last executing test programs: 4.719201762s ago: executing program 1 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x323003, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x80, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x8001, 0x16}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x5d, 0x84}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x5, 0x6}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x67, 0x2, 0x6, 0xf000, 0x2, [0xffc000, 0xffff30]}]}}) 3.747393944s ago: executing program 3 (id=266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000100)={@loopback, @dev={0xac, 0x14, 0x14, 0x42}, 0x0, "e48be7ca4044d71faa89ad405d361751dacdea9f9312c32ff4df36857e8de3c4", 0x8, 0x4, 0x7, 0x3}, 0x3c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040435545000000000000010902240001000090090904030001030003000921c100fe012228000905810300"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d6090055443800000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x9, 0x8, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x37f4, 0x0, 0x0, 0x3, 0x80, 0xf7fffffffffffffc, 0x6], 0x10000, 0x2844}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x3000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8a, 0xff}, {0x2000, 0x1000, 0x10, 0x0, 0xb, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0xfd, 0x4, 0x4}, {0xfec00000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x4, 0x0, 0x10, 0x78, 0x5, 0x75, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x70000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000001, 0x400000000, 0x1]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/26, 0xfdef, 0x97) preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000480)=""/175, 0xaf}], 0x1, 0xffff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.734656324s ago: executing program 0 (id=267): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x4, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="4a2c67c0ca3c890d9fef7e5101000000000000000600000006229e56030048e668fe89fa4764e45ae51ca647df8f81141151a80f2fcf08c7f882d2a162f1541fd57c2472cbe5951772fe9c88ae43e78792c0943a2e09d21f2ecdd8d0dbbba487e1b02e6500000000000000074b0fed73bbbf13e8a1ee972fa9e9b1ed673c86c1dce748917e3ece9f381b0216c752c6c0b49e236a2d8fb8c076d03bbfa51e239c229d1492bfb7200ba7459f04497034b9ad9c46b5668cb4dbb2522a8b747e6ed1e0d3c02a9f9819969b01ac4104c40bd944269b962a6c9ca5926ee0c40e50856a146fd672c67d939876e3fb3e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d) write(r1, &(0x7f0000000280)="3683ccd9da117b2ef743c57aecf8e519d082b146521aed704e505f0ce264162cdad7cca5d44e4aca51274c2de0467577f0ad47ede7f1c89eb030cb27c6d1d2a8bb2641f07a0267a5c25a0118df06675b0f512d12993ba0115db0034b30780f8e32cf741a5a8b270cbd870718a4ca0a52d14e7febc6a866e168e6546377ef75a14baad6080c67c83aa8de7d00e468d764", 0x90) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x141041, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000500)={0x28, 0x2, 0x0, {0x4, 0x5, 0xfffffffffffffffe}}, 0x28) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c0021ef000000000000000007000000160000000200fc000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x8010) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC], 0x1f0}}, 0x8800) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40106726, &(0x7f00000000c0)) 3.356923253s ago: executing program 1 (id=269): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x43efe000) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea, 0xfffffffc}) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x13c}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00002b4000/0x400000)=nil) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/53, 0x1128000, 0x1000, 0x7, 0x2}, 0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x221000, 0x1800, 0xd, 0x3}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) ptrace$pokeuser(0x6, r6, 0x108, 0x4) ptrace$pokeuser(0x6, r6, 0x118, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0xe22}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r8, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) 3.142001847s ago: executing program 1 (id=272): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x4) (fail_nth: 1) 2.843938834s ago: executing program 1 (id=273): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000200)={{r0}, "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"}) 