last executing test programs: 1m33.530703455s ago: executing program 3 (id=185): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000340)) 1m33.514792035s ago: executing program 3 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x101, 0x8000, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="66b83728f2f50f23d00f21f86635300000090f23f80fc78aa000d2210f18d1baf80c66b81f579a8666efbafc0cb097eebaf80c66b8acd21b8f66efbafc0c66ed360f01d10f78bd070066b9820b00000f320faef1", 0x54}], 0x1, 0x7c, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0x1ff, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) 1m32.381319754s ago: executing program 3 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x2, 0x3, 0x101, 0xfc, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1b, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 1m32.366979874s ago: executing program 3 (id=189): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="f4837e629eda4a7ea9"]}, 0x20}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x30000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000100)={0x2ad, 0x3, 0x9, 0xffff8000, 0xf, 0x2}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1m32.308759796s ago: executing program 3 (id=190): r0 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) tgkill(r2, r2, 0x21) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) listxattr(&(0x7f0000000000)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', &(0x7f0000000400)=""/115, 0x73) write(r1, &(0x7f0000000240)='k', 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_add_dev(r5, r7, r6, r8, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r10, r11, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000076001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1m32.308525176s ago: executing program 3 (id=191): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="de49f24109"], 0xd) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000033c0)=""/4103, 0x1007}, {&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x5}, 0x8}], 0x1, 0x10120, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e010000560100000100"/32) 1m16.45528379s ago: executing program 32 (id=191): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="de49f24109"], 0xd) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000033c0)=""/4103, 0x1007}, {&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x5}, 0x8}], 0x1, 0x10120, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e010000560100000100"/32) 6.592974752s ago: executing program 0 (id=721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x1b8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x20000000000002, 0x7, 0x100, 0x2, 0xfffffff4, {0x6, 0x1, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x4, 0x58, 0x5, 0x8000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}, {{0x0, 0x1, 0x7, 0x1711, 0x8, 0x0, {0x3, 0xffffffffa37be7cb, 0x3000000000, 0x6f9c, 0x8, 0x6, 0xd, 0x2, 0x7, 0xa000, 0xfffffff7, r5, r6, 0x8, 0x10}}, {0x1, 0x10, 0x45, 0x4, '\x01\x00ndOt\xd0*\xf8\x1d\x1f\xca\b\x02\n\xab \x96\xd8\xca3so\xa4\x10lave[\x0f\xf4\xdd\xac\xec`\x9fy\xcf\x82\x95\xca\xdc:\xff\xadcB\xec:\xfd\xc5\xab\x12\x88E6\xf1U\xc9\xa0\t\xec\x80\xaaz0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xc10, 0x0, 0x0, 0x1000, 0x6af, 0xffffffffffffffff, 0x0, 0x54}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x2d, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f00000000c0), 0x4) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xfffffffffffffdea}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000200)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x3, 0xe28, 0x0, 0x0, 0x1000, 0xffffffff, r12, 0x0, 0x80}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r3) syz_ublk_setup_queues(r14, r13, &(0x7f00000003c0)={0x0, 0xe3ee, 0x0, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe705, 0x1, 0xfffffffd, 0x94}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe06b, 0x0, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x40, 0x1, 0x7d}}], 0x1, 0x0, 0x0) 5.964939428s ago: executing program 0 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000220301"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 5.673698736s ago: executing program 2 (id=731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.597497567s ago: executing program 2 (id=733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000100)={0x0, 0x30, 0x7, {0x7, 0x29, "47a468c1fb"}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700fd0020"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x39, &(0x7f0000000000)="67e543057f2ae17f3d7ebe315a34a70275f32b5d3d440346b5e0b62c636e4997425cb7e80e139c5b34e853cb418e61ff8b490600000035765b") syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x30, 0x2c, {0x2c, 0x23, "ed3dfdc906a311661c88a1f46a35482d3bc03a5cb75a9f6e2285e13a8714531fef31233f3007397928d5"}}, &(0x7f0000000140)={0x0, 0x3, 0x63, @string={0x63, 0x3, "7e2b172ec92c9f374131ec7e47eb85bc9d36af6efdda3529220f443a1199cc73897cedc3e5ec1ea404ee26b6c2f25462b1b0b5980ab5f88586030f42b48da334d3b70f4aceeb32975ec10dca3445ed28bc38baebce67115c1d14a15a2455351fab"}}, &(0x7f00000001c0)={0x0, 0xf, 0x50, {0x5, 0xf, 0x50, 0x6, [@ptm_cap={0x3}, @generic={0x25, 0x10, 0x3, "e36db478ea9b9c9a875ea87bcd77799e2ca42b7c5086edd43c9f0ccc8089fd607f96"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x100, 0x7, 0x2a, 0xb6, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xb, 0xdd, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x9, 0x1, 0x389d, 0x50}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x1, 0x8, "94bb05d3", "b7ca8d17"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0x82, 0x6b, 0x1, 0x4, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x40, 0x5, 0x84, "78b13e65dbf6c614348eb3b45f23796f1399133559c6dc8484721289a2151720b24a1f3e16e171e05ebcc0e005b8df2c36d2ff635b39cff077ae6d4ad65f3271afdadc6c243629744a90130b0be05eac61a15e22a5326ac0dfe180b3b230a6c8cb2ee6b98da2362ffe5db01a2c90b013dfc184b0ee1684b22212908e1279310394a1d7d7"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf00]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '5>'}, &(0x7f0000000600)={0x40, 0xf, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "e113"}, &(0x7f0000000700)={0x40, 0x1a, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x66}}) 3.859098271s ago: executing program 2 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xeb) 3.858704941s ago: executing program 2 (id=742): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800564404204e080110f9ba17020301e9261b000100000000090405", @ANYRES64], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x7, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x48e1, 0x0, 0x0, 0x4, 0x18, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003baa0f4bd000000000000000000008900", [0x5, 0x3]}}) 2.983118624s ago: executing program 0 (id=745): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x6, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0xffffffff, 0x3013d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 24) 2.33091475s ago: executing program 0 (id=748): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1], 0x0) (async) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1], 0x0) 817.478229ms ago: executing program 2 (id=757): ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 810.798849ms ago: executing program 2 (id=758): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000000) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x7, 0x6, 0xffffffff, 0x3, 0x4, 0x8, 0x4, 0x9, 0x8, 0x5, 0x6, 0x9, 0x8000000000000000, 0x3, 0xe, 0x2], 0x6000, 0x600}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0900a11e0901a1006d08950109309102c0c0"], 0x0}, 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 805.069849ms ago: executing program 1 (id=759): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc9"], 0x28}], 0x1}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc010000020101080000000000000000020000090c00108008000140000000083c0001800c000280050001003a0000002c000180140003002001000000000000000000000000000114000400200100000000000000000000000000011400198008000100010400000800010008"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004050) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x7, 0x1, 0xf, 0xfffffff9, {{0x1c, 0x4, 0x0, 0x6, 0x70, 0x65, 0x0, 0xf5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x99, 0x1, 0x0, [{@multicast2, 0x2}]}, @rr={0x7, 0xf, 0xa9, [@multicast1, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x8b, 0x1, 0x3, [{@private=0xa010100, 0xa5d7}]}, @cipso={0x86, 0x2f, 0x2, [{0x1, 0x7, "4725eef0fe"}, {0x2, 0x4, "ef70"}, {0x5, 0xf, "6dd013c81b810f0ad81557778f"}, {0x2, 0x7, "ebd348bfc1"}, {0x0, 0x8, "bf289fc21b6c"}]}, @timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x4}, @noop]}}}}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000580)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@remote, @in=@broadcast, 0x4e21, 0x9, 0x4e23, 0x0, 0x2, 0x120, 0xa0, 0x6, r5, r6}, {0x101, 0x5, 0x6, 0x8, 0xffffffffffffff7f, 0x14, 0x7, 0x7}, {0x9, 0x9, 0x8, 0x2}, 0x4008, 0x6e6bb1, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in=@multicast1, 0x0, 0x0, 0x2, 0xee, 0x9, 0x2000, 0x800}}, 0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="43d86c472c7732ed487e135db3c197e91cffbc629028955d7ff4008141e1b3dccc56d862375c3c5b2265a5fc2fa00dea4a1ef3122a5ff4227fa81058f93f164c91e37a870efa6d1150bce52ee24d4b7c837846d491484983e5a835ce0a76", @ANYRES16=r8, @ANYBLOB="a187e556385359a9dcc8a1cad074a95b5ed41056cb19feb24530fa67b2425bfe44b8fe294a87d95b466f4683d01559af6b99fdd91ea98b72a96b6742eeaf9d2d5124a48752c69f19c659cad44dab896f25ff962fb029f15302818497b6b52e01b44dbe425d1715a33c4aa0609efc5e87618e45477c59081d30c5a9b6e1678fe82bae09230e6beace3c0c56ff58e88f8a2704784b4b7c0b4050387d2eed7a2e9692038b31d6a6dabc02dcf9e4f473e8a81dfa84bab640833e23218705890efea7f21524c6ffc73b6109c837b5a74e4bfd0303d2fd36050537bc2d98f4"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24088081) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e01020301090224"], 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) fremovexattr(r11, &(0x7f0000000380)=@known='system.posix_acl_default\x00') syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x84, &(0x7f00000001c0)=ANY=[]) 769.49781ms ago: executing program 1 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000"], 0x14}}, 0x4014) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) 746.009051ms ago: executing program 1 (id=761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) (async) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat(r2, &(0x7f0000000340)='.\x00', 0x400, 0x0) lseek(r3, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) 660.885823ms ago: executing program 1 (id=762): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0xfd, 0xc8e}, {0x16, 0xff, 0x6, 0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000010940)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000018000)=[@textreal={0x8, &(0x7f0000000080)="f30f0966b8a18200000f23c00f21f86635020002000f23f8f3ab66b98b02000066b89ce5225366ba000000000f300f20e06635200000000f22e00fbfdebaf80c66b856c0668d66efbafc0ced66b9d00b00000f32660f3880affe2bb80f008ec0", 0x60}], 0x1, 0x69, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 434.136879ms ago: executing program 1 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9c43, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) timer_create(0x0, 0x0, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000020c0), 0x2, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000018c0)}, 0x4040040) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000000)={'vlan0\x00', 0x118}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000003a80)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002180)=""/136, 0x88, 0x1, &(0x7f0000002a80)=""/4096, 0x1000}, &(0x7f0000003ac0)=0x40) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000002100)={0x10002, 0x0, &(0x7f0000039000/0x4000)=nil}) shutdown(r4, 0x1) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002140)='./sys/bus/pci/rescan\x00', 0x1ff) 343.161961ms ago: executing program 4 (id=771): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r5, &(0x7f0000003500)=""/4096, 0x1000, 0x12161, &(0x7f0000004500)={0xa, 0x4e21, 0xffffff80, @local, 0x10}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000000c0), 0x4) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) write$binfmt_elf32(r4, &(0x7f00000020c0)=ANY=[@ANYBLOB="7f454c46040c"], 0x58) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000002500)={{r3}, 0x0, 0x10, @unused=[0xf042, 0x7, 0x0, 0x3], @devid=r8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 236.763584ms ago: executing program 1 (id=772): syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef01"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef01"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) (async) 165.815626ms ago: executing program 4 (id=773): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x42) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000000a40)={0x3, 0x1, 0x7, 0x4, 0x75, &(0x7f0000000640)}) sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f00000005c0)) 57.913058ms ago: executing program 4 (id=774): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010000000000020000001d0000170c00e35d0800228004002b803aec09b7ded334"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010000000000020000001d0000170c00e35d0800228004002b803aec09b7ded334"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 679.44µs ago: executing program 4 (id=775): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="640000000002010300000000000000000700000250000a804c0002800c0002800500010021000000060003400002000014000180080001006401010008000200000000000c000280050001000000c0001400018008000100ac1e010108000200ffffffff"], 0x64}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 274.51µs ago: executing program 4 (id=776): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000040)={@multicast2, @empty=0x1100, @empty}, 0xc) 0s ago: executing program 4 (id=777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) socket(0x1f, 0xe, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x48000) read(r2, &(0x7f0000000f00)=""/4098, 0x106) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc40af41aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d64083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e6847e16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f1493c9f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 105.743697][ T65] usb 3-1: Manufacturer: syz [ 105.748330][ T65] usb 3-1: SerialNumber: syz [ 105.800055][ T45] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 105.936319][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.944956][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.955434][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 105.962960][ T65] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 105.964890][ T402] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 105.979060][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.983830][ T65] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 105.993737][ T45] usb 2-1: Product: syz [ 105.997944][ T45] usb 2-1: Manufacturer: syz [ 106.003307][ T45] usb 2-1: SerialNumber: syz [ 106.004314][ T65] usb 3-1: USB disconnect, device number 28 [ 106.009194][ T402] usbhid 1-1:0.0: can't add hid device: -71 [ 106.020337][ T402] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.040279][ T402] usb 1-1: USB disconnect, device number 32 [ 106.067783][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.482189][ T1555] FAULT_INJECTION: forcing a failure. [ 106.482189][ T1555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.495592][ T1555] CPU: 0 UID: 0 PID: 1555 Comm: syz.0.426 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 106.495625][ T1555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.495641][ T1555] Call Trace: [ 106.495648][ T1555] [ 106.495657][ T1555] __dump_stack+0x21/0x30 [ 106.495694][ T1555] dump_stack_lvl+0x140/0x1c0 [ 106.495724][ T1555] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.495756][ T1555] ? vfs_write+0xbcf/0xfd0 [ 106.495780][ T1555] dump_stack+0x19/0x20 [ 106.495807][ T1555] should_fail_ex+0x3c2/0x510 [ 106.495849][ T1555] should_fail+0xf/0x20 [ 106.495871][ T1555] should_fail_usercopy+0x1e/0x30 [ 106.495899][ T1555] _copy_from_user+0x20/0xa0 [ 106.495929][ T1555] get_timespec64+0x97/0x1b0 [ 106.495960][ T1555] ? __cfi_get_timespec64+0x10/0x10 [ 106.495990][ T1555] __x64_sys_recvmmsg+0x14c/0x250 [ 106.496017][ T1555] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 106.496042][ T1555] ? __kasan_check_read+0x15/0x20 [ 106.496066][ T1555] x64_sys_call+0x292c/0x2ee0 [ 106.496087][ T1555] do_syscall_64+0x57/0xf0 [ 106.496112][ T1555] ? clear_bhb_loop+0x50/0xa0 [ 106.496145][ T1555] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.496174][ T1555] RIP: 0033:0x7f1448f9e0d9 [ 106.496193][ T1555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.496213][ T1555] RSP: 002b:00007f1449e29028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 106.496237][ T1555] RAX: ffffffffffffffda RBX: 00007f1449225fa0 RCX: 00007f1448f9e0d9 [ 106.496254][ T1555] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 106.496270][ T1555] RBP: 00007f1449e29090 R08: 0000200000003700 R09: 0000000000000000 [ 106.496286][ T1555] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 106.496301][ T1555] R13: 00007f1449226038 R14: 00007f1449225fa0 R15: 00007ffe8a4c0608 [ 106.496320][ T1555] [ 106.775473][ T1570] fuse: Bad value for 'fd' [ 107.029793][ T587] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 107.179773][ T587] usb 3-1: Using ep0 maxpacket: 16 [ 107.185961][ T587] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 107.194097][ T587] usb 3-1: config 0 has no interface number 0 [ 107.200241][ T587] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 107.210280][ T587] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 107.221756][ T587] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 107.230891][ T587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.239542][ T587] usb 3-1: Product: syz [ 107.243796][ T587] usb 3-1: Manufacturer: syz [ 107.248437][ T587] usb 3-1: SerialNumber: syz [ 107.253954][ T587] usb 3-1: config 0 descriptor?? [ 107.260060][ T1572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.267252][ T1572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.385163][ T402] usb 5-1: USB disconnect, device number 12 [ 107.410442][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 107.410460][ T36] audit: type=1400 audit(1785961254.690:296): avc: denied { sqpoll } for pid=1585 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.477125][ T1572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.487041][ T1572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.500167][ T1598] fuse: Invalid rootmode [ 107.697879][ T587] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 108.409816][ T402] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 108.559783][ T402] usb 1-1: Using ep0 maxpacket: 16 [ 108.566339][ T402] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.578359][ T65] usb 2-1: USB disconnect, device number 32 [ 108.584451][ T618] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 108.585274][ T402] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 108.609174][ T402] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.612753][ T36] audit: type=1400 audit(1785961255.880:297): avc: denied { watch } for pid=1610 comm="syz.1.446" path="/117/file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.620289][ T402] usb 1-1: config 1 has no interface number 0 [ 108.647410][ T402] usb 1-1: language id specifier not provided by device, defaulting to English [ 108.659845][ T402] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.29 [ 108.672588][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.681011][ T402] usb 1-1: Product: syz [ 108.685231][ T402] usb 1-1: Manufacturer: syz [ 108.690102][ T402] usb 1-1: SerialNumber: syz [ 108.742663][ T1619] fuse: Invalid rootmode [ 108.749781][ T618] usb 5-1: Using ep0 maxpacket: 32 [ 108.760230][ T618] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 108.768356][ T618] usb 5-1: config 0 has no interface number 0 [ 108.780544][ T618] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 108.790511][ T618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.798864][ T618] usb 5-1: Product: syz [ 108.803106][ T618] usb 5-1: Manufacturer: syz [ 108.807735][ T618] usb 5-1: SerialNumber: syz [ 108.813330][ T618] usb 5-1: config 0 descriptor?? [ 108.819356][ T618] smsc95xx v2.0.0 [ 108.909088][ T402] usb 1-1: USB disconnect, device number 33 [ 108.917250][ T1550] udevd[1550]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.219807][ T618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 109.230610][ T618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 109.327172][ T36] audit: type=1400 audit(1785961256.600:298): avc: denied { bind } for pid=1622 comm="syz.1.452" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.347542][ T36] audit: type=1400 audit(1785961256.600:299): avc: denied { name_bind } for pid=1622 comm="syz.1.452" src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 109.368407][ T36] audit: type=1400 audit(1785961256.600:300): avc: denied { node_bind } for pid=1622 comm="syz.1.452" saddr=224.0.0.1 src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 109.447739][ T618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 109.463164][ T618] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 109.570690][ T587] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.581990][ T587] asix 3-1:0.34: probe with driver asix failed with error -71 [ 109.594933][ T587] usb 3-1: USB disconnect, device number 29 [ 109.719909][ T402] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 109.769827][ T404] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 109.871041][ T402] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.881308][ T402] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 109.892147][ T402] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.906583][ T402] usb 1-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 109.915697][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.923794][ T402] usb 1-1: Product: syz [ 109.928017][ T402] usb 1-1: Manufacturer: syz [ 109.932809][ T402] usb 1-1: SerialNumber: syz [ 109.938938][ T1626] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 109.946783][ T404] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.955938][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.964063][ T404] usb 2-1: Product: syz [ 109.968305][ T404] usb 2-1: Manufacturer: syz [ 109.972980][ T404] usb 2-1: SerialNumber: syz [ 110.147971][ T36] audit: type=1400 audit(1785961257.420:301): avc: denied { read write } for pid=1625 comm="syz.0.453" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.172911][ T36] audit: type=1400 audit(1785961257.420:302): avc: denied { open } for pid=1625 comm="syz.0.453" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.199910][ T402] usb 1-1: MIDIStreaming interface descriptor not found [ 110.215423][ T402] usb 1-1: USB disconnect, device number 34 [ 110.245000][ T1550] udevd[1550]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.775185][ T1644] fuse: Invalid rootmode [ 111.239800][ T402] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 111.317867][ T1654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.348524][ T65] usb 5-1: USB disconnect, device number 13 [ 111.389787][ T402] usb 3-1: Using ep0 maxpacket: 32 [ 111.396334][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 187, changing to 11 [ 111.408382][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8931, setting to 1024 [ 111.421523][ T402] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 111.430825][ T402] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 111.438955][ T402] usb 3-1: Product: syz [ 111.439680][ T1659] overlayfs: missing 'lowerdir' [ 111.449071][ T402] usb 3-1: config 0 descriptor?? [ 111.494215][ T1661] Invalid argument reading file caps for ./file0 [ 111.540216][ T1667] fuse: Bad value for 'rootmode' [ 111.689786][ T65] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 111.858300][ T402] koneplus 0003:1E7D:2D51.001A: unknown main item tag 0x0 [ 111.859904][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 111.866125][ T402] koneplus 0003:1E7D:2D51.001A: unknown main item tag 0x0 [ 111.878131][ T402] koneplus 0003:1E7D:2D51.001A: unknown main item tag 0x0 [ 111.885407][ T402] koneplus 0003:1E7D:2D51.001A: unknown main item tag 0x0 [ 111.892853][ T402] koneplus 0003:1E7D:2D51.001A: unknown main item tag 0x0 [ 111.900624][ T65] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 111.908737][ T65] usb 5-1: config 0 has no interface number 0 [ 111.915234][ T65] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 111.917030][ T402] koneplus 0003:1E7D:2D51.001A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 111.926073][ T65] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 111.947527][ T65] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 111.969758][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.977818][ T65] usb 5-1: Product: syz [ 111.982057][ T65] usb 5-1: Manufacturer: syz [ 111.986827][ T65] usb 5-1: SerialNumber: syz [ 111.992452][ T65] usb 5-1: config 0 descriptor?? [ 111.997785][ T1657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.005401][ T1657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.057178][ T402] koneplus 0003:1E7D:2D51.001A: couldn't init struct koneplus_device [ 112.079799][ T402] koneplus 0003:1E7D:2D51.001A: couldn't install mouse [ 112.087782][ T402] koneplus 0003:1E7D:2D51.001A: probe with driver koneplus failed with error -71 [ 112.101191][ T402] usb 3-1: USB disconnect, device number 30 [ 112.134014][ T1671] fido_id[1671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.214667][ T1657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.222286][ T1657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.430422][ T65] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 112.548205][ T402] usb 2-1: USB disconnect, device number 33 [ 112.667856][ T36] audit: type=1400 audit(1785961259.940:303): avc: denied { read write } for pid=1686 comm="syz.2.478" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 112.692213][ T36] audit: type=1400 audit(1785961259.940:304): avc: denied { open } for pid=1686 comm="syz.2.478" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 112.700305][ T587] logitech-hidpp-device 0005:046D:B012.001B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 112.743534][ T1688] fido_id[1688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.910920][ T1691] fuse: Bad value for 'rootmode' [ 112.929831][ T402] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 113.079778][ T402] usb 2-1: Using ep0 maxpacket: 32 [ 113.086452][ T402] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.095017][ T402] usb 2-1: config 0 has no interface number 0 [ 113.103274][ T402] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.112762][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.121051][ T402] usb 2-1: Product: syz [ 113.125441][ T402] usb 2-1: Manufacturer: syz [ 113.130399][ T402] usb 2-1: SerialNumber: syz [ 113.136420][ T402] usb 2-1: config 0 descriptor?? [ 113.145346][ T402] smsc95xx v2.0.0 [ 113.199771][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 113.362498][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.379838][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.387934][ T9] usb 1-1: Product: syz [ 113.392201][ T9] usb 1-1: Manufacturer: syz [ 113.396862][ T9] usb 1-1: SerialNumber: syz [ 113.546470][ T402] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 113.557492][ T402] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.770124][ T402] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 113.783641][ T402] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 114.069786][ T402] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 114.219771][ T402] usb 3-1: Using ep0 maxpacket: 16 [ 114.226527][ T402] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.235068][ T402] usb 3-1: config 7 has an invalid interface number: 20 but max is 0 [ 114.243230][ T402] usb 3-1: config 7 has no interface number 0 [ 114.249395][ T402] usb 3-1: config 7 interface 20 has no altsetting 0 [ 114.258910][ T402] usb 3-1: New USB device found, idVendor=04e6, idProduct=623e, bcdDevice=26.5d [ 114.268035][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.276091][ T402] usb 3-1: Product: syz [ 114.280312][ T402] usb 3-1: Manufacturer: syz [ 114.284958][ T402] usb 3-1: SerialNumber: syz [ 114.320989][ T65] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.332182][ T65] asix 5-1:0.34: probe with driver asix failed with error -71 [ 114.341705][ T65] usb 5-1: USB disconnect, device number 14 [ 114.492153][ T1698] netlink: 324 bytes leftover after parsing attributes in process `syz.2.482'. [ 114.502097][ T1698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.511093][ T1698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.519655][ T1698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.528240][ T1698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.539476][ T402] usb 3-1: USB disconnect, device number 31 [ 115.061058][ T1706] FAULT_INJECTION: forcing a failure. [ 115.061058][ T1706] name failslab, interval 1, probability 0, space 0, times 0 [ 115.073773][ T1706] CPU: 0 UID: 0 PID: 1706 Comm: syz.2.484 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 115.073810][ T1706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.073821][ T1706] Call Trace: [ 115.073828][ T1706] [ 115.073834][ T1706] __dump_stack+0x21/0x30 [ 115.073862][ T1706] dump_stack_lvl+0x140/0x1c0 [ 115.073884][ T1706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.073908][ T1706] dump_stack+0x19/0x20 [ 115.073929][ T1706] should_fail_ex+0x3c2/0x510 [ 115.073948][ T1706] should_failslab+0xac/0x100 [ 115.073968][ T1706] kmem_cache_alloc_node_noprof+0x45/0x420 [ 115.073986][ T1706] ? dup_task_struct+0xc1/0xd80 [ 115.074005][ T1706] ? kasan_save_alloc_info+0x3a/0x50 [ 115.074032][ T1706] ? __kasan_kmalloc+0x96/0xb0 [ 115.074051][ T1706] ? __kmalloc_cache_noprof+0x23c/0x470 [ 115.074068][ T1706] dup_task_struct+0xc1/0xd80 [ 115.074087][ T1706] ? __kasan_check_write+0x18/0x20 [ 115.074102][ T1706] ? _raw_spin_lock_irq+0x93/0x120 [ 115.074120][ T1706] ? copy_process+0x3350/0x3350 [ 115.074140][ T1706] ? __kasan_check_write+0x18/0x20 [ 115.074155][ T1706] copy_process+0x57c/0x3350 [ 115.074176][ T1706] ? kasan_save_alloc_info+0x3a/0x50 [ 115.074206][ T1706] ? __cfi_copy_process+0x10/0x10 [ 115.074230][ T1706] ? __kmalloc_cache_noprof+0x23c/0x470 [ 115.074247][ T1706] ? __kasan_check_write+0x18/0x20 [ 115.074261][ T1706] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 115.074281][ T1706] vhost_task_create+0x1f7/0x3f0 [ 115.074297][ T1706] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 115.074317][ T1706] ? __cfi_vhost_task_create+0x10/0x10 [ 115.074334][ T1706] ? __cfi_vhost_task_fn+0x10/0x10 [ 115.074350][ T1706] ? __kasan_check_write+0x18/0x20 [ 115.074365][ T1706] ? mutex_lock+0x97/0x1d0 [ 115.074402][ T1706] ? __cfi_mutex_lock+0x10/0x10 [ 115.074433][ T1706] ? kernel_text_address+0xa9/0xe0 [ 115.074464][ T1706] kvm_mmu_post_init_vm+0x161/0x300 [ 115.074490][ T1706] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 115.074512][ T1706] ? _parse_integer_limit+0x195/0x1e0 [ 115.074541][ T1706] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 115.074563][ T1706] ? kstrtoull+0x13b/0x1e0 [ 115.074579][ T1706] ? kstrtouint+0x78/0xf0 [ 115.074594][ T1706] ? ioctl_has_perm+0x1bc/0x500 [ 115.074609][ T1706] ? __asan_memcpy+0x5a/0x80 [ 115.074625][ T1706] ? ioctl_has_perm+0x408/0x500 [ 115.074639][ T1706] ? has_cap_mac_admin+0xd0/0xd0 [ 115.074654][ T1706] ? __kasan_check_write+0x18/0x20 [ 115.074669][ T1706] ? mutex_lock_killable+0x97/0x1d0 [ 115.074714][ T1706] ? __cfi_mutex_lock_killable+0x10/0x10 [ 115.074750][ T1706] ? proc_fail_nth_write+0x184/0x220 [ 115.074775][ T1706] kvm_vcpu_ioctl+0xa43/0x1000 [ 115.074791][ T1706] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 115.074806][ T1706] ? __cfi_vfs_write+0x10/0x10 [ 115.074822][ T1706] ? __kasan_check_write+0x18/0x20 [ 115.074837][ T1706] ? mutex_unlock+0x90/0x240 [ 115.074859][ T1706] ? __cfi_mutex_unlock+0x10/0x10 [ 115.074882][ T1706] ? bpf_lsm_file_ioctl+0xd/0x20 [ 115.074903][ T1706] ? security_file_ioctl+0x3e/0x110 [ 115.074933][ T1706] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 115.074948][ T1706] __se_sys_ioctl+0x135/0x1b0 [ 115.074968][ T1706] __x64_sys_ioctl+0x7f/0xa0 [ 115.074986][ T1706] x64_sys_call+0x1878/0x2ee0 [ 115.075001][ T1706] do_syscall_64+0x57/0xf0 [ 115.075018][ T1706] ? clear_bhb_loop+0x50/0xa0 [ 115.075043][ T1706] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.075063][ T1706] RIP: 0033:0x7f0d0259e0d9 [ 115.075077][ T1706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.075090][ T1706] RSP: 002b:00007f0d0347e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.075106][ T1706] RAX: ffffffffffffffda RBX: 00007f0d02825fa0 RCX: 00007f0d0259e0d9 [ 115.075118][ T1706] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 115.075128][ T1706] RBP: 00007f0d0347e090 R08: 0000000000000000 R09: 0000000000000000 [ 115.075138][ T1706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.075147][ T1706] R13: 00007f0d02826038 R14: 00007f0d02825fa0 R15: 00007ffe62a11038 [ 115.075161][ T1706] [ 115.581391][ T402] usb 2-1: USB disconnect, device number 34 [ 115.594333][ T1719] fuse: Bad value for 'rootmode' [ 115.919801][ T402] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 115.973217][ T587] usb 1-1: USB disconnect, device number 35 [ 116.059839][ T402] usb 2-1: device descriptor read/64, error -71 [ 116.199763][ T404] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.299760][ T402] usb 2-1: device descriptor read/64, error -71 [ 116.349855][ T404] usb 5-1: Using ep0 maxpacket: 16 [ 116.355046][ T587] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 116.363756][ T404] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 116.372092][ T404] usb 5-1: config 0 has no interface number 0 [ 116.378313][ T404] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 116.388571][ T404] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 116.400121][ T404] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 116.409321][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.417811][ T404] usb 5-1: Product: syz [ 116.422197][ T404] usb 5-1: Manufacturer: syz [ 116.426865][ T404] usb 5-1: SerialNumber: syz [ 116.432837][ T404] usb 5-1: config 0 descriptor?? [ 116.438168][ T1727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 116.446067][ T1727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 116.510774][ T587] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.520508][ T587] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.531673][ T587] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 116.540793][ T402] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 116.548378][ T587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.556490][ T587] usb 1-1: Product: syz [ 116.560792][ T587] usb 1-1: Manufacturer: syz [ 116.565524][ T587] usb 1-1: SerialNumber: syz [ 116.655099][ T1727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 116.662335][ T1727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 116.689838][ T65] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 116.699784][ T402] usb 2-1: device descriptor read/64, error -71 [ 116.777667][ T587] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 116.839773][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 116.846199][ T65] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.854432][ T65] usb 3-1: config 0 has no interface number 0 [ 116.862112][ T65] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.871202][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.871879][ T404] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 116.879226][ T65] usb 3-1: Product: syz [ 116.879245][ T65] usb 3-1: Manufacturer: syz [ 116.897975][ T65] usb 3-1: SerialNumber: syz [ 116.903445][ T65] usb 3-1: config 0 descriptor?? [ 116.909317][ T65] smsc95xx v2.0.0 [ 116.939797][ T402] usb 2-1: device descriptor read/64, error -71 [ 116.979033][ T36] audit: type=1400 audit(1785961264.250:305): avc: denied { read write } for pid=1728 comm="syz.0.493" name="lp0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 116.982753][ T10] usb 1-1: USB disconnect, device number 36 [ 117.002653][ T36] audit: type=1400 audit(1785961264.250:306): avc: denied { open } for pid=1728 comm="syz.0.493" path="/dev/usb/lp0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 117.016436][ T10] usblp0: removed [ 117.049862][ T402] usb usb2-port1: attempt power cycle [ 117.310024][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 117.320948][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.399799][ T402] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 117.420848][ T402] usb 2-1: device descriptor read/8, error -71 [ 117.530769][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 117.541733][ T65] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 117.563834][ T402] usb 2-1: device descriptor read/8, error -71 [ 117.639146][ T1748] fuse: Unknown parameter 'use00000000000000000000' [ 117.819798][ T402] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 117.841043][ T402] usb 2-1: device descriptor read/8, error -71 [ 117.969833][ T569] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 117.978432][ T402] usb 2-1: device descriptor read/8, error -71 [ 118.089965][ T402] usb usb2-port1: unable to enumerate USB device [ 118.131350][ T569] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.139442][ T569] usb 1-1: not running at top speed; connect to a high speed hub [ 118.148151][ T569] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 118.156392][ T569] usb 1-1: config 0 has no interface number 0 [ 118.162527][ T569] usb 1-1: config 0 interface 175 has no altsetting 0 [ 118.170751][ T569] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.02 [ 118.179861][ T569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.187863][ T569] usb 1-1: Product: syz [ 118.192065][ T569] usb 1-1: Manufacturer: syz [ 118.196691][ T569] usb 1-1: SerialNumber: syz [ 118.202098][ T569] usb 1-1: config 0 descriptor?? [ 118.482238][ T569] usb-storage 1-1:0.175: USB Mass Storage device detected [ 118.532113][ T569] usb 1-1: USB disconnect, device number 37 [ 118.676779][ T404] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.687059][ T404] asix 5-1:0.34: probe with driver asix failed with error -71 [ 118.695617][ T404] usb 5-1: USB disconnect, device number 15 [ 119.000012][ T36] audit: type=1400 audit(1785961266.280:307): avc: denied { read } for pid=1761 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.009921][ T402] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 119.182359][ T402] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 119.191816][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.200140][ T402] usb 2-1: Product: syz [ 119.204444][ T402] usb 2-1: Manufacturer: syz [ 119.209105][ T402] usb 2-1: SerialNumber: syz [ 119.261996][ T1773] fuse: Unknown parameter 'use00000000000000000000' [ 119.279954][ T402] usb 3-1: USB disconnect, device number 32 [ 119.629792][ T402] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 119.649795][ T569] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 119.759791][ T402] usb 3-1: device descriptor read/64, error -71 [ 119.799781][ T569] usb 5-1: Using ep0 maxpacket: 16 [ 119.806090][ T569] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 119.814506][ T569] usb 5-1: config 1 has no interface number 0 [ 119.820788][ T569] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.830785][ T569] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.840947][ T569] usb 5-1: config 1 interface 105 has no altsetting 0 [ 119.849271][ T569] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 119.858591][ T569] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.867115][ T569] usb 5-1: Product: syz [ 119.871438][ T569] usb 5-1: Manufacturer: syz [ 119.876609][ T569] usb 5-1: SerialNumber: syz [ 119.883091][ T1781] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 119.890345][ T1781] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 120.009793][ T402] usb 3-1: device descriptor read/64, error -71 [ 120.139801][ T65] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 120.249824][ T402] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 120.289777][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 120.296114][ T65] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 120.304341][ T65] usb 1-1: config 0 has no interface number 0 [ 120.305231][ T1781] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 120.310544][ T65] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 120.318882][ T1781] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 120.327864][ T65] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 120.346256][ T65] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 120.355390][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.363639][ T65] usb 1-1: Product: syz [ 120.367826][ T65] usb 1-1: Manufacturer: syz [ 120.372468][ T65] usb 1-1: SerialNumber: syz [ 120.377961][ T65] usb 1-1: config 0 descriptor?? [ 120.383329][ T1786] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 120.390697][ T402] usb 3-1: device descriptor read/64, error -71 [ 120.391677][ T1786] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 120.606219][ T1786] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 120.613608][ T1786] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 120.639784][ T402] usb 3-1: device descriptor read/64, error -71 [ 120.738322][ T569] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 120.749992][ T402] usb usb3-port1: attempt power cycle [ 120.821477][ T65] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 120.950451][ T569] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 120.963650][ T569] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c2:6e:09:3a:1f:64 [ 120.977499][ T569] usb 5-1: USB disconnect, device number 16 [ 120.984172][ T569] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 121.030313][ T569] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 121.039938][ T569] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 121.049283][ T569] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 121.109776][ T402] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 121.130887][ T402] usb 3-1: device descriptor read/8, error -71 [ 121.261722][ T402] usb 3-1: device descriptor read/8, error -71 [ 121.476441][ T36] audit: type=1400 audit(1785961268.750:308): avc: denied { read } for pid=1787 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.499933][ T402] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 121.521797][ T402] usb 3-1: device descriptor read/8, error -71 [ 121.563877][ T1793] fuse: Unknown parameter 'use00000000000000000000' [ 121.634838][ T10] usb 2-1: USB disconnect, device number 39 [ 121.650916][ T402] usb 3-1: device descriptor read/8, error -71 [ 121.769852][ T402] usb usb3-port1: unable to enumerate USB device [ 121.819894][ T618] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 121.999759][ T618] usb 5-1: Using ep0 maxpacket: 32 [ 122.006353][ T618] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.014552][ T618] usb 5-1: config 0 has no interface number 0 [ 122.022537][ T618] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.032091][ T618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.040199][ T618] usb 5-1: Product: syz [ 122.044576][ T618] usb 5-1: Manufacturer: syz [ 122.049269][ T618] usb 5-1: SerialNumber: syz [ 122.055312][ T618] usb 5-1: config 0 descriptor?? [ 122.062120][ T618] smsc95xx v2.0.0 [ 122.462865][ T618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 122.473655][ T618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 122.593355][ T1803] : renamed from bridge0 (while UP) [ 122.639616][ T65] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 122.662755][ T65] asix 1-1:0.34: probe with driver asix failed with error -71 [ 122.673874][ T65] usb 1-1: USB disconnect, device number 38 [ 122.683789][ T618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 122.699091][ T618] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 122.719786][ T569] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 122.742400][ T1807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1807 comm=syz.1.522 [ 122.768027][ T36] audit: type=1400 audit(1785961270.040:309): avc: denied { cmd } for pid=1808 comm="iou-wrk-1809" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 122.879787][ T569] usb 3-1: Using ep0 maxpacket: 16 [ 122.886106][ T569] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.896256][ T569] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.905824][ T569] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 122.914902][ T569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.922932][ T569] usb 3-1: SerialNumber: syz [ 122.929824][ T569] usb 3-1: 0:2 : does not exist [ 122.999789][ T404] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 123.129826][ T404] usb 2-1: device descriptor read/64, error -71 [ 123.200644][ T1815] fuse: Unknown parameter 'user_i00000000000000000000' [ 123.330629][ T1800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.339223][ T1800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.349551][ T569] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 123.358911][ T569] usb 3-1: USB disconnect, device number 37 [ 123.368615][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 123.370386][ T404] usb 2-1: device descriptor read/64, error -71 [ 123.459815][ T402] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 123.612457][ T402] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 123.621697][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.629792][ T404] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 123.637403][ T402] usb 1-1: Product: syz [ 123.641661][ T402] usb 1-1: Manufacturer: syz [ 123.646389][ T402] usb 1-1: SerialNumber: syz [ 123.779830][ T404] usb 2-1: device descriptor read/64, error -71 [ 124.019929][ T404] usb 2-1: device descriptor read/64, error -71 [ 124.099788][ T65] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 124.129888][ T404] usb usb2-port1: attempt power cycle [ 124.229785][ T65] usb 3-1: device descriptor read/64, error -71 [ 124.469792][ T65] usb 3-1: device descriptor read/64, error -71 [ 124.469800][ T404] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 124.500965][ T404] usb 2-1: device descriptor read/8, error -71 [ 124.596362][ T618] usb 5-1: USB disconnect, device number 17 [ 124.630940][ T404] usb 2-1: device descriptor read/8, error -71 [ 124.719809][ T65] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 124.859783][ T65] usb 3-1: device descriptor read/64, error -71 [ 124.889823][ T404] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 124.910928][ T404] usb 2-1: device descriptor read/8, error -71 [ 125.040963][ T404] usb 2-1: device descriptor read/8, error -71 [ 125.099793][ T65] usb 3-1: device descriptor read/64, error -71 [ 125.149931][ T404] usb usb2-port1: unable to enumerate USB device [ 125.209943][ T65] usb