last executing test programs: 2.942915118s ago: executing program 3 (id=590): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x34, r0, 0x1, 0x70ad33, 0x3, {{}, {@void, @val={0xc, 0x99, {0x14, 0x400059}}}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}}, 0x0) 2.942837378s ago: executing program 3 (id=591): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) socket(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) 2.498216574s ago: executing program 2 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0x642019809bcb24a1}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4c010) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)=""/106, &(0x7f0000000380)=0x6a) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/21, 0x1008000, 0x800, 0x2400007}, 0x20) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x8, 0x1ff, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffefffface6e3cd, 0x0, 0x1, 0xffffffffffffffff, 0xfd, 0xa]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6}}) syz_clone3(&(0x7f0000000300)={0x206361100, &(0x7f00000002c0), 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2.411082686s ago: executing program 0 (id=600): socket$key(0xf, 0x3, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x32, 0x4, 0x0, {0x1, 0x6, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) listen(r1, 0x802) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@caif=@util={0x25, "84a156af696ae34f7e578f680f7aedee"}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="41172a41b20b23e41840b9cc71edb427f47fcedcdde233b636e432c7c684f0d8937946912edc1499487f2f55c6e00561af90b4f36de231ca166733f51e0508ca3a932302057db0cf1b8956428391b0f82dce7ea72345e1a86b", 0x59}, {&(0x7f0000000140)='\r', 0x1}, {&(0x7f0000000380)="2a07ec785b428747715ee456a7314157902d74969d9317efc14bae828892a83275d9bd385edf5ceadd814c32fab115f96b0364f3bf3d8bd6b8ffc0386fbaaccfcae5117eff05389c690ba0644fee6678233bf3ba4448cc3429f2a49a094df3053f7cb86684b8a6e787f732504a3f9a1f957e8afd8c1e2ca23656b48a9e0179a198a112f9afd92bab1b5b12e7381182a70af3b2ab72ad0d399d7b45f2184e27869cd6decb9ac94ec2c1c36eb9923a69bccf35ff3704f9b4613d87f0a188804f1f8c", 0xc1}, {&(0x7f00000024c0)="55bb00df7d111ef08528e3cad850bb656510cb056b08bdfd07e6054599286ae73e098894aa027d77df0dc787b1e8cf303d875cdb6bdcf7c2e4c904c99e0a07cfa4c5c68c3a4fd0270f4c4e5ccd8e9fc6ae40af4b1adb5daa5746aa4fcca25cda68aa3e9c54bcd9b85f64252e14ea24618db7c79e74d324800adb404781eb1fb4fdecc478f46832040f83efec800b29f1bda55b991a2968e29f2108", 0x9b}, {&(0x7f0000002580)="b038b6d17d564a031a2802aed37f8fe5aa0880afe1bffe400f82afbb0c3a765fbbb0e01817db25ddb3bc56fb660e30cf130b73c97996c5125101536e571868193f7ce23a264417333f09031c92f368a721d28d8457d057e64fa347386b7212143340453ae3ec819568419987b88d7c2ba5bfe04346cccd35a794b9f57985ac14f473016d805f60e08d5e53b6506f28e8a7c177a71803819834bf186e66089edc29813b616b751c25a869b098f0f9496ce7e4b2d77cfc716d1797ac0025e2d51420cea2c3daf8cb4a30248a5ca759df8095cabd9975550487b2f7bd682f60c238ec29df3e86e227cb16a712bad46e", 0xee}], 0x5, &(0x7f0000002680)=[{0x20, 0x115, 0x5, "1e441af36d83843444ecccf7fe"}, {0xe0, 0x101, 0x78, "c03ea1f886a3bbaae149594c1d08e7dd99bf414b730a34c4b5783edb527bed6befd0dae616237703cb30f4424d1310ac65e3a26677a0f0bae77b545bd483c4ae6f4f36bcce4857f621d26f200ea58b346cdec88a3699e2e15800f19c11c05e71dc1942352006431329512f8f2454980cef6128e01ce0a53c9d83785ec066200fa61edaa5d2a5ad7b3ced4607b3428bc669d9c6f051c6f9812b363e9e132d7bf0c3a9fd0cc631eaffb87d4fce083da0b2b6f90e8f5e9cbf8fcbfd32907985df6dc946008848380a90a140824967"}], 0x100}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000002780)="81ff910584efe04891682ab13c1af2bf1f8dfa71178472781ccf3708bf6cd07fee1a798c5c7a11a8933332c5e39007a855a9d655be30443b5bb7ecf80a6a15fa7ab1e608e1d9f6337daeabbfaf7b0e9365cc7de5740c3664", 0x58}, {&(0x7f0000002800)="68b2e4e4380deb26a666ef4c3b1d330bb86b45800c0a4816c1f88b506905938a554104b95350e4d0f72a76b0b71a288e546df36a1fd70de655ee1ccf60ad4df2d9764d02f7f6f17702a9225a20429a98", 0x50}, {&(0x7f0000002880)="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", 0x1000}], 0x3}}], 0x2, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=@newsa={0x184, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in=@initdev={0xac, 0x1e, 0x4, 0x0}}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@remote, {0x8, 0x0, 0x0, 0x2dcd, 0x0, 0xfffffffffffffffc}, {0x6}, {}, 0x70bd2d, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'lrw-camellia-aesni\x00'}}}, @algo_auth={0x49, 0x1, {{'md5\x00'}, 0x8, "fd"}}]}, 0x184}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) 2.406430457s ago: executing program 2 (id=601): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_getoverrun(r0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {r1, r2+10000000}}, &(0x7f0000000140)) (async) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x3) (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 2.370337618s ago: executing program 0 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000380)=0x2, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x40000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)={0x14, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x814) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) connect$packet(r3, &(0x7f0000000280)={0x11, 0x18, r4, 0x1, 0xf8, 0x6, @local}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @multicast}, 0x10) 2.30301925s ago: executing program 0 (id=603): openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x109200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) setuid(0xee00) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000000c0)) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x190) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x39d, 0x5, 0x3, 0x8, 0x6, 0x0, 0x6}, &(0x7f0000000080)={0xe, 0x3, 0x0, 0xa65e, 0x100000001, 0x2, 0x7, 0x5}, 0x0, &(0x7f0000000180)={0x77359400}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 2.302937661s ago: executing program 0 (id=604): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4201, 0x0) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000180)=0x2, 0x4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 2.30287401s ago: executing program 0 (id=605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40d0}, 0x1404cc09) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0xc4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793f10d105012000020ef1b2fb090212"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1.644055973s ago: executing program 3 (id=608): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.039056344s ago: executing program 2 (id=609): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8947, &(0x7f00000002c0)={'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7ff, 0x80, 0xf, 0xf85, 0x4, 0xffffffffffffffff}) fcntl$lock(r2, 0x4a, &(0x7f0000000200)={0x2, 0x3, 0x1, 0x1, r3}) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) open$dir(&(0x7f0000000280)='./file0\x00', 0x80, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000803500008100000088a8", 0x20, 0x240000c4, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) 913.490998ms ago: executing program 2 (id=611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016002102000000000000000000000000000000000000ffff64010101ac1e000100000000000000000000000000000000000000000000808001000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 894.988029ms ago: executing program 3 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) fgetxattr(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="757365722e084d84a1ca334220e45df0c14b2faaaa710ec0350849deecca982a2318ea0a71d183a098aa0390"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfd7f) 894.316369ms ago: executing program 2 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 7) 545.012451ms ago: executing program 3 (id=616): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 306.833009ms ago: executing program 1 (id=617): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000003a80)="a4ed82c80e3a040005f512000200", 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x6}], 0xaaaaaaaaaaaad64, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) close_range(r0, r0, 0x0) 294.12656ms ago: executing program 1 (id=618): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x18, 0x633, 0x70bd2e, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xd}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 235.091982ms ago: executing program 1 (id=619): syslog(0x4, 0xfffffffffffffffe, 0xff14) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) splice(r1, &(0x7f0000001500)=0x140000000000000, r2, 0x0, 0x9614, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 233.775982ms ago: executing program 2 (id=620): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x9c080, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) (async) clock_settime(0xfffffff4, &(0x7f00000001c0)={0x0, 0x3938700}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES8], 0x0) 190.103933ms ago: executing program 1 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) fgetxattr(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="757365722e084d84a1ca334220e45df0c14b2faaaa710e"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 126.130966ms ago: executing program 1 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016002102000000000000000000000000000000000000ffff64010101ac1e000100000000000000000000000000000000000000000000808001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 98.586636ms ago: executing program 1 (id=623): syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28101, 0x0) r3 = socket$inet6(0xa, 0x2, 0x1) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x78, &(0x7f0000000480)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="400102"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000140)={0x0, 0x11, 0x1, 'u'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x0, 0x10142, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0xe}) sendmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={&(0x7f0000000140)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0xf, 0x0, 0x0, 0x0, "242fd97eb0a69154d78b16ea0f077f5e0bbeaa4757c64cce9882f2904fbba34b12c75359e99a816c111bcdf8f5b134a030e4c980e33e5985592f79756ff22d10"}, 0x48}, 0x1, 0x0, 0x0, 0x20048008}, 0x8000040) 0s ago: executing program 0 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) fgetxattr(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="757365722e084d84a1ca334220e45df0c14b2faaaa710ec0350849deecca982a2318ea0a71d183a098aa0390"], 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000000040)={0xd4, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) kernel console output (not intermixed with test programs): ][ T892] ? stack_depot_save_flags+0x38/0x800 [ 45.638708][ T892] dump_stack+0x19/0x20 [ 45.638732][ T892] should_fail_ex+0x3d7/0x530 [ 45.638747][ T892] should_failslab+0xac/0x100 [ 45.638760][ T892] kmem_cache_alloc_node_noprof+0x45/0x420 [ 45.638776][ T892] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.638798][ T892] ? __alloc_skb+0x108/0x370 [ 45.638821][ T892] __alloc_skb+0x108/0x370 [ 45.638842][ T892] __ip6_append_data+0x29a8/0x3ae0 [ 45.638867][ T892] ? __kasan_kmalloc+0x96/0xb0 [ 45.638884][ T892] ? __cfi_raw6_getfrag+0x10/0x10 [ 45.638898][ T892] ? kmemdup_noprof+0x5b/0x80 [ 45.638914][ T892] ? ip6_setup_cork+0x13f0/0x13f0 [ 45.638927][ T892] ? ip6_append_data+0x25e/0x380 [ 45.638941][ T892] ip6_append_data+0x1b1/0x380 [ 45.638961][ T892] ? __cfi_raw6_getfrag+0x10/0x10 [ 45.638983][ T892] rawv6_sendmsg+0x13db/0x19c0 [ 45.639006][ T892] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 45.639026][ T892] ? unwind_get_return_address+0x51/0x90 [ 45.639042][ T892] ? selinux_socket_sendmsg+0x281/0x380 [ 45.639056][ T892] ? avc_has_perm+0x155/0x240 [ 45.639073][ T892] ? inet_send_prepare+0x64/0x4e0 [ 45.639094][ T892] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 45.639122][ T892] inet_sendmsg+0x116/0x120 [ 45.639158][ T892] sock_write_iter+0x40c/0x530 [ 45.639176][ T892] ? __cfi_sock_write_iter+0x10/0x10 [ 45.639188][ T892] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 45.639204][ T892] vfs_write+0x764/0xf90 [ 45.639220][ T892] ? __cfi_vfs_write+0x10/0x10 [ 45.639239][ T892] ksys_write+0x145/0x260 [ 45.639265][ T892] ? __cfi_ksys_write+0x10/0x10 [ 45.639292][ T892] ? __kasan_check_read+0x15/0x20 [ 45.639316][ T892] __x64_sys_write+0x7f/0x90 [ 45.639339][ T892] x64_sys_call+0x271c/0x2ee0 [ 45.639355][ T892] do_syscall_64+0x57/0xf0 [ 45.639372][ T892] ? clear_bhb_loop+0x50/0xa0 [ 45.639383][ T892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.639406][ T892] RIP: 0033:0x7f8dd719c819 [ 45.639424][ T892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.639442][ T892] RSP: 002b:00007f8dd5bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.639466][ T892] RAX: ffffffffffffffda RBX: 00007f8dd7415fa0 RCX: 00007f8dd719c819 [ 45.639489][ T892] RDX: 00000000000005ac RSI: 00002000000000c0 RDI: 0000000000000003 [ 45.639498][ T892] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.639506][ T892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.639514][ T892] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 45.639525][ T892] [ 45.752231][ T349] usbhid 1-1:0.1: can't add hid device: -71 [ 45.787714][ T894] fuse: Invalid rootmode [ 45.795945][ T349] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 45.857312][ T881] incfs_lookup_dentry err:-103 [ 45.865330][ T349] usb 1-1: USB disconnect, device number 10 [ 45.869836][ T881] incfs: Can't find or create .incomplete dir in ./file0 [ 45.984933][ T881] incfs: mount failed -103 [ 46.121378][ T907] FAULT_INJECTION: forcing a failure. [ 46.121378][ T907] name failslab, interval 1, probability 0, space 0, times 0 [ 46.134085][ T907] CPU: 0 UID: 0 PID: 907 Comm: syz.3.222 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 46.134117][ T907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 46.134126][ T907] Call Trace: [ 46.134130][ T907] [ 46.134136][ T907] __dump_stack+0x21/0x30 [ 46.134159][ T907] dump_stack_lvl+0x140/0x1c0 [ 46.134175][ T907] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.134190][ T907] ? __kasan_check_write+0x18/0x20 [ 46.134206][ T907] ? rwsem_read_trylock+0x274/0x5b0 [ 46.134224][ T907] dump_stack+0x19/0x20 [ 46.134238][ T907] should_fail_ex+0x3d7/0x530 [ 46.134254][ T907] should_failslab+0xac/0x100 [ 46.134265][ T907] __kmalloc_node_noprof+0x6c/0x4f0 [ 46.134282][ T907] ? crypto_create_tfm_node+0xa5/0x4d0 [ 46.134297][ T907] ? up_read+0x26/0x1c0 [ 46.134312][ T907] crypto_create_tfm_node+0xa5/0x4d0 [ 46.134326][ T907] ? crypto_alg_mod_lookup+0x3a2/0x5b0 [ 46.134341][ T907] crypto_alloc_tfm_node+0x169/0x370 [ 46.134356][ T907] crypto_alloc_aead+0x34/0x40 [ 46.134368][ T907] esp_init_state+0x63f/0x1290 [ 46.134383][ T907] ? netlink_sendmsg+0x7fe/0xb10 [ 46.134407][ T907] ? x64_sys_call+0x2a4c/0x2ee0 [ 46.134425][ T907] ? __cfi_esp_init_state+0x10/0x10 [ 46.134441][ T907] ? __xfrm_init_state+0x453/0x1070 [ 46.134459][ T907] ? __asan_memcpy+0x5a/0x80 [ 46.134474][ T907] __xfrm_init_state+0xad3/0x1070 [ 46.134492][ T907] xfrm_add_sa+0x2b62/0x3ed0 [ 46.134507][ T907] ? selinux_capable+0x38/0x50 [ 46.134519][ T907] ? __cfi_xfrm_add_sa+0x10/0x10 [ 46.134535][ T907] xfrm_user_rcv_msg+0x5f6/0x910 [ 46.134551][ T907] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 46.134568][ T907] ? __asan_memcpy+0x5a/0x80 [ 46.134584][ T907] ? avc_has_perm_noaudit+0x28a/0x360 [ 46.134601][ T907] ? avc_has_perm+0x155/0x240 [ 46.134618][ T907] netlink_rcv_skb+0x256/0x4f0 [ 46.134633][ T907] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 46.134648][ T907] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 46.134664][ T907] ? __kasan_check_write+0x18/0x20 [ 46.134679][ T907] ? mutex_lock+0x97/0x1d0 [ 46.134692][ T907] ? __cfi_mutex_lock+0x10/0x10 [ 46.134704][ T907] ? netlink_autobind+0x1c0/0x1c0 [ 46.134720][ T907] xfrm_netlink_rcv+0x76/0x90 [ 46.134735][ T907] netlink_unicast+0x8c0/0xa60 [ 46.134750][ T907] netlink_sendmsg+0x7fe/0xb10 [ 46.134765][ T907] ? __cfi_netlink_sendmsg+0x10/0x10 [ 46.134787][ T907] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 46.134804][ T907] ? security_socket_sendmsg+0x3d/0x100 [ 46.134817][ T907] ? __cfi_netlink_sendmsg+0x10/0x10 [ 46.134832][ T907] ____sys_sendmsg+0xa8c/0xae0 [ 46.134849][ T907] ? __import_iovec+0x5ad/0x7c0 [ 46.134861][ T907] ? __sys_sendmsg_sock+0x50/0x50 [ 46.134877][ T907] ? import_iovec+0x80/0xb0 [ 46.134889][ T907] ___sys_sendmsg+0x2a6/0x370 [ 46.134905][ T907] ? __sys_sendmsg+0x2a0/0x2a0 [ 46.134921][ T907] ? proc_fail_nth_write+0x184/0x220 [ 46.134936][ T907] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.134953][ T907] __x64_sys_sendmsg+0x1fb/0x2d0 [ 46.134969][ T907] ? fput+0x1a4/0x240 [ 46.134981][ T907] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 46.134997][ T907] ? ksys_write+0x1f3/0x260 [ 46.135013][ T907] ? __kasan_check_read+0x15/0x20 [ 46.135029][ T907] x64_sys_call+0x2a4c/0x2ee0 [ 46.135045][ T907] do_syscall_64+0x57/0xf0 [ 46.135062][ T907] ? clear_bhb_loop+0x50/0xa0 [ 46.135073][ T907] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.135090][ T907] RIP: 0033:0x7f8dd719c819 [ 46.135102][ T907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.135113][ T907] RSP: 002b:00007f8dd5bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.135128][ T907] RAX: ffffffffffffffda RBX: 00007f8dd7415fa0 RCX: 00007f8dd719c819 [ 46.135138][ T907] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 46.135150][ T907] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.135158][ T907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.135166][ T907] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 46.135177][ T907] [ 46.239194][ T306] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.309928][ T916] fuse: Invalid rootmode [ 46.479163][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 46.565186][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.573664][ T306] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 46.583674][ T306] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 46.593447][ T306] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.606568][ T306] usb 3-1: config 1 interface 0 has no altsetting 0 [ 46.614633][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.623742][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.631811][ T306] usb 3-1: Product: syz [ 46.636094][ T306] usb 3-1: Manufacturer: syz [ 46.640700][ T306] usb 3-1: SerialNumber: syz [ 46.646337][ T901] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.653831][ T901] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.799231][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 46.865508][ T306] usb 3-1: bad CDC descriptors [ 46.872634][ T306] usb 3-1: USB disconnect, device number 5 [ 46.949200][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 46.956031][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.964722][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 213, changing to 7 [ 46.977356][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 46.986887][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.995038][ T9] usb 1-1: Product: syz [ 46.999619][ T9] usb 1-1: Manufacturer: syz [ 47.004255][ T9] usb 1-1: SerialNumber: syz [ 47.213603][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 47.220596][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.230537][ T9] usb 1-1: USB disconnect, device number 11 [ 47.244261][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.260011][ T653] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 47.410282][ T653] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.420496][ T653] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.431574][ T653] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 47.441443][ T653] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.455180][ T653] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 47.464532][ T653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 47.472606][ T653] usb 4-1: SerialNumber: syz [ 47.479669][ T653] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 47.488051][ T653] usb-storage 4-1:1.0: USB Mass Storage device detected [ 47.495894][ T653] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 47.733136][ T929] netlink: 'syz.0.228': attribute type 8 has an invalid length. [ 47.767483][ T936] netlink: 80 bytes leftover after parsing attributes in process `syz.0.230'. [ 47.776877][ T937] netlink: 80 bytes leftover after parsing attributes in process `syz.0.230'. [ 47.787189][ T936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=936 comm=syz.0.230 [ 47.880591][ T945] fuse: Invalid rootmode [ 47.897115][ T947] FAULT_INJECTION: forcing a failure. [ 47.897115][ T947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.910267][ T947] CPU: 0 UID: 0 PID: 947 Comm: syz.0.234 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 47.910300][ T947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.910312][ T947] Call Trace: [ 47.910319][ T947] [ 47.910326][ T947] __dump_stack+0x21/0x30 [ 47.910356][ T947] dump_stack_lvl+0x140/0x1c0 [ 47.910379][ T947] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.910404][ T947] dump_stack+0x19/0x20 [ 47.910427][ T947] should_fail_ex+0x3d7/0x530 [ 47.910451][ T947] should_fail+0xf/0x20 [ 47.910473][ T947] should_fail_usercopy+0x1e/0x30 [ 47.910497][ T947] strncpy_from_user+0x29/0x270 [ 47.910519][ T947] ? __kasan_slab_alloc+0x73/0x90 [ 47.910537][ T947] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 47.910563][ T947] _RNvMs_NtCs1ewLyjEZ7Le_6kernel7uaccessNtB4_15UserSliceReader15strcpy_into_buf+0xb4/0x590 [ 47.910590][ T947] ? path_openat+0x1315/0x34f0 [ 47.910611][ T947] ? __cfi__RNvMs_NtCs1ewLyjEZ7Le_6kernel7uaccessNtB4_15UserSliceReader15strcpy_into_buf+0x10/0x10 [ 47.910641][ T947] _RNvXs1_CsahuowfGyxPf_6ashmemNtB5_6AshmemNtNtCs1ewLyjEZ7Le_6kernel10miscdevice10MiscDevice5ioctl+0x30f/0x3690 [ 47.910679][ T947] ? avc_has_perm_noaudit+0x28a/0x360 [ 47.910707][ T947] ? avc_has_perm+0x155/0x240 [ 47.910733][ T947] ? __cfi_avc_has_perm+0x10/0x10 [ 47.910758][ T947] ? kasan_save_alloc_info+0x40/0x50 [ 47.910780][ T947] ? __cfi__RNvXs1_CsahuowfGyxPf_6ashmemNtB5_6AshmemNtNtCs1ewLyjEZ7Le_6kernel10miscdevice10MiscDevice5ioctl+0x10/0x10 [ 47.910816][ T947] ? selinux_file_open+0x46c/0x630 [ 47.910839][ T947] ? __cfi_selinux_file_open+0x10/0x10 [ 47.910865][ T947] ? avc_has_extended_perms+0x80b/0xe70 [ 47.910890][ T947] ? __asan_memcpy+0x5a/0x80 [ 47.910914][ T947] ? avc_has_extended_perms+0x969/0xe70 [ 47.910941][ T947] ? __asan_set_shadow_00+0x12/0x20 [ 47.910962][ T947] ? do_vfs_ioctl+0x182d/0x2010 [ 47.910979][ T947] ? arch_stack_walk+0x10a/0x170 [ 47.911006][ T947] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 47.911026][ T947] ? _parse_integer+0x2e/0x40 [ 47.911050][ T947] ? ioctl_has_perm+0x39a/0x500 [ 47.911073][ T947] ? has_cap_mac_admin+0xd0/0xd0 [ 47.911096][ T947] ? proc_fail_nth_write+0x184/0x220 [ 47.911118][ T947] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 47.911140][ T947] ? selinux_file_ioctl+0x732/0x1480 [ 47.911174][ T947] ? vfs_write+0x9a4/0xf90 [ 47.911202][ T947] ? __fget_files+0x2c5/0x340 [ 47.911220][ T947] _RNvMs4_NtCs1ewLyjEZ7Le_6kernel10miscdeviceINtB5_16MiscdeviceVTableNtCsahuowfGyxPf_6ashmem6AshmemE5ioctlB14_+0xb7/0x150 [ 47.911253][ T947] ? security_file_ioctl+0x3e/0x110 [ 47.911277][ T947] ? __cfi__RNvMs4_NtCs1ewLyjEZ7Le_6kernel10miscdeviceINtB5_16MiscdeviceVTableNtCsahuowfGyxPf_6ashmem6AshmemE5ioctlB14_+0x10/0x10 [ 47.911310][ T947] __se_sys_ioctl+0x132/0x1b0 [ 47.911327][ T947] __x64_sys_ioctl+0x7f/0xa0 [ 47.911345][ T947] x64_sys_call+0x1878/0x2ee0 [ 47.911370][ T947] do_syscall_64+0x57/0xf0 [ 47.911396][ T947] ? clear_bhb_loop+0x50/0xa0 [ 47.911412][ T947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.911438][ T947] RIP: 0033:0x7f6fbfb9c819 [ 47.911454][ T947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.911469][ T947] RSP: 002b:00007f6fc0af5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.911491][ T947] RAX: ffffffffffffffda RBX: 00007f6fbfe15fa0 RCX: 00007f6fbfb9c819 [ 47.911506][ T947] RDX: 0000200000000080 RSI: 0000000041007701 RDI: 0000000000000003 [ 47.911518][ T947] RBP: 00007f6fc0af5090 R08: 0000000000000000 R09: 0000000000000000 [ 47.911530][ T947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.911543][ T947] R13: 00007f6fbfe16038 R14: 00007f6fbfe15fa0 R15: 00007ffca94cf6d8 [ 47.911558][ T947] [ 48.289892][ T925] incfs_lookup_dentry err:-103 [ 48.294711][ T925] incfs: Can't find or create .incomplete