2.843346014s ago: executing program 1 (id=274): r0 = syz_usb_connect$midi(0x5, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x100, 0xd8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xf9, [], [{{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x9, 0x4, 0x60, {0x5, 0x25, 0x1, 0x1, '8'}}}]}}}}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000004042144b47400001020301090212000101150000090400000001032004"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0xca, &(0x7f0000000280)=@string={0xca, 0x3, "65ba4dcd5d2d682a8a0b0b7e9b338f8f1b611c3499be508b0d0384197589ba37fe51d98622c4f9bd69d03923cedd43834e13b211c2c2f2b548aef2d4953c59867af2459d72c99debd35dd78e59c133f1066469beae6626fe45361b7f5879b744566e36d5920d2c38e1cd70898d6f6823ea044204ec8bee06d7682726dd5af47e402120221417d11c97b119b8e6fcd0e4dc38f147f50116449242bab4b5ffa5c94db74ad0e9e5950c4b12984eb733fae555c786a725353ce706047e3154df09e60b84b5f615eef5dd"}}]}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4007, 0x2, 0x6875}}, 0x30) syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$kvm(0x0, 0x0, 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x4) connect$vsock_stream(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000100)=0x3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r4, &(0x7f00000011c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) syz_usb_connect$uac3(0x1, 0x10b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x3, 0x1, 0x84, 0x80, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0xa9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x33, 0x3}, [@input_terminal={0x14, 0x24, 0x2, 0x5, 0x405, 0x2, 0x40, 0xc9, 0x8ace, 0x1b0, 0x1ff, 0x2}, @feature_unit={0x9, 0x24, 0x7, 0x5, 0x5, [0x0]}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x0, 0x6, 0x6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x8, 0xf}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x1e, 0x9, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3d, 0x7, 0x9, 0x7f}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x1, 0x8, "c11c86beed"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x7, 0x2, {0xa, 0x25, 0x25, 0x3, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x5, 0x6, "6092"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0xb, 0x1, "e18617"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80f0, 0x22, 0x0, 0x9}, @as_header={0x17, 0x24, 0x1, 0x17, 0x4, 0x6, 0x4, 0xf8, 0x3, 0x4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x1, 0x7, {0xa, 0x25, 0x25, 0x1000, 0xc9, 0xfff6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x1, 0x40, 0x3, 0x20, 0x5}, 0xe9, &(0x7f00000001c0)={0x5, 0xf, 0xe9, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "8bf1787a3a37b0c54b61b8681c2c3867"}, @generic={0xc2, 0x10, 0x3, "87d4308b56d3b73852629c8c4f4a7b412fa5f839d9178efaa6795070a5469a2ae48275db9ceaaf03b47eab9ebe204e3f8152a9e4551afcfca7824538d45a791614ec03068a13031a2c563b1d64aadffb1692c87c6a592dced8a22471b727f68da9fc3789d8064273840b959645d30619ca6a87c009ed432075c98455f0782b803563fb646a1db8b605894c13af44dc9d0cf063e0c37c9fbeb5fc4616da5d7c6c77c2be38be873cd2e086959d5b07b36b786f794b3261279b51be8a92e9b3bc"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf, 0x0, 0xdbc0, 0x4}]}, 0x5, [{0xb9, &(0x7f0000000cc0)=@string={0xb9, 0x3, "fa00e55f0fad940a0d94269db83efdff351316074464b2e3d23d5a5d1bf7879236205efa66ce19dcc76669928c4e4bdab6064827314b24be1ce6c01ef11bba12eb6cc60000007f248f7231ca1d43c583e334348eb61d46769bda4624c019e3b9cab53d3b58a2155d7387d4b440e833f612019cbe94acb8bc96c7ba05dca65071a5f5d3bcfe2a20d129525ea253901ec5b320c733f47926538ca5efbde510a3c6bab6be8650c308e58c60a668ec65ab1a9ef94bdbca8d21"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x443}}, {0x15, &(0x7f0000000380)=@string={0x15, 0x3, "b0fb832b7fc7ddf94d79454eb81af208471fd2"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0xcf, &(0x7f0000000400)=@string={0xcf, 0x3, "6abf4fc8af098e3660df81309de93f49dbcdb98dd726f3738a01831bbbf707a53b2b21046ab25b76d4bb7da6f8046760ec8a4a05ce8290c1e6b0405e4e0fc2c8280c617d4b5bfbe7e304ec52c89d4fa10cfd1f76c03dd62860d6c723daeec0a4444f0986ef0990e609d0d37bca60f8f181834db9baec97155a139bdbab3f497ddf3a720cc826357af67c7043dd271736cf3cd24460f1bea1de1e778eebb7efe10134285798156d44b7f467e4c0564c00c6dafdf580295ca3f2276aec3246c5c62d0a4e14a73eb03532e3fa89c6"}}]}) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x8, 