513][ T2501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.618033][ T2501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.718713][ T2512] incfs: iterate_incfs_dir / -22 [ 79.724333][ T36] audit: type=1400 audit(1769163732.574:315): avc: denied { write } for pid=2511 comm="syz.2.851" name="/" dev="incremental-fs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.747143][ T36] audit: type=1400 audit(1769163732.574:316): avc: denied { add_name } for pid=2511 comm="syz.2.851" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.769789][ T36] audit: type=1400 audit(1769163732.574:317): avc: denied { create } for pid=2511 comm="syz.2.851" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.791851][ T36] audit: type=1400 audit(1769163732.574:318): avc: denied { associate } for pid=2511 comm="syz.2.851" name="cpuacct.usage_percpu_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.321629][ T2522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.330392][ T2522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.981830][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 81.044438][ T2565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.053466][ T2565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.063906][ T2565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.072620][ T2565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.142814][ T10] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.155014][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.166449][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.178159][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 81.187601][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.196909][ T2543] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 81.240625][ T332] cdc_ncm 4-1:1.0: bind() failure [ 81.249938][ T332] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 81.256990][ T332] cdc_ncm 4-1:1.1: bind() failure [ 81.263540][ T332] usb 4-1: USB disconnect, device number 34 [ 81.346401][ T9] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 81.467442][ T2569] batadv_slave_1: entered promiscuous mode [ 81.474052][ T2569] batadv_slave_1: left promiscuous mode [ 81.607771][ T10] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 81.620117][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 81.632543][ T10] usb 3-1: USB disconnect, device number 30 [ 81.632613][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 81.638951][ T332] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 81.670875][ T2577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.679632][ T2577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.801811][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 81.808601][ T332] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 81.820687][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.830009][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 81.837659][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.846019][ T332] usb 4-1: Product: 㰊 [ 81.850267][ T332] usb 4-1: Manufacturer: ы [ 81.855045][ T332] usb 4-1: SerialNumber: 铐䨸꠶⟆흭朆㢯 [ 82.001824][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 82.008477][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.019026][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.029704][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.038989][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.047124][ T9] usb 1-1: Product: syz [ 82.051282][ T9] usb 1-1: Manufacturer: syz [ 82.056151][ T9] usb 1-1: SerialNumber: syz [ 82.075843][ T332] cdc_ncm 4-1:1.0: bind() failure [ 82.081951][ T332] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 82.089093][ T332] cdc_ncm 4-1:1.1: bind() failure [ 82.095945][ T332] usb 4-1: USB disconnect, device number 35 [ 82.237660][ T2582] netlink: 'syz.1.880': attribute type 16 has an invalid length. [ 82.462879][ T9] usb 1-1: cannot find UAC_HEADER [ 82.473341][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 82.498284][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.529542][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.538596][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.548667][ T2605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2605 comm=syz.1.890 [ 