usb3-port1: attempt power cycle [ 125.512839][ T1829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 125.521828][ T1829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 125.541364][ T1831] rust_binder: Write failure EFAULT in pid:189 [ 125.551535][ T1833] FAULT_INJECTION: forcing a failure. [ 125.551535][ T1833] name failslab, interval 1, probability 0, space 0, times 0 [ 125.570473][ T65] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 125.578122][ T1833] CPU: 0 UID: 0 PID: 1833 Comm: syz.4.531 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 125.578144][ T1833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.578158][ T1833] Call Trace: [ 125.578163][ T1833] [ 125.578170][ T1833] __dump_stack+0x21/0x30 [ 125.578201][ T1833] dump_stack_lvl+0x140/0x1c0 [ 125.578223][ T1833] ? __cfi_dump_stack_lvl+0x10/0x10 [ 125.578246][ T1833] dump_stack+0x19/0x20 [ 125.578265][ T1833] should_fail_ex+0x3c2/0x510 [ 125.578283][ T1833] should_failslab+0xac/0x100 [ 125.578302][ T1833] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 125.578320][ T1833] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 125.578348][ T1833] krealloc_noprof+0x8d/0x130 [ 125.578382][ T1833] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 125.578407][ T1833] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x57d/0x1a60 [ 125.578437][ T1833] ? __cfi_selinux_file_open+0x10/0x10 [ 125.578473][ T1833] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 125.578518][ T1833] ? avc_has_extended_perms+0x7fb/0xe60 [ 125.578538][ T1833] ? __asan_memcpy+0x5a/0x80 [ 125.578553][ T1833] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 125.578577][ T1833] ? __asan_set_shadow_00+0x12/0x20 [ 125.578600][ T1833] ? do_vfs_ioctl+0x182d/0x2010 [ 125.578618][ T1833] ? arch_stack_walk+0x10a/0x170 [ 125.578634][ T1833] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 125.578656][ T1833] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 125.578680][ T1833] ? _parse_integer+0x2e/0x40 [ 125.578699][ T1833] ? ioctl_has_perm+0x39a/0x500 [ 125.578714][ T1833] ? has_cap_mac_admin+0xd0/0xd0 [ 125.578730][ T1833] ? proc_fail_nth_write+0x184/0x220 [ 125.578753][ T1833] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 125.578788][ T1833] ? selinux_file_ioctl+0x732/0x1480 [ 125.578803][ T1833] ? vfs_write+0xbcf/0xfd0 [ 125.578817][ T1833] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 125.578832][ T1833] ? __cfi_vfs_write+0x10/0x10 [ 125.578847][ T1833] ? __kasan_check_write+0x18/0x20 [ 125.578862][ T1833] ? mutex_unlock+0x90/0x240 [ 125.578883][ T1833] ? __cfi_mutex_unlock+0x10/0x10 [ 125.578906][ T1833] ? bpf_lsm_file_ioctl+0xd/0x20 [ 125.578925][ T1833] ? security_file_ioctl+0x3e/0x110 [ 125.578954][ T1833] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 125.578977][ T1833] __se_sys_ioctl+0x135/0x1b0 [ 125.579014][ T1833] __x64_sys_ioctl+0x7f/0xa0 [ 125.579033][ T1833] x64_sys_call+0x1878/0x2ee0 [ 125.579047][ T1833] do_syscall_64+0x57/0xf0 [ 125.579064][ T1833] ? clear_bhb_loop+0x50/0xa0 [ 125.579086][ T1833] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.579106][ T1833] RIP: 0033:0x7ffbc299e0d9 [ 125.579120][ T1833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.579133][ T1833] RSP: 002b:00007ffbc3907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.579155][ T1833] RAX: ffffffffffffffda RBX: 00007ffbc2c25fa0 RCX: 00007ffbc299e0d9 [ 125.579168][ T1833] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 125.579179][ T1833] RBP: 00007ffbc3907090 R08: 0000000000000000 R09: 0000000000000000 [ 125.579189][ T1833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.579198][ T1833] R13: 00007ffbc2c26038 R14: 00007ffbc2c25fa0 R15: 00007ffcfd6bce48 [ 125.579212][ T1833] [ 125.931403][ T65] usb 3-1: device descriptor read/8, error -71 [ 125.941361][ T36] audit: type=1400 audit(1785961273.220:310): avc: denied { read } for pid=1837 comm="syz.1.533" name="file1" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.963600][ T36] audit: type=1400 audit(1785961273.220:311): avc: denied { watch } for pid=1837 comm="syz.1.533" path="/134/file1" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.986247][ T36] audit: type=1400 audit(1785961273.220:312): avc: denied { unlink } for pid=1837 comm="syz.1.533" name="file1" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.072591][ T65] usb 3-1: device descriptor read/8, error -71 [ 126.225546][ T587] usb 1-1: USB disconnect, device number 39 [ 126.259794][ T404] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 126.309810][ T65] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 126.329799][ T402] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 126.338508][ T65] usb 3-1: device descriptor read/8, error -71 [ 126.389797][ T404] usb 5-1: device descriptor read/64, error -71 [ 126.470820][ T65] usb 3-1: device descriptor read/8, error -71 [ 126.489777][ T402] usb 2-1: Using ep0 maxpacket: 32 [ 126.496210][ T402] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 126.504611][ T402] usb 2-1: config 0 has no interface number 0 [ 126.512802][ T402] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 126.522082][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.530289][ T402] usb 2-1: Product: syz [ 126.534576][ T402] usb 2-1: Manufacturer: syz [ 126.539233][ T402] usb 2-1: SerialNumber: syz [ 126.545391][ T402] usb 2-1: config 0 descriptor?? [ 126.551584][ T402] smsc95xx v2.0.0 [ 126.589814][ T65] usb usb3-port1: unable to enumerate USB device [ 126.639763][ T404] usb 5-1: device descriptor read/64, error -71 [ 126.893373][ T404] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 126.952991][ T402] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 126.963910][ T402] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 127.029794][ T404] usb 5-1: device descriptor read/64, error -71 [ 127.173897][ T402] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 127.184965][ T402] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 127.239793][ T65] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 127.269799][ T404] usb 5-1: device descriptor read/64, error -71 [ 127.389799][ T65] usb 3-1: device descriptor read/64, error -71 [ 127.397786][ T404] usb usb5-port1: attempt power cycle [ 127.659789][ T65] usb 3-1: device descriptor read/64, error -71 [ 127.739796][ T404] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 127.760919][ T404] usb 5-1: device descriptor read/8, error -71 [ 127.890961][ T404] usb 5-1: device descriptor read/8, error -71 [ 127.909788][ T65] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 128.039814][ T65] usb 3-1: device descriptor read/64, error -71 [ 128.129793][ T404] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 128.150948][ T404] usb 5-1: device descriptor read/8, error -71 [ 128.279780][ T65] usb 3-1: device descriptor read/64, error -71 [ 128.282522][ T404] usb 5-1: device descriptor read/8, error -71 [ 128.389912][ T65] usb usb3-port1: attempt power cycle [ 128.400032][ T404] usb usb5-port1: unable to enumerate USB device [ 128.739827][ T65] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 128.760911][ T65] usb 3-1: device descriptor read/8, error -71 [ 128.890911][ T65] usb 3-1: device descriptor read/8, error -71 [ 129.029799][ T402] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 129.059792][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 129.105416][ T10] usb 2-1: USB disconnect, device number 44 [ 129.129786][ T65] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 129.151961][ T65] usb 3-1: device descriptor read/8, error -71 [ 129.184935][ T1877] fuse: Unknown parameter 'user_id00000000000000000000' [ 129.185085][ T402] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 129.192059][ T9] usb 1-1: device descriptor read/64, error -71 [ 129.201392][ T402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.215374][ T402] usb 5-1: Product: syz [ 129.219703][ T402] usb 5-1: Manufacturer: syz [ 129.224405][ T402] usb 5-1: SerialNumber: syz [ 129.281128][ T65] usb 3-1: device descriptor read/8, error -71 [ 129.390060][ T65] usb usb3-port1: unable to enumerate USB device [ 129.449790][ T9] usb 1-1: device descriptor read/64, error -71 [ 129.689792][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 129.819789][ T9] usb 1-1: device descriptor read/64, error -71 [ 130.059783][ T9] usb 1-1: device descriptor read/64, error -71 [ 130.135034][ T36] audit: type=1400 audit(1785961277.410:313): avc: denied { write } for pid=1887 comm="syz.2.553" name="ipv6_route" dev="proc" ino=4026532873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 130.171098][ T9] usb usb1-port1: attempt power cycle [ 130.258955][ T1900] fuse: Unknown parameter 'user_id00000000000000000000' [ 130.387929][ T36] audit: type=1400 audit(1785961277.660:314): avc: denied { bind } for pid=1903 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.409286][ T36] audit: type=1400 audit(1785961277.680:315): avc: denied { listen } for pid=1903 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.429042][ T36] audit: type=1400 audit(1785961277.680:316): avc: denied { accept } for pid=1903 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.459784][ T618] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 130.519781][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 130.541015][ T9] usb 1-1: device descriptor read/8, error -71 [ 130.609781][ T618] usb 2-1: Using ep0 maxpacket: 32 [ 130.616080][ T618] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 130.624269][ T618] usb 2-1: config 0 has no interface number 0 [ 130.631882][ T618] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 130.641285][ T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.649288][ T618] usb 2-1: Product: syz [ 130.653550][ T618] usb 2-1: Manufacturer: syz [ 130.658176][ T618] usb 2-1: SerialNumber: syz [ 130.663957][ T618] usb 2-1: config 0 descriptor?? [ 130.675091][ T618] smsc95xx v2.0.0 [ 130.679306][ T9] usb 1-1: device descriptor read/8, error -71 [ 130.826408][ T1914] rust_binder: Write failure EINVAL in pid:412 [ 130.919792][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 130.950777][ T9] usb 1-1: device descriptor read/8, error -71 [ 131.076136][ T618] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 131.087049][ T618] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.097071][ T9] usb 1-1: device descriptor read/8, error -71 [ 131.209879][ T9] usb usb1-port1: unable to enumerate USB device [ 131.297035][ T618] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 131.307901][ T618] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 131.647543][ T618] usb 5-1: USB disconnect, device number 22 [ 131.663293][ T36] audit: type=1400 audit(1785961278.940:317): avc: denied { mounton } for pid=1919 comm="syz.4.566" path="/70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.663322][ T1920] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 131.715783][ T36] audit: type=1400 audit(1785961278.940:318): avc: denied { mount } for pid=1919 comm="syz.4.566" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 131.824662][ T1925] FAULT_INJECTION: forcing a failure. [ 131.824662][ T1925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.838134][ T1925] CPU: 0 UID: 0 PID: 1925 Comm: syz.2.568 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 131.838169][ T1925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.838183][ T1925] Call Trace: [ 131.838190][ T1925] [ 131.838198][ T1925] __dump_stack+0x21/0x30 [ 131.838232][ T1925] dump_stack_lvl+0x140/0x1c0 [ 131.838262][ T1925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.838293][ T1925] ? exc_page_fault+0x65/0xc0 [ 131.838329][ T1925] dump_stack+0x19/0x20 [ 131.838358][ T1925] should_fail_ex+0x3c2/0x510 [ 131.838386][ T1925] should_fail+0xf/0x20 [ 131.838410][ T1925] should_fail_usercopy+0x1e/0x30 [ 131.838438][ T1925] _copy_from_iter+0x1a6/0x1520 [ 131.838468][ T1925] ? __kasan_check_write+0x18/0x20 [ 131.838491][ T1925] ? _copy_from_iter+0x215/0x1520 [ 131.838535][ T1925] ? __cfi__copy_from_iter+0x10/0x10 [ 131.838563][ T1925] ? __virt_addr_valid+0x2a1/0x370 [ 131.838589][ T1925] ? __cfi__copy_from_iter+0x10/0x10 [ 131.838618][ T1925] ? __check_object_size+0x54c/0x870 [ 131.838642][ T1925] ? __cfi___check_object_size+0x10/0x10 [ 131.838666][ T1925] copy_page_from_iter+0x1e5/0x2a0 [ 131.838698][ T1925] skb_copy_datagram_from_iter+0x300/0x6f0 [ 131.838724][ T1925] packet_sendmsg+0x3be8/0x56b0 [ 131.838747][ T1925] ? avc_has_perm_noaudit+0x26b/0x360 [ 131.838779][ T1925] ? kstrtouint_from_user+0x117/0x170 [ 131.838804][ T1925] ? __x64_sys_openat+0x13a/0x170 [ 131.838839][ T1925] ? selinux_socket_sendmsg+0x281/0x380 [ 131.838869][ T1925] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 131.838899][ T1925] ? __cfi_packet_sendmsg+0x10/0x10 [ 131.838922][ T1925] ? check_stack_object+0x10f/0x150 [ 131.838946][ T1925] ? move_pages_ptes+0x5f2/0x2460 [ 131.838968][ T1925] ? __cfi___check_object_size+0x10/0x10 [ 131.838993][ T1925] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 131.839019][ T1925] ? security_socket_sendmsg+0x3d/0x100 [ 131.839049][ T1925] ? __cfi_packet_sendmsg+0x10/0x10 [ 131.839072][ T1925] __sys_sendto+0x68a/0x700 [ 131.839091][ T1925] ? __cfi___sys_sendto+0x10/0x10 [ 131.839113][ T1925] ? __kasan_check_write+0x18/0x20 [ 131.839137][ T1925] ? __cfi_ksys_write+0x10/0x10 [ 131.839162][ T1925] __x64_sys_sendto+0xe9/0x100 [ 131.839184][ T1925] x64_sys_call+0x2c2c/0x2ee0 [ 131.839204][ T1925] do_syscall_64+0x57/0xf0 [ 131.839231][ T1925] ? clear_bhb_loop+0x50/0xa0 [ 131.839263][ T1925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.839293][ T1925] RIP: 0033:0x7f0d0259e0d9 [ 131.839313][ T1925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.839333][ T1925] RSP: 002b:00007f0d0347e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.839358][ T1925] RAX: ffffffffffffffda RBX: 00007f0d02825fa0 RCX: 00007f0d0259e0d9 [ 131.839376][ T1925] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 131.839392][ T1925] RBP: 00007f0d0347e090 R08: 0000200000000140 R09: 0000000000000014 [ 131.839410][ T1925] R10: 0000000088a8ffff R11: 0000000000000246 R12: 0000000000000002 [ 131.839425][ T1925] R13: 00007f0d02826038 R14: 00007f0d02825fa0 R15: 00007ffe62a11038 [ 131.839445][ T1925] [ 132.159353][ T1932] kernel profiling enabled (shift: 9) [ 132.285159][ T1943] capability: warning: `syz.2.573' uses deprecated v2 capabilities in a way that may be insecure [ 132.499791][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 132.529787][ T65] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 132.610466][ T1946] netlink: 'syz.4.575': attribute type 13 has an invalid length. [ 132.662052][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 132.671558][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.679564][ T9] usb 1-1: Product: syz [ 132.683793][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 132.688967][ T9] usb 1-1: Manufacturer: syz [ 132.693742][ T9] usb 1-1: SerialNumber: syz [ 132.700573][ T65] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.712940][ T65] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.723963][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.733089][ T65] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.741465][ T65] usb 3-1: Product: syz [ 132.745640][ T65] usb 3-1: Manufacturer: syz [ 132.752103][ T65] hub 3-1:4.0: USB hub found [ 132.879783][ T404] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 132.902032][ T9] usb 1-1: USB disconnect, device number 44 [ 132.951947][ T65] hub 3-1:4.0: 2 ports detected [ 133.009772][ T404] usb 5-1: device descriptor read/64, error -71 [ 133.240505][ T402] usb 2-1: USB disconnect, device number 45 [ 133.250272][ T404] usb 5-1: device descriptor read/64, error -71 [ 133.390533][ T65] hub 3-1:4.0: set hub depth failed [ 133.400148][ T65] usb 3-1: USB disconnect, device number 46 [ 133.426933][ T36] audit: type=1400 audit(1785961280.700:319): avc: denied { execmod } for pid=1953 comm="syz.0.577" path="/138/cgroup.controllers" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.450779][ T36] audit: type=1400 audit(1785961280.700:320): avc: denied { execute } for pid=1953 comm="syz.0.577" path="/138/cgroup.controllers" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.489858][ T404] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 133.599791][ T402] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 133.619790][ T404] usb 5-1: device descriptor read/64, error -71 [ 133.751016][ T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.761991][ T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.771802][ T402] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.784795][ T402] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.793904][ T402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.802805][ T402] usb 2-1: config 0 descriptor?? [ 133.859787][ T404] usb 5-1: device descriptor read/64, error -71 [ 133.979929][ T404] usb usb5-port1: attempt power cycle [ 134.099066][ T1966] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 134.109282][ T1966] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 134.189821][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 134.210204][ T1971] netlink: 128 bytes leftover after parsing attributes in process `syz.2.584'. [ 134.217768][ T402] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 134.219550][ T1971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.584'. [ 134.237204][ T402] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 134.271209][ T36] audit: type=1400 audit(1785961281.550:321): avc: denied { unmount } for pid=394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.295273][ T1976] FAULT_INJECTION: forcing a failure. [ 134.295273][ T1976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.308680][ T1976] CPU: 0 UID: 0 PID: 1976 Comm: syz.2.586 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 134.308709][ T1976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.308723][ T1976] Call Trace: [ 134.308729][ T1976] [ 134.308736][ T1976] __dump_stack+0x21/0x30 [ 134.308768][ T1976] dump_stack_lvl+0x140/0x1c0 [ 134.308796][ T1976] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.308823][ T1976] ? check_stack_object+0x138/0x150 [ 134.308845][ T1976] dump_stack+0x19/0x20 [ 134.308871][ T1976] should_fail_ex+0x3c2/0x510 [ 134.308893][ T1976] should_fail+0xf/0x20 [ 134.308913][ T1976] should_fail_usercopy+0x1e/0x30 [ 134.308938][ T1976] _copy_to_user+0x24/0xa0 [ 134.308964][ T1976] simple_read_from_buffer+0xed/0x160 [ 134.308992][ T1976] proc_fail_nth_read+0x1aa/0x220 [ 134.309021][ T1976] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 134.309050][ T1976] ? bpf_lsm_file_permission+0xd/0x20 [ 134.309077][ T1976] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 134.309105][ T1976] vfs_read+0x288/0xc70 [ 134.309124][ T1976] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 134.309143][ T1976] ? __cfi_vfs_read+0x10/0x10 [ 134.309162][ T1976] ? __kasan_check_write+0x18/0x20 [ 134.309183][ T1976] ? mutex_lock+0x97/0x1d0 [ 134.309209][ T1976] ? __cfi_mutex_lock+0x10/0x10 [ 134.309238][ T1976] ksys_read+0x145/0x260 [ 134.309258][ T1976] ? __cfi_ksys_read+0x10/0x10 [ 134.309277][ T1976] ? __kasan_check_read+0x15/0x20 [ 134.309297][ T1976] __x64_sys_read+0x7f/0x90 [ 134.309317][ T1976] x64_sys_call+0x2638/0x2ee0 [ 134.309335][ T1976] do_syscall_64+0x57/0xf0 [ 134.309356][ T1976] ? clear_bhb_loop+0x50/0xa0 [ 134.309383][ T1976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.309408][ T1976] RIP: 0033:0x7f0d0255e90e [ 134.309425][ T1976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.309448][ T1976] RSP: 002b:00007f0d0347dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.309470][ T1976] RAX: ffffffffffffffda RBX: 00007f0d0347e6c0 RCX: 00007f0d0255e90e [ 134.309485][ T1976] RDX: 000000000000000f RSI: 00007f0d0347e0a0 RDI: 0000000000000004 [ 134.309497][ T1976] RBP: 00007f0d0347e090 R08: 0000000000000000 R09: 0000000000000000 [ 134.309510][ T1976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.309522][ T1976] R13: 00007f0d02826038 R14: 00007f0d02825fa0 R15: 00007ffe62a11038 [ 134.309538][ T1976] [ 134.329880][ T404] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 134.331588][ T9] usb 1-1: device descriptor read/64, error -71 [ 134.407305][ T36] audit: type=1400 audit(1785961281.680:322): avc: denied { setopt } for pid=1977 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.532098][ T65] usb 2-1: USB disconnect, device number 46 [ 134.593816][ T404] usb 5-1: device descriptor read/8, error -71 [ 134.659809][ T9] usb 1-1: device descriptor read/64, error -71 [ 134.725060][ T1989] netlink: 'syz.2.592': attribute type 3 has an invalid length. [ 134.732879][ T1989] netlink: 944 bytes leftover after parsing attributes in process `syz.2.592'. [ 134.734219][ T404] usb 5-1: device descriptor read/8, error -71 [ 134.899811][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 134.979787][ T404] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 134.999775][ T312] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 135.001251][ T404] usb 5-1: device descriptor read/8, error -71 [ 135.029908][ T9] usb 1-1: device descriptor read/64, error -71 [ 135.140853][ T404] usb 5-1: device descriptor read/8, error -71 [ 135.151013][ T312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.161115][ T36] audit: type=1400 audit(1785961282.430:323): avc: denied { name_bind } for pid=1996 comm="syz.1.595" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 135.182950][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.194069][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.204002][ T312] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 135.213386][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.225594][ T312] usb 3-1: config 0 descriptor?? [ 135.250043][ T404] usb usb5-port1: unable to enumerate USB device [ 135.269816][ T9] usb 1-1: device descriptor read/64, error -71 [ 135.379879][ T9] usb usb1-port1: attempt power cycle [ 135.473570][ T312] usbhid 3-1:0.0: can't add hid device: -71 [ 135.480258][ T312] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 135.491681][ T312] usb 3-1: USB disconnect, device number 47 [ 135.519834][ T65] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 135.537376][ T2015] fuse: Unknown parameter 'groupX-}6+sAFa.'>u(RlR0uG#?8c0Ǐfә2ʊ\1Ҹhؕi%kDQ03I' [ 135.551094][ T2015] fuse: Unknown parameter 'groupX-}6+sAFa.'>u(RlR0uG#?8c0Ǐfә2ʊ\1Ҹhؕi%kDQ03I' [ 135.577282][ T2019] tipc: Started in network mode [ 135.582198][ T2019] tipc: Node identity , cluster identity 4711 [ 135.588297][ T2019] tipc: Failed to obtain node identity [ 135.593862][ T2019] tipc: Enabling of bearer rejected, failed to enable media [ 135.677675][ T65] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 135.686821][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.701185][ T65] usb 2-1: config 0 descriptor?? [ 135.720625][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 135.750775][ T9] usb 1-1: device descriptor read/8, error -71 [ 135.900841][ T9] usb 1-1: device descriptor read/8, error -71 [ 135.949684][ T2058] FAULT_INJECTION: forcing a failure. [ 135.949684][ T2058] name failslab, interval 1, probability 0, space 0, times 0 [ 135.964677][ T2058] CPU: 1 UID: 0 PID: 2058 Comm: syz.4.612 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 135.964718][ T2058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.964732][ T2058] Call Trace: [ 135.964740][ T2058] [ 135.964749][ T2058] __dump_stack+0x21/0x30 [ 135.964785][ T2058] dump_stack_lvl+0x140/0x1c0 [ 135.964815][ T2058] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.964846][ T2058] ? io_wq_create+0x68c/0x9d0 [ 135.964868][ T2058] dump_stack+0x19/0x20 [ 135.964898][ T2058] should_fail_ex+0x3c2/0x510 [ 135.964923][ T2058] should_failslab+0xac/0x100 [ 135.964952][ T2058] __kmalloc_cache_noprof+0x41/0x470 [ 135.964975][ T2058] ? __io_uring_add_tctx_node+0x14a/0x590 [ 135.965004][ T2058] __io_uring_add_tctx_node+0x14a/0x590 [ 135.965031][ T2058] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 135.965059][ T2058] ? anon_inode_create_getfile+0x3f/0x50 [ 135.965093][ T2058] io_uring_create+0xc78/0x13f0 [ 135.965117][ T2058] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 135.965149][ T2058] ? __kasan_check_write+0x18/0x20 [ 135.965172][ T2058] ? __x64_sys_io_uring_setup+0x80/0x80 [ 135.965207][ T2058] ? __kasan_check_read+0x15/0x20 [ 135.965229][ T2058] __x64_sys_io_uring_setup+0x5f/0x80 [ 135.965264][ T2058] x64_sys_call+0x22c0/0x2ee0 [ 135.965284][ T2058] do_syscall_64+0x57/0xf0 [ 135.965325][ T2058] ? clear_bhb_loop+0x50/0xa0 [ 135.965361][ T2058] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.965391][ T2058] RIP: 0033:0x7ffbc299e0d9 [ 135.965408][ T2058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.965428][ T2058] RSP: 002b:00007ffbc380aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 135.965452][ T2058] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007ffbc299e0d9 [ 135.965469][ T2058] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 135.965484][ T2058] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 135.965500][ T2058] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 135.965517][ T2058] R13: 0000200000000b10 R14: 00007ffbc380afd8 R15: 0000000000000000 [ 135.965537][ T2058] [ 136.124130][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 136.191643][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.201358][ T65] usb 2-1: USB disconnect, device number 47 [ 136.208843][ T404] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 136.244556][ T2062] netlink: 'syz.4.614': attribute type 3 has an invalid length. [ 136.252305][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 136.257344][ T2062] netlink: 944 bytes leftover after parsing attributes in process `syz.4.614'. [ 136.280984][ T9] usb 1-1: device descriptor read/8, error -71 [ 136.329097][ T2069] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(3145732.0.0), cmd(3) [ 136.351371][ T2071] rust_binder: Write failure EFAULT in pid:249 [ 136.369788][ T404] usb 3-1: Using ep0 maxpacket: 32 [ 136.383379][ T404] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 136.391870][ T404] usb 3-1: config 0 has no interface number 0 [ 136.398036][ T404] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.410721][ T404] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.410761][ T9] usb 1-1: device descriptor read/8, error -71 [ 136.420081][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.434300][ T404] usb 3-1: Product: syz [ 136.438498][ T404] usb 3-1: Manufacturer: syz [ 136.443310][ T404] usb 3-1: SerialNumber: syz [ 136.449072][ T404] usb 3-1: config 0 descriptor?? [ 136.454572][ T2041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.468517][ T2079] FAULT_INJECTION: forcing a failure. [ 136.468517][ T2079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.481631][ T2079] CPU: 0 UID: 0 PID: 2079 Comm: syz.4.622 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 136.481670][ T2079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.481685][ T2079] Call Trace: [ 136.481693][ T2079] [ 136.481702][ T2079] __dump_stack+0x21/0x30 [ 136.481737][ T2079] dump_stack_lvl+0x140/0x1c0 [ 136.481775][ T2079] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.481797][ T2079] ? __cfi___ip_dev_find+0x10/0x10 [ 136.481833][ T2079] dump_stack+0x19/0x20 [ 136.481862][ T2079] should_fail_ex+0x3c2/0x510 [ 136.481887][ T2079] should_fail+0xf/0x20 [ 136.481911][ T2079] should_fail_usercopy+0x1e/0x30 [ 136.481930][ T2079] _copy_to_user+0x24/0xa0 [ 136.481951][ T2079] ip_mc_msfget+0x64d/0x860 [ 136.481997][ T2079] ? __cfi_ip_mc_msfget+0x10/0x10 [ 136.482028][ T2079] ? __cfi___check_object_size+0x10/0x10 [ 136.482054][ T2079] ? mutex_lock+0x97/0x1d0 [ 136.482076][ T2079] ? __kasan_check_write+0x18/0x20 [ 136.482110][ T2079] do_ip_getsockopt+0x154f/0x17b0 [ 136.482138][ T2079] ? __cfi_do_ip_getsockopt+0x10/0x10 [ 136.482163][ T2079] ? __cfi_bpf_lsm_inode_setintegrity+0x10/0x10 [ 136.482193][ T2079] ? _parse_integer_limit+0x195/0x1e0 [ 136.482228][ T2079] ? _parse_integer+0x2e/0x40 [ 136.482251][ T2079] ? avc_has_perm_noaudit+0x26b/0x360 [ 136.482278][ T2079] ? __asan_memcpy+0x5a/0x80 [ 136.482300][ T2079] ? avc_has_perm_noaudit+0x289/0x360 [ 136.482332][ T2079] ? avc_has_perm+0x155/0x240 [ 136.482350][ T2079] ? __cfi_avc_has_perm+0x10/0x10 [ 136.482369][ T2079] ip_getsockopt+0xbc/0x200 [ 136.482407][ T2079] ? __cfi_bpf_lsm_inode_setintegrity+0x10/0x10 [ 136.482436][ T2079] ? __cfi_bpf_lsm_inode_setintegrity+0x10/0x10 [ 136.482470][ T2079] ? __cfi_ip_getsockopt+0x10/0x10 [ 136.482487][ T2079] ? vfs_write+0xbcf/0xfd0 [ 136.482504][ T2079] tcp_getsockopt+0x106/0x130 [ 136.482534][ T2079] ? __cfi_vfs_write+0x10/0x10 [ 136.482559][ T2079] sock_common_getsockopt+0xaf/0xd0 [ 136.482586][ T2079] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 136.482618][ T2079] do_sock_getsockopt+0x3a4/0x6c0 [ 136.482635][ T2079] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 136.482650][ T2079] ? __fget_files+0x2bc/0x330 [ 136.482689][ T2079] __x64_sys_getsockopt+0x1d4/0x280 [ 136.482714][ T2079] x64_sys_call+0x10db/0x2ee0 [ 136.482734][ T2079] do_syscall_64+0x57/0xf0 [ 136.482764][ T2079] ? clear_bhb_loop+0x50/0xa0 [ 136.482786][ T2079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.482806][ T2079] RIP: 0033:0x7ffbc299e0d9 [ 136.482820][ T2079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.482853][ T2079] RSP: 002b:00007ffbc3907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 136.482877][ T2079] RAX: ffffffffffffffda RBX: 00007ffbc2c25fa0 RCX: 00007ffbc299e0d9 [ 136.482894][ T2079] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 136.482913][ T2079] RBP: 00007ffbc3907090 R08: 0000200000695ffc R09: 0000000000000000 [ 136.482924][ T2079] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.482947][ T2079] R13: 00007ffbc2c26038 R14: 00007ffbc2c25fa0 R15: 00007ffcfd6bce48 [ 136.482961][ T2079] [ 136.666802][ T2041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.805837][ T9] usb usb1-port1: unable to enumerate USB device [ 136.826826][ T2084] rust_binder: 2083:2084 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 136.856076][ T36] audit: type=1400 audit(1785961284.130:324): avc: denied { setopt } for pid=2087 comm="syz.4.