0xce, {0xce, 0x21, "aabb00115fb0d9318f3ac7201bf68674a4f90215a913c5a60721371e40af916272a0823a150fcb0e3f87773d76881b12a51a85ab5ac35f43e17823f25cb33351776319d09bad003d6de24125db24b8e95df934f509bc274bad4bb5078647ac51c7c896402956723a13c8533c0f7baaa197194c8ee4e8685a65cb0c652bee4f626247df87cd55cdd725497c4b917c0bfb9e262bddd6ed4635e7b8fb6fc76d2e8370ed06d23f1c100f3baee7fdf22911517248293b590e4fce8bf7f94cdb91f95d37d57c3b9ae305ae7527a089"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83c}}, &(0x7f00000006c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x4, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x0, 0x100}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc5, 0x80, 0x1, 0x7, "1f042218", "cfef5cd8"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x3, 0x2, 0x8f, 0x8001, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="00164d000000ab3bf3816e4f0be0659f54fd2759242738cbc6978462656e5bdb94362410f5bce2a7a44198c5f2021542d5ec4962a3884dd47c60759e4ffc2f667273f57c11e2a883cff1ad95d4434674"], &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x16}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x140, 0x20, [0xf]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "e1bb"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000a40)={0x40, 0x13, 0x6}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "af05"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x5e}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0xbd}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xfb}}) 2.063701812s ago: executing program 2 (id=277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') exit(0x9c13) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 1.970639325s ago: executing program 0 (id=278): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x10}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x48, 0x3c, 0x0, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2, {[@routing={0x3b, 0x8, 0x2, 0x40, 0x0, [@remote, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}]}]}}}}}}, 0x82) 1.904349956s ago: executing program 0 (id=279): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x210f4) 1.73989411s ago: executing program 0 (id=280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffe}, 0x1c) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) 1.73797187s ago: executing program 3 (id=281): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x43efe000) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea, 0xfffffffc}) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x13c}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00002b4000/0x400000)=nil) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/53, 0x1128000, 0x1000, 0x7, 0x2}, 0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x221000, 0x1800, 0xd, 0x3}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) ptrace$pokeuser(0x6, r6, 0x108, 0x4) ptrace$pokeuser(0x6, r6, 0x118, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0xe22}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r8, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) 1.661912361s ago: executing program 0 (id=282): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000180)=[@wr_drn={0x68, 0x20, {0x7, 0x20000000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x9, 0x80000000, 0x7fff}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x4, 0x2, 0x101, 0x1}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0x6cea, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16, 0x1, 0xb, 0x7}}], 0x120}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01df"], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) userfaultfd(0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}}) 1.626656982s ago: executing program 0 (id=283): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000222002a483550d3083974450d"], 0x0}, &(0x7f0000000880)={0x1c, 0x0, &(0x7f0000000400)={0xa1, 0x1, 0x400, "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"}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff74, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.619629153s ago: executing program 3 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xfffe, 0x1, 0x2, 0xb, 0x7, "fa8d25eb0036781f"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xd) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') fsetxattr$security_selinux(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffe}, 