82.566320][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.575707][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.584105][ T36] audit: type=1400 audit(1769163735.424:319): avc: denied { setopt } for pid=2604 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.604739][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.626528][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.141874][ T332] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 83.176027][ T9] usb 1-1: USB disconnect, device number 26 [ 83.202613][ T2631] netlink: 72 bytes leftover after parsing attributes in process `syz.2.902'. [ 83.204669][ T36] audit: type=1400 audit(1769163736.034:320): avc: denied { append } for pid=2629 comm="syz.2.902" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.290873][ T2644] FAULT_INJECTION: forcing a failure. [ 83.290873][ T2644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.311897][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 83.335952][ T332] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 83.347713][ T2644] CPU: 0 UID: 0 PID: 2644 Comm: syz.1.908 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 83.347744][ T2644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.347752][ T2644] Call Trace: [ 83.347756][ T2644] [ 83.347761][ T2644] __dump_stack+0x21/0x30 [ 83.347783][ T2644] dump_stack_lvl+0x140/0x1c0 [ 83.347794][ T2644] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.347807][ T2644] ? check_stack_object+0x12b/0x150 [ 83.347820][ T2644] dump_stack+0x19/0x20 [ 83.347831][ T2644] should_fail_ex+0x3d7/0x530 [ 83.347843][ T2644] should_fail+0xf/0x20 [ 83.347852][ T2644] should_fail_usercopy+0x1e/0x30 [ 83.347862][ T2644] _copy_to_user+0x24/0xa0 [ 83.347876][ T2644] simple_read_from_buffer+0xed/0x160 [ 83.347892][ T2644] proc_fail_nth_read+0x1aa/0x220 [ 83.347903][ T2644] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.347913][ T2644] ? __kasan_check_write+0x18/0x20 [ 83.347926][ T2644] ? bpf_lsm_file_permission+0xd/0x20 [ 83.347935][ T2644] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.347945][ T2644] vfs_read+0x286/0xcb0 [ 83.347957][ T2644] ? __sys_recvmmsg+0x2a0/0x2a0 [ 83.347972][ T2644] ? __cfi_vfs_read+0x10/0x10 [ 83.347985][ T2644] ? __kasan_check_write+0x18/0x20 [ 83.347996][ T2644] ? mutex_lock+0x97/0x1d0 [ 83.348012][ T2644] ? __cfi_mutex_lock+0x10/0x10 [ 83.348025][ T2644] ? __fget_files+0x2c5/0x340 [ 83.348041][ T2644] ksys_read+0x145/0x260 [ 83.348052][ T2644] ? xfd_validate_state+0x68/0x140 [ 83.348066][ T2644] ? __cfi_ksys_read+0x10/0x10 [ 83.348077][ T2644] ? __kasan_check_write+0x18/0x20 [ 83.348087][ T2644] ? fpregs_restore_userregs+0x11c/0x260 [ 83.348098][ T2644] __x64_sys_read+0x7f/0x90 [ 83.348109][ T2644] x64_sys_call+0x2638/0x2ee0 [ 83.348123][ T2644] do_syscall_64+0x57/0xf0 [ 83.348135][ T2644] ? clear_bhb_loop+0x50/0xa0 [ 83.348149][ T2644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.348161][ T2644] RIP: 0033:0x7f88f375b58e [ 83.348171][ T2644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.348180][ T2644] RSP: 002b:00007f88f46fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.348193][ T2644] RAX: ffffffffffffffda RBX: 00007f88f46fc6c0 RCX: 00007f88f375b58e [ 83.348201][ T2644] RDX: 000000000000000f RSI: 00007f88f46fc0a0 RDI: 0000000000000004 [ 83.348208][ T2644] RBP: 00007f88f46fc090 R08: 0000000000000000 R09: 0000000000000000 [ 83.348215][ T2644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.348221][ T2644] R13: 00007f88f3a16038 R14: 00007f88f3a15fa0 R15: 00007ffcfb550b28 [ 83.348230][ T2644] [ 83.665965][ T2653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 83.696520][ T36] audit: type=1400 audit(1769163736.534:321): avc: denied { sqpoll } for pid=2656 comm="syz.2.