dir in ./file0 [ 48.301837][ T925] incfs: mount failed -103 [ 48.331158][ T955] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.579276][ T65] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 48.587443][ T65] usb 2-1: device reset changed ep0 maxpacket size! [ 48.594328][ T306] usb 2-1: USB disconnect, device number 9 [ 48.600303][ T653] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.619190][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.739201][ T306] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.749353][ T653] usb 1-1: Using ep0 maxpacket: 16 [ 48.754919][ T653] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 48.763807][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.774013][ T653] usb 1-1: config 0 has no interfaces? [ 48.780426][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.790584][ T653] usb 1-1: config 0 has no interfaces? [ 48.796092][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.807002][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.817020][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.830196][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.840367][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.849511][ T653] usb 1-1: config 0 has no interfaces? [ 48.855229][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.864111][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.874401][ T45] usb 3-1: config 0 descriptor?? [ 48.879471][ T653] usb 1-1: config 0 has no interfaces? [ 48.886274][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.896578][ T653] usb 1-1: config 0 has no interfaces? [ 48.902839][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.913138][ T653] usb 1-1: config 0 has no interfaces? [ 48.919225][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 48.924422][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.934623][ T653] usb 1-1: config 0 has no interfaces? [ 48.940923][ T653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.951243][ T653] usb 1-1: config 0 has no interfaces? [ 48.956941][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.966283][ T653] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 48.975501][ T653] usb 1-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 48.983999][ T653] usb 1-1: Product: syz [ 48.988179][ T653] usb 1-1: Manufacturer: syz [ 48.992917][ T653] usb 1-1: SerialNumber: syz [ 48.998105][ T306] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 49.007216][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.016111][ T653] usb 1-1: config 0 descriptor?? [ 49.021209][ T306] usb 2-1: Product: syz [ 49.025399][ T306] usb 2-1: Manufacturer: syz [ 49.030995][ T306] usb 2-1: SerialNumber: syz [ 49.234783][ T653] usb 1-1: USB disconnect, device number 12 [ 49.245595][ T306] usb 2-1: MIDIStreaming interface descriptor not found [ 49.255913][ T306] usb 2-1: USB disconnect, device number 10 [ 49.270622][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.289462][ T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 49.296997][ T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 49.304657][ T45] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 49.315569][ T45] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 49.772048][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.822732][ T975] netlink: 56 bytes leftover after parsing attributes in process `syz.0.246'. [ 50.017924][ T306] usb 4-1: USB disconnect, device number 13 [ 50.159231][ T653] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 50.309299][ T653] usb 1-1: Using ep0 maxpacket: 16 [ 50.315659][ T653] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 50.328884][ T653] usb 1-1: config 0 interface 0 has no altsetting 0 [ 50.335616][ T653] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 50.344787][ T653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.353646][ T653] usb 1-1: config 0 descriptor?? [ 50.359561][ T306] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 50.509372][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 50.514945][ T306] usb 4-1: too many configurations: 251, using maximum allowed: 8 [ 50.523583][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.533720][ T306] usb 4-1: config 0 has no interfaces? [ 50.540097][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.550337][ T306] usb 4-1: config 0 has no interfaces? [ 50.556908][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.567321][ T306] usb 4-1: config 0 has no interfaces? [ 50.573582][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.583726][ T306] usb 4-1: config 0 has no interfaces? [ 50.589851][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.599964][ T306] usb 4-1: config 0 has no interfaces? [ 50.606091][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.616212][ T306] usb 4-1: config 0 has no interfaces? [ 50.622361][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.632516][ T306] usb 4-1: config 0 has no interfaces? [ 50.638658][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.648790][ T306] usb 4-1: config 0 has no interfaces? [ 50.655945][ T306] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 50.665061][ T306] usb 4-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 50.673550][ T306] usb 4-1: Product: syz [ 50.677733][ T306] usb 4-1: Manufacturer: syz [ 50.682434][ T306] usb 4-1: SerialNumber: syz [ 50.687930][ T306] usb 4-1: config 0 descriptor?? [ 50.790568][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.797904][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.805183][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.812594][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.820044][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.827368][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.835618][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.843358][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.850665][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.857908][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.865209][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.872499][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.879787][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.887122][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.894391][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.898236][ T65] usb 4-1: USB disconnect, device number 14 [ 50.901741][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.915013][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.922454][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.929722][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.937031][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.944330][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.951681][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.958908][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.966261][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.973683][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.980946][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.988264][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 50.995561][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.002816][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.010086][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.017308][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.024560][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.031810][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.039107][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.046357][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.053592][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.061009][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.068205][ T653] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 51.076241][ T653] greenasia 0003:0E8F:0012.0007: hidraw1: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0 [ 51.087716][ T653] greenasia 0003:0E8F:0012.0007: no inputs found [ 51.096496][ T653] usb 1-1: USB disconnect, device number 13 [ 51.513473][ T36] kauditd_printk_skb: 444 callbacks suppressed [ 51.513494][ T36] audit: type=1400 audit(1775002275.390:686): avc: denied { connect } for pid=992 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.643410][ T1006] FAULT_INJECTION: forcing a failure. [ 51.643410][ T1006] name failslab, interval 1, probability 0, space 0, times 0 [ 51.656132][ T1006] CPU: 0 UID: 0 PID: 1006 Comm: syz.0.260 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 51.656166][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.656175][ T1006] Call Trace: [ 51.656180][ T1006] [ 51.656186][ T1006] __dump_stack+0x21/0x30 [ 51.656208][ T1006] dump_stack_lvl+0x140/0x1c0 [ 51.656223][ T1006] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.656240][ T1006] dump_stack+0x19/0x20 [ 51.656254][ T1006] should_fail_ex+0x3d7/0x530 [ 51.656270][ T1006] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 51.656284][ T1006] should_failslab+0xac/0x100 [ 51.656296][ T1006] __kmalloc_noprof+0x69/0x500 [ 51.656311][ T1006] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 51.656324][ T1006] ? cred_has_capability+0x296/0x3a0 [ 51.656339][ T1006] ? __kernel_text_address+0x11/0x40 [ 51.656355][ T1006] genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 51.656373][ T1006] genl_family_rcv_msg_doit+0xe3/0x360 [ 51.656386][ T1006] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 51.656398][ T1006] ? selinux_capable+0x38/0x50 [ 51.656410][ T1006] ? bpf_lsm_capable+0xd/0x20 [ 51.656424][ T1006] ? security_capable+0x44/0x130 [ 51.656441][ T1006] ? ns_capable+0x90/0xf0 [ 51.656457][ T1006] genl_rcv_msg+0x617/0x7b0 [ 51.656469][ T1006] ? __cfi_genl_rcv_msg+0x10/0x10 [ 51.656480][ T1006] ? __cfi_nl80211_pre_doit+0x10/0x10 [ 51.656493][ T1006] ? __cfi_nl80211_set_tid_config+0x10/0x10 [ 51.656506][ T1006] ? __cfi_nl80211_post_doit+0x10/0x10 [ 51.656519][ T1006] netlink_rcv_skb+0x256/0x4f0 [ 51.656534][ T1006] ? __cfi_genl_rcv_msg+0x10/0x10 [ 51.656545][ T1006] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 51.656560][ T1006] ? rwsem_read_trylock+0x274/0x5b0 [ 51.656577][ T1006] ? down_read+0x7f/0xe0 [ 51.656591][ T1006] ? __cfi_down_read+0x10/0x10 [ 51.656604][ T1006] ? is_vmalloc_addr+0x11/0x40 [ 51.656617][ T1006] genl_rcv+0x2c/0x40 [ 51.656633][ T1006] netlink_unicast+0x8c0/0xa60 [ 51.656647][ T1006] netlink_sendmsg+0x7fe/0xb10 [ 51.656663][ T1006] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.656679][ T1006] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 51.656697][ T1006] ? security_socket_sendmsg+0x3d/0x100 [ 51.656709][ T1006] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.656725][ T1006] ____sys_sendmsg+0xa8c/0xae0 [ 51.656742][ T1006] ? __import_iovec+0x5ad/0x7c0 [ 51.656753][ T1006] ? __sys_sendmsg_sock+0x50/0x50 [ 51.656770][ T1006] ? import_iovec+0x80/0xb0 [ 51.656781][ T1006] ___sys_sendmsg+0x2a6/0x370 [ 51.656797][ T1006] ? __sys_sendmsg+0x2a0/0x2a0 [ 51.656813][ T1006] ? proc_fail_nth_write+0x184/0x220 [ 51.656827][ T1006] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 51.656844][ T1006] __x64_sys_sendmsg+0x1fb/0x2d0 [ 51.656859][ T1006] ? fput+0x1a4/0x240 [ 51.656872][ T1006] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 51.656888][ T1006] ? ksys_write+0x1f3/0x260 [ 51.656904][ T1006] ? __kasan_check_read+0x15/0x20 [ 51.656920][ T1006] x64_sys_call+0x2a4c/0x2ee0 [ 51.656937][ T1006] do_syscall_64+0x57/0xf0 [ 51.656953][ T1006] ? clear_bhb_loop+0x50/0xa0 [ 51.656964][ T1006] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.656981][ T1006] RIP: 0033:0x7f6fbfb9c819 [ 51.656993][ T1006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.657004][ T1006] RSP: 002b:00007f6fc0af5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.657020][ T1006] RAX: ffffffffffffffda RBX: 00007f6fbfe15fa0 RCX: 00007f6fbfb9c819 [ 51.657030][ T1006] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 51.657038][ T1006] RBP: 00007f6fc0af5090 R08: 0000000000000000 R09: 0000000000000000 [ 51.657046][ T1006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.657054][ T1006] R13: 00007f6fbfe16038 R14: 00007f6fbfe15fa0 R15: 00007ffca94cf6d8 [ 51.657064][ T1006] [ 51.719205][ T306] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.747344][ T1008] FAULT_INJECTION: forcing a failure. [ 51.747344][ T1008] name failslab, interval 1, probability 0, space 0, times 0 [ 51.799187][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 51.800052][ T347] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.805415][ T1008] CPU: 1 UID: 0 PID: 1008 Comm: syz.0.261 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 51.805444][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.805456][ T1008] Call Trace: [ 51.805462][ T1008] [ 51.805470][ T1008] __dump_stack+0x21/0x30 [ 51.805501][ T1008] dump_stack_lvl+0x140/0x1c0 [ 51.805524][ T1008] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.805550][ T1008] dump_stack+0x19/0x20 [ 51.805572][ T1008] should_fail_ex+0x3d7/0x530 [ 51.805597][ T1008] ? ovl_cache_entry_new+0x55/0x730 [ 51.805622][ T1008] should_failslab+0xac/0x100 [ 51.805641][ T1008] __kmalloc_noprof+0x69/0x500 [ 51.805666][ T1008] ? ovl_cache_entry_new+0x55/0x730 [ 51.805689][ T1008] ? offset_dir_lookup+0x19e/0x250 [ 51.805713][ T1008] ovl_cache_entry_new+0x55/0x730 [ 51.805737][ T1008] ? ovl_fill_merge+0x26c/0x870 [ 51.805760][ T1008] ovl_fill_merge+0x3c2/0x870 [ 51.805784][ T1008] ? __cfi_ovl_fill_merge+0x10/0x10 [ 51.805808][ T1008] offset_readdir+0x38f/0x480 [ 51.805827][ T1008] iterate_dir+0x203/0x5e0 [ 51.805845][ T1008] ovl_dir_read+0xf5/0x560 [ 51.805868][ T1008] ovl_dir_read_merged+0x1cf/0x3d0 [ 51.805892][ T1008] ? ovl_check_empty_dir+0x470/0x470 [ 51.805915][ T1008] ? __cfi_ovl_fill_merge+0x10/0x10 [ 51.805940][ T1008] ? ovl_iterate+0xccd/0x2130 [ 51.805963][ T1008] ovl_iterate+0xd8f/0x2130 [ 51.805988][ T1008] ? kstrtoull+0x13b/0x1e0 [ 51.806010][ T1008] ? __cfi_ovl_iterate+0x10/0x10 [ 51.806033][ T1008] ? kstrtouint+0x78/0xf0 [ 51.806054][ T1008] ? kstrtouint_from_user+0x117/0x170 [ 51.806076][ T1008] ? __x64_sys_openat+0x13a/0x170 [ 51.806099][ T1008] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 51.806121][ T1008] ? selinux_file_permission+0x318/0xb60 [ 51.806146][ T1008] ? __kasan_check_write+0x18/0x20 [ 51.806170][ T1008] ? rwsem_read_trylock+0x274/0x5b0 [ 51.806195][ T1008] ? __kasan_check_write+0x18/0x20 [ 51.806219][ T1008] ? down_write+0xee/0x2b0 [ 51.806240][ T1008] ? __cfi_down_write+0x10/0x10 [ 51.806261][ T1008] ? vfs_write+0x9a4/0xf90 [ 51.806286][ T1008] ? __kasan_check_write+0x18/0x20 [ 51.806310][ T1008] wrap_directory_iterator+0xaa/0xf0 [ 51.806327][ T1008] ? __cfi_ovl_iterate+0x10/0x10 [ 51.806358][ T1008] shared_ovl_iterate+0x28/0x40 [ 51.806381][ T1008] iterate_dir+0x203/0x5e0 [ 51.806399][ T1008] __se_sys_getdents64+0xf6/0x250 [ 51.806417][ T1008] ? fput+0x1a4/0x240 [ 51.806435][ T1008] ? __x64_sys_getdents64+0xa0/0xa0 [ 51.806454][ T1008] ? ksys_write+0x1f3/0x260 [ 51.806477][ T1008] ? __cfi_filldir64+0x10/0x10 [ 51.806496][ T1008] ? __cfi_ksys_write+0x10/0x10 [ 51.806521][ T1008] ? __kasan_check_read+0x15/0x20 [ 51.806545][ T1008] __x64_sys_getdents64+0x7f/0xa0 [ 51.806564][ T1008] x64_sys_call+0x27d0/0x2ee0 [ 51.806589][ T1008] do_syscall_64+0x57/0xf0 [ 51.806614][ T1008] ? clear_bhb_loop+0x50/0xa0 [ 51.806631][ T1008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.806657][ T1008] RIP: 0033:0x7f6fbfb9c819 [ 51.806674][ T1008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.806691][ T1008] RSP: 002b:00007f6fc0af5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 51.806713][ T1008] RAX: ffffffffffffffda RBX: 00007f6fbfe15fa0 RCX: 00007f6fbfb9c819 [ 51.806729][ T1008] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000005 [ 51.806742][ T1008] RBP: 00007f6fc0af5090 R08: 0000000000000000 R09: 0000000000000000 [ 51.806756][ T1008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.806768][ T1008] R13: 00007f6fbfe16038 R14: 00007f6fbfe15fa0 R15: 00007ffca94cf6d8 [ 51.806784][ T1008] [ 51.889176][ T306] usb 4-1: device descriptor read/64, error -71 [ 51.927314][ T1012] FAULT_INJECTION: forcing a failure. [ 51.927314][ T1012] name failslab, interval 1, probability 0, space 0, times 0 [ 52.189187][ T306] usb 4-1: device descriptor read/64, error -71 [ 52.193436][ T1012] CPU: 0 UID: 0 PID: 1012 Comm: syz.1.264 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 52.193467][ T1012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.193480][ T1012] Call Trace: [ 52.193486][ T1012] [ 52.193495][ T1012] __dump_stack+0x21/0x30 [ 52.193524][ T1012] dump_stack_lvl+0x140/0x1c0 [ 52.193548][ T1012] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.193573][ T1012] dump_stack+0x19/0x20 [ 52.193595][ T1012] should_fail_ex+0x3d7/0x530 [ 52.193620][ T1012] should_failslab+0xac/0x100 [ 52.193638][ T1012] kmem_cache_alloc_noprof+0x42/0x410 [ 52.193664][ T1012] ? selinux_perf_event_alloc+0x110/0x110 [ 52.193688][ T1012] ? xfrm_state_alloc+0x3f/0x380 [ 52.193712][ T1012] ? __nla_validate+0x70/0x70 [ 52.193730][ T1012] xfrm_state_alloc+0x3f/0x380 [ 52.193752][ T1012] ? xfrm_add_sa+0x14f4/0x3ed0 [ 52.193776][ T1012] xfrm_add_sa+0x15ad/0x3ed0 [ 52.193799][ T1012] ? selinux_capable+0x38/0x50 [ 52.193818][ T1012] ? __cfi_xfrm_add_sa+0x10/0x10 [ 52.193842][ T1012] xfrm_user_rcv_msg+0x5f6/0x910 [ 52.193867][ T1012] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 52.193894][ T1012] ? __asan_memcpy+0x5a/0x80 [ 52.193918][ T1012] ? avc_has_perm_noaudit+0x28a/0x360 [ 52.193946][ T1012] ? avc_has_perm+0x155/0x240 [ 52.193972][ T1012] netlink_rcv_skb+0x256/0x4f0 [ 52.193996][ T1012] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 52.194020][ T1012] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 52.194044][ T1012] ? __kasan_check_write+0x18/0x20 [ 52.194068][ T1012] ? mutex_lock+0x97/0x1d0 [ 52.194087][ T1012] ? __cfi_mutex_lock+0x10/0x10 [ 52.194106][ T1012] ? netlink_autobind+0x1c0/0x1c0 [ 52.194132][ T1012] xfrm_netlink_rcv+0x76/0x90 [ 52.194155][ T1012] netlink_unicast+0x8c0/0xa60 [ 52.194178][ T1012] netlink_sendmsg+0x7fe/0xb10 [ 52.194203][ T1012] ? __cfi_netlink_sendmsg+0x10/0x10 [ 52.194229][ T1012] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 52.194257][ T1012] ? security_socket_sendmsg+0x3d/0x100 [ 52.194276][ T1012] ? __cfi_netlink_sendmsg+0x10/0x10 [ 52.194301][ T1012] ____sys_sendmsg+0xa8c/0xae0 [ 52.194336][ T1012] ? __import_iovec+0x5ad/0x7c0 [ 52.194355][ T1012] ? __sys_sendmsg_sock+0x50/0x50 [ 52.194381][ T1012] ? import_iovec+0x80/0xb0 [ 52.194399][ T1012] ___sys_sendmsg+0x2a6/0x370 [ 52.194424][ T1012] ? __sys_sendmsg+0x2a0/0x2a0 [ 52.194449][ T1012] ? proc_fail_nth_write+0x184/0x220 [ 52.194476][ T1012] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.194504][ T1012] __x64_sys_sendmsg+0x1fb/0x2d0 [ 52.194528][ T1012] ? fput+0x1a4/0x240 [ 52.194547][ T1012] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 52.194571][ T1012] ? ksys_write+0x1f3/0x260 [ 52.194598][ T1012] ? __kasan_check_read+0x15/0x20 [ 52.194622][ T1012] x64_sys_call+0x2a4c/0x2ee0 [ 52.194648][ T1012] do_syscall_64+0x57/0xf0 [ 52.194673][ T1012] ? clear_bhb_loop+0x50/0xa0 [ 52.194691][ T1012] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.194717][ T1012] RIP: 0033:0x7fa9a339c819 [ 52.194733][ T1012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.194750][ T1012] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.194773][ T1012] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 52.194787][ T1012] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 52.194800][ T1012] RBP: 00007fa9a41db090 R08: 0000000000000000 R09: 0000000000000000 [ 52.194813][ T1012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.194825][ T1012] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 52.194842][ T1012] [ 52.259174][ T10] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 52.509162][ T306] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.521416][ T10] usb 3-1: device reset changed ep0 maxpacket size! [ 52.679176][ T306] usb 4-1: device descriptor read/64, error -71 [ 52.688472][ T9] usb 3-1: USB disconnect, device number 6 [ 52.755947][ T36] audit: type=1400 audit(1775002276.610:687): avc: denied { connect } for pid=1024 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.885792][ T1030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.270'. [ 52.885812][ T36] audit: type=1400 audit(1775002276.760:688): avc: denied { nlmsg_read } for pid=1029 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.894830][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 52.989208][ T306] usb 4-1: device descriptor read/64, error -71 [ 53.031154][ T36] audit: type=1400 audit(1775002276.910:689): avc: denied { accept } for pid=1035 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.079184][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 53.085376][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.097323][ T9] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 53.106584][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.109250][ T306] usb usb4-port1: attempt power cycle [ 53.114913][ T9] usb 3-1: Product: syz [ 53.129610][ T9] usb 3-1: Manufacturer: syz [ 53.134252][ T9] usb 3-1: SerialNumber: syz [ 53.189358][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.258036][ T1048] FAULT_INJECTION: forcing a failure. [ 53.258036][ T1048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.271800][ T1048] CPU: 1 UID: 0 PID: 1048 Comm: syz.1.278 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 53.271838][ T1048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.271852][ T1048] Call Trace: [ 53.271859][ T1048] [ 53.271867][ T1048] __dump_stack+0x21/0x30 [ 53.271901][ T1048] dump_stack_lvl+0x140/0x1c0 [ 53.271926][ T1048] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.271952][ T1048] ? __cfi_flush_tlb_func+0x10/0x10 [ 53.271975][ T1048] dump_stack+0x19/0x20 [ 53.271997][ T1048] should_fail_ex+0x3d7/0x530 [ 53.272024][ T1048] should_fail_alloc_page+0xec/0x110 [ 53.272046][ T1048] __alloc_pages_noprof+0x1c0/0x7e0 [ 53.272069][ T1048] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 53.272089][ T1048] ? __kasan_check_write+0x18/0x20 [ 53.272112][ T1048] ? _raw_spin_lock+0x92/0x120 [ 53.272140][ T1048] ? rcuwait_wake_up+0x60/0x70 [ 53.272240][ T1048] __folio_alloc_noprof+0x14/0x80 [ 53.272258][ T1048] folio_prealloc+0x46/0x220 [ 53.272271][ T1048] do_wp_page+0x1895/0x2e90 [ 53.272289][ T1048] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 53.272302][ T1048] ? folio_put+0x90/0x90 [ 53.272318][ T1048] ? __cfi__raw_spin_lock+0x10/0x10 [ 53.272335][ T1048] ? __pte_offset_map+0x1b0/0x230 [ 53.272353][ T1048] ? pte_offset_map_rw_nolock+0xba/0x110 [ 53.272369][ T1048] handle_mm_fault+0x103e/0x1bf0 [ 53.272380][ T1048] ? __kasan_check_write+0x18/0x20 [ 53.272398][ T1048] ? __cfi_handle_mm_fault+0x10/0x10 [ 53.272408][ T1048] ? vm_normal_page+0x1fa/0x220 [ 53.272428][ T1048] ? follow_page_pte+0x90f/0xbc0 [ 53.272445][ T1048] ? gup_must_unshare+0x1e0/0x1e0 [ 53.272458][ T1048] ? try_grab_folio_fast+0x155/0x520 [ 53.272471][ T1048] ? vma_is_secretmem+0x11/0x50 [ 53.272486][ T1048] __get_user_pages+0x1170/0x22b0 [ 53.272501][ T1048] ? populate_vma_page_range+0x220/0x220 [ 53.272513][ T1048] ? down_read_killable+0x7f/0x100 [ 53.272527][ T1048] ? __cfi_down_read_killable+0x10/0x10 [ 53.272541][ T1048] ? get_user_pages_fast_only+0xc0/0xc0 [ 53.272555][ T1048] get_user_pages_unlocked+0x1b6/0x6d0 [ 53.272569][ T1048] hva_to_pfn+0x28a/0xab0 [ 53.272586][ T1048] ? __cfi_emulator_get_segment+0x10/0x10 [ 53.272603][ T1048] ? tdp_iter_next+0x7d4/0xa30 [ 53.272616][ T1048] ? __cfi_hva_to_pfn+0x10/0x10 [ 53.272633][ T1048] ? kvm_tdp_mmu_fast_pf_get_last_sptep+0x231/0x2d0 [ 53.272649][ T1048] ? __cfi_kvm_tdp_mmu_fast_pf_get_last_sptep+0x10/0x10 [ 53.272665][ T1048] __gfn_to_pfn_memslot+0x29f/0x330 [ 53.272683][ T1048] kvm_faultin_pfn+0x5d6/0x1560 [ 53.272701][ T1048] ? fast_page_fault+0x1170/0x1170 [ 53.272717][ T1048] ? __kvm_mmu_topup_memory_cache+0x490/0x850 [ 53.272734][ T1048] ? get_guest_cr3+0xc0/0xc0 [ 53.272750][ T1048] kvm_tdp_page_fault+0x204/0x320 [ 53.272764][ T1048] kvm_mmu_do_page_fault+0x2b9/0x660 [ 53.272778][ T1048] ? kvm_arch_async_page_ready+0x480/0x480 [ 53.272792][ T1048] ? kvm_multiple_exception+0x6d8/0xad0 [ 53.272806][ T1048] ? unwind_get_return_address+0x51/0x90 [ 53.272820][ T1048] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 53.272836][ T1048] kvm_mmu_page_fault+0x143/0x970 [ 53.272850][ T1048] handle_ept_violation+0x256/0x450 [ 53.272862][ T1048] ? vmx_vcpu_run+0x1116/0x1f70 [ 53.272878][ T1048] ? __cfi_handle_ept_violation+0x10/0x10 [ 53.272891][ T1048] vmx_handle_exit+0x12c0/0x1b10 [ 53.272906][ T1048] ? kvm_deliver_exception_payload+0xd7/0x200 [ 53.272921][ T1048] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 53.272937][ T1048] ? vmx_handle_exit_irqoff+0xe9/0x780 [ 53.272953][ T1048] vcpu_run+0x49f7/0x7840 [ 53.272973][ T1048] ? signal_pending+0xc0/0xc0 [ 53.272986][ T1048] ? __kasan_check_write+0x18/0x20 [ 53.273002][ T1048] ? xfd_validate_state+0x68/0x140 [ 53.273017][ T1048] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 53.273030][ T1048] ? __kasan_check_write+0x18/0x20 [ 53.273044][ T1048] ? fpregs_mark_activate+0x68/0x160 [ 53.273057][ T1048] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 53.273069][ T1048] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 53.273082][ T1048] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 53.273107][ T1048] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 53.273122][ T1048] ? kstrtoull+0x13b/0x1e0 [ 53.273136][ T1048] ? kstrtouint+0x78/0xf0 [ 53.273150][ T1048] ? ioctl_has_perm+0x1bc/0x500 [ 53.273165][ T1048] ? __asan_memcpy+0x5a/0x80 [ 53.273180][ T1048] ? ioctl_has_perm+0x408/0x500 [ 53.273195][ T1048] ? has_cap_mac_admin+0xd0/0xd0 [ 53.273209][ T1048] ? __kasan_check_write+0x18/0x20 [ 53.273224][ T1048] ? mutex_lock_killable+0x97/0x1d0 [ 53.273237][ T1048] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.273251][ T1048] ? proc_fail_nth_write+0x184/0x220 [ 53.273265][ T1048] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 53.273279][ T1048] kvm_vcpu_ioctl+0xa48/0x1000 [ 53.273296][ T1048] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 53.273313][ T1048] ? __cfi_vfs_write+0x10/0x10 [ 53.273328][ T1048] ? __kasan_check_write+0x18/0x20 [ 53.273343][ T1048] ? mutex_unlock+0x90/0x240 [ 53.273361][ T1048] ? __cfi_mutex_unlock+0x10/0x10 [ 53.273373][ T1048] ? __fget_files+0x2c5/0x340 [ 53.273385][ T1048] ? __fget_files+0x2c5/0x340 [ 53.273396][ T1048] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.273409][ T1048] ? security_file_ioctl+0x3e/0x110 [ 53.273424][ T1048] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 53.273440][ T1048] __se_sys_ioctl+0x132/0x1b0 [ 53.273452][ T1048] __x64_sys_ioctl+0x7f/0xa0 [ 53.273464][ T1048] x64_sys_call+0x1878/0x2ee0 [ 53.273481][ T1048] do_syscall_64+0x57/0xf0 [ 53.273497][ T1048] ? clear_bhb_loop+0x50/0xa0 [ 53.273508][ T1048] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.273525][ T1048] RIP: 0033:0x7fa9a339c819 [ 53.273538][ T1048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.273549][ T1048] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.273564][ T1048] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 53.273574][ T1048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 53.273583][ T1048] RBP: 00007fa9a41db090 R08: 0000000000000000 R09: 0000000000000000 [ 53.273591][ T1048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.273598][ T1048] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 53.273609][ T1048] [ 53.399725][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 53.469176][ T306] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 53.486280][ T10] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 53.520275][ T306] usb 4-1: device descriptor read/8, error -71 [ 53.523700][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.660287][ T306] usb 4-1: device descriptor read/8, error -71 [ 53.662388][ T10] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 53.909174][ T306] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 53.913489][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.950181][ T306] usb 4-1: device descriptor read/8, error -71 [ 53.958162][ T10] usb 1-1: config 0 descriptor?? [ 54.031872][ T36] audit: type=1400 audit(1775002277.910:690): avc: denied { remount } for pid=1054 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.100266][ T306] usb 4-1: device descriptor read/8, error -71 [ 54.209352][ T306] usb usb4-port1: unable to enumerate USB device [ 54.269212][ T362] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 54.376411][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.383733][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.390994][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.398247][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.405532][ T362] usb 2-1: device descriptor read/64, error -71 [ 54.411841][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.419063][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.426367][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.433620][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.440968][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.448430][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.455829][ T1058] ======================================================= [ 54.455829][ T1058] WARNING: The mand mount option has been deprecated and [ 54.455829][ T1058] and is ignored by this kernel. Remove the mand [ 54.455829][ T1058] option from the mount to silence this warning. [ 54.455829][ T1058] ======================================================= [ 54.491061][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.498567][ T36] audit: type=1400 audit(1775002278.370:691): avc: denied { mount } for pid=1057 comm="syz.3.281" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.520015][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.527373][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.534808][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.542197][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.549550][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.556978][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.564335][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.571631][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.579210][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.586617][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.593962][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.601217][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.608422][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.615660][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.622978][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.630227][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.637479][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.644952][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.652209][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.659471][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.666685][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.674516][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.681831][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.689053][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.696344][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.703588][ T362] usb 2-1: device descriptor read/64, error -71 [ 54.709905][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.717163][ T10] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 54.726024][ T10] greenasia 0003:0E8F:0012.0008: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0 [ 54.737865][ T10] greenasia 0003:0E8F:0012.0008: no inputs found [ 54.745137][ T36] audit: type=1400 audit(1775002278.620:692): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.749252][ T10] usb 1-1: USB disconnect, device number 14 [ 54.838817][ T1062] FAULT_INJECTION: forcing a failure. [ 54.838817][ T1062] name failslab, interval 1, probability 0, space 0, times 0 [ 54.851532][ T1062] CPU: 1 UID: 0 PID: 1062 Comm: syz.3.282 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 54.851563][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.851576][ T1062] Call Trace: [ 54.851582][ T1062] [ 54.851587][ T1062] __dump_stack+0x21/0x30 [ 54.851608][ T1062] dump_stack_lvl+0x140/0x1c0 [ 54.851623][ T1062] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.851639][ T1062] ? __kasan_check_write+0x18/0x20 [ 54.851657][ T1062] ? proc_fail_nth_write+0x184/0x220 [ 54.851671][ T1062] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 54.851686][ T1062] dump_stack+0x19/0x20 [ 54.851700][ T1062] should_fail_ex+0x3d7/0x530 [ 54.851716][ T1062] should_failslab+0xac/0x100 [ 54.851728][ T1062] kmem_cache_alloc_noprof+0x42/0x410 [ 54.851745][ T1062] ? getname_flags+0xc5/0x700 [ 54.851762][ T1062] getname_flags+0xc5/0x700 [ 54.851778][ T1062] ? __cfi_mutex_unlock+0x10/0x10 [ 54.851792][ T1062] getname+0x1b/0x30 [ 54.851807][ T1062] do_sys_openat2+0xda/0x1d0 [ 54.851821][ T1062] ? fput+0x1a4/0x240 [ 54.851833][ T1062] ? do_sys_open+0x100/0x100 [ 54.851846][ T1062] ? ksys_write+0x1f3/0x260 [ 54.851863][ T1062] ? __cfi_ksys_write+0x10/0x10 [ 54.851881][ T1062] __x64_sys_open+0x120/0x150 [ 54.851895][ T1062] x64_sys_call+0x131a/0x2ee0 [ 54.851912][ T1062] do_syscall_64+0x57/0xf0 [ 54.851928][ T1062] ? clear_bhb_loop+0x50/0xa0 [ 54.851939][ T1062] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.851957][ T1062] RIP: 0033:0x7f8dd719c819 [ 54.851969][ T1062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.851981][ T1062] RSP: 002b:00007f8dd5bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 54.851996][ T1062] RAX: ffffffffffffffda RBX: 00007f8dd7415fa0 RCX: 00007f8dd719c819 [ 54.852007][ T1062] RDX: 0000000000000048 RSI: 0000000000000080 RDI: 0000200000000280 [ 54.852016][ T1062] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.852024][ T1062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.852032][ T1062] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 54.852043][ T1062] [ 54.864133][ T1065] netlink: 165 bytes leftover after parsing attributes in process `syz.3.283'. [ 54.977615][ T306] usb 3-1: USB disconnect, device number 7 [ 55.029185][ T362] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 55.167648][ T36] audit: type=1400 audit(1775002279.040:693): avc: denied { bind } for pid=1070 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.189466][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 55.196128][ T36] audit: type=1400 audit(1775002279.060:694): avc: denied { listen } for pid=1070 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.229504][ T36] audit: type=1400 audit(1775002279.060:695): avc: denied { accept } for pid=1070 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.249967][ T362] usb 2-1: device descriptor read/64, error -71 [ 55.340120][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 55.351805][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 55.360689][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 55.373983][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 55.389150][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.397247][ T31] usb 4-1: Product: syz [ 55.407343][ T31] usb 4-1: Manufacturer: syz [ 55.412147][ T31] usb 4-1: SerialNumber: syz [ 55.489203][ T362] usb 2-1: device descriptor read/64, error -71 [ 55.599267][ T362] usb usb2-port1: attempt power cycle [ 55.625064][ T31] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.632944][ T31] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 55.645096][ T31] usb 4-1: USB disconnect, device number 19 [ 55.959474][ T362] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.979243][ T65] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 55.987736][ T362] usb 2-1: device descriptor read/8, error -71 [ 56.081713][ T1087] FAULT_INJECTION: forcing a failure. [ 56.081713][ T1087] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.095263][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: syz.0.291 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 56.095298][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.095311][ T1087] Call Trace: [ 56.095316][ T1087] [ 56.095322][ T1087] __dump_stack+0x21/0x30 [ 56.095342][ T1087] dump_stack_lvl+0x140/0x1c0 [ 56.095358][ T1087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.095373][ T1087] ? __call_rcu_common+0x43b/0x720 [ 56.095387][ T1087] dump_stack+0x19/0x20 [ 56.095401][ T1087] should_fail_ex+0x3d7/0x530 [ 56.095417][ T1087] should_fail_alloc_page+0xec/0x110 [ 56.095430][ T1087] __alloc_pages_noprof+0x1c0/0x7e0 [ 56.095445][ T1087] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 56.095459][ T1087] ? udp_sendmsg+0x804/0x23f0 [ 56.095473][ T1087] ? avc_has_perm_noaudit+0x26c/0x360 [ 56.095493][ T1087] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 56.095508][ T1087] __folio_alloc_noprof+0x14/0x80 [ 56.095522][ T1087] folio_prealloc+0x46/0x220 [ 56.095535][ T1087] do_wp_page+0x1895/0x2e90 [ 56.095553][ T1087] ? folio_put+0x90/0x90 [ 56.095569][ T1087] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.095586][ T1087] ? __pte_offset_map+0x1b0/0x230 [ 56.095601][ T1087] ? pte_offset_map_rw_nolock+0xba/0x110 [ 56.095616][ T1087] handle_mm_fault+0x103e/0x1bf0 [ 56.095629][ T1087] ? __cfi_handle_mm_fault+0x10/0x10 [ 56.095640][ T1087] ? find_vma+0xd3/0x120 [ 56.095656][ T1087] ? lock_mm_and_find_vma+0xb8/0x390 [ 56.095668][ T1087] do_user_addr_fault+0x4c9/0x11e0 [ 56.095686][ T1087] exc_page_fault+0x58/0xc0 [ 56.095700][ T1087] asm_exc_page_fault+0x2b/0x30 [ 56.095716][ T1087] RIP: 0010:__put_user_4+0x11/0x30 [ 56.095735][ T1087] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 93 9a 02 00 90 90 90 90 90 90 90 90 90 90 [ 56.095746][ T1087] RSP: 0018:ffffc9000fddfc98 EFLAGS: 00050202 [ 56.095759][ T1087] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000008038 [ 56.095769][ T1087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.095777][ T1087] RBP: ffffc9000fddfed8 R08: ffff88811dd08000 R09: 0000000000000002 [ 56.095786][ T1087] R10: 00000000ffffff97 R11: 0000000000000000 R12: dffffc0000000000 [ 56.095795][ T1087] R13: 1ffff92001fbbfa0 R14: 0000000000000001 R15: 0000200000008000 [ 56.095805][ T1087] ? __sys_sendmmsg+0x2d7/0x4e0 [ 56.095824][ T1087] ? __cfi___sys_sendmmsg+0x10/0x10 [ 56.095842][ T1087] ? __cfi_ksys_write+0x10/0x10 [ 56.095858][ T1087] __x64_sys_sendmmsg+0xa4/0xc0 [ 56.095875][ T1087] x64_sys_call+0xfec/0x2ee0 [ 56.095891][ T1087] do_syscall_64+0x57/0xf0 [ 56.095907][ T1087] ? clear_bhb_loop+0x50/0xa0 [ 56.095918][ T1087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.095934][ T1087] RIP: 0033:0x7f6fbfb9c819 [ 56.095945][ T1087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.095956][ T1087] RSP: 002b:00007f6fc0af5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.095968][ T1087] RAX: ffffffffffffffda RBX: 00007f6fbfe15fa0 RCX: 00007f6fbfb9c819 [ 56.095978][ T1087] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 56.095986][ T1087] RBP: 00007f6fc0af5090 R08: 0000000000000000 R09: 0000000000000000 [ 56.095994][ T1087] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 56.096002][ T1087] R13: 00007f6fbfe16038 R14: 00007f6fbfe15fa0 R15: 00007ffca94cf6d8 [ 56.096013][ T1087] [ 56.120325][ T362] usb 2-1: device descriptor read/8, error -71 [ 56.399175][ T306] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 56.409902][ T65] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 56.465710][ T65] usb 3-1: config 1 has no interface number 0 [ 56.471871][ T65] usb 3-1: config 1 interface 93 has no altsetting 0 [ 56.478732][ T65] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 56.488165][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.537949][ T1099] FAULT_INJECTION: forcing a failure. [ 56.537949][ T1099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.551404][ T1099] CPU: 0 UID: 0 PID: 1099 Comm: syz.3.297 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 56.551442][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.551457][ T1099] Call Trace: [ 56.551464][ T1099] [ 56.551474][ T1099] __dump_stack+0x21/0x30 [ 56.551506][ T1099] dump_stack_lvl+0x140/0x1c0 [ 56.551537][ T1099] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.551565][ T1099] dump_stack+0x19/0x20 [ 56.551589][ T1099] should_fail_ex+0x3d7/0x530 [ 56.551616][ T1099] should_fail+0xf/0x20 [ 56.551651][ T1099] should_fail_usercopy+0x1e/0x30 [ 56.551678][ T1099] __kvm_read_guest_page+0x177/0x210 [ 56.551699][ T1099] kvm_vcpu_read_guest_page+0x31a/0x400 [ 56.551721][ T1099] kvm_fetch_guest_virt+0x146/0x190 [ 56.551749][ T1099] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 56.551777][ T1099] __do_insn_fetch_bytes+0x341/0x760 [ 56.551808][ T1099] ? x86_decode_insn+0x5180/0x5180 [ 56.551839][ T1099] ? __asan_memcpy+0x5a/0x80 [ 56.551872][ T1099] x86_decode_insn+0x333/0x5180 [ 56.551906][ T1099] ? __cfi_x86_decode_insn+0x10/0x10 [ 56.551934][ T1099] ? __kasan_check_write+0x18/0x20 [ 56.551960][ T1099] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 56.551984][ T1099] ? __asan_memset+0x39/0x50 [ 56.552009][ T1099] ? init_decode_cache+0x7c/0x90 [ 56.552027][ T1099] ? init_emulate_ctxt+0x421/0x560 [ 56.552049][ T1099] ? kvm_inject_realmode_interrupt+0x2e0/0x2e0 [ 56.552072][ T1099] x86_decode_emulated_instruction+0x66/0x180 [ 56.552095][ T1099] x86_emulate_instruction+0x2d9/0x1a30 [ 56.552109][ T1099] ? kvm_mmu_do_page_fault+0x4f3/0x660 [ 56.552125][ T1099] handle_ud+0x199/0x330 [ 56.552136][ T1099] ? __cfi_handle_ud+0x10/0x10 [ 56.552148][ T1099] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 56.552164][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 56.552176][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 56.552186][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 56.552196][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 56.552206][ T1099] ? clear_bhb_loop+0x12/0xa0 [ 56.552217][ T1099] handle_exception_nmi+0x194/0xe60 [ 56.552230][ T1099] ? __cfi_handle_exception_nmi+0x10/0x10 [ 56.552242][ T1099] vmx_handle_exit+0x12c0/0x1b10 [ 56.552258][ T1099] ? kvm_deliver_exception_payload+0xd7/0x200 [ 56.552273][ T1099] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 56.552289][ T1099] ? vmx_handle_exit_irqoff+0x401/0x780 [ 56.552305][ T1099] vcpu_run+0x49f7/0x7840 [ 56.552326][ T1099] ? signal_pending+0xc0/0xc0 [ 56.552340][ T1099] ? __kasan_check_write+0x18/0x20 [ 56.552355][ T1099] ? xfd_validate_state+0x68/0x140 [ 56.552370][ T1099] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 56.552383][ T1099] ? __kasan_check_write+0x18/0x20 [ 56.552398][ T1099] ? fpregs_mark_activate+0x68/0x160 [ 56.552411][ T1099] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 56.552423][ T1099] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 56.552436][ T1099] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 56.552452][ T1099] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 56.552466][ T1099] ? kstrtoull+0x13b/0x1e0 [ 56.552481][ T1099] ? kstrtouint+0x78/0xf0 [ 56.552494][ T1099] ? ioctl_has_perm+0x1bc/0x500 [ 56.552509][ T1099] ? __asan_memcpy+0x5a/0x80 [ 56.552525][ T1099] ? ioctl_has_perm+0x408/0x500 [ 56.552539][ T1099] ? has_cap_mac_admin+0xd0/0xd0 [ 56.552554][ T1099] ? __kasan_check_write+0x18/0x20 [ 56.552569][ T1099] ? mutex_lock_killable+0x97/0x1d0 [ 56.552583][ T1099] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.552596][ T1099] ? proc_fail_nth_write+0x184/0x220 [ 56.552611][ T1099] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 56.552626][ T1099] kvm_vcpu_ioctl+0xa48/0x1000 [ 56.552643][ T1099] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 56.552660][ T1099] ? __cfi_vfs_write+0x10/0x10 [ 56.552677][ T1099] ? __kasan_check_write+0x18/0x20 [ 56.552700][ T1099] ? mutex_unlock+0x90/0x240 [ 56.552712][ T1099] ? __cfi_mutex_unlock+0x10/0x10 [ 56.552724][ T1099] ? __fget_files+0x2c5/0x340 [ 56.552736][ T1099] ? __fget_files+0x2c5/0x340 [ 56.552748][ T1099] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.552761][ T1099] ? security_file_ioctl+0x3e/0x110 [ 56.552776][ T1099] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 56.552793][ T1099] __se_sys_ioctl+0x132/0x1b0 [ 56.552805][ T1099] __x64_sys_ioctl+0x7f/0xa0 [ 56.552817][ T1099] x64_sys_call+0x1878/0x2ee0 [ 56.552834][ T1099] do_syscall_64+0x57/0xf0 [ 56.552850][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 56.552861][ T1099] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.552882][ T1099] RIP: 0033:0x7f8dd719c819 [ 56.552895][ T1099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.552906][ T1099] RSP: 002b:00007f8dd5bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.552922][ T1099] RAX: ffffffffffffffda RBX: 00007f8dd7415fa0 RCX: 00007f8dd719c819 [ 56.552932][ T1099] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 56.552941][ T1099] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.552949][ T1099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.552958][ T1099] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 56.552969][ T1099] [ 56.629867][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 56.689215][ T362] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 56.698464][ T306] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.732550][ T362] usb 2-1: device descriptor read/8, error -71 [ 56.745618][ T306] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 56.772687][ T65] usb 3-1: string descriptor 0 read error: -71 [ 56.775710][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 56.775725][ T36] audit: type=1400 audit(1775002280.640:704): avc: denied { shutdown } for pid=1082 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.785269][ T65] gl620a 3-1:1.93: probe with driver gl620a failed with error -22 [ 56.787522][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.795751][ T65] usb 3-1: USB disconnect, device number 8 [ 56.800364][ T306] usb 1-1: Product: syz [ 56.890208][ T362] usb 2-1: device descriptor read/8, error -71 [ 56.893794][ T306] usb 1-1: Manufacturer: syz [ 57.019254][ T362] usb usb2-port1: unable to enumerate USB device [ 57.022698][ T306] usb 1-1: SerialNumber: syz [ 57.260010][ T1109] FAULT_INJECTION: forcing a failure. [ 57.260010][ T1109] name failslab, interval 1, probability 0, space 0, times 0 [ 57.273279][ T1109] CPU: 0 UID: 0 PID: 1109 Comm: syz.3.301 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 57.273324][ T1109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.273338][ T1109] Call Trace: [ 57.273344][ T1109] [ 57.273353][ T1109] __dump_stack+0x21/0x30 [ 57.273383][ T1109] dump_stack_lvl+0x140/0x1c0 [ 57.273408][ T1109] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.273424][ T1109] ? is_bpf_text_address+0x17b/0x1a0 [ 57.273440][ T1109] dump_stack+0x19/0x20 [ 57.273454][ T1109] should_fail_ex+0x3d7/0x530 [ 57.273470][ T1109] should_failslab+0xac/0x100 [ 57.273482][ T1109] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 57.273500][ T1109] ? __check_object_size+0xe0/0x830 [ 57.273517][ T1109] ? _RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VechNtNtB7_9allocator7KmallocE7reserveCsahuowfGyxPf_6ashmem+0x255/0x5a0 [ 57.273543][ T1109] krealloc_noprof+0x8d/0x130 [ 57.273561][ T1109] _RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VechNtNtB7_9allocator7KmallocE7reserveCsahuowfGyxPf_6ashmem+0x255/0x5a0 [ 57.273585][ T1109] ? __cfi__RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VechNtNtB7_9allocator7KmallocE7reserveCsahuowfGyxPf_6ashmem+0x10/0x10 [ 57.273609][ T1109] ? _RNvMs_NtCs1ewLyjEZ7Le_6kernel7uaccessNtB4_15UserSliceReader15strcpy_into_buf+0x321/0x590 [ 57.273628][ T1109] ? path_openat+0x1315/0x34f0 [ 57.273640][ T1109] ? __cfi__RNvMs_NtCs1ewLyjEZ7Le_6kernel7uaccessNtB4_15UserSliceReader15strcpy_into_buf+0x10/0x10 [ 57.273660][ T1109] _RNvXs1_CsahuowfGyxPf_6ashmemNtB5_6AshmemNtNtCs1ewLyjEZ7Le_6kernel10miscdevice10MiscDevice5ioctl+0x37d/0x3690 [ 57.273683][ T1109] ? avc_has_perm_noaudit+0x28a/0x360 [ 57.273700][ T1109] ? avc_has_perm+0x155/0x240 [ 57.273717][ T1109] ? __cfi_avc_has_perm+0x10/0x10 [ 57.273732][ T1109] ? kasan_save_alloc_info+0x40/0x50 [ 57.273747][ T1109] ? __cfi__RNvXs1_CsahuowfGyxPf_6ashmemNtB5_6AshmemNtNtCs1ewLyjEZ7Le_6kernel10miscdevice10MiscDevice5ioctl+0x10/0x10 [ 57.273770][ T1109] ? selinux_file_open+0x46c/0x630 [ 57.273786][ T1109] ? __cfi_selinux_file_open+0x10/0x10 [ 57.273802][ T1109] ? avc_has_extended_perms+0x80b/0xe70 [ 57.273819][ T1109] ? __asan_memcpy+0x5a/0x80 [ 57.273834][ T1109] ? avc_has_extended_perms+0x969/0xe70 [ 57.273851][ T1109] ? __asan_set_shadow_00+0x12/0x20 [ 57.273865][ T1109] ? do_vfs_ioctl+0x182d/0x2010 [ 57.273876][ T1109] ? arch_stack_walk+0x10a/0x170 [ 57.273894][ T1109] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 57.273907][ T1109] ? _parse_integer+0x2e/0x40 [ 57.273922][ T1109] ? ioctl_has_perm+0x39a/0x500 [ 57.273937][ T1109] ? has_cap_mac_admin+0xd0/0xd0 [ 57.273952][ T1109] ? proc_fail_nth_write+0x184/0x220 [ 57.273967][ T1109] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 57.273981][ T1109] ? selinux_file_ioctl+0x732/0x1480 [ 57.273998][ T1109] ? __fget_files+0x2c5/0x340 [ 57.274010][ T1109] _RNvMs4_NtCs1ewLyjEZ7Le_6kernel10miscdeviceINtB5_16MiscdeviceVTableNtCsahuowfGyxPf_6ashmem6AshmemE5ioctlB14_+0xb7/0x150 [ 57.274033][ T1109] ? security_file_ioctl+0x3e/0x110 [ 57.274047][ T1109] ? __cfi__RNvMs4_NtCs1ewLyjEZ7Le_6kernel10miscdeviceINtB5_16MiscdeviceVTableNtCsahuowfGyxPf_6ashmem6AshmemE5ioctlB14_+0x10/0x10 [ 57.274072][ T1109] __se_sys_ioctl+0x132/0x1b0 [ 57.274084][ T1109] __x64_sys_ioctl+0x7f/0xa0 [ 57.274095][ T1109] x64_sys_call+0x1878/0x2ee0 [ 57.274112][ T1109] do_syscall_64+0x57/0xf0 [ 57.274128][ T1109] ? clear_bhb_loop+0x50/0xa0 [ 57.274139][ T1109] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.274157][ T1109] RIP: 0033:0x7f8dd719c819 [ 57.274169][ T1109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.274180][ T1109] RSP: 002b:00007f8dd5bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.274196][ T1109] RAX: ffffffffffffffda RBX: 00007f8dd7415fa0 RCX: 00007f8dd719c819 [ 57.274206][ T1109] RDX: 0000200000000080 RSI: 0000000041007701 RDI: 0000000000000003 [ 57.274215][ T1109] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.274224][ T1109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.274232][ T1109] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 57.274243][ T1109] [ 57.589296][ T306] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.701366][ T36] audit: type=1400 audit(1775002281.580:705): avc: denied { call } for pid=1112 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.720401][ T36] audit: type=1400 audit(1775002281.580:706): avc: denied { transfer } for pid=1112 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.763591][ T36] audit: type=1400 audit(1775002281.640:707): avc: denied { setopt } for pid=1114 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.783161][ T36] audit: type=1400 audit(1775002281.640:708): avc: denied { write } for pid=1114 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.850348][ T306] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.860745][ T306] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.874382][ T306] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.883567][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.892260][ T306] usb 2-1: config 0 descriptor?? [ 57.898096][ T306] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 58.069206][ T362] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 58.219207][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 58.225432][ T362] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 58.236101][ T362] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 58.245371][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.253521][ T362] usb 3-1: Product: syz [ 58.257690][ T362] usb 3-1: Manufacturer: syz [ 58.262300][ T362] usb 3-1: SerialNumber: syz [ 58.267810][ T362] usb 3-1: config 0 descriptor?? [ 58.274123][ T362] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 58.282169][ T362] usb 3-1: Detected FT232R [ 58.475675][ T36] audit: type=1400 audit(1775002282.350:709): avc: denied { read } for pid=1119 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.526690][ T36] audit: type=1400 audit(1775002282.400:710): avc: denied { write } for pid=1119 comm="syz.2.306" path="socket:[10374]" dev="sockfs" ino=10374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.550481][ T36] audit: type=1400 audit(1775002282.410:711): avc: denied { create } for pid=1119 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 58.615103][ T1125] syzkaller0: entered promiscuous mode [ 58.620729][ T1125] syzkaller0: entered allmulticast mode [ 59.173174][ T10] usb 1-1: USB disconnect, device number 15 [ 59.213342][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.219773][ T36] audit: type=1400 audit(1775002283.090:712): avc: denied { ioctl } for pid=1142 comm="syz.0.313" path="socket:[10446]" dev="sockfs" ino=10446 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.767417][ T1148] netlink: 56 bytes leftover after parsing attributes in process `syz.3.315'. [ 59.791506][ T1150] process 'syz.3.316' launched './file0' with NULL argv: empty string added [ 59.800579][ T36] audit: type=1400 audit(1775002283.680:713): avc: denied { execute_no_trans } for pid=1149 comm="syz.3.316" path="/87/file0" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.069223][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 60.199201][ T45] usb 4-1: device descriptor read/64, error -71 [ 60.212685][ T10] usb 2-1: USB disconnect, device number 15 [ 60.369781][ T1157] SELinux: failed to load policy [ 60.436434][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 60.449222][ T45] usb 4-1: device descriptor read/64, error -71 [ 60.689194][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 60.819231][ T45] usb 4-1: device descriptor read/64, error -71 [ 60.844628][ T362] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 60.853169][ T362] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 60.860900][ T362] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 60.868020][ T362] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 60.877743][ T362] usb 3-1: USB disconnect, device number 9 [ 60.885460][ T362] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 60.895160][ T362] ftdi_sio 3-1:0.0: device disconnected [ 61.059208][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.169395][ T45] usb usb4-port1: attempt power cycle [ 61.201727][ T362] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 61.229167][ T347] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.229173][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 61.359166][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 61.370120][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.381925][ T362] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 61.391096][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.399940][ T362] usb 3-1: Product: syz [ 61.404131][ T362] usb 3-1: Manufacturer: syz [ 61.408720][ T362] usb 3-1: SerialNumber: syz [ 61.499714][ T65] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 61.509267][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 61.530276][ T45] usb 4-1: device descriptor read/8, error -71 [ 61.544936][ T1184] SELinux: failed to load policy [ 61.603343][ T1185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 61.660316][ T45] usb 4-1: device descriptor read/8, error -71 [ 61.660415][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.676791][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.689896][ T65] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 61.698940][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.707681][ T65] usb 1-1: config 0 descriptor?? [ 61.713809][ T65] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 61.899238][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 61.920286][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.050363][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.159317][ T45] usb usb4-port1: unable to enumerate USB device [ 63.317710][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 63.317728][ T36] audit: type=1400 audit(1775002287.190:717): avc: denied { write } for pid=1211 comm="syz.1.338" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.319320][ T65] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 63.499167][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 63.505489][ T65] usb 4-1: config index 0 descriptor too short (expected 292, got 36) [ 63.513843][ T65] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 63.526750][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.533379][ T65] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 63.542462][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.551184][ T65] usb 4-1: config 0 descriptor?? [ 63.709200][ T31] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 63.860760][ T45] usb 3-1: USB disconnect, device number 10 [ 63.866786][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.878182][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.889291][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.900180][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.914012][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 63.923215][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.931298][ T31] usb 2-1: SerialNumber: syz [ 63.937810][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 63.946389][ T31] usb-storage 2-1:1.0: USB Mass Storage device detected [ 63.954717][ T31] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 63.970148][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 63.979217][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 63.986578][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 63.994197][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.001558][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.009077][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.016569][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.024038][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.033126][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.040490][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.047721][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.055060][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.062308][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.069710][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.076937][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.084218][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.091541][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.098763][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.106005][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.113385][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.120633][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.127847][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.135080][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.142340][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.149617][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.156840][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.164089][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.171628][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.178949][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.186205][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.193902][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.201190][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.208413][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.215649][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.222935][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.230280][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.237493][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.244780][ T65] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 64.252763][ T65] greenasia 0003:0E8F:0012.0009: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 64.264234][ T65] greenasia 0003:0E8F:0012.0009: no inputs found [ 64.273054][ T65] usb 4-1: USB disconnect, device number 24 [ 64.275408][ T45] usb 1-1: USB disconnect, device number 16 [ 64.281460][ T1229] fido_id[1229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 64.309419][ T1231] fuse: Unknown parameter '0x0000000000000003' [ 64.337542][ T36] audit: type=1400 audit(1775002288.210:718): avc: denied { map } for pid=1232 comm="syz.0.344" path="socket:[10640]" dev="sockfs" ino=10640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 64.659177][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 64.810409][ T45] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 64.818716][ T45] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 64.827882][ T45] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 64.838969][ T45] usb 1-1: config 220 has no interface number 2 [ 64.841477][ T1237] netlink: 37 bytes leftover after parsing attributes in process `syz.2.346'. [ 64.845453][ T45] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 64.867515][ T45] usb 1-1: config 220 interface 0 has no altsetting 0 [ 64.874553][ T45] usb 1-1: config 220 interface 76 has no altsetting 0 [ 64.881601][ T45] usb 1-1: config 220 interface 1 has no altsetting 0 [ 64.890014][ T45] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 64.899174][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.908337][ T45] usb 1-1: Product: syz [ 64.912937][ T45] usb 1-1: Manufacturer: syz [ 64.917564][ T45] usb 1-1: SerialNumber: syz [ 65.029225][ T65] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 65.127492][ T45] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 65.133947][ T45] usb 1-1: No valid video chain found. [ 65.139632][ T45] usb 1-1: selecting invalid altsetting 0 [ 65.150371][ T45] usb 1-1: USB disconnect, device number 17 [ 65.179206][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 65.189207][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 65.195483][ T65] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 65.203695][ T65] usb 4-1: config 0 has no interface number 0 [ 65.211080][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 65.220208][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.228238][ T65] usb 4-1: Product: syz [ 65.233564][ T65] usb 4-1: Manufacturer: syz [ 65.238174][ T65] usb 4-1: SerialNumber: syz [ 65.243650][ T65] usb 4-1: config 0 descriptor?? [ 65.330281][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.340603][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.353577][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.362653][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.371773][ T31] usb 3-1: config 0 descriptor?? [ 65.377627][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 65.451169][ T36] audit: type=1400 audit(1775002289.330:719): avc: denied { setopt } for pid=1240 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.518726][ T65] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 65.525382][ T65] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 65.534361][ T65] usb 4-1: Failed to create links for entity 5 [ 65.540660][ T65] usb 4-1: Failed to register entities (-22). [ 65.548113][ T65] usb 4-1: USB disconnect, device number 25 [ 65.658881][ T1251] fuse: Unknown parameter '0x0000000000000003' [ 65.909250][ T362] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 66.100271][ T1256] mmap: syz.3.354 (1256) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.369188][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 66.482473][ T65] usb 2-1: USB disconnect, device number 16 [ 66.499334][ T1262] FAULT_INJECTION: forcing a failure. [ 66.499334][ T1262] name failslab, interval 1, probability 0, space 0, times 0 [ 66.513070][ T1262] CPU: 0 UID: 0 PID: 1262 Comm: syz.1.356 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 66.513103][ T1262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.513115][ T1262] Call Trace: [ 66.513121][ T1262] [ 66.513128][ T1262] __dump_stack+0x21/0x30 [ 66.513157][ T1262] dump_stack_lvl+0x140/0x1c0 [ 66.513181][ T1262] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.513206][ T1262] dump_stack+0x19/0x20 [ 66.513228][ T1262] should_fail_ex+0x3d7/0x530 [ 66.513252][ T1262] should_failslab+0xac/0x100 [ 66.513270][ T1262] __kmalloc_node_noprof+0x6c/0x4f0 [ 66.513295][ T1262] ? crypto_create_tfm_node+0xa5/0x4d0 [ 66.513318][ T1262] crypto_create_tfm_node+0xa5/0x4d0 [ 66.513341][ T1262] crypto_ahash_init_tfm+0x196/0x4d0 [ 66.513360][ T1262] crypto_create_tfm_node+0x198/0x4d0 [ 66.513381][ T1262] ? up_read+0x26/0x1c0 [ 66.513405][ T1262] crypto_spawn_tfm2+0x60/0x90 [ 66.513432][ T1262] crypto_authenc_init_tfm+0x4c/0x250 [ 66.513456][ T1262] ? crypto_aead_init_tfm+0x107/0x1a0 [ 66.513474][ T1262] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 66.513499][ T1262] crypto_aead_init_tfm+0x121/0x1a0 [ 66.513518][ T1262] crypto_create_tfm_node+0x198/0x4d0 [ 66.513539][ T1262] ? crypto_alg_mod_lookup+0x3a2/0x5b0 [ 66.513562][ T1262] crypto_alloc_tfm_node+0x169/0x370 [ 66.513585][ T1262] crypto_alloc_aead+0x34/0x40 [ 66.513603][ T1262] esp_init_state+0x63f/0x1290 [ 66.513626][ T1262] ? netlink_sendmsg+0x7fe/0xb10 [ 66.513650][ T1262] ? x64_sys_call+0x2a4c/0x2ee0 [ 66.513676][ T1262] ? __cfi_esp_init_state+0x10/0x10 [ 66.513701][ T1262] ? __xfrm_init_state+0x453/0x1070 [ 66.513730][ T1262] ? __asan_memcpy+0x5a/0x80 [ 66.513754][ T1262] __xfrm_init_state+0xad3/0x1070 [ 66.513781][ T1262] xfrm_add_sa+0x2b62/0x3ed0 [ 66.513805][ T1262] ? selinux_capable+0x38/0x50 [ 66.513823][ T1262] ? __cfi_xfrm_add_sa+0x10/0x10 [ 66.513847][ T1262] xfrm_user_rcv_msg+0x5f6/0x910 [ 66.513872][ T1262] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 66.513899][ T1262] ? __asan_memcpy+0x5a/0x80 [ 66.513923][ T1262] ? avc_has_perm_noaudit+0x28a/0x360 [ 66.513958][ T1262] ? avc_has_perm+0x155/0x240 [ 66.513984][ T1262] netlink_rcv_skb+0x256/0x4f0 [ 66.514006][ T1262] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 66.514030][ T1262] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 66.514054][ T1262] ? __kasan_check_write+0x18/0x20 [ 66.514077][ T1262] ? mutex_lock+0x97/0x1d0 [ 66.514097][ T1262] ? __cfi_mutex_lock+0x10/0x10 [ 66.514116][ T1262] ? netlink_autobind+0x1c0/0x1c0 [ 66.514140][ T1262] xfrm_netlink_rcv+0x76/0x90 [ 66.514164][ T1262] netlink_unicast+0x8c0/0xa60 [ 66.514186][ T1262] netlink_sendmsg+0x7fe/0xb10 [ 66.514211][ T1262] ? __cfi_netlink_sendmsg+0x10/0x10 [ 66.514236][ T1262] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 66.514264][ T1262] ? security_socket_sendmsg+0x3d/0x100 [ 66.514282][ T1262] ? __cfi_netlink_sendmsg+0x10/0x10 [ 66.514307][ T1262] ____sys_sendmsg+0xa8c/0xae0 [ 66.514332][ T1262] ? __import_iovec+0x5ad/0x7c0 [ 66.514350][ T1262] ? __sys_sendmsg_sock+0x50/0x50 [ 66.514375][ T1262] ? import_iovec+0x80/0xb0 [ 66.514393][ T1262] ___sys_sendmsg+0x2a6/0x370 [ 66.514419][ T1262] ? __sys_sendmsg+0x2a0/0x2a0 [ 66.514443][ T1262] ? proc_fail_nth_write+0x184/0x220 [ 66.514465][ T1262] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 66.514491][ T1262] __x64_sys_sendmsg+0x1fb/0x2d0 [ 66.514515][ T1262] ? fput+0x1a4/0x240 [ 66.514534][ T1262] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 66.514559][ T1262] ? ksys_write+0x1f3/0x260 [ 66.514585][ T1262] ? __kasan_check_read+0x15/0x20 [ 66.514610][ T1262] x64_sys_call+0x2a4c/0x2ee0 [ 66.514635][ T1262] do_syscall_64+0x57/0xf0 [ 66.514660][ T1262] ? clear_bhb_loop+0x50/0xa0 [ 66.514677][ T1262] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.514703][ T1262] RIP: 0033:0x7fa9a339c819 [ 66.514719][ T1262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.514736][ T1262] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.514758][ T1262] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 66.514773][ T1262] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 66.514786][ T1262] RBP: 00007fa9a41db090 R08: 0000000000000000 R09: 0000000000000000 [ 66.514798][ T1262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.514810][ T1262] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 66.514826][ T1262] [ 66.957207][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 66.967058][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 66.978573][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 66.987755][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.995939][ T10] usb 4-1: Product: syz [ 67.000450][ T10] usb 4-1: Manufacturer: syz [ 67.005143][ T10] usb 4-1: SerialNumber: syz [ 67.010530][ T10] usb 4-1: config 0 descriptor?? [ 67.016133][ T1259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.023349][ T1259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.231975][ T1259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.239539][ T1259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.279190][ T65] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 67.430320][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.440555][ T65] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.451748][ T65] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.465507][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 67.474818][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 67.482876][ T65] usb 2-1: SerialNumber: syz [ 67.489390][ T65] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 67.497849][ T65] usb-storage 2-1:1.0: USB Mass Storage device detected [ 67.505907][ T65] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 67.704088][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 67.939948][ T65] usb 3-1: USB disconnect, device number 11 [ 67.967770][ T36] audit: type=1400 audit(1775002291.840:720): avc: denied { view } for pid=1272 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.968295][ T1274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 67.995852][ T1274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 68.102687][ T1281] fuse: Unknown parameter '0x0000000000000003' [ 68.115697][ T10] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 68.125958][ T1283] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 68.136109][ T10] usb 4-1: USB disconnect, device number 26 [ 68.154409][ T36] audit: type=1400 audit(1775002292.030:721): avc: denied { listen } for pid=1284 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.389214][ T65] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 68.519211][ T65] usb 3-1: device descriptor read/64, error -71 [ 68.686934][ T362] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.695687][ T362] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 68.706000][ T362] usb 1-1: can't read configurations, error -71 [ 68.728425][ T36] audit: type=1400 audit(1775002292.600:722): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.759183][ T65] usb 3-1: device descriptor read/64, error -71 [ 68.813772][ T1302] fuse: Unknown parameter '0x0000000000000003' [ 68.832043][ T36] audit: type=1400 audit(1775002292.710:723): avc: denied { create } for pid=1303 comm="syz.3.371" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.841708][ T1304] rust_binder: 265: no such ref 1 [ 68.892623][ T1305] rust_binder: 1304 RLIMIT_NICE not set [ 68.892660][ T1305] rust_binder: 265: no such ref 1 [ 68.956579][ T36] audit: type=1400 audit(1775002292.830:724): avc: denied { read } for pid=1303 comm="syz.3.371" name="file2" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.978887][ T36] audit: type=1400 audit(1775002292.830:725): avc: denied { open } for pid=1303 comm="syz.3.371" path="/102/file2" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.001800][ T65] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 69.009978][ T36] audit: type=1400 audit(1775002292.840:726): avc: denied { ioctl } for pid=1303 comm="syz.3.371" path="/102/file2" dev="tmpfs" ino=601 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.069244][ T362] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 69.159199][ T65] usb 3-1: device descriptor read/64, error -71 [ 69.220268][ T362] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.230501][ T362] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.243813][ T362] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.252869][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.261716][ T362] usb 1-1: config 0 descriptor?? [ 69.270979][ T362] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 69.409178][ T65] usb 3-1: device descriptor read/64, error -71 [ 69.519319][ T65] usb usb3-port1: attempt power cycle [ 69.669415][ T36] audit: type=1400 audit(1775002293.540:727): avc: denied { unlink } for pid=291 comm="syz-executor" name="file2" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.694704][ T36] audit: type=1400 audit(1775002293.550:728): avc: denied { ioctl } for pid=1306 comm="syz.3.372" path="socket:[10894]" dev="sockfs" ino=10894 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.859218][ T65] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 69.880618][ T65] usb 3-1: device descriptor read/8, error -71 [ 69.973052][ T10] usb 2-1: USB disconnect, device number 17 [ 70.011150][ T65] usb 3-1: device descriptor read/8, error -71 [ 70.110691][ T1321] rust_binder: Write failure EFAULT in pid:196 [ 70.129279][ T1266] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 