0x1c) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@cpuid={0x64, 0x18, {0x3e, 0x4bfe9862}}, @cpuid={0x64, 0x18, {0x9, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x2}}, @set_irq_handler={0xc8, 0x20, {0x1b, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x3fe9, 0x0, 0xfffffffffffffff8}}, @in_dx={0x69, 0x20, {0x1f80, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x6d, 0x4, 0x519f}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x8, 0xb}}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x8c40}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host_nat=0x6c04, 0x800, 0xffffffffffffffff, 0xdb}}, @wr_drn={0x68, 0x20, {0x5, 0x8}}, @rdmsr={0x66, 0x18, {0x8ed}}, @code={0xa, 0x5e, {"66b87e008ec0400f0011c74424004a000000c74424020b000000ff2c240f01d18c4bb7450f009f67a98d8148b85c5d0000000000000f23c00f21f835000005000f23f88fa98898e62e990f0010"}}, @nested_amd_vmsave={0x183, 0x18}, @code={0xa, 0x6d, {"0f38090c71360f01f8e300cf48b801000000000000000f23c00f21f835000006000f23f866baf80cb8d4e7e781ef66bafc0c66b8ab4866ef360f07f4c7442400d9000000c744240209000000c7442406000000000f011424360f01c9"}}, @in_dx={0x69, 0x20, {0x9e8f, 0xd70a5c763e6ccc3c}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x9d, 0x4, 0x9, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0xd0f0}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4e3, 0xee, 0xa, 0x6}}, @rdmsr={0x66, 0x18, {0x8a}}, @nested_amd_vmload={0x182, 0x18}], 0x3ab}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000740)={{r2, &(0x7f00000005c0)='mounts\x00', 0x400, &(0x7f0000000600)={@_ha_fsid={[0x0, 0x8]}, {0xfff, 0xc9, 0x6, 0x80}}, 0x6, &(0x7f0000000640), &(0x7f0000000680)}, {[0x8, 0x9, 0x8, 0x5]}, 0x4db, 0x7e, &(0x7f00000006c0)=""/126}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.415861527s ago: executing program 3 (id=285): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/mtrr\x00', 0x842, 0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) ioctl(r0, 0x400c4d01, &(0x7f0000000340)) 1.335939579s ago: executing program 3 (id=286): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) unshare(0x42000000) 1.332530709s ago: executing program 1 (id=287): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14045200d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r4 = socket$inet6(0xa, 0x2, 0xffffffff) getsockopt$inet6_buf(r4, 0x29, 0x30, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020200022200000905820200"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f0000000340)="ab") syz_usb_control_io$uac2(r6, &(0x7f0000001340)={0x14, &(0x7f0000001200)={0x40, 0x2, 0xb7, {0xb7, 0x23, "3178d7de03e41093e2ae37a5e969ea30be9124dcfdcc30cf131bbf180f0d5c9798f230c8338ad871761d4d76c4a90e81f258404298ce5767e8eee4accd29910a78042637e340307f69431867fa7f9e754400f6f4c02f64d90ac044943929af680deebc3b26aa4969c3c00fab7ab83135c2c89ed8420fa24a749d15e5af8fed174ebbf4c6110b7d0ada9a8f78414190d9234b98932946aa66b705a0edd7397d80e9103277baa19fbbd30af32376ed94d757bc1b7f8e"}}, &(0x7f00000012c0)={0x0, 0x3, 0x76, @string={0x76, 0x3, "e1760b9ee9e113d60d92a1370c93f8e2a951a0ae97f279867a273de728613415d6fa6697bf7061195055b1de757618adc74a88aa2368b317c00f486f42b189947b6efeefe9d29bdec313429eedaef4837be884415ed1118c4944ece0405fa7851ae8a58943b28c6140aeaf10236503d5e5eb7af2"}}}, &(0x7f0000001700)={0x44, &(0x7f0000001380)={0x40, 0xd, 0x7b, "0e8ebdf8e57739294d063b50d6b784351aee5e874c8397ce8816654642cb6662f3cc8da70f46ff7e592db1c5bcbe327f7cce50fb4acbb67b043c196ca351337f6473b720cfc88095270d6730b3aa2378edbd262a5e9df3b287ab9dc3b2a6425b92c01993cb99aca3e6946ab5a9532bf6a5c9ca813596b8231446f5"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001540)={0x20, 0x81, 0x3, "38dbe9"}, &(0x7f00000015c0)={0x20, 0x82, 0x3, "d8af40"}, &(0x7f0000001640)={0x20, 0x83, 0x2, "9f56"}, &(0x7f0000001680)={0x20, 0x84, 0x1, '\v'}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "f92392"}}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000011c0)={0x14, 0x0, 0x0}, &(0x7f00000014c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, &(0x7f0000001180)={0x14, 0x0, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffffffffffff74, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.243514211s ago: executing program 2 (id=288): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x10}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x48, 