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.710841][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.768051][ T36] audit: type=1400 audit(1769163736.604:322): avc: denied { bind } for pid=2668 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.776042][ T2670] batadv_slave_1: entered promiscuous mode [ 83.793492][ T36] audit: type=1400 audit(1769163736.604:323): avc: denied { write } for pid=2668 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.798278][ T2670] batadv_slave_1: left promiscuous mode [ 83.826680][ T2651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.835485][ T2651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.881884][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.890079][ T332] usb 4-1: Product: 㰊 [ 83.906247][ T332] usb 4-1: Manufacturer: ы [ 83.914741][ T332] usb 4-1: SerialNumber: 铐䨸꠶⟆흭朆㢯 [ 83.978358][ T2681] FAULT_INJECTION: forcing a failure. [ 83.978358][ T2681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.008441][ T2681] CPU: 0 UID: 0 PID: 2681 Comm: syz.0.922 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 84.008469][ T2681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.008477][ T2681] Call Trace: [ 84.008481][ T2681] [ 84.008486][ T2681] __dump_stack+0x21/0x30 [ 84.008510][ T2681] dump_stack_lvl+0x140/0x1c0 [ 84.008522][ T2681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.008536][ T2681] ? __sys_recvmsg_sock+0x60/0x60 [ 84.008556][ T2681] dump_stack+0x19/0x20 [ 84.008570][ T2681] should_fail_ex+0x3d7/0x530 [ 84.008583][ T2681] should_fail+0xf/0x20 [ 84.008593][ T2681] should_fail_usercopy+0x1e/0x30 [ 84.008605][ T2681] _copy_from_user+0x20/0xa0 [ 84.008620][ T2681] ___sys_recvmsg+0x176/0x590 [ 84.008633][ T2681] ? __sys_recvmsg+0x290/0x290 [ 84.008652][ T2681] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 84.008661][ T2681] ? selinux_file_permission+0x318/0xb60 [ 84.008673][ T2681] ? __fget_files+0x2c5/0x340 [ 84.008688][ T2681] do_recvmmsg+0x380/0x830 [ 84.008701][ T2681] ? __sys_recvmmsg+0x2a0/0x2a0 [ 84.008712][ T2681] ? __cfi_vfs_write+0x10/0x10 [ 84.008726][ T2681] ? fput+0x1a4/0x240 [ 84.008740][ T2681] __x64_sys_recvmmsg+0x199/0x250 [ 84.008752][ T2681] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 84.008765][ T2681] ? __kasan_check_read+0x15/0x20 [ 84.008777][ T2681] x64_sys_call+0x292c/0x2ee0 [ 84.008790][ T2681] do_syscall_64+0x57/0xf0 [ 84.008804][ T2681] ? clear_bhb_loop+0x50/0xa0 [ 84.008818][ T2681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.008829][ T2681] RIP: 0033:0x7f9f7e79acb9 [ 84.008839][ T2681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.008848][ T2681] RSP: 002b:00007f9f7f712028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 84.008861][ T2681] RAX: ffffffffffffffda RBX: 00007f9f7ea15fa0 RCX: 00007f9f7e79acb9 [ 84.008869][ T2681] RDX: 0000000000000008 RSI: 0000200000001b40 RDI: 0000000000000003 [ 84.008876][ T2681] RBP: 00007f9f7f712090 R08: 0000000000000000 R09: 0000000000000000 [ 84.008883][ T2681] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000002 [ 84.008890][ T2681] R13: 00007f9f7ea16038 R14: 00007f9f7ea15fa0 R15: 00007ffd18e6bb88 [ 84.008899][ T2681] [ 84.335757][ T332] cdc_ncm 4-1:1.0: bind() failure [ 84.342238][ T332] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 84.349153][ T332] cdc_ncm 4-1:1.1: bind() failure [ 84.356100][ T332] usb 4-1: USB disconnect, device number 36 [ 84.644554][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 84.663027][ T36] audit: type=1400 audit(1769163737.507:324): avc: denied { load_policy } for pid=2721 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.663354][ T2722] ------------[ cut here ]------------ [ 84.688926][ T2722] WARNING: CPU: 0 PID: 2722 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 84.698921][ T2722] Modules linked in: [ 84.702893][ T2722] CPU: 0 UID: 0 PID: 2722 Comm: syz.1.939 Not tainted syzkaller #0 b63f8bde1ed88225065c0993fd28f42162285c42 [ 84.714461][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.724611][ T2722] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 84.730616][ T2722] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d ea a8 0b 06 00 0f 85 c2 00 00 00 c6 05 dd a8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 84.750364][ T2722] RSP: 0018:ffffc90011b9f640 EFLAGS: 00010246 [ 84.756992][ T2722] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 84.765321][ T2722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90011b9f6f8 [ 84.773349][ T2722] RBP: ffffc90011b9f780 R08: ffffc90011b9f6f7 R09: 0000000000000000 [ 84.781509][ T2722] R10: ffffc90011b9f6e0 R11: fffff52002373edf R12: ffffc90011b9f680 [ 84.789536][ T2722] R13: dffffc0000000000 R14: 1ffff92002373ecc R15: 0000000000000000 [ 84.797851][ T2722] FS: 00007f88f46fc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 84.806943][ T2722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.813581][ T2722] CR2: 000020000000f000 