70.171038][ T1323] fuse: Unknown parameter '0x0000000000000003' [ 70.249216][ T65] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 70.270330][ T65] usb 3-1: device descriptor read/8, error -71 [ 70.291122][ T1266] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.299677][ T1266] usb 4-1: not running at top speed; connect to a high speed hub [ 70.308253][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 70.319469][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 70.329789][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 70.340765][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 70.350624][ T1266] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 70.362341][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.374261][ T1266] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 70.383452][ T1266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.395579][ T1266] usb 4-1: Product: syz [ 70.399883][ T1266] usb 4-1: Manufacturer: syz [ 70.404529][ T1266] usb 4-1: SerialNumber: syz [ 70.409881][ T65] usb 3-1: device descriptor read/8, error -71 [ 70.416324][ T1266] usb 4-1: config 0 descriptor?? [ 70.421704][ T1311] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 70.432303][ T1266] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 70.466583][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.519295][ T65] usb usb3-port1: unable to enumerate USB device [ 70.629214][ T362] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 70.635495][ T653] usb 4-1: USB disconnect, device number 27 [ 70.636829][ T36] audit: type=1400 audit(1775002294.510:729): avc: denied { create } for pid=1310 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.809180][ T362] usb 2-1: Using ep0 maxpacket: 16 [ 70.815476][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.826457][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.836231][ T362] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.849043][ T362] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.858215][ T362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.867005][ T362] usb 2-1: config 0 descriptor?? [ 71.075592][ T1333] overlayfs: failed to resolve '/ $': -2 [ 71.080982][ T36] audit: type=1400 audit(1775002294.950:730): avc: denied { mounton } for pid=1332 comm="syz.1.383" path="/82/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.105215][ T1333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.113863][ T1333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.192141][ T1338] input: syz1 as /devices/virtual/input/input5 [ 71.201421][ T36] audit: type=1400 audit(1775002295.080:731): avc: denied { map } for pid=1336 comm="syz.3.385" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.323834][ T362] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 71.331809][ T362] microsoft 0003:045E:07DA.000A: item fetching failed at offset 31/34 [ 71.340348][ T362] microsoft 0003:045E:07DA.000A: parse failed [ 71.346540][ T362] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 71.469216][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 71.524992][ T653] usb 2-1: USB disconnect, device number 18 [ 71.620375][ T45] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 71.629191][ T65] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 71.630762][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 71.647341][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.656463][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.665249][ T45] usb 4-1: config 0 descriptor?? [ 71.763730][ T653] usb 1-1: USB disconnect, device number 19 [ 71.770399][ T65] usb 3-1: device descriptor read/64, error -71 [ 71.777714][ T1345] fuse: Unknown parameter '0x0000000000000003' [ 71.796156][ T1347] FAULT_INJECTION: forcing a failure. [ 71.796156][ T1347] name failslab, interval 1, probability 0, space 0, times 0 [ 71.808806][ T1347] CPU: 0 UID: 0 PID: 1347 Comm: syz.0.389 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 71.808841][ T1347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.808854][ T1347] Call Trace: [ 71.808862][ T1347] [ 71.808871][ T1347] __dump_stack+0x21/0x30 [ 71.808902][ T1347] dump_stack_lvl+0x140/0x1c0 [ 71.808918][ T1347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.808933][ T1347] ? genl_family_rcv_msg_dumpit+0x24a/0x320 [ 71.808947][ T1347] dump_stack+0x19/0x20 [ 71.808962][ T1347] should_fail_ex+0x3d7/0x530 [ 71.808978][ T1347] should_failslab+0xac/0x100 [ 71.808992][ T1347] kmem_cache_alloc_node_noprof+0x45/0x420 [ 71.809009][ T1347] ? ns_capable+0x90/0xf0 [ 71.809025][ T1347] ? __alloc_skb+0x108/0x370 [ 71.809039][ T1347] __alloc_skb+0x108/0x370 [ 71.809052][ T1347] ? __kasan_check_read+0x15/0x20 [ 71.809068][ T1347] netlink_ack+0x155/0xa50 [ 71.809083][ T1347] ? __cfi_wg_get_device_start+0x10/0x10 [ 71.809098][ T1347] netlink_rcv_skb+0x2dd/0x4f0 [ 71.809129][ T1347] ? __cfi_genl_rcv_msg+0x10/0x10 [ 71.809147][ T1347] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 71.809174][ T1347] ? rwsem_read_trylock+0x274/0x5b0 [ 71.809204][ T1347] ? down_read+0x7f/0xe0 [ 71.809228][ T1347] ? __cfi_down_read+0x10/0x10 [ 71.809247][ T1347] ? is_vmalloc_addr+0x11/0x40 [ 71.809261][ T1347] genl_rcv+0x2c/0x40 [ 71.809277][ T1347] netlink_unicast+0x8c0/0xa60 [ 71.809292][ T1347] netlink_sendmsg+0x7fe/0xb10 [ 71.809309][ T1347] ? __cfi_netlink_sendmsg+0x10/0x10 [ 71.809325][ T1347] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 71.809344][ T1347] ? security_socket_sendmsg+0x3d/0x100 [ 71.809357][ T1347] ? __cfi_netlink_sendmsg+0x10/0x10 [ 71.809373][ T1347] ____sys_sendmsg+0xa8c/0xae0 [ 71.809390][ T1347] ? __import_iovec+0x5ad/0x7c0 [ 71.809403][ T1347] ? __sys_sendmsg_sock+0x50/0x50 [ 71.809420][ T1347] ? import_iovec+0x80/0xb0 [ 71.809432][ T1347] ___sys_sendmsg+0x2a6/0x370 [ 71.809448][ T1347] ? __sys_sendmsg+0x2a0/0x2a0 [ 71.809464][ T1347] ? proc_fail_nth_write+0x184/0x220 [ 71.809479][ T1347] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 71.809497][ T1347] __x64_sys_sendmsg+0x1fb/0x2d0 [ 71.809513][ T1347] ? fput+0x1a4/0x240 [ 71.809526][ T1347] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 71.809545][ T1347] ? ksys_write+0x1f3/0x260 [ 71.809573][ T1347] ? __kasan_check_read+0x15/0x20 [ 71.809601][ T1347] x64_sys_call+0x2a4c/0x2ee0 [ 71.809620][ T1347] do_syscall_64+0x57/0xf0 [ 71.809636][ T1347] ? clear_bhb_loop+0x50/0xa0 [ 71.809651][ T1347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.809679][ T1347] RIP: 0033:0x7f6fbfb9c819 [ 71.809698][ T1347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.809716][ T1347] RSP: 002b:00007f6fc0af5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.809734][ T1347] RAX: ffffffffffffffda RBX: 00007f6fbfe15fa0 RCX: 00007f6fbfb9c819 [ 71.809744][ T1347] RDX: 0000000020040000 RSI: 0000200000000380 RDI: 0000000000000003 [ 71.809753][ T1347] RBP: 00007f6fc0af5090 R08: 0000000000000000 R09: 0000000000000000 [ 71.809762][ T1347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.809771][ T1347] R13: 00007f6fbfe16038 R14: 00007f6fbfe15fa0 R15: 00007ffca94cf6d8 [ 71.809782][ T1347] [ 72.259221][ T65] usb 3-1: device descriptor read/64, error -71 [ 72.371791][ T1356] FAULT_INJECTION: forcing a failure. [ 72.371791][ T1356] name failslab, interval 1, probability 0, space 0, times 0 [ 72.384577][ T1356] CPU: 0 UID: 0 PID: 1356 Comm: syz.1.393 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 72.384612][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.384624][ T1356] Call Trace: [ 72.384632][ T1356] [ 72.384639][ T1356] __dump_stack+0x21/0x30 [ 72.384671][ T1356] dump_stack_lvl+0x140/0x1c0 [ 72.384694][ T1356] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.384719][ T1356] ? __asan_memcpy+0x5a/0x80 [ 72.384745][ T1356] dump_stack+0x19/0x20 [ 72.384768][ T1356] should_fail_ex+0x3d7/0x530 [ 72.384792][ T1356] should_failslab+0xac/0x100 [ 72.384811][ T1356] __kmalloc_cache_noprof+0x41/0x470 [ 72.384837][ T1356] ? alloc_fs_context+0x70/0x820 [ 72.384857][ T1356] ? __asan_memcpy+0x5a/0x80 [ 72.384881][ T1356] alloc_fs_context+0x70/0x820 [ 72.384900][ T1356] ? _raw_read_unlock+0x16/0x40 [ 72.384936][ T1356] fs_context_for_mount+0x26/0x40 [ 72.384956][ T1356] do_new_mount+0x116/0xb30 [ 72.384981][ T1356] ? security_capable+0x44/0x130 [ 72.385007][ T1356] path_mount+0x682/0x1010 [ 72.385033][ T1356] __se_sys_mount+0x2bf/0x480 [ 72.385058][ T1356] ? ksys_write+0x1f3/0x260 [ 72.385083][ T1356] ? __x64_sys_mount+0xf0/0xf0 [ 72.385110][ T1356] __x64_sys_mount+0xc3/0xf0 [ 72.385135][ T1356] x64_sys_call+0x2021/0x2ee0 [ 72.385161][ T1356] do_syscall_64+0x57/0xf0 [ 72.385188][ T1356] ? clear_bhb_loop+0x50/0xa0 [ 72.385206][ T1356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.385233][ T1356] RIP: 0033:0x7fa9a339c819 [ 72.385250][ T1356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.385268][ T1356] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.385291][ T1356] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 72.385306][ T1356] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 72.385319][ T1356] RBP: 00007fa9a41db090 R08: 0000200000000140 R09: 0000000000000000 [ 72.385333][ T1356] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000001 [ 72.385345][ T1356] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 72.385362][ T1356] [ 72.399199][ T653] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 72.509173][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 72.670985][ T653] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 72.681486][ T653] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 72.692170][ T653] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 72.701271][ T653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.709292][ T653] usb 1-1: Product: syz [ 72.713465][ T653] usb 1-1: Manufacturer: syz [ 72.718075][ T653] usb 1-1: SerialNumber: syz [ 72.759222][ T65] usb 3-1: device descriptor read/64, error -71 [ 72.941223][ T653] usb 1-1: USB disconnect, device number 20 [ 72.999181][ T65] usb 3-1: device descriptor read/64, error -71 [ 73.109277][ T65] usb usb3-port1: attempt power cycle [ 73.359227][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 73.449782][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 73.470581][ T65] usb 3-1: device descriptor read/8, error -71 [ 73.510306][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.520515][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.533555][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.542636][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.551430][ T9] usb 2-1: config 0 descriptor?? [ 73.557306][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 73.600340][ T65] usb 3-1: device descriptor read/8, error -71 [ 73.699178][ T653] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 73.849241][ T65] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 73.850371][ T653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.867778][ T653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.870268][ T65] usb 3-1: device descriptor read/8, error -71 [ 73.877627][ T653] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.896851][ T653] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.906129][ T653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.914750][ T653] usb 1-1: config 0 descriptor?? [ 74.010286][ T65] usb 3-1: device descriptor read/8, error -71 [ 74.119313][ T65] usb usb3-port1: unable to enumerate USB device [ 74.234034][ T65] usb 4-1: USB disconnect, device number 28 [ 74.311536][ T1374] SELinux: security policydb version 18 (MLS) not backwards compatible [ 74.320100][ T1374] SELinux: failed to load policy [ 74.326635][ T653] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 74.337024][ T653] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 74.358945][ T1377] netlink: 37 bytes leftover after parsing attributes in process `syz.3.400'. [ 74.389564][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 74.389586][ T36] audit: type=1400 audit(1775002298.270:734): avc: denied { setopt } for pid=1378 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.391725][ T1379] syzkaller1: entered promiscuous mode [ 74.421443][ T1379] syzkaller1: entered allmulticast mode [ 74.518779][ T1393] FAULT_INJECTION: forcing a failure. [ 74.518779][ T1393] name failslab, interval 1, probability 0, space 0, times 0 [ 74.519490][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.538857][ T1393] CPU: 0 UID: 0 PID: 1393 Comm: syz.3.405 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 74.538893][ T1393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.538906][ T1393] Call Trace: [ 74.538914][ T1393] [ 74.538924][ T1393] __dump_stack+0x21/0x30 [ 74.538956][ T1393] dump_stack_lvl+0x140/0x1c0 [ 74.538982][ T1393] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.539009][ T1393] dump_stack+0x19/0x20 [ 74.539031][ T1393] should_fail_ex+0x3d7/0x530 [ 74.539058][ T1393] should_failslab+0xac/0x100 [ 74.539078][ T1393] __kmalloc_cache_noprof+0x41/0x470 [ 74.539114][ T1393] ? rfkill_fop_open+0x6a/0x900 [ 74.539145][ T1393] ? __cfi_rfkill_fop_open+0x10/0x10 [ 74.539166][ T1393] rfkill_fop_open+0x6a/0x900 [ 74.539186][ T1393] ? kobject_get_unless_zero+0x168/0x200 [ 74.539216][ T1393] ? __kasan_check_write+0x18/0x20 [ 74.539243][ T1393] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 74.539272][ T1393] ? __cfi_rfkill_fop_open+0x10/0x10 [ 74.539292][ T1393] misc_open+0x2ec/0x370 [ 74.539316][ T1393] chrdev_open+0x4dc/0x600 [ 74.539346][ T1393] ? __cfi_chrdev_open+0x10/0x10 [ 74.539376][ T1393] ? bpf_lsm_file_open+0xd/0x20 [ 74.539400][ T1393] ? __cfi_chrdev_open+0x10/0x10 [ 74.539428][ T1393] do_dentry_open+0x97b/0x1510 [ 74.539453][ T1393] vfs_open+0x86/0x240 [ 74.539475][ T1393] ? __cfi_vfs_open+0x10/0x10 [ 74.539498][ T1393] ? may_open+0x352/0x430 [ 74.539519][ T1393] path_openat+0x2bb1/0x34f0 [ 74.539540][ T1393] ? stack_depot_save_flags+0x38/0x800 [ 74.539569][ T1393] ? kasan_save_track+0x3e/0x80 [ 74.539598][ T1393] ? kasan_save_alloc_info+0x40/0x50 [ 74.539624][ T1393] ? do_sys_openat2+0xda/0x1d0 [ 74.539647][ T1393] ? __x64_sys_openat+0x13a/0x170 [ 74.539670][ T1393] ? x64_sys_call+0xe69/0x2ee0 [ 74.539699][ T1393] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.539731][ T1393] ? do_filp_open+0x440/0x440 [ 74.539755][ T1393] do_filp_open+0x1f5/0x440 [ 74.539778][ T1393] ? __cfi_do_filp_open+0x10/0x10 [ 74.539803][ T1393] ? alloc_fd+0x4e6/0x5a0 [ 74.539834][ T1393] do_sys_openat2+0x134/0x1d0 [ 74.539857][ T1393] ? fput+0x1a4/0x240 [ 74.539878][ T1393] ? do_sys_open+0x100/0x100 [ 74.539901][ T1393] ? ksys_write+0x1f3/0x260 [ 74.539930][ T1393] ? __cfi_ksys_write+0x10/0x10 [ 74.539959][ T1393] __x64_sys_openat+0x13a/0x170 [ 74.539984][ T1393] x64_sys_call+0xe69/0x2ee0 [ 74.540013][ T1393] do_syscall_64+0x57/0xf0 [ 74.540041][ T1393] ? clear_bhb_loop+0x50/0xa0 [ 74.540061][ T1393] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.540090][ T1393] RIP: 0033:0x7f8dd719c819 [ 74.540110][ T1393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.540138][ T1393] RSP: 002b:00007f8dd5bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.540164][ T1393] RAX: ffffffffffffffda RBX: 00007f8dd7415fa0 RCX: 00007f8dd719c819 [ 74.540181][ T1393] RDX: 000000000010d481 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 74.540197][ T1393] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.540212][ T1393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.540227][ T1393] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 74.540246][ T1393] [ 74.546707][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.564972][ T1395] SELinux: failed to load policy [ 74.567997][ T36] audit: type=1400 audit(1775002298.440:735): avc: denied { read write } for pid=1394 comm="syz.2.406" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.568930][ T1395] SELinux: policydb magic number 0x6b636f6c does not match expected magic number 0xf97cff8c [ 74.572808][ T36] audit: type=1400 audit(1775002298.440:736): avc: denied { open } for pid=1394 comm="syz.2.406" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.578997][ T1395] SELinux: failed to load policy [ 74.623287][ T36] audit: type=1400 audit(1775002298.500:737): avc: denied { append } for pid=1394 comm="syz.2.406" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.627975][ T1396] bpf: Bad value for 'uid' [ 74.633523][ T36] audit: type=1400 audit(1775002298.500:738): avc: denied { getopt } for pid=1394 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.239182][ T349] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 75.372237][ T653] usb 1-1: USB disconnect, device number 21 [ 75.389295][ T349] usb 3-1: Using ep0 maxpacket: 16 [ 75.395575][ T349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.405727][ T349] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.416193][ T349] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.426623][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.434869][ T349] usb 3-1: Product: syz [ 75.439059][ T349] usb 3-1: Manufacturer: syz [ 75.443719][ T349] usb 3-1: SerialNumber: syz [ 75.477079][ T1402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1402 comm=syz.0.408 [ 75.547864][ T36] audit: type=1400 audit(1775002299.420:739): avc: denied { shutdown } for pid=1409 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.652012][ T349] usb 3-1: 0:2 : does not exist [ 75.658569][ T349] usb 3-1: USB disconnect, device number 20 [ 75.731605][ T1422] fuse: Bad value for 'fd' [ 75.938567][ T36] audit: type=1400 audit(1775002299.810:740): avc: denied { mount } for pid=1421 comm="syz.0.417" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.136718][ T9] usb 2-1: USB disconnect, device number 19 [ 76.182646][ T349] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 76.237198][ T1428] devtmpfs: Unknown parameter '/dev/uinput' [ 76.263535][ T1431] FAULT_INJECTION: forcing a failure. [ 76.263535][ T1431] name failslab, interval 1, probability 0, space 0, times 0 [ 76.276414][ T1431] CPU: 1 UID: 0 PID: 1431 Comm: syz.1.421 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 76.276451][ T1431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.276465][ T1431] Call Trace: [ 76.276472][ T1431] [ 76.276481][ T1431] __dump_stack+0x21/0x30 [ 76.276515][ T1431] dump_stack_lvl+0x140/0x1c0 [ 76.276540][ T1431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.276557][ T1431] dump_stack+0x19/0x20 [ 76.276571][ T1431] should_fail_ex+0x3d7/0x530 [ 76.276588][ T1431] should_failslab+0xac/0x100 [ 76.276601][ T1431] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 76.276619][ T1431] ? xfrm_add_sa+0x22ca/0x3ed0 [ 76.276636][ T1431] kmemdup_noprof+0x31/0x80 [ 76.276651][ T1431] xfrm_add_sa+0x22ca/0x3ed0 [ 76.276667][ T1431] ? selinux_capable+0x38/0x50 [ 76.276680][ T1431] ? __cfi_xfrm_add_sa+0x10/0x10 [ 76.276696][ T1431] xfrm_user_rcv_msg+0x5f6/0x910 [ 76.276712][ T1431] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 76.276729][ T1431] ? __asan_memcpy+0x5a/0x80 [ 76.276745][ T1431] ? avc_has_perm_noaudit+0x28a/0x360 [ 76.276763][ T1431] ? avc_has_perm+0x155/0x240 [ 76.276780][ T1431] netlink_rcv_skb+0x256/0x4f0 [ 76.276796][ T1431] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 76.276811][ T1431] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 76.276827][ T1431] ? __kasan_check_write+0x18/0x20 [ 76.276847][ T1431] ? mutex_lock+0x97/0x1d0 [ 76.276866][ T1431] ? __cfi_mutex_lock+0x10/0x10 [ 76.276884][ T1431] ? netlink_autobind+0x1c0/0x1c0 [ 76.276909][ T1431] xfrm_netlink_rcv+0x76/0x90 [ 76.276927][ T1431] netlink_unicast+0x8c0/0xa60 [ 76.276942][ T1431] netlink_sendmsg+0x7fe/0xb10 [ 76.276959][ T1431] ? __cfi_netlink_sendmsg+0x10/0x10 [ 76.276975][ T1431] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 76.276993][ T1431] ? security_socket_sendmsg+0x3d/0x100 [ 76.277006][ T1431] ? __cfi_netlink_sendmsg+0x10/0x10 [ 76.277022][ T1431] ____sys_sendmsg+0xa8c/0xae0 [ 76.277039][ T1431] ? __import_iovec+0x5ad/0x7c0 [ 76.277051][ T1431] ? __sys_sendmsg_sock+0x50/0x50 [ 76.277068][ T1431] ? import_iovec+0x80/0xb0 [ 76.277080][ T1431] ___sys_sendmsg+0x2a6/0x370 [ 76.277104][ T1431] ? __sys_sendmsg+0x2a0/0x2a0 [ 76.277121][ T1431] ? proc_fail_nth_write+0x184/0x220 [ 76.277136][ T1431] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 76.277153][ T1431] __x64_sys_sendmsg+0x1fb/0x2d0 [ 76.277169][ T1431] ? fput+0x1a4/0x240 [ 76.277183][ T1431] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 76.277199][ T1431] ? ksys_write+0x1f3/0x260 [ 76.277216][ T1431] ? __kasan_check_read+0x15/0x20 [ 76.277232][ T1431] x64_sys_call+0x2a4c/0x2ee0 [ 76.277248][ T1431] do_syscall_64+0x57/0xf0 [ 76.277265][ T1431] ? clear_bhb_loop+0x50/0xa0 [ 76.277277][ T1431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.277294][ T1431] RIP: 0033:0x7fa9a339c819 [ 76.277306][ T1431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.277318][ T1431] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.277335][ T1431] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 76.277345][ T1431] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 76.277354][ T1431] RBP: 00007fa9a41db090 R08: 0000000000000000 R09: 0000000000000000 [ 76.277362][ T1431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.277371][ T1431] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 76.277381][ T1431] [ 76.619144][ T347] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.619615][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 76.650569][ T349] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 76.658619][ T349] usb 1-1: config 1 has no interface number 0 [ 76.661488][ T36] audit: type=1400 audit(1775002300.530:741): avc: denied { relabelfrom } for pid=1435 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.664792][ T349] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x4 has invalid maxpacket 8297, setting to 1024 [ 76.695360][ T36] audit: type=1400 audit(1775002300.530:742): avc: denied { relabelto } for pid=1435 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.695360][ T349] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 76.695395][ T349] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 76.735789][ T349] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 76.748069][ T349] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 76.757171][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.765625][ T349] usb 1-1: Product: syz [ 76.769817][ T349] usb 1-1: Manufacturer: syz [ 76.774414][ T349] usb 1-1: SerialNumber: syz [ 76.780248][ T1422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 76.787575][ T1422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 76.789176][ T653] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 76.818429][ T1441] FAULT_INJECTION: forcing a failure. [ 76.818429][ T1441] name failslab, interval 1, probability 0, space 0, times 0 [ 76.831122][ T1441] CPU: 1 UID: 0 PID: 1441 Comm: syz.1.425 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 76.831153][ T1441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.831166][ T1441] Call Trace: [ 76.831174][ T1441] [ 76.831181][ T1441] __dump_stack+0x21/0x30 [ 76.831214][ T1441] dump_stack_lvl+0x140/0x1c0 [ 76.831240][ T1441] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.831268][ T1441] dump_stack+0x19/0x20 [ 76.831292][ T1441] should_fail_ex+0x3d7/0x530 [ 76.831319][ T1441] should_failslab+0xac/0x100 [ 76.831338][ T1441] kmem_cache_alloc_noprof+0x42/0x410 [ 76.831365][ T1441] ? security_file_alloc+0x49/0x220 [ 76.831389][ T1441] ? kasan_save_alloc_info+0x40/0x50 [ 76.831415][ T1441] security_file_alloc+0x49/0x220 [ 76.831439][ T1441] init_file+0x9e/0x210 [ 76.831459][ T1441] alloc_empty_file+0xd9/0x270 [ 76.831479][ T1441] ? make_vfsuid+0x4d/0xa0 [ 76.831504][ T1441] dentry_open+0x4b/0xb0 [ 76.831524][ T1441] ovl_path_open+0x172/0x190 [ 76.831551][ T1441] ovl_dir_read+0x29/0x560 [ 76.831576][ T1441] ? ovl_path_next+0x347/0x430 [ 76.831595][ T1441] ovl_dir_read_merged+0x2ca/0x3d0 [ 76.831619][ T1441] ? ovl_check_empty_dir+0x470/0x470 [ 76.831643][ T1441] ? __cfi_ovl_fill_merge+0x10/0x10 [ 76.831671][ T1441] ? ovl_iterate+0xccd/0x2130 [ 76.831696][ T1441] ovl_iterate+0xd8f/0x2130 [ 76.831724][ T1441] ? kstrtoull+0x13b/0x1e0 [ 76.831747][ T1441] ? __cfi_ovl_iterate+0x10/0x10 [ 76.831772][ T1441] ? kstrtouint+0x78/0xf0 [ 76.831796][ T1441] ? kstrtouint_from_user+0x117/0x170 [ 76.831821][ T1441] ? __x64_sys_openat+0x13a/0x170 [ 76.831844][ T1441] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 76.831870][ T1441] ? selinux_file_permission+0x318/0xb60 [ 76.831898][ T1441] ? __kasan_check_write+0x18/0x20 [ 76.831924][ T1441] ? rwsem_read_trylock+0x274/0x5b0 [ 76.831964][ T1441] ? __kasan_check_write+0x18/0x20 [ 76.831991][ T1441] ? down_write+0xee/0x2b0 [ 76.832014][ T1441] ? __cfi_down_write+0x10/0x10 [ 76.832037][ T1441] ? vfs_write+0x9a4/0xf90 [ 76.832063][ T1441] ? __kasan_check_write+0x18/0x20 [ 76.832090][ T1441] wrap_directory_iterator+0xaa/0xf0 [ 76.832109][ T1441] ? __cfi_ovl_iterate+0x10/0x10 [ 76.832134][ T1441] shared_ovl_iterate+0x28/0x40 [ 76.832159][ T1441] iterate_dir+0x203/0x5e0 [ 76.832180][ T1441] __se_sys_getdents64+0xf6/0x250 [ 76.832199][ T1441] ? fput+0x1a4/0x240 [ 76.832220][ T1441] ? __x64_sys_getdents64+0xa0/0xa0 [ 76.832240][ T1441] ? ksys_write+0x1f3/0x260 [ 76.832265][ T1441] ? __cfi_filldir64+0x10/0x10 [ 76.832286][ T1441] ? __cfi_ksys_write+0x10/0x10 [ 76.832313][ T1441] ? __kasan_check_read+0x15/0x20 [ 76.832339][ T1441] __x64_sys_getdents64+0x7f/0xa0 [ 76.832360][ T1441] x64_sys_call+0x27d0/0x2ee0 [ 76.832389][ T1441] do_syscall_64+0x57/0xf0 [ 76.832416][ T1441] ? clear_bhb_loop+0x50/0xa0 [ 76.832435][ T1441] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.832465][ T1441] RIP: 0033:0x7fa9a339c819 [ 76.832484][ T1441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.832504][ T1441] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 76.832529][ T1441] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 76.832546][ T1441] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000005 [ 76.832561][ T1441] RBP: 00007fa9a41db090 R08: 0000000000000000 R09: 0000000000000000 [ 76.832575][ T1441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.832589][ T1441] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 76.832607][ T1441] [ 77.017536][ T362] usb 1-1: USB disconnect, device number 22 [ 77.120861][ T653] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.214982][ T653] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.226248][ T653] usb 3-1: string descriptor 0 read error: -22 [ 77.233473][ T653] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 77.242712][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.254065][ T653] usb 3-1: 0:1 : does not exist [ 77.259308][ T653] usb 3-1: BAAD HEADSET c_chmask mismatch [ 77.267801][ T653] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.270615][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.369161][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 77.458828][ T362] usb 3-1: USB disconnect, device number 21 [ 77.520365][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.530562][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.543539][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.553124][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.561990][ T9] usb 2-1: config 0 descriptor?? [ 77.568066][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 77.622765][ T36] audit: type=1400 audit(1775002301.500:743): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.701797][ T1452] incfs_lookup_dentry err:-5 [ 77.706499][ T1452] incfs: Can't find or create .incomplete dir in ./file0 [ 77.713813][ T1452] incfs: mount failed -5 [ 77.879174][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 77.980352][ T1458] exfat: Deprecated parameter 'debug' [ 77.985826][ T1458] /dev/md0: Can't lookup blockdev [ 78.002136][ T1460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 78.029173][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 78.035504][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.045747][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.056355][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.065494][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.073600][ T9] usb 1-1: Product: syz [ 78.077791][ T9] usb 1-1: Manufacturer: syz [ 78.082410][ T9] usb 1-1: SerialNumber: syz [ 78.289641][ T9] usb 1-1: 0:2 : does not exist [ 78.296322][ T9] usb 1-1: USB disconnect, device number 23 [ 78.304397][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.549383][ T1466] fuse: Bad value for 'user_id' [ 78.554338][ T1466] fuse: Bad value for 'user_id' [ 78.849189][ T653] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 78.892812][ T1485] fuse: Bad value for 'fd' [ 79.001918][ T653] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 79.011428][ T653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.019518][ T653] usb 4-1: Product: syz [ 79.023918][ T653] usb 4-1: Manufacturer: syz [ 79.028547][ T653] usb 4-1: SerialNumber: syz [ 79.239437][ T653] usb 4-1: MIDIStreaming interface descriptor not found [ 79.250373][ T653] usb 4-1: USB disconnect, device number 29 [ 79.263991][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.439188][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 79.590793][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.598920][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 79.607588][ T9] usb 3-1: config 1 has an invalid descriptor of length 224, skipping remainder of the config [ 79.618587][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.628941][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.638421][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.646476][ T9] usb 3-1: Product: syz [ 79.650810][ T9] usb 3-1: Manufacturer: syz [ 79.655451][ T9] usb 3-1: SerialNumber: syz [ 79.977220][ T9] usb 3-1: 0:2 : does not exist [ 79.985140][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 79.997811][ T9] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 80.008977][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 80.018670][ T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 80.019193][ T653] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 80.032031][ T9] usb 3-1: USB disconnect, device number 22 [ 80.040846][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.138410][ T362] usb 2-1: USB disconnect, device number 20 [ 80.159995][ T1516] FAULT_INJECTION: forcing a failure. [ 80.159995][ T1516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.173236][ T1516] CPU: 1 UID: 0 PID: 1516 Comm: syz.1.454 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 80.173271][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.173280][ T1516] Call Trace: [ 80.173284][ T1516] [ 80.173290][ T1516] __dump_stack+0x21/0x30 [ 80.173311][ T1516] dump_stack_lvl+0x140/0x1c0 [ 80.173326][ T1516] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.173348][ T1516] ? __kasan_check_read+0x15/0x20 [ 80.173366][ T1516] dump_stack+0x19/0x20 [ 80.173384][ T1516] should_fail_ex+0x3d7/0x530 [ 80.173400][ T1516] should_fail+0xf/0x20 [ 80.173414][ T1516] should_fail_usercopy+0x1e/0x30 [ 80.173430][ T1516] __kvm_read_guest_page+0x177/0x210 [ 80.173443][ T1516] kvm_vcpu_read_guest_page+0x31a/0x400 [ 80.173456][ T1516] kvm_fetch_guest_virt+0x146/0x190 [ 80.173474][ T1516] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 80.173490][ T1516] __do_insn_fetch_bytes+0x341/0x760 [ 80.173510][ T1516] ? x86_decode_insn+0x5180/0x5180 [ 80.173528][ T1516] ? __kasan_check_write+0x18/0x20 [ 80.173543][ T1516] ? handle_changed_spte+0x70a/0x12c0 [ 80.173559][ T1516] x86_decode_insn+0x333/0x5180 [ 80.173577][ T1516] ? kvm_tdp_mmu_map+0x7c3/0x11f0 [ 80.173592][ T1516] ? __cfi_x86_decode_insn+0x10/0x10 [ 80.173609][ T1516] ? __kasan_check_write+0x18/0x20 [ 80.173624][ T1516] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 80.173639][ T1516] ? __asan_memset+0x39/0x50 [ 80.173655][ T1516] ? init_decode_cache+0x7c/0x90 [ 80.173666][ T1516] ? init_emulate_ctxt+0x421/0x560 [ 80.173680][ T1516] ? kvm_inject_realmode_interrupt+0x2e0/0x2e0 [ 80.173694][ T1516] x86_decode_emulated_instruction+0x66/0x180 [ 80.173708][ T1516] x86_emulate_instruction+0x2d9/0x1a30 [ 80.173722][ T1516] ? kvm_mmu_do_page_fault+0x4f3/0x660 [ 80.173737][ T1516] handle_ud+0x199/0x330 [ 80.173749][ T1516] ? __cfi_handle_ud+0x10/0x10 [ 80.173760][ T1516] ? kvm_fast_pio+0x48d/0x610 [ 80.173773][ T1516] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 80.173789][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 80.173801][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 80.173814][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 80.173826][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 80.173837][ T1516] ? clear_bhb_loop+0x12/0xa0 [ 80.173848][ T1516] handle_exception_nmi+0x194/0xe60 [ 80.173860][ T1516] ? __cfi_handle_exception_nmi+0x10/0x10 [ 80.173872][ T1516] vmx_handle_exit+0x12c0/0x1b10 [ 80.173888][ T1516] ? kvm_deliver_exception_payload+0xd7/0x200 [ 80.173903][ T1516] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 80.173919][ T1516] ? vmx_handle_exit_irqoff+0x401/0x780 [ 80.173936][ T1516] vcpu_run+0x49f7/0x7840 [ 80.173957][ T1516] ? signal_pending+0xc0/0xc0 [ 80.173971][ T1516] ? __kasan_check_write+0x18/0x20 [ 80.173987][ T1516] ? xfd_validate_state+0x68/0x140 [ 80.174002][ T1516] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 80.174016][ T1516] ? __kasan_check_write+0x18/0x20 [ 80.174031][ T1516] ? fpregs_mark_activate+0x68/0x160 [ 80.174044][ T1516] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 80.174056][ T1516] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 80.174077][ T1516] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 80.174093][ T1516] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 80.174109][ T1516] ? kstrtoull+0x13b/0x1e0 [ 80.174123][ T1516] ? kstrtouint+0x78/0xf0 [ 80.174138][ T1516] ? ioctl_has_perm+0x1bc/0x500 [ 80.174154][ T1516] ? __asan_memcpy+0x5a/0x80 [ 80.174170][ T1516] ? ioctl_has_perm+0x408/0x500 [ 80.174185][ T1516] ? has_cap_mac_admin+0xd0/0xd0 [ 80.174200][ T1516] ? __kasan_check_write+0x18/0x20 [ 80.174215][ T1516] ? mutex_lock_killable+0x97/0x1d0 [ 80.174229][ T1516] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.174243][ T1516] ? proc_fail_nth_write+0x184/0x220 [ 80.174257][ T1516] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 80.174272][ T1516] kvm_vcpu_ioctl+0xa48/0x1000 [ 80.174290][ T1516] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.174307][ T1516] ? __cfi_vfs_write+0x10/0x10 [ 80.174323][ T1516] ? __kasan_check_write+0x18/0x20 [ 80.174339][ T1516] ? mutex_unlock+0x90/0x240 [ 80.174351][ T1516] ? __cfi_mutex_unlock+0x10/0x10 [ 80.174364][ T1516] ? __fget_files+0x2c5/0x340 [ 80.174376][ T1516] ? __fget_files+0x2c5/0x340 [ 80.174388][ T1516] ? bpf_lsm_file_ioctl+0xd/0x20 [ 80.174400][ T1516] ? security_file_ioctl+0x3e/0x110 [ 80.174415][ T1516] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.174432][ T1516] __se_sys_ioctl+0x132/0x1b0 [ 80.174445][ T1516] __x64_sys_ioctl+0x7f/0xa0 [ 80.174456][ T1516] x64_sys_call+0x1878/0x2ee0 [ 80.174474][ T1516] do_syscall_64+0x57/0xf0 [ 80.174490][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 80.174501][ T1516] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.174518][ T1516] RIP: 0033:0x7fa9a339c819 [ 80.174530][ T1516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.174542][ T1516] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.174558][ T1516] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 80.174568][ T1516] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.174577][ T1516] RBP: 00007fa9a41db090 R08: 0000000000000000 R09: 0000000000000000 [ 80.174585][ T1516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.174594][ T1516] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 80.174605][ T1516] [ 80.699159][ T653] usb 1-1: Using ep0 maxpacket: 8 [ 80.706002][ T653] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.715479][ T653] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 213, changing to 7 [ 80.728198][ T653] usb 1-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 80.738188][ T653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.746346][ T653] usb 1-1: Product: syz [ 80.750634][ T653] usb 1-1: Manufacturer: syz [ 80.755514][ T653] usb 1-1: SerialNumber: syz [ 80.829314][ T349] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 80.980266][ T349] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.990468][ T349] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.003573][ T349] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 81.012656][ T349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.019162][ T362] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 81.022027][ T349] usb 4-1: config 0 descriptor?? [ 81.034661][ T349] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 81.169202][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 81.176982][ T653] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 81.178290][ T362] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 81.183951][ T653] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 81.193378][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.203974][ T653] usb 1-1: USB disconnect, device number 24 [ 81.208801][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 81.223136][ T362] usb 3-1: Product: syz [ 81.227410][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.229029][ T362] usb 3-1: Manufacturer: syz [ 81.252496][ T362] usb 3-1: SerialNumber: syz [ 81.370144][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.380959][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.390087][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.398719][ T9] usb 2-1: config 0 descriptor?? [ 81.406148][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 81.460921][ T362] usb 3-1: Invalid firmware size=105. [ 81.467025][ T362] usb 3-1: Invalid firmware size=105. [ 81.473074][ T362] usb 3-1: Invalid firmware size=105. [ 81.482478][ T362] usb 3-1: USB disconnect, device number 23 [ 81.696027][ T1540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.704640][ T1540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.214086][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 82.229297][ T653] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 82.238393][ T1559] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.431563][ T1568] rust_binder: 1555 RLIMIT_NICE not set [ 82.431657][ T1568] rust_binder: 276: no such ref 1 [ 82.443608][ T1555] rust_binder: inc_ref_done called when no active inc_refs [ 82.443634][ T1555] rust_binder: 276: no such ref 3 [ 82.456043][ T1555] rust_binder: Write failure EINVAL in pid:276 [ 82.459784][ T653] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 82.473620][ T653] usb 3-1: can't read configurations, error -71 [ 82.669242][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 82.820697][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.830929][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 82.840027][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.848019][ T45] usb 1-1: Product: syz [ 82.852255][ T45] usb 1-1: Manufacturer: syz [ 82.856853][ T45] usb 1-1: SerialNumber: syz [ 82.974746][ T1571] FAULT_INJECTION: forcing a failure. [ 82.974746][ T1571] name failslab, interval 1, probability 0, space 0, times 0 [ 82.987501][ T1571] CPU: 1 UID: 0 PID: 1571 Comm: syz.2.473 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 82.987538][ T1571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.987547][ T1571] Call Trace: [ 82.987554][ T1571] [ 82.987560][ T1571] __dump_stack+0x21/0x30 [ 82.987588][ T1571] dump_stack_lvl+0x140/0x1c0 [ 82.987604][ T1571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.987621][ T1571] dump_stack+0x19/0x20 [ 82.987635][ T1571] should_fail_ex+0x3d7/0x530 [ 82.987651][ T1571] should_failslab+0xac/0x100 [ 82.987664][ T1571] __kmalloc_node_noprof+0x6c/0x4f0 [ 82.987681][ T1571] ? crypto_create_tfm_node+0xa5/0x4d0 [ 82.987697][ T1571] ? crypto_alg_extsize+0x1f/0x90 [ 82.987709][ T1571] crypto_create_tfm_node+0xa5/0x4d0 [ 82.987724][ T1571] ? up_read+0x26/0x1c0 [ 82.987740][ T1571] crypto_spawn_tfm2+0x60/0x90 [ 82.987757][ T1571] crypto_authenc_init_tfm+0x71/0x250 [ 82.987810][ T1571] ? crypto_aead_init_tfm+0x107/0x1a0 [ 82.987823][ T1571] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 82.987839][ T1571] crypto_aead_init_tfm+0x121/0x1a0 [ 82.987853][ T1571] crypto_create_tfm_node+0x198/0x4d0 [ 82.987867][ T1571] ? crypto_alg_mod_lookup+0x3a2/0x5b0 [ 82.987882][ T1571] crypto_alloc_tfm_node+0x169/0x370 [ 82.987897][ T1571] crypto_alloc_aead+0x34/0x40 [ 82.987910][ T1571] esp_init_state+0x63f/0x1290 [ 82.987925][ T1571] ? netlink_sendmsg+0x7fe/0xb10 [ 82.987942][ T1571] ? x64_sys_call+0x2a4c/0x2ee0 [ 82.987960][ T1571] ? __cfi_esp_init_state+0x10/0x10 [ 82.987977][ T1571] ? __xfrm_init_state+0x453/0x1070 [ 82.987995][ T1571] ? __asan_memcpy+0x5a/0x80 [ 82.988012][ T1571] __xfrm_init_state+0xad3/0x1070 [ 82.988030][ T1571] xfrm_add_sa+0x2b62/0x3ed0 [ 82.988049][ T1571] ? selinux_capable+0x38/0x50 [ 82.988062][ T1571] ? __cfi_xfrm_add_sa+0x10/0x10 [ 82.988078][ T1571] xfrm_user_rcv_msg+0x5f6/0x910 [ 82.988094][ T1571] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 82.988112][ T1571] ? __asan_memcpy+0x5a/0x80 [ 82.988128][ T1571] ? avc_has_perm_noaudit+0x28a/0x360 [ 82.988146][ T1571] ? avc_has_perm+0x155/0x240 [ 82.988163][ T1571] netlink_rcv_skb+0x256/0x4f0 [ 82.988178][ T1571] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 82.988194][ T1571] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 82.988210][ T1571] ? __kasan_check_write+0x18/0x20 [ 82.988226][ T1571] ? mutex_lock+0x97/0x1d0 [ 82.988239][ T1571] ? __cfi_mutex_lock+0x10/0x10 [ 82.988252][ T1571] ? netlink_autobind+0x1c0/0x1c0 [ 82.988269][ T1571] xfrm_netlink_rcv+0x76/0x90 [ 82.988284][ T1571] netlink_unicast+0x8c0/0xa60 [ 82.988299][ T1571] netlink_sendmsg+0x7fe/0xb10 [ 82.988315][ T1571] ? __cfi_netlink_sendmsg+0x10/0x10 [ 82.988331][ T1571] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 82.988349][ T1571] ? security_socket_sendmsg+0x3d/0x100 [ 82.988362][ T1571] ? __cfi_netlink_sendmsg+0x10/0x10 [ 82.988378][ T1571] ____sys_sendmsg+0xa8c/0xae0 [ 82.988395][ T1571] ? __import_iovec+0x5ad/0x7c0 [ 82.988407][ T1571] ? __sys_sendmsg_sock+0x50/0x50 [ 82.988424][ T1571] ? import_iovec+0x80/0xb0 [ 82.988436][ T1571] ___sys_sendmsg+0x2a6/0x370 [ 82.988452][ T1571] ? __sys_sendmsg+0x2a0/0x2a0 [ 82.988468][ T1571] ? proc_fail_nth_write+0x184/0x220 [ 82.988483][ T1571] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 82.988500][ T1571] __x64_sys_sendmsg+0x1fb/0x2d0 [ 82.988516][ T1571] ? fput+0x1a4/0x240 [ 82.988529][ T1571] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 82.988552][ T1571] ? ksys_write+0x1f3/0x260 [ 82.988581][ T1571] ? __kasan_check_read+0x15/0x20 [ 82.988608][ T1571] x64_sys_call+0x2a4c/0x2ee0 [ 82.988625][ T1571] do_syscall_64+0x57/0xf0 [ 82.988641][ T1571] ? clear_bhb_loop+0x50/0xa0 [ 82.988653][ T1571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.988670][ T1571] RIP: 0033:0x7f00b2b9c819 [ 82.988684][ T1571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.988695][ T1571] RSP: 002b:00007f00b3981028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.988711][ T1571] RAX: ffffffffffffffda RBX: 00007f00b2e15fa0 RCX: 00007f00b2b9c819 [ 82.988722][ T1571] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 82.988731][ T1571] RBP: 00007f00b3981090 R08: 0000000000000000 R09: 0000000000000000 [ 82.988740][ T1571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.988748][ T1571] R13: 00007f00b2e16038 R14: 00007f00b2e15fa0 R15: 00007ffdb2c36918 [ 82.988759][ T1571] [ 83.120222][ T9] usb 4-1: USB disconnect, device number 30 [ 83.436593][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 83.448614][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 83.448632][ T36] audit: type=1400 audit(1775002307.320:746): avc: denied { mounton } for pid=1577 comm="syz.2.476" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.478303][ T36] audit: type=1400 audit(1775002307.330:747): avc: denied { create } for pid=1577 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.499634][ T45] usb 1-1: unit 13 not found! [ 83.517764][ T45] usb 1-1: USB disconnect, device number 25 [ 83.544163][ T1583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 83.869193][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 83.972216][ T45] usb 2-1: USB disconnect, device number 21 [ 83.990946][ T1592] syzkaller0: entered promiscuous mode [ 83.996499][ T1592] syzkaller0: entered allmulticast mode [ 84.023366][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.041536][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.051534][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.065121][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.075315][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.084248][ T9] usb 4-1: config 0 descriptor?? [ 84.138607][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 84.266219][ T1614] loop4: detected capacity change from 0 to 7 [ 84.273085][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.282281][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.290275][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.299471][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.307326][ T1614] loop4: unable to read partition table [ 84.313140][ T1614] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.314866][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.336014][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.359774][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.369464][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.378763][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.387168][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.396653][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.404837][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.404999][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 84.414069][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.429993][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.439274][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.447290][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.456732][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.464621][ T1614] loop4: unable to read partition table [ 84.464777][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.470822][ T1614] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.479490][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.502690][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.512408][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 84.521696][ T9] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 84.531005][ T9] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 84.580304][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.591560][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.604493][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 84.613592][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.625472][ T45] usb 2-1: config 0 descriptor?? [ 84.634676][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.800305][ T1635] rust_binder: Error while translating object. [ 84.800337][ T1635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.806622][ T1635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 84.819210][ T653] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 84.900593][ T1637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 84.990732][ T653] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.001711][ T653] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.011682][ T653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.020478][ T653] usb 1-1: config 0 descriptor?? [ 85.026379][ T653] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 85.159191][ T349] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 85.309196][ T349] usb 3-1: Using ep0 maxpacket: 16 [ 85.314884][ T349] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 85.323749][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.333931][ T349] usb 3-1: config 0 has no interfaces? [ 85.340135][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.350351][ T349] usb 3-1: config 0 has no interfaces? [ 85.356561][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.366882][ T349] usb 3-1: config 0 has no interfaces? [ 85.373174][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.383486][ T349] usb 3-1: config 0 has no interfaces? [ 85.390062][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.400213][ T349] usb 3-1: config 0 has no interfaces? [ 85.406361][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.416509][ T349] usb 3-1: config 0 has no interfaces? [ 85.422679][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.432945][ T349] usb 3-1: config 0 has no interfaces? [ 