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.969822][ T36] audit: type=1400 audit(1785961284.240:325): avc: denied { mounton } for pid=2100 comm="syz.1.632" path="/proc/413/task" dev="proc" ino=16101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.020187][ T404] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 137.043369][ T404] asix 3-1:0.188: probe with driver asix failed with error -32 [ 137.063393][ T404] usb 3-1: USB disconnect, device number 48 [ 137.088305][ T36] audit: type=1400 audit(1785961284.360:326): avc: denied { read } for pid=2109 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.123011][ T2112] rust_binder: 2111:2112 got transaction to invalid handle 2 [ 137.130646][ T2112] rust_binder: 2111:2112 transaction async to 0:0 failed ENOENT, code 0 size 88-24 [ 137.139847][ T36] audit: type=1400 audit(1785961284.360:327): avc: denied { setattr } for pid=2109 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 137.146473][ T45] rust_binder: 2111: undelivered TRANSACTION_ERROR: 29201 [ 137.231062][ T36] audit: type=1400 audit(1785961284.500:328): avc: denied { read } for pid=2119 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.375573][ T2130] kvm: user requested TSC rate below hardware speed [ 137.499781][ T404] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 137.619890][ T45] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 137.629776][ T404] usb 2-1: device descriptor read/64, error -71 [ 137.759827][ T45] usb 1-1: device descriptor read/64, error -71 [ 137.870284][ T404] usb 2-1: device descriptor read/64, error -71 [ 137.999799][ T45] usb 1-1: device descriptor read/64, error -71 [ 138.059845][ T569] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 138.109794][ T404] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 138.189804][ T569] usb 5-1: device descriptor read/64, error -71 [ 138.239828][ T45] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 138.247642][ T404] usb 2-1: device descriptor read/64, error -71 [ 138.379781][ T45] usb 1-1: device descriptor read/64, error -71 [ 138.429841][ T569] usb 5-1: device descriptor read/64, error -71 [ 138.469084][ T2142] input: syz1 as /devices/virtual/input/input13 [ 138.490324][ T404] usb 2-1: device descriptor read/64, error -71 [ 138.564682][ T36] audit: type=1400 audit(1785961285.840:329): avc: denied { audit_write } for pid=2149 comm="syz.2.655" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.585752][ T36] audit: type=1107 audit(1785961285.840:330): pid=2149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Tٲxy9HO5{|4 8bMhϾm [ 140.304984][ T2194] __dump_stack+0x21/0x30 [ 140.305011][ T2194] dump_stack_lvl+0x140/0x1c0 [ 140.305036][ T2194] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.305059][ T2194] ? __cfi___ip_dev_find+0x10/0x10 [ 140.305076][ T2194] dump_stack+0x19/0x20 [ 140.305097][ T2194] should_fail_ex+0x3c2/0x510 [ 140.305116][ T2194] should_fail+0xf/0x20 [ 140.305132][ T2194] should_fail_usercopy+0x1e/0x30 [ 140.305151][ T2194] _copy_to_user+0x24/0xa0 [ 140.305173][ T2194] ip_mc_msfget+0x64d/0x860 [ 140.305197][ T2194] ? __cfi_ip_mc_msfget+0x10/0x10 [ 140.305220][ T2194] ? __cfi___check_object_size+0x10/0x10 [ 140.305237][ T2194] ? mutex_lock+0x97/0x1d0 [ 140.305260][ T2194] ? __kasan_check_write+0x18/0x20 [ 140.305277][ T2194] do_ip_getsockopt+0x154f/0x17b0 [ 140.305296][ T2194] ? __cfi_do_ip_getsockopt+0x10/0x10 [ 140.305314][ T2194] ? __cfi_bpf_lsm_inode_setintegrity+0x10/0x10 [ 140.305337][ T2194] ? _parse_integer_limit+0x195/0x1e0 [ 140.305355][ T2194] ? _parse_integer+0x2e/0x40 [ 140.305370][ T2194] ? avc_has_perm_noaudit+0x26b/0x360 [ 140.305389][ T2194] ? __asan_memcpy+0x5a/0x80 [ 140.305406][ T2194] ? avc_has_perm_noaudit+0x289/0x360 [ 140.305425][ T2194] ? avc_has_perm+0x155/0x240 [ 140.305444][ T2194] ? __cfi_avc_has_perm+0x10/0x10 [ 140.305463][ T2194] ip_getsockopt+0xbc/0x200 [ 140.305481][ T2194] ? __cfi_bpf_lsm_inode_setintegrity+0x10/0x10 [ 140.305503][ T2194] ? __cfi_bpf_lsm_inode_setintegrity+0x10/0x10 [ 140.305524][ T2194] ? __cfi_ip_getsockopt+0x10/0x10 [ 140.305542][ T2194] ? vfs_write+0xbcf/0xfd0 [ 140.305559][ T2194] tcp_getsockopt+0x106/0x130 [ 140.305578][ T2194] ? __cfi_vfs_write+0x10/0x10 [ 140.305595][ T2194] sock_common_getsockopt+0xaf/0xd0 [ 140.305616][ T2194] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 140.305636][ T2194] do_sock_getsockopt+0x3a4/0x6c0 [ 140.305653][ T2194] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 140.305669][ T2194] ? __fget_files+0x2bc/0x330 [ 140.305689][ T2194] __x64_sys_getsockopt+0x1d4/0x280 [ 140.305707][ T2194] x64_sys_call+0x10db/0x2ee0 [ 140.305721][ T2194] do_syscall_64+0x57/0xf0 [ 140.305739][ T2194] ? clear_bhb_loop+0x50/0xa0 [ 140.305762][ T2194] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.305783][ T2194] RIP: 0033:0x7f688699e0d9 [ 140.305797][ T2194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.305811][ T2194] RSP: 002b:00007f6887831028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 140.305829][ T2194] RAX: ffffffffffffffda RBX: 00007f6886c25fa0 RCX: 00007f688699e0d9 [ 140.305842][ T2194] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 140.305852][ T2194] RBP: 00007f6887831090 R08: 0000200000695ffc R09: 0000000000000000 [ 140.305863][ T2194] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.305874][ T2194] R13: 00007f6886c26038 R14: 00007f6886c25fa0 R15: 00007fff2d45c388 [ 140.305889][ T2194] [ 140.663391][ T2198] netlink: 'syz.0.673': attribute type 27 has an invalid length. [ 140.733350][ T2202] netlink: 'syz.0.675': attribute type 27 has an invalid length. [ 140.753968][ T2202] x_tables: duplicate entry at hook 2 [ 140.759593][ T2202] rust_binder: 2201:2202 no such ref 0 [ 140.765625][ T2202] rust_binder: 2201:2202 no such ref 0 [ 140.774518][ T2202] rust_binder: 2201:2202 got transaction to invalid handle 1 [ 140.782184][ T2202] rust_binder: 2201:2202 transaction call to 0:0 failed ENOENT, code 0 size 80-24 [ 140.791816][ T2202] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 140.791837][ T2202] rust_binder: Read failure Err(EFAULT) in pid:393 [ 140.800607][ T2202] rust_binder: Write failure EFAULT in pid:393 [ 140.807570][ T9] rust_binder: 2201: undelivered TRANSACTION_ERROR: 29201 [ 140.823135][ T45] wacom 0003:056A:033B.001D: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 140.848596][ T45] wacom 0003:056A:033B.001D: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 140.868976][ T45] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.001D/input/input14 [ 141.169809][ T45] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 141.331154][ T45] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 141.339328][ T45] usb 2-1: config 0 has no interface number 0 [ 141.345518][ T45] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 141.356492][ T45] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.367895][ T45] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 141.377218][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.385300][ T45] usb 2-1: Product: syz [ 141.389571][ T45] usb 2-1: Manufacturer: syz [ 141.394270][ T45] usb 2-1: SerialNumber: syz [ 141.399642][ T45] usb 2-1: config 0 descriptor?? [ 141.405021][ T2209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.413540][ T45] usb-storage 2-1:0.20: USB Mass Storage device detected [ 141.421429][ T45] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 141.474937][ T9] usb 3-1: USB disconnect, device number 49 [ 141.614645][ T45] usb 2-1: USB disconnect, device number 52 [ 142.018704][ T2263] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.028354][ T2263] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.077840][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 142.077858][ T36] audit: type=1400 audit(1785961289.350:339): avc: denied { mounton } for pid=2265 comm="syz.4.693" path="/101/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 142.134975][ T36] audit: type=1400 audit(1785961289.410:340): avc: denied { setattr } for pid=2269 comm="syz.1.695" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 142.169453][ T36] audit: type=1400 audit(1785961289.440:341): avc: denied { setattr } for pid=2271 comm="syz.1.696" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 142.249787][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 142.318617][ T36] audit: type=1326 audit(1785961289.590:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2274 comm="syz.0.697" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1448f9e0d9 code=0x0 [ 142.350237][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 142.399774][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 142.406036][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 142.414415][ T45] usb 3-1: config 0 has no interface number 0 [ 142.420709][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 142.430959][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 142.442440][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 142.451574][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.459579][ T45] usb 3-1: Product: syz [ 142.463780][ T45] usb 3-1: Manufacturer: syz [ 142.468418][ T45] usb 3-1: SerialNumber: syz [ 142.473789][ T45] usb 3-1: config 0 descriptor?? [ 142.479038][ T2261] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.486460][ T2261] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.509781][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 142.516190][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 142.524611][ T10] usb 5-1: config 0 has no interface number 0 [ 142.532367][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.541485][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.549588][ T10] usb 5-1: Product: syz [ 142.553831][ T10] usb 5-1: Manufacturer: syz [ 142.558456][ T10] usb 5-1: SerialNumber: syz [ 142.563978][ T10] usb 5-1: config 0 descriptor?? [ 142.570073][ T10] smsc95xx v2.0.0 [ 142.696404][ T2261] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.703917][ T2261] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.717364][ T2278] usb usb7: usbfs: process 2278 (syz.1.698) did not claim interface 0 before use [ 142.741651][ T2280] netlink: 'syz.1.699': attribute type 27 has an invalid length. [ 142.750736][ T2280] FAULT_INJECTION: forcing a failure. [ 142.750736][ T2280] name failslab, interval 1, probability 0, space 0, times 0 [ 142.763499][ T2280] CPU: 0 UID: 0 PID: 2280 Comm: syz.1.699 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 142.763533][ T2280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.763551][ T2280] Call Trace: [ 142.763559][ T2280] [ 142.763574][ T2280] __dump_stack+0x21/0x30 [ 142.763601][ T2280] dump_stack_lvl+0x140/0x1c0 [ 142.763639][ T2280] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.763681][ T2280] dump_stack+0x19/0x20 [ 142.763711][ T2280] should_fail_ex+0x3c2/0x510 [ 142.763737][ T2280] should_failslab+0xac/0x100 [ 142.763757][ T2280] kmem_cache_alloc_node_noprof+0x45/0x420 [ 142.763776][ T2280] ? __alloc_skb+0x10c/0x360 [ 142.763822][ T2280] __alloc_skb+0x10c/0x360 [ 142.763854][ T2280] rtmsg_ifinfo_build_skb+0x7a/0x270 [ 142.763881][ T2280] rtmsg_ifinfo+0x91/0x1a0 [ 142.763907][ T2280] netdev_state_change+0x19a/0x240 [ 142.763924][ T2280] ? __cfi_netdev_state_change+0x10/0x10 [ 142.763962][ T2280] ? dev_change_flags+0xe7/0x1b0 [ 142.763988][ T2280] do_setlink+0x1051/0x41e0 [ 142.764024][ T2280] ? __cfi__printk+0x10/0x10 [ 142.764044][ T2280] ? nlmsg_parse_deprecated_strict+0x130/0x130 [ 142.764067][ T2280] ? kasan_save_track+0x4f/0x80 [ 142.764100][ T2280] ? kasan_save_alloc_info+0x3a/0x50 [ 142.764134][ T2280] ? __kasan_kmalloc+0x96/0xb0 [ 142.764160][ T2280] ? __kmalloc_cache_noprof+0x23c/0x470 [ 142.764190][ T2280] ? __nla_validate+0x70/0x70 [ 142.764215][ T2280] ? irqentry_exit+0x4a/0x60 [ 142.764230][ T2280] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 142.764278][ T2280] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 142.764312][ T2280] rtnl_newlink+0x10ec/0x2220 [ 142.764340][ T2280] ? rtnl_newlink+0xb31/0x2220 [ 142.764360][ T2280] ? __cfi_rtnl_newlink+0x10/0x10 [ 142.764378][ T2280] ? cred_has_capability+0x296/0x3a0 [ 142.764415][ T2280] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 142.764442][ T2280] ? selinux_perf_event_alloc+0x110/0x110 [ 142.764468][ T2280] ? stack_trace_save+0xaa/0x100 [ 142.764493][ T2280] ? __cfi_mutex_lock+0x10/0x10 [ 142.764515][ T2280] ? ns_capable+0x90/0xf0 [ 142.764556][ T2280] ? netlink_net_capable+0x129/0x160 [ 142.764590][ T2280] ? __cfi_rtnl_newlink+0x10/0x10 [ 142.764621][ T2280] rtnetlink_rcv_msg+0x8c1/0xa40 [ 142.764643][ T2280] ? __asan_memcpy+0x5a/0x80 [ 142.764664][ T2280] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 142.764702][ T2280] ? avc_has_perm+0x155/0x240 [ 142.764730][ T2280] netlink_rcv_skb+0x24d/0x4e0 [ 142.764752][ T2280] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 142.764785][ T2280] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 142.764800][ T2280] ? selinux_netlink_send+0x7df/0x8b0 [ 142.764823][ T2280] ? netlink_autobind+0x1c0/0x1c0 [ 142.764860][ T2280] ? is_vmalloc_addr+0x11/0x40 [ 142.764891][ T2280] rtnetlink_rcv+0x20/0x30 [ 142.764919][ T2280] netlink_unicast+0x8bc/0xa70 [ 142.764955][ T2280] netlink_sendmsg+0x7d1/0xad0 [ 142.764972][ T2280] ? __cfi_netlink_sendmsg+0x10/0x10 [ 142.765006][ T2280] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 142.765033][ T2280] ? security_socket_sendmsg+0x3d/0x100 [ 142.765063][ T2280] ____sys_sendmsg+0x9a1/0xa00 [ 142.765091][ T2280] ? __import_iovec+0x5b9/0x7d0 [ 142.765114][ T2280] ? __sys_sendmsg_sock+0x50/0x50 [ 142.765132][ T2280] ? import_iovec+0x80/0xb0 [ 142.765178][ T2280] ___sys_sendmsg+0x2a6/0x370 [ 142.765202][ T2280] ? __sys_sendmsg+0x2a0/0x2a0 [ 142.765224][ T2280] ? proc_fail_nth_write+0x184/0x220 [ 142.765255][ T2280] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 142.765282][ T2280] ? __fget_files+0x2bc/0x330 [ 142.765322][ T2280] __x64_sys_sendmsg+0x206/0x2e0 [ 142.765346][ T2280] ? fput+0x1a4/0x230 [ 142.765374][ T2280] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 142.765399][ T2280] ? ksys_write+0x1f3/0x260 [ 142.765416][ T2280] ? __kasan_check_read+0x15/0x20 [ 142.765433][ T2280] x64_sys_call+0x2a4c/0x2ee0 [ 142.765462][ T2280] do_syscall_64+0x57/0xf0 [ 142.765488][ T2280] ? clear_bhb_loop+0x50/0xa0 [ 142.765518][ T2280] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.765549][ T2280] RIP: 0033:0x7f688699e0d9 [ 142.765563][ T2280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.765577][ T2280] RSP: 002b:00007f6887831028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.765596][ T2280] RAX: ffffffffffffffda RBX: 00007f6886c25fa0 RCX: 00007f688699e0d9 [ 142.765628][ T2280] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 142.765643][ T2280] RBP: 00007f6887831090 R08: 0000000000000000 R09: 0000000000000000 [ 142.765663][ T2280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.765677][ T2280] R13: 00007f6886c26038 R14: 00007f6886c25fa0 R15: 00007fff2d45c388 [ 142.765700][ T2280] [ 143.244090][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 143.254891][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.264225][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 143.267936][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 143.275129][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 143.296961][ T10] usb 5-1: USB disconnect, device number 31 [ 143.410828][ T2304] FAULT_INJECTION: forcing a failure. [ 143.410828][ T2304] name failslab, interval 1, probability 0, space 0, times 0 [ 143.423796][ T2304] CPU: 1 UID: 0 PID: 2304 Comm: syz.4.704 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 143.423832][ T2304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.423848][ T2304] Call Trace: [ 143.423856][ T2304] [ 143.423866][ T2304] __dump_stack+0x21/0x30 [ 143.423907][ T2304] dump_stack_lvl+0x140/0x1c0 [ 143.423940][ T2304] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.423975][ T2304] ? kasan_save_alloc_info+0x3a/0x50 [ 143.424011][ T2304] dump_stack+0x19/0x20 [ 143.424043][ T2304] should_fail_ex+0x3c2/0x510 [ 143.424070][ T2304] should_failslab+0xac/0x100 [ 143.424108][ T2304] __kmalloc_cache_noprof+0x41/0x470 [ 143.424134][ T2304] ? file_init_path+0x3b/0x590 [ 143.424166][ T2304] ? io_uring_alloc_task_context+0xbe/0x6b0 [ 143.424193][ T2304] ? __asan_memcpy+0x5a/0x80 [ 143.424218][ T2304] io_uring_alloc_task_context+0xbe/0x6b0 [ 143.424245][ T2304] ? alloc_file_pseudo+0x191/0x1f0 [ 143.424277][ T2304] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 143.424304][ T2304] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 143.424336][ T2304] ? anon_inode_make_secure_inode+0xf5/0x150 [ 143.424371][ T2304] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 143.424408][ T2304] __io_uring_add_tctx_node+0x324/0x590 [ 143.424438][ T2304] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 143.424468][ T2304] ? anon_inode_create_getfile+0x3f/0x50 [ 143.424502][ T2304] io_uring_create+0xc78/0x13f0 [ 143.424529][ T2304] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 143.424562][ T2304] ? __kasan_check_write+0x18/0x20 [ 143.424586][ T2304] ? __x64_sys_io_uring_setup+0x80/0x80 [ 143.424622][ T2304] ? __kasan_check_read+0x15/0x20 [ 143.424647][ T2304] __x64_sys_io_uring_setup+0x5f/0x80 [ 143.424680][ T2304] x64_sys_call+0x22c0/0x2ee0 [ 143.424701][ T2304] do_syscall_64+0x57/0xf0 [ 143.424729][ T2304] ? clear_bhb_loop+0x50/0xa0 [ 143.424762][ T2304] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.424793][ T2304] RIP: 0033:0x7ffbc299e0d9 [ 143.424814][ T2304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.424846][ T2304] RSP: 002b:00007ffbc380aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 143.424871][ T2304] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007ffbc299e0d9 [ 143.424890][ T2304] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 143.424907][ T2304] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 143.424923][ T2304] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 143.424940][ T2304] R13: 0000200000000b10 R14: 00007ffbc380afd8 R15: 0000000000000000 [ 143.424960][ T2304] [ 143.749761][ T569] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 143.769572][ T2315] FAULT_INJECTION: forcing a failure. [ 143.769572][ T2315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.783093][ T2315] CPU: 1 UID: 0 PID: 2315 Comm: syz.4.709 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 143.783130][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.783146][ T2315] Call Trace: [ 143.783154][ T2315] [ 143.783165][ T2315] __dump_stack+0x21/0x30 [ 143.783215][ T2315] dump_stack_lvl+0x140/0x1c0 [ 143.783248][ T2315] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.783281][ T2315] ? unwind_get_return_address+0x51/0x90 [ 143.783313][ T2315] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 143.783343][ T2315] dump_stack+0x19/0x20 [ 143.783374][ T2315] should_fail_ex+0x3c2/0x510 [ 143.783403][ T2315] should_fail+0xf/0x20 [ 143.783427][ T2315] should_fail_usercopy+0x1e/0x30 [ 143.783456][ T2315] _copy_from_user+0x20/0xa0 [ 143.783487][ T2315] ___sys_recvmsg+0x174/0x590 [ 143.783515][ T2315] ? __sys_recvmsg+0x2a0/0x2a0 [ 143.783540][ T2315] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 143.783567][ T2315] ? selinux_file_permission+0x318/0xb60 [ 143.783596][ T2315] do_recvmmsg+0x36d/0x7f0 [ 143.783623][ T2315] ? __sys_recvmmsg+0x2a0/0x2a0 [ 143.783648][ T2315] ? __cfi_vfs_write+0x10/0x10 [ 143.783674][ T2315] ? _copy_from_user+0x87/0xa0 [ 143.783708][ T2315] __x64_sys_recvmmsg+0x1b8/0x250 [ 143.783735][ T2315] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 143.783762][ T2315] ? __kasan_check_read+0x15/0x20 [ 143.783787][ T2315] x64_sys_call+0x292c/0x2ee0 [ 143.783809][ T2315] do_syscall_64+0x57/0xf0 [ 143.783836][ T2315] ? clear_bhb_loop+0x50/0xa0 [ 143.783868][ T2315] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.783900][ T2315] RIP: 0033:0x7ffbc299e0d9 [ 143.783920][ T2315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.783942][ T2315] RSP: 002b:00007ffbc3907028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.783966][ T2315] RAX: ffffffffffffffda RBX: 00007ffbc2c25fa0 RCX: 00007ffbc299e0d9 [ 143.783983][ T2315] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 143.783999][ T2315] RBP: 00007ffbc3907090 R08: 0000200000003700 R09: 0000000000000000 [ 143.784014][ T2315] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 143.784028][ T2315] R13: 00007ffbc2c26038 R14: 00007ffbc2c25fa0 R15: 00007ffcfd6bce48 [ 143.784049][ T2315] [ 143.797702][ T2317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 143.909779][ T569] usb 2-1: Using ep0 maxpacket: 32 [ 143.956924][ T2322] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 143.969338][ T569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.058422][ T569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.068503][ T569] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.080207][ T569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.098167][ T569] usb 2-1: config 0 descriptor?? [ 144.104657][ T569] hub 2-1:0.0: USB hub found [ 144.174238][ T2329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.305284][ T569] hub 2-1:0.0: 1 port detected [ 144.456831][ T36] audit: type=1400 audit(1785961291.730:343): avc: denied { mount } for pid=2344 comm="syz.4.717" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 144.478439][ T36] audit: type=1400 audit(1785961291.740:344): avc: denied { mounton } for pid=2344 comm="syz.4.717" path="/file0" dev="bpf" ino=17748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 144.533148][ T36] audit: type=1400 audit(1785961291.810:345): avc: denied { create } for pid=2348 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.779788][ T310] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 144.913756][ T569] hub 2-1:0.0: activate --> -90 [ 144.929789][ T310] usb 5-1: Using ep0 maxpacket: 8 [ 144.935993][ T310] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 144.950044][ T310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 144.959329][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.967461][ T310] usb 5-1: SerialNumber: syz [ 145.076869][ T2354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.177165][ T36] audit: type=1400 audit(1785961292.450:346): avc: denied { write } for pid=2348 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.197576][ T310] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 145.206408][ T310] usb-storage 5-1:1.0: USB Mass Storage device detected [ 145.214499][ T310] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 145.223825][ T36] audit: type=1400 audit(1785961292.500:347): avc: denied { execmem } for pid=2360 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.272361][ T310] usb 5-1: USB disconnect, device number 32 [ 145.302856][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 145.316312][ T587] usb 2-1: USB disconnect, device number 53 [ 145.322331][ T569] usb 2-1-port1: config error [ 145.331114][ T45] asix 3-1:0.34: probe with driver asix failed with error -71 [ 145.341607][ T45] usb 3-1: USB disconnect, device number 50 [ 145.357456][ T36] audit: type=1400 audit(1785961292.630:348): avc: denied { map } for pid=2360 comm="syz.0.723" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.730312][ T312] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 145.859765][ T312] usb 1-1: device descriptor read/64, error -71 [ 146.099790][ T312] usb 1-1: device descriptor read/64, error -71 [ 146.139781][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 146.150130][ T45] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 146.291033][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.300146][ T10] usb 3-1: config 0 has no interface number 0 [ 146.306366][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.311428][ T45] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 146.317591][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.333306][ T45] usb 5-1: config 0 has no interface number 0 [ 146.338592][ T2412] FAULT_INJECTION: forcing a failure. [ 146.338592][ T2412] name failslab, interval 1, probability 0, space 0, times 0 [ 146.350178][ T45] usb 5-1: config 0 interface 235 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.354150][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 146.369828][ T45] usb 5-1: config 0 interface 235 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.374536][ T312] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 146.389939][ T45] usb 5-1: config 0 interface 235 has no altsetting 0 [ 146.394593][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.406366][ T45] usb 5-1: New USB device found, idVendor=e57f, idProduct=ffff, bcdDevice= 0.00 [ 146.407317][ T2412] CPU: 0 UID: 0 PID: 2412 Comm: syz.1.737 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 146.407410][ T2412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.407452][ T2412] Call Trace: [ 146.407473][ T2412] [ 146.407495][ T2412] __dump_stack+0x21/0x30 [ 146.407596][ T2412] dump_stack_lvl+0x140/0x1c0 [ 146.407677][ T2412] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.407752][ T2412] ? kasan_save_alloc_info+0x3a/0x50 [ 146.407844][ T2412] dump_stack+0x19/0x20 [ 146.407917][ T2412] should_fail_ex+0x3c2/0x510 [ 146.407991][ T2412] should_failslab+0xac/0x100 [ 146.408064][ T2412] __kmalloc_cache_noprof+0x41/0x470 [ 146.408133][ T2412] ? file_init_path+0x3b/0x590 [ 146.408242][ T2412] ? io_uring_alloc_task_context+0xbe/0x6b0 [ 146.408319][ T2412] ? __asan_memcpy+0x5a/0x80 [ 146.408372][ T2412] io_uring_alloc_task_context+0xbe/0x6b0 [ 146.408435][ T2412] ? alloc_file_pseudo+0x191/0x1f0 [ 146.408516][ T2412] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 146.408579][ T2412] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 146.408664][ T2412] ? anon_inode_make_secure_inode+0xf5/0x150 [ 146.408772][ T2412] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 146.408860][ T2412] __io_uring_add_tctx_node+0x324/0x590 [ 146.408934][ T2412] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 146.409007][ T2412] ? anon_inode_create_getfile+0x3f/0x50 [ 146.409090][ T2412] io_uring_create+0xc78/0x13f0 [ 146.409152][ T2412] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 146.409242][ T2412] ? __kasan_check_write+0x18/0x20 [ 146.409304][ T2412] ? __x64_sys_io_uring_setup+0x80/0x80 [ 146.409388][ T2412] ? __kasan_check_read+0x15/0x20 [ 146.409449][ T2412] __x64_sys_io_uring_setup+0x5f/0x80 [ 146.409531][ T2412] x64_sys_call+0x22c0/0x2ee0 [ 146.409613][ T2412] do_syscall_64+0x57/0xf0 [ 146.409693][ T2412] ? clear_bhb_loop+0x50/0xa0 [ 146.409771][ T2412] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.409854][ T2412] RIP: 0033:0x7f688699e0d9 [ 146.409905][ T2412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.409958][ T2412] RSP: 002b:00007f6887786ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 146.410024][ T2412] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f688699e0d9 [ 146.410076][ T2412] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 146.410118][ T2412] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 146.410159][ T2412] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 146.410201][ T2412] R13: 0000200000000b10 R14: 00007f6887786fd8 R15: 0000000000000000 [ 146.410261][ T2412] [ 146.462001][ T10] usb 3-1: config 0 descriptor?? [ 146.476818][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.544574][ T312] usb 1-1: device descriptor read/64, error -71 [ 146.547613][ T45] usb 5-1: config 0 descriptor?? [ 146.728537][ T2422] rust_binder: Write failure EFAULT in pid:469 [ 146.799802][ T312] usb 1-1: device descriptor read/64, error -71 [ 146.886549][ T10] prodikeys 0003:041E:2801.001E: collection stack underflow [ 146.899782][ T10] prodikeys 0003:041E:2801.001E: item 0 1 0 12 parsing failed [ 146.914403][ T10] prodikeys 0003:041E:2801.001E: hid parse failed [ 146.929204][ T312] usb usb1-port1: attempt power cycle [ 146.939772][ T10] prodikeys 0003:041E:2801.001E: probe with driver prodikeys failed with error -22 [ 146.955626][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.965234][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.975648][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.984175][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.088635][ T2397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.097343][ T2397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.105779][ T2397] netlink: 140 bytes leftover after parsing attributes in process `syz.2.733'. [ 147.116709][ T310] usb 3-1: USB disconnect, device number 51 [ 147.194118][ T45] hid-generic 0003:E57F:FFFF.001F: unknown main item tag 0x0 [ 147.201681][ T45] hid-generic 0003:E57F:FFFF.001F: unknown main item tag 0x0 [ 147.209098][ T45] hid-generic 0003:E57F:FFFF.001F: unknown main item tag 0x0 [ 147.216672][ T45] hid-generic 0003:E57F:FFFF.001F: unknown main item tag 0x0 [ 147.224255][ T45] hid-generic 0003:E57F:FFFF.001F: unbalanced collection at end of report description [ 147.234243][ T45] hid-generic 0003:E57F:FFFF.001F: probe with driver hid-generic failed with error -22 [ 147.289800][ T312] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 147.289800][ T587] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 147.320811][ T312] usb 1-1: device descriptor read/8, error -71 [ 147.439771][ T587] usb 2-1: Using ep0 maxpacket: 16 [ 147.446389][ T587] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 147.454582][ T587] usb 2-1: config 0 has no interface number 0 [ 147.459996][ T10] usb 5-1: USB disconnect, device number 33 [ 147.460862][ T587] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 147.470312][ T312] usb 1-1: device descriptor read/8, error -71 [ 147.477124][ T587] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 147.495473][ T587] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 147.504639][ T587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.512671][ T587] usb 2-1: Product: syz [ 147.516848][ T587] usb 2-1: Manufacturer: syz [ 147.521484][ T587] usb 2-1: SerialNumber: syz [ 147.526961][ T587] usb 2-1: config 0 descriptor?? [ 147.532303][ T2429] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 147.539597][ T2429] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 147.729783][ T312] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 147.748473][ T2429] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 147.755839][ T2429] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 147.764111][ T312] usb 1-1: device descriptor read/8, error -71 [ 147.879797][ T45] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 147.900885][ T312] usb 1-1: device descriptor read/8, error -71 [ 147.963544][ T587] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 147.996063][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 147.996081][ T36] audit: type=1400 audit(1785961295.270:351): avc: denied { write } for pid=2434 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.029844][ T312] usb usb1-port1: unable to enumerate USB device [ 148.041875][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 148.049558][ T45] usb 3-1: can't read configurations, error -61 [ 148.180045][ T45] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 148.309782][ T310] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 148.331322][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 148.338968][ T45] usb 3-1: can't read configurations, error -61 [ 148.345454][ T45] usb usb3-port1: attempt power cycle [ 148.460994][ T310] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 148.469130][ T310] usb 5-1: config 0 has no interface number 0 [ 148.475282][ T310] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.486389][ T310] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.496271][ T310] usb 5-1: config 0 interface 15 has no altsetting 0 [ 148.503029][ T310] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 148.513510][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.523192][ T310] usb 5-1: config 0 descriptor?? [ 148.533838][ T310] usbhid 5-1:0.15: fixing wrong optional hid class descriptors count [ 148.545932][ T2440] FAULT_INJECTION: forcing a failure. [ 148.545932][ T2440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.559051][ T2440] CPU: 1 UID: 0 PID: 2440 Comm: syz.0.745 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 148.559083][ T2440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.559097][ T2440] Call Trace: [ 148.559105][ T2440] [ 148.559114][ T2440] __dump_stack+0x21/0x30 [ 148.559148][ T2440] dump_stack_lvl+0x140/0x1c0 [ 148.559185][ T2440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.559219][ T2440] ? __kasan_check_read+0x15/0x20 [ 148.559244][ T2440] ? vmx_read_guest_seg_ar+0x179/0x350 [ 148.559276][ T2440] dump_stack+0x19/0x20 [ 148.559308][ T2440] should_fail_ex+0x3c2/0x510 [ 148.559337][ T2440] should_fail+0xf/0x20 [ 148.559361][ T2440] should_fail_usercopy+0x1e/0x30 [ 148.559390][ T2440] __kvm_read_guest_page+0x177/0x210 [ 148.559417][ T2440] kvm_vcpu_read_guest_page+0x31c/0x400 [ 148.559446][ T2440] kvm_fetch_guest_virt+0x146/0x190 [ 148.559483][ T2440] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 148.559520][ T2440] __do_insn_fetch_bytes+0x57a/0x740 [ 148.559546][ T2440] ? x86_decode_insn+0x50b0/0x50b0 [ 148.559579][ T2440] ? kvm_io_bus_read+0x295/0x5e0 [ 148.559609][ T2440] ? __asan_memcpy+0x5a/0x80 [ 148.559634][ T2440] x86_decode_insn+0x326/0x50b0 [ 148.559664][ T2440] ? __cfi_x86_decode_insn+0x10/0x10 [ 148.559689][ T2440] ? __kasan_check_write+0x18/0x20 [ 148.559711][ T2440] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 148.559741][ T2440] ? __asan_memset+0x39/0x50 [ 148.559765][ T2440] ? init_decode_cache+0x7c/0x90 [ 148.559789][ T2440] ? init_emulate_ctxt+0x403/0x540 [ 148.559818][ T2440] ? kvm_inject_realmode_interrupt+0x2d0/0x2d0 [ 148.559849][ T2440] ? __kasan_check_write+0x18/0x20 [ 148.559874][ T2440] x86_decode_emulated_instruction+0x66/0x180 [ 148.559904][ T2440] x86_emulate_instruction+0x2d7/0x19f0 [ 148.559936][ T2440] ? is_bpf_text_address+0x17b/0x1a0 [ 148.559973][ T2440] handle_ud+0x199/0x330 [ 148.559998][ T2440] ? __cfi_handle_ud+0x10/0x10 [ 148.560023][ T2440] ? unwind_get_return_address+0x51/0x90 [ 148.560055][ T2440] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 148.560089][ T2440] ? clear_bhb_loop+0x50/0xa0 [ 148.560122][ T2440] ? clear_bhb_loop+0x50/0xa0 [ 148.560154][ T2440] ? clear_bhb_loop+0x50/0xa0 [ 148.560186][ T2440] ? clear_bhb_loop+0x50/0xa0 [ 148.560217][ T2440] ? clear_bhb_loop+0x12/0xa0 [ 148.560249][ T2440] handle_exception_nmi+0x194/0xe60 [ 148.560276][ T2440] ? __cfi_handle_exception_nmi+0x10/0x10 [ 148.560302][ T2440] vmx_handle_exit+0x1379/0x1c00 [ 148.560338][ T2440] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 148.560372][ T2440] ? vmx_do_interrupt_irqoff+0x17/0x20 [ 148.560403][ T2440] vcpu_run+0x4c14/0x7830 [ 148.560449][ T2440] ? signal_pending+0xc0/0xc0 [ 148.560482][ T2440] ? complete_emulated_mmio+0x4ef/0x790 [ 148.560514][ T2440] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 148.560547][ T2440] ? _parse_integer_limit+0x195/0x1e0 [ 148.560582][ T2440] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 148.560616][ T2440] ? kstrtoull+0x13b/0x1e0 [ 148.560640][ T2440] ? kstrtouint+0x78/0xf0 [ 148.560664][ T2440] ? ioctl_has_perm+0x1bc/0x500 [ 148.560687][ T2440] ? __asan_memcpy+0x5a/0x80 [ 148.560711][ T2440] ? ioctl_has_perm+0x408/0x500 [ 148.560734][ T2440] ? has_cap_mac_admin+0xd0/0xd0 [ 148.560757][ T2440] ? __kasan_check_write+0x18/0x20 [ 148.560781][ T2440] ? mutex_lock_killable+0x97/0x1d0 [ 148.560817][ T2440] ? __cfi_mutex_lock_killable+0x10/0x10 [ 148.560851][ T2440] ? proc_fail_nth_write+0x184/0x220 [ 148.560886][ T2440] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 148.560921][ T2440] ? _raw_spin_lock_irq+0x93/0x120 [ 148.560949][ T2440] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 148.560978][ T2440] kvm_vcpu_ioctl+0xa43/0x1000 [ 148.561002][ T2440] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 148.561026][ T2440] ? __cfi_vfs_write+0x10/0x10 [ 148.561050][ T2440] ? __kasan_check_write+0x18/0x20 [ 148.561073][ T2440] ? mutex_unlock+0x90/0x240 [ 148.561105][ T2440] ? __cfi_mutex_unlock+0x10/0x10 [ 148.561142][ T2440] ? bpf_lsm_file_ioctl+0xd/0x20 [ 148.561173][ T2440] ? security_file_ioctl+0x3e/0x110 [ 148.561209][ T2440] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 148.561232][ T2440] __se_sys_ioctl+0x135/0x1b0 [ 148.561262][ T2440] __x64_sys_ioctl+0x7f/0xa0 [ 148.561290][ T2440] x64_sys_call+0x1878/0x2ee0 [ 148.561313][ T2440] do_syscall_64+0x57/0xf0 [ 148.561339][ T2440] ? clear_bhb_loop+0x50/0xa0 [ 148.561372][ T2440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.561404][ T2440] RIP: 0033:0x7f1448f9e0d9 [ 148.561425][ T2440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.561446][ T2440] RSP: 002b:00007f1449e29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.561471][ T2440] RAX: ffffffffffffffda RBX: 00007f1449225fa0 RCX: 00007f1448f9e0d9 [ 148.561491][ T2440] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 148.561506][ T2440] RBP: 00007f1449e29090 R08: 0000000000000000 R09: 0000000000000000 [ 148.561522][ T2440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.561538][ T2440] R13: 00007f1449226038 R14: 00007f1449225fa0 R15: 00007ffe8a4c0608 [ 148.561559][ T2440] [ 149.055897][ T310] usbhid 5-1:0.15: can't add hid device: -71 [ 149.062033][ T310] usbhid 5-1:0.15: probe with driver usbhid failed with error -71 [ 149.072788][ T310] usb 5-1: USB disconnect, device number 34 [ 149.109857][ T45] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 149.132026][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 149.139684][ T45] usb 3-1: can't read configurations, error -61 [ 149.144814][ T2450] syzkaller1: entered promiscuous mode [ 149.151800][ T2450] syzkaller1: entered allmulticast mode [ 149.173065][ T36] audit: type=1400 audit(1785961296.450:352): avc: denied { connect } for pid=2451 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.193040][ T36] audit: type=1400 audit(1785961296.450:353): avc: denied { ioctl } for pid=2451 comm="syz.0.748" path="socket:[19684]" dev="sockfs" ino=19684 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.204155][ T2453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.227668][ T2453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.235566][ T312] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 149.279794][ T45] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 149.301569][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 149.309324][ T45] usb 3-1: can't read configurations, error -61 [ 149.316148][ T45] usb usb3-port1: unable to enumerate USB device [ 149.439786][ T404] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 149.439852][ T312] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 149.463033][ T2465] FAULT_INJECTION: forcing a failure. [ 149.463033][ T2465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.476302][ T2465] CPU: 0 UID: 0 PID: 2465 Comm: syz.4.752 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 149.476337][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.476352][ T2465] Call Trace: [ 149.476360][ T2465] [ 149.476370][ T2465] __dump_stack+0x21/0x30 [ 149.476404][ T2465] dump_stack_lvl+0x140/0x1c0 [ 149.476427][ T2465] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.476471][ T2465] ? vfs_write+0xbcf/0xfd0 [ 149.476496][ T2465] dump_stack+0x19/0x20 [ 149.476531][ T2465] should_fail_ex+0x3c2/0x510 [ 149.476550][ T2465] should_fail+0xf/0x20 [ 149.476566][ T2465] should_fail_usercopy+0x1e/0x30 [ 149.476586][ T2465] _copy_from_user+0x20/0xa0 [ 149.476630][ T2465] get_timespec64+0x97/0x1b0 [ 149.476662][ T2465] ? __cfi_get_timespec64+0x10/0x10 [ 149.476694][ T2465] __x64_sys_recvmmsg+0x14c/0x250 [ 149.476726][ T2465] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 149.476758][ T2465] ? __kasan_check_read+0x15/0x20 [ 149.476786][ T2465] x64_sys_call+0x292c/0x2ee0 [ 149.476806][ T2465] do_syscall_64+0x57/0xf0 [ 149.476839][ T2465] ? clear_bhb_loop+0x50/0xa0 [ 149.476862][ T2465] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.476884][ T2465] RIP: 0033:0x7ffbc299e0d9 [ 149.476913][ T2465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.476935][ T2465] RSP: 002b:00007ffbc3907028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 149.476959][ T2465] RAX: ffffffffffffffda RBX: 00007ffbc2c25fa0 RCX: 00007ffbc299e0d9 [ 149.476977][ T2465] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 149.476996][ T2465] RBP: 00007ffbc3907090 R08: 0000200000003700 R09: 0000000000000000 [ 149.477007][ T2465] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 149.477017][ T2465] R13: 00007ffbc2c26038 R14: 00007ffbc2c25fa0 R15: 00007ffcfd6bce48 [ 149.477031][ T2465] [ 149.569860][ T404] usb 1-1: device descriptor read/64, error -71 [ 149.919815][ T404] usb 1-1: device descriptor read/64, error -71 [ 149.934704][ T36] audit: type=1400 audit(1785961297.210:354): avc: denied { lock } for pid=2470 comm="syz.4.754" path="socket:[19885]" dev="sockfs" ino=19885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 150.078145][ T587] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 150.088513][ T587] asix 2-1:0.34: probe with driver asix failed with error -71 [ 150.095249][ T36] audit: type=1400 audit(1785961297.360:355): avc: denied { mounton } for pid=2470 comm="syz.4.754" path="/133/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.100736][ T587] usb 2-1: USB disconnect, device number 54 [ 150.159813][ T404] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 150.289777][ T404] usb 1-1: device descriptor read/64, error -71 [ 150.529781][ T404] usb 1-1: device descriptor read/64, error -71 [ 150.598137][ T36] audit: type=1400 audit(1785961297.870:356): avc: denied { getopt } for pid=2475 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.631854][ T2481] dummy_hcd dummy_hcd.0: remove, state 1 [ 150.637617][ T2481] usb usb1: USB disconnect, device number 1 [ 150.640018][ T404] usb usb1-port1: attempt power cycle [ 150.653490][ T2481] dummy_hcd dummy_hcd.0: stopped [ 150.667815][ T2481] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 150.698481][ T2487] netlink: 364 bytes leftover after parsing attributes in process `syz.1.759'. [ 150.760706][ T36] audit: type=1400 audit(1785961298.040:357): avc: denied { mount } for pid=2490 comm="syz.1.761" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 151.079775][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 151.248328][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.259305][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.271558][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.284888][ T9] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 151.293995][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.303182][ T9] usb 3-1: config 0 descriptor?? [ 151.473115][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 151.503360][ T2537] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 151.641210][ T10] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 151.655134][ T10] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 151.664383][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.673627][ T10] usb 2-1: config 0 descriptor?? [ 151.722615][ T9] hid-generic 0003:22D4:1503.0020: No inputs registered, leaving [ 151.731227][ T9] hid-generic 0003:22D4:1503.0020: hidraw0: USB HID v0.00 Device [HID 22d4:1503] on usb-dummy_hcd.2-1/input0 [ 151.881279][ T2524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.890786][ T2524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.902840][ T10] usb 2-1: USB disconnect, device number 55 [ 151.933726][ T2485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.942487][ T2485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.951729][ T9] usb 3-1: USB disconnect, device number 56 [ 152.177049][ T2453] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 152.189699][ T2453] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 152.198133][ T2453] CPU: 0 UID: 0 PID: 2453 Comm: syz.0.748 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 152.209630][ T2453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.219720][ T2453] RIP: 0010:set_link_state+0x2a/0x1240 [ 152.225223][ T2453] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 5d fe cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c2 26 fe 4d 8b 75 00 49 8d 95 93 [ 152.244880][ T2453] RSP: 0018:ffffc9000667f718 EFLAGS: 00010046 [ 152.251001][ T2453] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d78cc00 [ 152.259005][ T2453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.267006][ T2453] RBP: ffffc9000667f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 152.275097][ T2453] R10: dffffc0000000000 R11: fffff52000ccfee0 R12: 0000000000000000 [ 152.283102][ T2453] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104f30000 [ 152.291290][ T2453] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 152.300253][ T2453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.306888][ T2453] CR2: 00007f0d02951000 CR3: 00000001316dc000 CR4: 00000000003526b0 [ 152.314899][ T2453] Call Trace: [ 152.318197][ T2453] [ 152.321156][ T2453] ? __kasan_check_write+0x18/0x20 [ 152.326398][ T2453] dummy_pullup+0xd1/0x130 [ 152.330865][ T2453] ? __cfi_dummy_pullup+0x10/0x10 [ 152.335942][ T2453] usb_gadget_disconnect_locked+0x151/0x400 [ 152.341896][ T2453] gadget_unbind_driver+0xaf/0x3f0 [ 152.347225][ T2453] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 152.352977][ T2453] device_release_driver_internal+0x4ad/0x830 [ 152.359095][ T2453] driver_detach+0x1f5/0x2d0 [ 152.363733][ T2453] bus_remove_driver+0x254/0x2b0 [ 152.368710][ T2453] driver_unregister+0x79/0xb0 [ 152.373518][ T2453] usb_gadget_unregister_driver+0x52/0x80 [ 152.379275][ T2453] raw_release+0xdb/0x280 [ 152.383647][ T2453] ? __cfi_raw_release+0x10/0x10 [ 152.388626][ T2453] __fput+0x208/0xa30 [ 152.392651][ T2453] ____fput+0x20/0x30 [ 152.396676][ T2453] task_work_run+0x1e8/0x260 [ 152.401322][ T2453] ? __cfi_task_work_run+0x10/0x10 [ 152.406518][ T2453] ? __kasan_check_write+0x18/0x20 [ 152.411667][ T2453] do_exit+0xa46/0x2850 [ 152.415904][ T2453] ? futex_wake+0x666/0x950 [ 152.420440][ T2453] ? futex_setup_timer+0xb4/0xd0 [ 152.425420][ T2453] ? __cfi_do_exit+0x10/0x10 [ 152.430064][ T2453] ? futex_wait+0x2b8/0x7c0 [ 152.434601][ T2453] ? __cfi_futex_wait+0x10/0x10 [ 152.439484][ T2453] ? __kasan_check_write+0x18/0x20 [ 152.444626][ T2453] ? _raw_spin_lock_irq+0x93/0x120 [ 152.449774][ T2453] do_group_exit+0x21f/0x2f0 [ 152.454405][ T2453] ? __kasan_check_write+0x18/0x20 [ 152.459548][ T2453] ? recalc_sigpending+0x184/0x1d0 [ 152.464694][ T2453] get_signal+0x134c/0x1490 [ 152.469243][ T2453] arch_do_signal_or_restart+0xbc/0x700 [ 152.474827][ T2453] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 152.481020][ T2453] syscall_exit_to_user_mode+0x57/0xb0 [ 152.486516][ T2453] do_syscall_64+0x63/0xf0 [ 152.490986][ T2453] ? clear_bhb_loop+0x50/0xa0 [ 152.495715][ T2453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.501649][ T2453] RIP: 0033:0x7f1448f9e0d9 [ 152.506100][ T2453] Code: Unable to access opcode bytes at 0x7f1448f9e0af. [ 152.513178][ T2453] RSP: 002b:00007f1449e080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.521635][ T2453] RAX: fffffffffffffe00 RBX: 00007f1449226098 RCX: 00007f1448f9e0d9 [ 152.529743][ T2453] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1449226098 [ 152.537740][ T2453] RBP: 00007f1449226090 R08: 0000000000000000 R09: 0000000000000000 [ 152.545762][ T2453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.553763][ T2453] R13: 00007f1449226128 R14: 00007ffe8a4c0520 R15: 00007ffe8a4c0608 [ 152.561772][ T2453] [ 152.564814][ T2453] Modules linked in: [ 152.568756][ T2453] ---[ end trace 0000000000000000 ]--- [ 152.574246][ T2453] RIP: 0010:set_link_state+0x2a/0x1240 [ 152.579749][ T2453] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 5d fe cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c2 26 fe 4d 8b 75 00 49 8d 95 93 [ 152.599401][ T2453] RSP: 0018:ffffc9000667f718 EFLAGS: 00010046 [ 152.605519][ T2453] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d78cc00 [ 152.613519][ T2453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.621529][ T2453] RBP: ffffc9000667f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 152.629568][ T2453] R10: dffffc0000000000 R11: fffff52000ccfee0 R12: 0000000000000000 [ 152.637575][ T2453] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104f30000 [ 152.645587][ T2453] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 152.654547][ T2453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.661160][ T2453] CR2: 00007f0d02951000 CR3: 00000001316dc000 CR4: 00000000003526b0 [ 152.669165][ T2453] Kernel panic - not syncing: Fatal exception [ 152.675857][ T2453] Kernel Offset: disabled [ 152.680199][ T2453] Rebooting in 86400 seconds..