CR3: 000000010dfe0000 CR4: 00000000003526b0 [ 84.821604][ T2722] Call Trace: [ 84.824948][ T2722] [ 84.827969][ T2722] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 84.833750][ T2722] ? __kasan_slab_alloc+0x73/0x90 [ 84.838839][ T2722] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 84.844847][ T2722] ? hashtab_init+0xdb/0x1f0 [ 84.849490][ T2722] ___kmalloc_large_node+0x81/0x210 [ 84.854773][ T2722] ? hashtab_init+0xdb/0x1f0 [ 84.859478][ T2722] __kmalloc_large_node_noprof+0x1e/0xd0 [ 84.865174][ T2722] ? hashtab_init+0xdb/0x1f0 [ 84.869891][ T2722] __kmalloc_noprof+0x326/0x500 [ 84.874991][ T2722] ? __cfi_ebitmap_read+0x10/0x10 [ 84.880051][ T2722] hashtab_init+0xdb/0x1f0 [ 84.884532][ T2722] ? policydb_read+0x87f/0x28b0 [ 84.889404][ T2722] symtab_init+0x44/0x70 [ 84.894082][ T2722] policydb_read+0x90e/0x28b0 [ 84.898901][ T2722] ? __kasan_kmalloc+0x96/0xb0 [ 84.903734][ T2722] ? __cfi_policydb_read+0x10/0x10 [ 84.908857][ T2722] ? security_load_policy+0x130/0x12d0 [ 84.914357][ T2722] security_load_policy+0x16a/0x12d0 [ 84.919752][ T2722] ? irqentry_exit+0x4a/0x60 [ 84.924601][ T2722] ? asm_exc_page_fault+0x2b/0x30 [ 84.929682][ T2722] ? __cfi_security_load_policy+0x10/0x10 [ 84.935501][ T2722] ? rep_movs_alternative+0x4a/0xa0 [ 84.941092][ T2722] sel_write_load+0x2a7/0x5f0 [ 84.946337][ T2722] ? __cfi_futex_wake+0x10/0x10 [ 84.951239][ T2722] ? __cfi_sel_write_load+0x10/0x10 [ 84.956603][ T2722] ? bpf_lsm_file_permission+0xd/0x20 [ 84.962121][ T2722] ? __cfi_sel_write_load+0x10/0x10 [ 84.967764][ T2722] vfs_write+0x3c8/0xf90 [ 84.972072][ T2722] ? __cfi_vfs_write+0x10/0x10 [ 84.976871][ T2722] ? __kasan_check_write+0x18/0x20 [ 84.982146][ T2722] ? mutex_lock+0x97/0x1d0 [ 84.986594][ T2722] ? __cfi_mutex_lock+0x10/0x10 [ 84.991543][ T2722] ? __fget_files+0x2c5/0x340 [ 84.996347][ T2722] ksys_write+0x145/0x260 [ 85.000690][ T2722] ? xfd_validate_state+0x68/0x140 [ 85.005839][ T2722] ? __cfi_ksys_write+0x10/0x10 [ 85.010712][ T2722] ? __kasan_check_write+0x18/0x20 [ 85.015915][ T2722] ? fpregs_restore_userregs+0x11c/0x260 [ 85.021672][ T2722] __x64_sys_write+0x7f/0x90 [ 85.026431][ T2722] x64_sys_call+0x271c/0x2ee0 [ 85.031317][ T2722] do_syscall_64+0x57/0xf0 [ 85.035920][ T2722] ? clear_bhb_loop+0x50/0xa0 [ 85.040625][ T2722] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.046728][ T2722] RIP: 0033:0x7f88f379acb9 [ 85.051603][ T2722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.071464][ T2722] RSP: 002b:00007f88f46fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.080132][ T2722] RAX: ffffffffffffffda RBX: 00007f88f3a15fa0 RCX: 00007f88f379acb9 [ 85.088562][ T2722] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000003 [ 85.096800][ T2722] RBP: 00007f88f3808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 85.105020][ T2722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.113056][ T2722] R13: 00007f88f3a16038 R14: 00007f88f3a15fa0 R15: 00007ffcfb550b28 [ 85.121305][ T2722] [ 85.124394][ T2722] ---[ end trace 0000000000000000 ]--- [ 85.130002][ T330] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 85.138183][ T2722] SELinux: failed to load policy [ 85.213055][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.223312][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.240000][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.249827][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.258056][ T9] usb 3-1: Product: syz [ 85.262362][ T9] usb 3-1: Manufacturer: syz [ 85.267029][ T9] usb 3-1: SerialNumber: syz [ 85.281809][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 85.288313][ T330] usb 1-1: config 106 has an invalid descriptor of length 231, skipping remainder of the config [ 85.299358][ T330] usb 1-1: config 106 has 0 interfaces, different from the descriptor's value: 1 [ 85.310252][ T330] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=52.2a [ 85.319683][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.327917][ T330] usb 1-1: Product: syz [ 85.332188][ T330] usb 1-1: Manufacturer: syz [ 85.336831][ T330] usb 1-1: SerialNumber: syz [ 85.475797][ T9] usb 3-1: 0:2 : does not exist [ 85.482551][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 85.493640][ T9] usb 3-1: USB disconnect, device number 31 [ 85.547657][ T330] usb 1-1: USB disconnect, device number 27