85.439206][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.449371][ T349] usb 3-1: config 0 has no interfaces? [ 85.456363][ T349] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 85.465549][ T349] usb 3-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 85.474113][ T349] usb 3-1: Product: syz [ 85.478289][ T349] usb 3-1: Manufacturer: syz [ 85.483093][ T349] usb 3-1: SerialNumber: syz [ 85.488363][ T349] usb 3-1: config 0 descriptor?? [ 85.696588][ T349] usb 3-1: USB disconnect, device number 26 [ 86.449170][ T65] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 86.600242][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.610483][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.620589][ T65] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.629779][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.637777][ T65] usb 3-1: SerialNumber: syz [ 86.698120][ T1652] input: syz1 as /devices/virtual/input/input9 [ 86.902542][ T65] usb 3-1: 0:2 : does not exist [ 86.910050][ T65] usb 3-1: USB disconnect, device number 27 [ 86.918766][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.939759][ T9] usb 4-1: USB disconnect, device number 31 [ 87.034920][ T1667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 87.080316][ T349] usb 2-1: USB disconnect, device number 22 [ 87.359202][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 87.409180][ T349] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 87.509216][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 87.514881][ T9] usb 4-1: too many configurations: 251, using maximum allowed: 8 [ 87.523654][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.533991][ T9] usb 4-1: config 0 has no interfaces? [ 87.540542][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.550721][ T9] usb 4-1: config 0 has no interfaces? [ 87.559153][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.575280][ T9] usb 4-1: config 0 has no interfaces? [ 87.581722][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.581930][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.597179][ T65] usb 1-1: USB disconnect, device number 26 [ 87.610925][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.611789][ T9] usb 4-1: config 0 has no interfaces? [ 87.627919][ T349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.631663][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.641185][ T349] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.651184][ T9] usb 4-1: config 0 has no interfaces? [ 87.660606][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.666774][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.678310][ T349] usb 2-1: config 0 descriptor?? [ 87.687090][ T9] usb 4-1: config 0 has no interfaces? [ 87.695294][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.705735][ T9] usb 4-1: config 0 has no interfaces? [ 87.712099][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.722320][ T9] usb 4-1: config 0 has no interfaces? [ 87.729283][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 87.738474][ T9] usb 4-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 87.747033][ T9] usb 4-1: Product: syz [ 87.751250][ T9] usb 4-1: Manufacturer: syz [ 87.755855][ T9] usb 4-1: SerialNumber: syz [ 87.761361][ T9] usb 4-1: config 0 descriptor?? [ 87.909222][ T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 87.984417][ T362] usb 4-1: USB disconnect, device number 32 [ 88.059194][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 88.065481][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.075920][ T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.084907][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 88.092420][ T349] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 88.097472][ T65] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.101356][ T349] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 88.109217][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.118390][ T349] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 88.128069][ T65] usb 1-1: Product: syz [ 88.149156][ T65] usb 1-1: Manufacturer: syz [ 88.153802][ T65] usb 1-1: SerialNumber: syz [ 88.239155][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 88.245899][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 88.256930][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.266823][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 88.278381][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.287495][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.295708][ T9] usb 3-1: Product: 튭촊켁搬舔㾆橤ᩄ䍯ⶻ㒟᫪⒵㨤鿺૝뽛鎹憺얆릴⼌ᓽ䣬⮚ꘆ罊潦̺忩㸀⡩﮽鍜缴埇뼪讄奃틼Ұ칝窝ᘋ蔡䎑⯯箳濬ꙝ̮喿햧⶚먊䛈쪂ꦹ鈮甆顎ゲ踞㎰븇튷삳⨦蛈ﱸ㔸딯ß᧥섚祐愜訟縨ꍳ⻫◶颉跏紹䷠⒧楬ڗ䍟皠㔠炬ㅀ、ꖽꌒ亮绚瓗戻ꂖ踽 [ 88.330628][ T9] usb 3-1: Manufacturer: ఉ [ 88.363030][ T65] usb 1-1: 0:2 : does not exist [ 88.368025][ T65] usb 1-1: unit 2 not found! [ 88.377010][ T65] usb 1-1: USB disconnect, device number 27 [ 88.385235][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.539974][ T9] cdc_ncm 3-1:1.0: bind() failure [ 88.547756][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 88.554599][ T9] cdc_ncm 3-1:1.1: bind() failure [ 88.561484][ T9] usb 3-1: USB disconnect, device number 28 [ 88.793716][ T1704] FAULT_INJECTION: forcing a failure. [ 88.793716][ T1704] name failslab, interval 1, probability 0, space 0, times 0 [ 88.806578][ T1704] CPU: 0 UID: 0 PID: 1704 Comm: syz.3.520 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 88.806616][ T1704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.806625][ T1704] Call Trace: [ 88.806631][ T1704] [ 88.806637][ T1704] __dump_stack+0x21/0x30 [ 88.806658][ T1704] dump_stack_lvl+0x140/0x1c0 [ 88.806682][ T1704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.806699][ T1704] dump_stack+0x19/0x20 [ 88.806713][ T1704] should_fail_ex+0x3d7/0x530 [ 88.806729][ T1704] ? attach_auth+0xc8/0x4b0 [ 88.806746][ T1704] should_failslab+0xac/0x100 [ 88.806758][ T1704] __kmalloc_noprof+0x69/0x500 [ 88.806776][ T1704] ? attach_auth+0xc8/0x4b0 [ 88.806797][ T1704] ? xfrm_aalg_get_byname+0x1e3/0x240 [ 88.806816][ T1704] attach_auth+0xc8/0x4b0 [ 88.806838][ T1704] ? __asan_memcpy+0x5a/0x80 [ 88.806854][ T1704] xfrm_add_sa+0x2401/0x3ed0 [ 88.806870][ T1704] ? selinux_capable+0x38/0x50 [ 88.806883][ T1704] ? __cfi_xfrm_add_sa+0x10/0x10 [ 88.806899][ T1704] xfrm_user_rcv_msg+0x5f6/0x910 [ 88.806915][ T1704] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 88.806933][ T1704] ? __asan_memcpy+0x5a/0x80 [ 88.806949][ T1704] ? avc_has_perm_noaudit+0x28a/0x360 [ 88.806966][ T1704] ? avc_has_perm+0x155/0x240 [ 88.806983][ T1704] netlink_rcv_skb+0x256/0x4f0 [ 88.806999][ T1704] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 88.807015][ T1704] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 88.807031][ T1704] ? __kasan_check_write+0x18/0x20 [ 88.807053][ T1704] ? mutex_lock+0x97/0x1d0 [ 88.807066][ T1704] ? __cfi_mutex_lock+0x10/0x10 [ 88.807079][ T1704] ? netlink_autobind+0x1c0/0x1c0 [ 88.807096][ T1704] xfrm_netlink_rcv+0x76/0x90 [ 88.807111][ T1704] netlink_unicast+0x8c0/0xa60 [ 88.807126][ T1704] netlink_sendmsg+0x7fe/0xb10 [ 88.807142][ T1704] ? __cfi_netlink_sendmsg+0x10/0x10 [ 88.807159][ T1704] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 88.807177][ T1704] ? security_socket_sendmsg+0x3d/0x100 [ 88.807189][ T1704] ? __cfi_netlink_sendmsg+0x10/0x10 [ 88.807205][ T1704] ____sys_sendmsg+0xa8c/0xae0 [ 88.807222][ T1704] ? __import_iovec+0x5ad/0x7c0 [ 88.807235][ T1704] ? __sys_sendmsg_sock+0x50/0x50 [ 88.807252][ T1704] ? import_iovec+0x80/0xb0 [ 88.807264][ T1704] ___sys_sendmsg+0x2a6/0x370 [ 88.807280][ T1704] ? __sys_sendmsg+0x2a0/0x2a0 [ 88.807296][ T1704] ? proc_fail_nth_write+0x184/0x220 [ 88.807311][ T1704] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 88.807329][ T1704] __x64_sys_sendmsg+0x1fb/0x2d0 [ 88.807345][ T1704] ? fput+0x1a4/0x240 [ 88.807357][ T1704] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 88.807373][ T1704] ? ksys_write+0x1f3/0x260 [ 88.807390][ T1704] ? __kasan_check_read+0x15/0x20 [ 88.807407][ T1704] x64_sys_call+0x2a4c/0x2ee0 [ 88.807423][ T1704] do_syscall_64+0x57/0xf0 [ 88.807439][ T1704] ? clear_bhb_loop+0x50/0xa0 [ 88.807451][ T1704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.807469][ T1704] RIP: 0033:0x7f8dd719c819 [ 88.807481][ T1704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.807493][ T1704] RSP: 002b:00007f8dd5bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.807509][ T1704] RAX: ffffffffffffffda RBX: 00007f8dd7415fa0 RCX: 00007f8dd719c819 [ 88.807519][ T1704] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 88.807528][ T1704] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.807537][ T1704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.807545][ T1704] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 88.807556][ T1704] [ 89.309177][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 89.419199][ T349] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 89.462069][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.471262][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.479476][ T9] usb 3-1: Product: syz [ 89.483650][ T9] usb 3-1: Manufacturer: syz [ 89.488269][ T9] usb 3-1: SerialNumber: syz [ 89.580425][ T349] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.591255][ T349] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.600359][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.608904][ T349] usb 1-1: config 0 descriptor?? [ 89.614849][ T349] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 89.639180][ T45] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 89.789204][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 89.795836][ T45] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 89.808883][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.815582][ T45] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 89.824680][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.833383][ T45] usb 4-1: config 0 descriptor?? [ 90.247116][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.256114][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.263444][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.271045][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.278320][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.285697][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.293024][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.300440][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.307688][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.315092][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.322365][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.330536][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.338013][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.345306][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.352574][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.359873][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.367216][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.374494][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.381746][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.389001][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.396270][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.403609][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.410830][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.418046][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.425365][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.432807][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.440045][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.447384][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.454843][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.462081][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.469401][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.476633][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.483957][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.491205][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.498492][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.505741][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.513277][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.520529][ T45] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 90.528426][ T45] greenasia 0003:0E8F:0012.000E: hidraw1: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 90.539978][ T45] greenasia 0003:0E8F:0012.000E: no inputs found [ 90.550231][ T45] usb 4-1: USB disconnect, device number 33 [ 90.699194][ T9] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 90.707500][ T9] usb 2-1: device reset changed ep0 maxpacket size! [ 90.714423][ T65] usb 2-1: USB disconnect, device number 23 [ 90.846082][ T9] usb 3-1: USB disconnect, device number 29 [ 90.854452][ T65] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 90.920498][ T1734] fuse: Bad value for 'rootmode' [ 91.009183][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 91.015117][ T65] usb 2-1: too many configurations: 251, using maximum allowed: 8 [ 91.024219][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.034592][ T65] usb 2-1: config 0 has no interfaces? [ 91.041095][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.051396][ T65] usb 2-1: config 0 has no interfaces? [ 91.057676][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.068076][ T65] usb 2-1: config 0 has no interfaces? [ 91.079476][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.089712][ T65] usb 2-1: config 0 has no interfaces? [ 91.095971][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.106424][ T65] usb 2-1: config 0 has no interfaces? [ 91.114123][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.124325][ T65] usb 2-1: config 0 has no interfaces? [ 91.130520][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.140934][ T65] usb 2-1: config 0 has no interfaces? [ 91.147200][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.157617][ T65] usb 2-1: config 0 has no interfaces? [ 91.165440][ T65] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 91.175089][ T65] usb 2-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 91.187001][ T65] usb 2-1: Product: syz [ 91.191549][ T65] usb 2-1: Manufacturer: syz [ 91.196166][ T65] usb 2-1: SerialNumber: syz [ 91.201103][ T362] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 91.209760][ T65] usb 2-1: config 0 descriptor?? [ 91.303281][ T1751] exfat: Deprecated parameter 'debug' [ 91.308952][ T1751] syz.2.536: attempt to access beyond end of device [ 91.308952][ T1751] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 91.321919][ T1751] exFAT-fs (loop2): unable to read boot sector [ 91.328311][ T1751] exFAT-fs (loop2): failed to read boot sector [ 91.334809][ T1751] exFAT-fs (loop2): failed to recognize exfat type [ 91.360201][ T362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.378325][ T362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.389997][ T362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 91.399082][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.407271][ T362] usb 4-1: SerialNumber: syz [ 91.414332][ T362] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 91.422772][ T45] usb 2-1: USB disconnect, device number 24 [ 91.422861][ T362] usb-storage 4-1:1.0: USB Mass Storage device detected [ 91.437606][ T362] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 91.461502][ T1761] fuse: Unknown parameter 'use00000000000000000000' [ 91.702174][ T1769] overlayfs: failed to resolve './file1': -2 [ 92.069194][ T362] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 92.179195][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 92.187855][ T9] usb 1-1: USB disconnect, device number 28 [ 92.220259][ T362] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 92.228777][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.241773][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.251717][ T362] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.264758][ T362] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.274148][ T362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.283308][ T362] usb 3-1: config 0 descriptor?? [ 92.330464][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.341655][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.351470][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.364696][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.373917][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.383348][ T45] usb 2-1: config 0 descriptor?? [ 92.396423][ T36] audit: type=1400 audit(1775002316.270:748): avc: denied { write } for pid=1784 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.654609][ T1793] overlayfs: failed to resolve './file1': -2 [ 92.796013][ T45] plantronics 0003:047F:FFFF.000F: invalid report_count -2070961455 [ 92.804181][ T45] plantronics 0003:047F:FFFF.000F: item 0 4 1 9 parsing failed [ 92.811974][ T45] plantronics 0003:047F:FFFF.000F: parse failed [ 92.818274][ T45] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 92.909213][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 92.998967][ T45] usb 2-1: USB disconnect, device number 25 [ 93.059146][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 93.064800][ T9] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 93.073565][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.083873][ T9] usb 1-1: config 0 has no interfaces? [ 93.090106][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.100439][ T9] usb 1-1: config 0 has no interfaces? [ 93.106737][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.116905][ T9] usb 1-1: config 0 has no interfaces? [ 93.123195][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.133346][ T9] usb 1-1: config 0 has no interfaces? [ 93.139495][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.149660][ T9] usb 1-1: config 0 has no interfaces? [ 93.155802][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.166039][ T9] usb 1-1: config 0 has no interfaces? [ 93.172519][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.182862][ T9] usb 1-1: config 0 has no interfaces? [ 93.189264][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.199398][ T9] usb 1-1: config 0 has no interfaces? [ 93.206242][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 93.215348][ T9] usb 1-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 93.223840][ T9] usb 1-1: Product: syz [ 93.228018][ T9] usb 1-1: Manufacturer: syz [ 93.232746][ T9] usb 1-1: SerialNumber: syz [ 93.238140][ T9] usb 1-1: config 0 descriptor?? [ 93.448296][ T9] usb 1-1: USB disconnect, device number 29 [ 93.749205][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 93.899163][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 93.905732][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.915883][ T45] usb 2-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40 [ 93.925053][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.933095][ T45] usb 2-1: Product: syz [ 93.937300][ T45] usb 2-1: Manufacturer: 㐊 [ 93.942147][ T45] usb 2-1: SerialNumber: syz [ 93.976058][ T9] usb 4-1: USB disconnect, device number 34 [ 94.078325][ T1808] FAULT_INJECTION: forcing a failure. [ 94.078325][ T1808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.091609][ T1808] CPU: 0 UID: 0 PID: 1808 Comm: syz.3.558 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 94.091645][ T1808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.091659][ T1808] Call Trace: [ 94.091666][ T1808] [ 94.091675][ T1808] __dump_stack+0x21/0x30 [ 94.091718][ T1808] dump_stack_lvl+0x140/0x1c0 [ 94.091745][ T1808] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.091772][ T1808] ? check_stack_object+0x12b/0x150 [ 94.091802][ T1808] dump_stack+0x19/0x20 [ 94.091838][ T1808] should_fail_ex+0x3d7/0x530 [ 94.091865][ T1808] should_fail+0xf/0x20 [ 94.091889][ T1808] should_fail_usercopy+0x1e/0x30 [ 94.091916][ T1808] _copy_to_user+0x24/0xa0 [ 94.091936][ T1808] simple_read_from_buffer+0xed/0x160 [ 94.091960][ T1808] proc_fail_nth_read+0x1aa/0x220 [ 94.091984][ T1808] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 94.092008][ T1808] ? bpf_lsm_file_permission+0xd/0x20 [ 94.092030][ T1808] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 94.092053][ T1808] vfs_read+0x289/0xcb0 [ 94.092081][ T1808] ? __cfi_vfs_read+0x10/0x10 [ 94.092107][ T1808] ? __kasan_check_write+0x18/0x20 [ 94.092134][ T1808] ? mutex_lock+0x97/0x1d0 [ 94.092156][ T1808] ? __cfi_mutex_lock+0x10/0x10 [ 94.092178][ T1808] ? __fget_files+0x2c5/0x340 [ 94.092199][ T1808] ksys_read+0x145/0x260 [ 94.092226][ T1808] ? __cfi_ksys_read+0x10/0x10 [ 94.092253][ T1808] ? __kasan_check_read+0x15/0x20 [ 94.092280][ T1808] __x64_sys_read+0x7f/0x90 [ 94.092307][ T1808] x64_sys_call+0x2638/0x2ee0 [ 94.092335][ T1808] do_syscall_64+0x57/0xf0 [ 94.092363][ T1808] ? clear_bhb_loop+0x50/0xa0 [ 94.092382][ T1808] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.092412][ T1808] RIP: 0033:0x7f8dd715d04e [ 94.092431][ T1808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.092449][ T1808] RSP: 002b:00007f8dd5bf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.092474][ T1808] RAX: ffffffffffffffda RBX: 00007f8dd5bf76c0 RCX: 00007f8dd715d04e [ 94.092491][ T1808] RDX: 000000000000000f RSI: 00007f8dd5bf70a0 RDI: 0000000000000004 [ 94.092506][ T1808] RBP: 00007f8dd5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.092520][ T1808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.092534][ T1808] R13: 00007f8dd7416038 R14: 00007f8dd7415fa0 R15: 00007fffdcd4a1b8 [ 94.092553][ T1808] [ 94.154005][ T45] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 94.343999][ T45] usb 2-1: unit 8 not found! [ 94.352462][ T1818] overlayfs: failed to resolve './file0': -2 [ 94.362551][ T45] usb 2-1: USB disconnect, device number 26 [ 94.401297][ T36] audit: type=1400 audit(1775002318.280:749): avc: denied { setopt } for pid=1819 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.444378][ T1821] kvm: MONITOR instruction emulated as NOP! [ 94.450911][ T1821] rust_binder: Write failure EFAULT in pid:394 [ 94.669175][ T653] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 94.685257][ T36] audit: type=1400 audit(1775002318.560:750): avc: denied { getopt } for pid=1829 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.730200][ T362] usbhid 3-1:0.0: can't add hid device: -71 [ 94.736601][ T362] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 94.746578][ T362] usb 3-1: USB disconnect, device number 30 [ 94.779219][ T31] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 94.839171][ T653] usb 4-1: Using ep0 maxpacket: 16 [ 94.841566][ T36] audit: type=1326 audit(1775002318.720:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1833 comm="syz.2.567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00b2b9c819 code=0x0 [ 94.844756][ T653] usb 4-1: too many configurations: 251, using maximum allowed: 8 [ 94.876125][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.886351][ T653] usb 4-1: config 0 has no interfaces? [ 94.892719][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.902930][ T653] usb 4-1: config 0 has no interfaces? [ 94.909596][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.919865][ T653] usb 4-1: config 0 has no interfaces? [ 94.926040][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.936425][ T45] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 94.944066][ T653] usb 4-1: config 0 has no interfaces? [ 94.950372][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.960484][ T653] usb 4-1: config 0 has no interfaces? [ 94.966812][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.976979][ T653] usb 4-1: config 0 has no interfaces? [ 94.983248][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.993698][ T653] usb 4-1: config 0 has no interfaces? [ 94.999282][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.010516][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.020856][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.031129][ T653] usb 4-1: config 0 has no interfaces? [ 95.036839][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 95.046052][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.054105][ T31] usb 1-1: SerialNumber: syz [ 95.060709][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 95.069085][ T31] usb-storage 1-1:1.0: USB Mass Storage device detected [ 95.069173][ T653] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 95.085417][ T653] usb 4-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 95.094183][ T653] usb 4-1: Product: syz [ 95.098647][ T31] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 95.106477][ T653] usb 4-1: Manufacturer: syz [ 95.111219][ T653] usb 4-1: SerialNumber: syz [ 95.116710][ T653] usb 4-1: config 0 descriptor?? [ 95.121818][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.132841][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.142775][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.159684][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.168781][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.177649][ T45] usb 2-1: config 0 descriptor?? [ 95.366655][ T31] usb 4-1: USB disconnect, device number 35 [ 95.785313][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 95.791959][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 95.803052][ T45] usb 2-1: USB disconnect, device number 27 [ 95.893209][ T1842] overlayfs: failed to resolve './file0': -2 [ 95.953417][ T36] audit: type=1400 audit(1775002319.830:752): avc: denied { bind } for pid=1851 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.984712][ T36] audit: type=1400 audit(1775002319.860:753): avc: denied { watch_reads } for pid=1851 comm="syz.3.574" path="/154" dev="tmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.020670][ T1855] fuse: Unknown parameter 'X'}ݘ0x0000000000000003' [ 96.255921][ T1864] incfs_lookup_dentry err:-5 [ 96.260604][ T1864] incfs: Can't find or create .incomplete dir in ./file0 [ 96.267820][ T1864] incfs: mount failed -5 [ 96.329512][ T362] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 96.331404][ T36] audit: type=1400 audit(1775002320.210:754): avc: denied { watch } for pid=1867 comm="syz.1.579" path="/112/file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.476676][ T1872] FAULT_INJECTION: forcing a failure. [ 96.476676][ T1872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.490088][ T1872] CPU: 1 UID: 0 PID: 1872 Comm: syz.1.580 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 96.490124][ T1872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.490138][ T1872] Call Trace: [ 96.490146][ T1872] [ 96.490155][ T1872] __dump_stack+0x21/0x30 [ 96.490186][ T1872] dump_stack_lvl+0x140/0x1c0 [ 96.490212][ T1872] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.490239][ T1872] ? check_stack_object+0x81/0x150 [ 96.490267][ T1872] ? __virt_addr_valid+0x2a6/0x380 [ 96.490290][ T1872] dump_stack+0x19/0x20 [ 96.490314][ T1872] should_fail_ex+0x3d7/0x530 [ 96.490339][ T1872] should_fail+0xf/0x20 [ 96.490372][ T1872] should_fail_usercopy+0x1e/0x30 [ 96.490398][ T1872] _copy_from_user+0x20/0xa0 [ 96.490417][ T1872] memdup_user+0x81/0x170 [ 96.490441][ T1872] ? strndup_user+0x40/0xd0 [ 96.490465][ T1872] strndup_user+0x6c/0xd0 [ 96.490488][ T1872] __se_sys_mount+0x9f/0x480 [ 96.490516][ T1872] ? ksys_write+0x1f3/0x260 [ 96.490542][ T1872] ? __x64_sys_mount+0xf0/0xf0 [ 96.490570][ T1872] __x64_sys_mount+0xc3/0xf0 [ 96.490597][ T1872] x64_sys_call+0x2021/0x2ee0 [ 96.490624][ T1872] do_syscall_64+0x57/0xf0 [ 96.490668][ T1872] ? clear_bhb_loop+0x50/0xa0 [ 96.490687][ T1872] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.490714][ T1872] RIP: 0033:0x7fa9a339c819 [ 96.490733][ T1872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.490751][ T1872] RSP: 002b:00007fa9a4199028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.490775][ T1872] RAX: ffffffffffffffda RBX: 00007fa9a3616180 RCX: 00007fa9a339c819 [ 96.490792][ T1872] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000200000000080 [ 96.490808][ T1872] RBP: 00007fa9a4199090 R08: 0000000000000000 R09: 0000000000000000 [ 96.490822][ T1872] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 96.490836][ T1872] R13: 00007fa9a3616218 R14: 00007fa9a3616180 R15: 00007ffc9ab31f18 [ 96.490853][ T1872] [ 96.499171][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 96.706806][ T362] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 96.715542][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.725692][ T362] usb 3-1: config 0 has no interfaces? [ 96.731913][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.742143][ T362] usb 3-1: config 0 has no interfaces? [ 96.748338][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.758499][ T362] usb 3-1: config 0 has no interfaces? [ 96.764700][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.774853][ T362] usb 3-1: config 0 has no interfaces? [ 96.781066][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.791177][ T362] usb 3-1: config 0 has no interfaces? [ 96.797337][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.807622][ T362] usb 3-1: config 0 has no interfaces? [ 96.813804][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.823910][ T362] usb 3-1: config 0 has no interfaces? [ 96.830614][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.840769][ T362] usb 3-1: config 0 has no interfaces? [ 96.847726][ T362] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 96.856835][ T362] usb 3-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 96.865301][ T362] usb 3-1: Product: syz [ 96.869487][ T362] usb 3-1: Manufacturer: syz [ 96.874104][ T362] usb 3-1: SerialNumber: syz [ 96.882916][ T362] usb 3-1: config 0 descriptor?? [ 97.095052][ T362] usb 3-1: USB disconnect, device number 31 [ 97.160201][ T1895] overlayfs: statfs failed on './file0' [ 97.429714][ T45] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 97.554465][ T31] usb 1-1: USB disconnect, device number 30 [ 97.589157][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 97.595397][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 97.620025][ T45] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 97.632465][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.646781][ T45] usb 4-1: Product: syz [ 97.663641][ T45] usb 4-1: Manufacturer: syz [ 97.671825][ T45] usb 4-1: SerialNumber: syz [ 97.677394][ T45] usb 4-1: config 0 descriptor?? [ 97.691694][ T45] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 97.702924][ T45] usb 4-1: Detected FT232R [ 97.819221][ T36] audit: type=1400 audit(1775002321.690:755): avc: denied { setopt } for pid=1933 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.891449][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 97.898782][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 97.906105][ T45] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 97.913444][ T45] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 97.925136][ T45] usb 4-1: USB disconnect, device number 36 [ 97.935817][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 97.945866][ T45] ftdi_sio 4-1:0.0: device disconnected [ 97.969162][ T362] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 98.069155][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 98.130696][ T362] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.140735][ T362] usb 3-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 98.159355][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.167861][ T362] usb 3-1: Product: syz [ 98.168182][ T36] audit: type=1400 audit(1775002322.040:756): avc: denied { read } for pid=1938 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 98.172431][ T362] usb 3-1: Manufacturer: syz [ 98.199539][ T362] usb 3-1: SerialNumber: syz [ 98.239153][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 98.244995][ T9] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 98.277864][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.291973][ T9] usb 1-1: config 0 has no interfaces? [ 98.303935][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.314372][ T9] usb 1-1: config 0 has no interfaces? [ 98.329969][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.341701][ T9] usb 1-1: config 0 has no interfaces? [ 98.349530][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.379141][ T9] usb 1-1: config 0 has no interfaces? [ 98.381038][ T1945] FAULT_INJECTION: forcing a failure. [ 98.381038][ T1945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.398272][ T1945] CPU: 1 UID: 0 PID: 1945 Comm: syz.1.607 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 98.398304][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.398317][ T1945] Call Trace: [ 98.398324][ T1945] [ 98.398331][ T1945] __dump_stack+0x21/0x30 [ 98.398359][ T1945] dump_stack_lvl+0x140/0x1c0 [ 98.398382][ T1945] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.398408][ T1945] ? __kasan_check_read+0x15/0x20 [ 98.398436][ T1945] dump_stack+0x19/0x20 [ 98.398458][ T1945] should_fail_ex+0x3d7/0x530 [ 98.398484][ T1945] should_fail+0xf/0x20 [ 98.398508][ T1945] should_fail_usercopy+0x1e/0x30 [ 98.398534][ T1945] __kvm_read_guest_page+0x177/0x210 [ 98.398554][ T1945] kvm_vcpu_read_guest_page+0x31a/0x400 [ 98.398575][ T1945] kvm_fetch_guest_virt+0x146/0x190 [ 98.398603][ T1945] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 98.398629][ T1945] __do_insn_fetch_bytes+0x341/0x760 Stopping sshd: [ 98.398660][ T1945] ? x86_decode_insn+0x5180/0x5180 [ 98.398690][ T1945] ? __asan_memcpy+0x5a/0x80 [ 98.398716][ T1945] x86_decode_insn+0x333/0x5180 [ 98.398748][ T1945] ? _raw_spin_lock+0x92/0x120 stopped /usr/sbi[ 98.398777][ T1945] ? __cfi_x86_decode_insn+0x10/0x10 n/sshd (pid 201)[ 98.398805][ T1945] ? __kasan_check_write+0x18/0x20 OK [ 98.398831][ T1945] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 98.398855][ T1945] ? __asan_memset+0x39/0x50 [ 98.398881][ T1945] ? init_decode_cache+0x7c/0x90 [ 98.398909][ T1945] ? init_emulate_ctxt+0x421/0x560 [ 98.398931][ T1945] ? kvm_inject_realmode_interrupt+0x2e0/0x2e0 [ 98.398954][ T1945] x86_decode_emulated_instruction+0x66/0x180 [ 98.398976][ T1945] x86_emulate_instruction+0x2d9/0x1a30 [ 98.399001][ T1945] handle_ud+0x199/0x330 [ 98.399021][ T1945] ? __cfi_handle_ud+0x10/0x10 [ 98.399041][ T1945] ? kvm_fast_pio+0x48d/0x610 [ 98.399062][ T1945] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 98.399096][ T1945] ? clear_bhb_loop+0x50/0xa0 [ 98.399115][ T1945] ? clear_bhb_loop+0x50/0xa0 [ 98.399132][ T1945] ? clear_bhb_loop+0x50/0xa0 [ 98.399150][ T1945] ? clear_bhb_loop+0x50/0xa0 [ 98.399167][ T1945] ? clear_bhb_loop+0x12/0xa0 [ 98.399186][ T1945] handle_exception_nmi+0x194/0xe60 [ 98.399207][ T1945] ? __cfi_handle_exception_nmi+0x10/0x10 [ 98.399227][ T1945] vmx_handle_exit+0x12c0/0x1b10 [ 98.399254][ T1945] ? kvm_deliver_exception_payload+0xd7/0x200 [ 98.399280][ T1945] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 98.399307][ T1945] ? vmx_handle_exit_irqoff+0x401/0x780 [ 98.399337][ T1945] vcpu_run+0x49f7/0x7840 [ 98.399373][ T1945] ? signal_pending+0xc0/0xc0 [ 98.399397][ T1945] ? __kasan_check_write+0x18/0x20 [ 98.399423][ T1945] ? xfd_validate_state+0x68/0x140 [ 98.399449][ T1945] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 98.399471][ T1945] ? __kasan_check_write+0x18/0x20 [ 98.399494][ T1945] ? fpregs_mark_activate+0x68/0x160 [ 98.399515][ T1945] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 Stopping crond: [ 98.399535][ T1945] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 98.399556][ T1945] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 stopped /usr/sbi[ 98.399583][ T1945] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 n/crond (pid 194[ 98.399609][ T1945] ? kstrtoull+0x13b/0x1e0 ) OK [ 98.399632][ T1945] ? kstrtouint+0x78/0xf0 [ 98.399655][ T1945] ? ioctl_has_perm+0x1bc/0x500 [ 98.399680][ T1945] ? __asan_memcpy+0x5a/0x80 [ 98.399707][ T1945] ? ioctl_has_perm+0x408/0x500 [ 98.399733][ T1945] ? has_cap_mac_admin+0xd0/0xd0 [ 98.399760][ T1945] ? __kasan_check_write+0x18/0x20 [ 98.399787][ T1945] ? mutex_lock_killable+0x97/0x1d0 [ 98.399809][ T1945] ? __cfi_mutex_lock_killable+0x10/0x10 Stopping dhcpcd.[ 98.399832][ T1945] ? proc_fail_nth_write+0x184/0x220 .. [ 98.399856][ T1945] ? __cfi_proc_fail_nth_write+0x10/0x10 stopped /sbin/dh[ 98.399881][ T1945] kvm_vcpu_ioctl+0xa48/0x1000 cpcd (pid 148) [ 98.399922][ T1945] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 98.399951][ T1945] ? __cfi_vfs_write+0x10/0x10 [ 98.399979][ T1945] ? __kasan_check_write+0x18/0x20 [ 98.400005][ T1945] ? mutex_unlock+0x90/0x240 [ 98.400026][ T1945] ? __cfi_mutex_unlock+0x10/0x10 Stopping network[ 98.400046][ T1945] ? __fget_files+0x2c5/0x340 : [ 98.400065][ T1945] ? __fget_files+0x2c5/0x340 [ 98.400084][ T1945] ? bpf_lsm_file_ioctl+0xd/0x20 [ 98.400106][ T1945] ? security_file_ioctl+0x3e/0x110 [ 98.400130][ T1945] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 98.400160][ T1945] __se_sys_ioctl+0x132/0x1b0 [ 98.400182][ T1945] __x64_sys_ioctl+0x7f/0xa0 [ 98.400202][ T1945] x64_sys_call+0x1878/0x2ee0 [ 98.400230][ T1945] do_syscall_64+0x57/0xf0 [ 98.400259][ T1945] ? clear_bhb_loop+0x50/0xa0 [ 98.400278][ T1945] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.400308][ T1945] RIP: 0033:0x7fa9a339c819 [ 98.400327][ T1945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.400346][ T1945] RSP: 002b:00007fa9a41db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.400370][ T1945] RAX: ffffffffffffffda RBX: 00007fa9a3615fa0 RCX: 00007fa9a339c819 [ 98.400388][ T1945] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 98.400403][ T1945] RBP: 00007fa9a41db090 R08: 0000000000000000 R09: 0000000000000000 [ 98.400418][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.400433][ T1945] R13: 00007fa9a3616038 R14: 00007fa9a3615fa0 R15: 00007ffc9ab31f18 [ 98.400451][ T1945] [ 98.411314][ T362] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 98.889176][ T36] audit: type=1400 audit(1775002322.690:757): avc: denied { search } for pid=1963 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.890869][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.907360][ T36] audit: type=1400 audit(1775002322.750:758): avc: denied { read write } for pid=1967 comm="ip" path="/dev/console" dev="rootfs" ino=92 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 98.914636][ T9] usb 1-1: config 0 has no interfaces? [ 98.976970][ T36] audit: type=1400 audit(1775002322.840:759): avc: denied { write } for pid=149 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.048211][ T36] audit: type=1400 audit(1775002322.840:760): avc: denied { remove_name } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.071067][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.081333][ T9] usb 1-1: config 0 has no interfaces? [ 99.088121][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.098293][ T9] usb 1-1: config 0 has no interfaces? [ 99.113758][ T36] audit: type=1400 audit(1775002322.840:761): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 99.119209][ T362] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues OK [ 99.161797][ T362] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 99.173185][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.184147][ T9] usb 1-1: config 0 has no interfaces? [ 99.190155][ T1981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 99.190645][ T36] audit: type=1400 audit(1775002322.900:762): avc: denied { ioctl } for pid=1936 comm="syz.0.605" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.226351][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 99.248181][ T9] usb 1-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 99.262556][ T9] usb 1-1: Product: syz [ 99.266763][ T9] usb 1-1: Manufacturer: syz [ 99.272754][ T9] usb 1-1: SerialNumber: syz Stopping iptables: [ 99.284044][ T362] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 OK [ 99.299601][ T9] usb 1-1: config 0 descriptor?? [ 99.310455][ T362] usb 3-1: USB disconnect, device number 32 [ 99.317961][ T36] audit: type=1400 audit(1775002322.960:763): avc: denied { unlink } for pid=149 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.320004][ T1987] FAULT_INJECTION: forcing a failure. [ 99.320004][ T1987] name failslab, interval 1, probability 0, space 0, times 0 [ 99.344590][ T36] audit: type=1400 audit(1775002322.990:764): avc: denied { mounton } for pid=1973 comm="syz.3.610" path="/169/file0" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 Stopping system message bus: [ 99.381062][ T1987] CPU: 0 UID: 0 PID: 1987 Comm: syz.2.614 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 99.381100][ T1987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.381114][ T1987] Call Trace: [ 99.381121][ T1987] [ 99.381130][ T1987] __dump_stack+0x21/0x30 [ 99.381162][ T1987] dump_stack_lvl+0x140/0x1c0 [ 99.381188][ T1987] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.381217][ T1987] dump_stack+0x19/0x20 [ 99.381242][ T1987] should_fail_ex+0x3d7/0x530 [ 99.381269][ T1987] should_failslab+0xac/0x100 [ 99.381291][ T1987] kmem_cache_alloc_noprof+0x42/0x410 [ 99.381320][ T1987] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 99.381350][ T1987] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 99.381379][ T1987] ? mutex_unlock+0x90/0x240 [ 99.381403][ T1987] kvm_mmu_topup_memory_cache+0x24/0x30 done [ 99.381431][ T1987] kvm_mmu_load+0xa2/0x2890 [ 99.381455][ T1987] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 99.381482][ T1987] ? vmx_flush_tlb_guest+0x1d3/0x3b0 [ 99.381505][ T1987] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 99.381531][ T1987] ? kvm_service_local_tlb_flush_requests+0x51/0x150 [ 99.381564][ T1987] vcpu_run+0x4dad/0x7840 [ 99.381601][ T1987] ? signal_pending+0xc0/0xc0 [ 99.381625][ T1987] ? __kasan_check_write+0x18/0x20 [ 99.381652][ T1987] ? xfd_validate_state+0x68/0x140 [ 99.381679][ T1987] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 99.381702][ T1987] ? __kasan_check_write+0x18/0x20 [ 99.381737][ T1987] ? fpregs_mark_activate+0x68/0x160 [ 99.381759][ T1987] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 99.381782][ T1987] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 99.381805][ T1987] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 99.381832][ T1987] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 99.381858][ T1987] ? kstrtoull+0x13b/0x1e0 [ 99.381882][ T1987] ? kstrtouint+0x78/0xf0 [ 99.381906][ T1987] ? ioctl_has_perm+0x1bc/0x500 [ 99.381932][ T1987] ? __asan_memcpy+0x5a/0x80 [ 99.381959][ T1987] ? ioctl_has_perm+0x408/0x500 [ 99.381984][ T1987] ? has_cap_mac_admin+0xd0/0xd0 [ 99.382010][ T1987] ? __kasan_check_write+0x18/0x20 [ 99.382037][ T1987] ? mutex_lock_killable+0x97/0x1d0 [ 99.382060][ T1987] ? __cfi_mutex_lock_killable+0x10/0x10 [ 99.382082][ T1987] ? proc_fail_nth_write+0x184/0x220 [ 99.382109][ T1987] kvm_vcpu_ioctl+0xa48/0x1000 [ 99.382139][ T1987] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 99.382169][ T1987] ? __cfi_vfs_write+0x10/0x10 [ 99.382197][ T1987] ? __kasan_check_write+0x18/0x20 [ 99.382223][ T1987] ? mutex_unlock+0x90/0x240 [ 99.382244][ T1987] ? __cfi_mutex_unlock+0x10/0x10 [ 99.382265][ T1987] ? __fget_files+0x2c5/0x340 [ 99.382286][ T1987] ? __fget_files+0x2c5/0x340 [ 99.382305][ T1987] ? bpf_lsm_file_ioctl+0xd/0x20 [ 99.382327][ T1987] ? security_file_ioctl+0x3e/0x110 [ 99.382353][ T1987] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 killall: can't k[ 99.382382][ T1987] __se_sys_ioctl+0x132/0x1b0 ill pid 315: No [ 99.382403][ T1987] __x64_sys_ioctl+0x7f/0xa0 such process ki[ 99.382423][ T1987] x64_sys_call+0x1878/0x2ee0 llall: can't kil[ 99.382452][ T1987] do_syscall_64+0x57/0xf0 l pid 323: No su[ 99.382480][ T1987] ? clear_bhb_loop+0x50/0xa0 ch process kill[ 99.382499][ T1987] entry_SYSCALL_64_after_hwframe+0x76/0x7e all: can't kill [ 99.382528][ T1987] RIP: 0033:0x7f00b2b9c819 pid 360: No such[ 99.382548][ T1987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 process killal[ 99.382567][ T1987] RSP: 002b:00007f00b3981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 l: can't kill pi[ 99.382592][ T1987] RAX: ffffffffffffffda RBX: 00007f00b2e15fa0 RCX: 00007f00b2b9c819 d 487: No such p[ 99.382609][ T1987] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 rocess killall:[ 99.382624][ T1987] RBP: 00007f00b3981090 R08: 0000000000000000 R09: 0000000000000000 can't kill pid [ 99.382639][ T1987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 652: No such pro[ 99.382653][ T1987] R13: 00007f00b2e16038 R14: 00007f00b2e15fa0 R15: 00007ffdb2c36918 cess Stopping k[ 99.382672][ T1987] [ 99.391094][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory logd: OK Stoppi[ 99.527095][ T9] usb 1-1: USB disconnect, device number 31 ng acpid: [ 99.789154][ T45] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 99.848051][ T2014] netlink: 64 bytes leftover after parsing attributes in process `syz.1.618'. [ 99.980491][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.991615][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.001532][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.011175][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.016238][ T2025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 100.028784][ T45] usb 4-1: config 0 descriptor?? [ 100.149158][ T653] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 100.279163][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 100.320329][ T653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.331493][ T653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 100.343931][ T653] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 100.353278][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.361327][ T653] usb 3-1: Product: syz [ 100.365690][ T653] usb 3-1: Manufacturer: syz [ 100.370347][ T653] usb 3-1: SerialNumber: syz [ 100.376015][ T653] usb 3-1: config 0 descriptor?? [ 100.381439][ T2019] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 100.389505][ T653] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 100.396056][ T653] usb 3-1: No valid video chain found. [ 100.409205][ T9] usb 2-1: device descriptor read/64, error -71 [ 100.436868][ T45] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 100.447251][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input11 [ 100.511556][ T45] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 100.589302][ T45] usb 3-1: USB disconnect, device number 33 [ 100.639453][ T31] usb 4-1: USB disconnect, device number 37 [ 100.649158][ T9] usb 2-1: device descriptor read/64, error -71 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 100.899166][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd umount: can't remount debugfs read-only Connection to 10.128.0.233 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 101.029153][ T9] usb 2-1: device descriptor read/64, error -71 [ 101.330114][ T674] bridge_slave_1: left allmulticast mode [ 101.335998][ T674] bridge_slave_1: left promiscuous mode [ 101.341691][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.350115][ T674] bridge_slave_0: left allmulticast mode [ 101.355835][ T674] bridge_slave_0: left promiscuous mode [ 101.362700][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.561618][ T674] veth1_macvtap: left promiscuous mode [ 101.567212][ T674] veth0_vlan: left promiscuous mode [ 101.811813][ T674] bridge_slave_1: left allmulticast mode [ 101.817570][ T674] bridge_slave_1: left promiscuous mode [ 101.823206][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.830755][ T674] bridge_slave_0: left allmulticast mode [ 101.836387][ T674] bridge_slave_0: left promiscuous mode [ 101.842033][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.849669][ T674] bridge_slave_1: left allmulticast mode [ 101.855303][ T674] bridge_slave_1: left promiscuous mode [ 101.860978][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.868362][ T674] bridge_slave_0: left allmulticast mode [ 101.874059][ T674] bridge_slave_0: left promiscuous mode [ 101.879652][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.887324][ T674] bridge_slave_1: left allmulticast mode [ 101.893020][ T674] bridge_slave_1: left promiscuous mode [ 101.898662][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.906059][ T674] bridge_slave_0: left allmulticast mode [ 101.911805][ T674] bridge_slave_0: left promiscuous mode [ 101.917368][ T674] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 102.214073][ T674] veth1_macvtap: left promiscuous mode [ 102.219684][ T674] veth0_vlan: left promiscuous mode [ 102.225271][ T674] veth1_macvtap: left promiscuous mode [ 102.230804][ T674] veth0_vlan: left promiscuous mode [ 102.236334][ T674] veth1_macvtap: left promiscuous mode [ 102.241850][ T674] veth0_vlan: left promiscuous mode [ 103.205376][ T2040] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 103.212302][ T2040] ACPI: PM: Preparing to enter system sleep state S5 [ 103.219247][ T2040] kvm: exiting hardware virtualization [ 103.224733][ T2040] reboot: Power down serialport: VM disconnected.