0x3c, 0x0, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2, {[@routing={0x3b, 0x8, 0x2, 0x40, 0x0, [@remote, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}]}]}}}}}}, 0x82) 1.155130753s ago: executing program 2 (id=289): r0 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendto$inet(r4, &(0x7f0000001400)="e3", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x40000103, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 979.558988ms ago: executing program 3 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000280)=0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x128}, 0x4004000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x27, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc0, 0x4}}}}}]}}]}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000001600)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x5, 0xb0, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x27}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x9, "cab5b186"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x6, 0x3, 0x4}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x9, "5576314ec0ee"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x4, "93"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xfff8, 0x9, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0xa6, 0xaf, {0x7, 0x25, 0x1, 0xc, 0xf7, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe24, 0xfe90, 0x16, "1593151f5b15"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x81, 0x4c, {0x7, 0x25, 0x1, 0x0, 0xf9, 0x2}}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x200, 0x9, 0x8, 0x9, 0x8, 0x6f}, 0x12, &(0x7f0000001700)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x9}]}, 0x4, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x2c01}}, {0xa8, &(0x7f0000001840)=@string={0xa8, 0x3, "d827ffe914c54cf78cc5880be6b5a97d31ccc58c35eec6a3b5450fcb740e237f524a107d1598a8e3bd0fc54e51ef0cdac71ea0928b6eef233da9874e51d4ea4998ec642e8d56e2d7c220f112cbad701085ac25248bfbee90fbafc902dea66e07a71b5726af773740a604ca60773d9d3e14f55d0a99f11ad0d85885a6b9539689e74b8576fb4a37aa82f841c88dea96eab0c0711288e1a7365287f0d6de12865e144f735afefa"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x430}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x84, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2c31}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x15}, 0x20000001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000013c0)=0x401, 0x4) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) 601.223586ms ago: executing program 2 (id=291): syz_io_uring_setup(0x48aa, &(0x7f0000000100)={0x0, 0x6b3, 0x8000, 0x2, 0x10000df}, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b000000000000000000000004000300000000000000000000000000000000fbff000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 588.176686ms ago: executing program 2 (id=292): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 0s ago: executing program 2 (id=293): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r1, 0x0, r4, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="bbf846e2fe") kernel console output (not intermixed with test programs): 42.948945][ T36] audit: type=1400 audit(1786716989.980:129): avc: denied { open } for pid=340 comm="syz.2.11" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.973069][ T36] audit: type=1400 audit(1786716989.980:130): avc: denied { write } for pid=340 comm="syz.2.11" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.986450][ T351] tipc: Enabling of bearer rejected, failed to enable media [ 42.996638][ T36] audit: type=1400 audit(1786716989.980:131): avc: denied { ioctl } for pid=340 comm="syz.2.11" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.041416][ T36] audit: type=1400 audit(1786716989.980:132): avc: denied { create } for pid=340 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.147295][ T367] overlayfs: failed to resolve './file0': -2 [ 43.314677][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.394721][ T66] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 43.464580][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 43.471205][ T45] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 43.479465][ T45] usb 4-1: config 0 has no interface number 0 [ 43.486544][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 43.497058][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 43.508953][ T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 43.518297][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.526387][ T45] usb 4-1: Product: syz [ 43.530793][ T45] usb 4-1: Manufacturer: syz [ 43.535475][ T45] usb 4-1: SerialNumber: syz [ 43.542497][ T45] usb 4-1: config 0 descriptor?? [ 43.549254][ T362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.556418][ T66] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.557062][ T362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.568324][ T336] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.585951][ T66] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.596100][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 43.602744][ T66] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 43.611856][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.624772][ T66] usb 2-1: config 0 descriptor?? [ 43.745784][ T336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.755962][ T336] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.765019][ T336] usb 1-1: too many endpoints for config 1 interface 1 altsetting 251: 255, using maximum allowed: 30 [ 43.776040][ T336] usb 1-1: config 1 interface 1 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 43.789294][ T362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.789384][ T362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.797341][ T336] usb 1-1: config 1 interface 1 has no altsetting 0 [ 43.815754][ T336] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 43.831661][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.839755][ T336] usb 1-1: Product: syz [ 43.844037][ T336] usb 1-1: Manufacturer: syz [ 43.848704][ T336] usb 1-1: SerialNumber: syz [ 44.011545][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 44.033863][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0xe [ 44.054644][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.061758][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.084735][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.091855][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.098985][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.106289][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.113386][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.120473][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.127652][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.134805][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.141927][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.149034][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.156126][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.163205][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.170541][ T66] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 44.221594][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 44.231847][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 44.242581][ T45] asix 4-1:0.34: probe with driver asix failed with error -61 [ 44.254780][ T66] hid-led 0003:0FC5:B080.0002: probe with driver hid-led failed with error -71 [ 44.277622][ T66] usb 2-1: USB disconnect, device number 3 [ 44.530252][ T390] ======================================================= [ 44.530252][ T390] WARNING: The mand mount option has been deprecated and [ 44.530252][ T390] and is ignored by this kernel. Remove the mand [ 44.530252][ T390] option from the mount to silence this warning. [ 44.530252][ T390] ======================================================= [ 45.044630][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.195764][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 45.205603][ T66] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 45.216941][ T66] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 45.226071][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.234116][ T66] usb 2-1: Product: syz [ 45.238348][ T66] usb 2-1: Manufacturer: syz [ 45.242993][ T66] usb 2-1: SerialNumber: syz [ 45.451190][ T66] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 45.512251][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 45.559502][ T406] SELinux: avtab: truncated entry [ 45.590491][ T406] SELinux: failed to load policy [ 45.617635][ T409] tmpfs: Unknown parameter '0177777777777777777777700000000000000000000005@Seה, priority 10 [ 51.476257][ T515] FAULT_INJECTION: forcing a failure. [ 51.476257][ T515] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.489508][ T515] CPU: 1 UID: 0 PID: 515 Comm: syz.2.71 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 51.489546][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.489564][ T515] Call Trace: [ 51.489569][ T515] [ 51.489576][ T515] __dump_stack+0x21/0x30 [ 51.489606][ T515] dump_stack_lvl+0x140/0x1c0 [ 51.489628][ T515] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.489651][ T515] ? check_stack_object+0x138/0x150 [ 51.489669][ T515] dump_stack+0x19/0x20 [ 51.489690][ T515] should_fail_ex+0x3c2/0x510 [ 51.489709][ T515] should_fail+0xf/0x20 [ 51.489725][ T515] should_fail_usercopy+0x1e/0x30 [ 51.489745][ T515] _copy_to_user+0x24/0xa0 [ 51.489767][ T515] simple_read_from_buffer+0xed/0x160 [ 51.489790][ T515] proc_fail_nth_read+0x1aa/0x220 [ 51.489814][ T515] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.489838][ T515] ? bpf_lsm_file_permission+0xd/0x20 [ 51.489859][ T515] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.489882][ T515] vfs_read+0x288/0xc70 [ 51.489899][ T515] ? __cfi_vfs_read+0x10/0x10 [ 51.489914][ T515] ? __kasan_check_write+0x18/0x20 [ 51.489930][ T515] ? mutex_lock+0x97/0x1d0 [ 51.489953][ T515] ? __cfi_mutex_lock+0x10/0x10 [ 51.489977][ T515] ksys_read+0x145/0x260 [ 51.489993][ T515] ? __cfi_ksys_read+0x10/0x10 [ 51.490010][ T515] ? __kasan_check_read+0x15/0x20 [ 51.490025][ T515] __x64_sys_read+0x7f/0x90 [ 51.490042][ T515] x64_sys_call+0x2638/0x2ee0 [ 51.490056][ T515] do_syscall_64+0x57/0xf0 [ 51.490081][ T515] ? clear_bhb_loop+0x50/0xa0 [ 51.490104][ T515] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.490126][ T515] RIP: 0033:0x7feacc35e90e [ 51.490139][ T515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.490152][ T515] RSP: 002b:00007feacd18cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.490171][ T515] RAX: ffffffffffffffda RBX: 00007feacd18d6c0 RCX: 00007feacc35e90e [ 51.490183][ T515] RDX: 000000000000000f RSI: 00007feacd18d0a0 RDI: 0000000000000006 [ 51.490193][ T515] RBP: 00007feacd18d090 R08: 0000000000000000 R09: 0000000000000000 [ 51.490203][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.490212][ T515] R13: 00007feacc626038 R14: 00007feacc625fa0 R15: 00007ffda0f6ac28 [ 51.490226][ T515] [ 51.757785][ T518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 51.766146][ T518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 51.774261][ T518] FAULT_INJECTION: forcing a failure. [ 51.774261][ T518] name failslab, interval 1, probability 0, space 0, times 1 [ 51.787351][ T518] CPU: 0 UID: 0 PID: 518 Comm: syz.2.72 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 51.787381][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.787395][ T518] Call Trace: [ 51.787401][ T518] [ 51.787410][ T518] __dump_stack+0x21/0x30 [ 51.787444][ T518] dump_stack_lvl+0x140/0x1c0 [ 51.787474][ T518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.787506][ T518] dump_stack+0x19/0x20 [ 51.787535][ T518] should_fail_ex+0x3c2/0x510 [ 51.787560][ T518] ? ovl_cache_entry_new+0x49/0x700 [ 51.787583][ T518] should_failslab+0xac/0x100 [ 51.787610][ T518] __kmalloc_noprof+0x69/0x510 [ 51.787632][ T518] ? ovl_cache_entry_new+0x49/0x700 [ 51.787653][ T518] ? inode_to_bdi+0x6d/0x100 [ 51.787684][ T518] ovl_cache_entry_new+0x49/0x700 [ 51.787705][ T518] ? rwsem_read_trylock+0x275/0x5a0 [ 51.787747][ T518] ovl_fill_merge+0x3c7/0x870 [ 51.787768][ T518] ? __cfi_ovl_fill_merge+0x10/0x10 [ 51.787789][ T518] kernfs_fop_readdir+0x191/0x740 [ 51.787820][ T518] ? down_read_killable+0x7f/0x100 [ 51.787843][ T518] iterate_dir+0x1fa/0x5c0 [ 51.787868][ T518] ovl_dir_read+0xf0/0x560 [ 51.787886][ T518] ? ovl_path_next+0x230/0x420 [ 51.787909][ T518] ovl_dir_read_merged+0x1cf/0x3d0 [ 51.787925][ T518] ? ovl_check_empty_dir+0x450/0x450 [ 51.787941][ T518] ? __cfi_ovl_fill_merge+0x10/0x10 [ 51.787959][ T518] ? ovl_iterate+0xcb7/0x2020 [ 51.787976][ T518] ovl_iterate+0xd79/0x2020 [ 51.787993][ T518] ? __cfi_vfs_open+0x10/0x10 [ 51.788017][ T518] ? __cfi_ovl_iterate+0x10/0x10 [ 51.788033][ T518] ? alloc_empty_file+0x120/0x270 [ 51.788055][ T518] ? make_vfsuid+0x4d/0xa0 [ 51.788071][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788089][ T518] ? __kasan_check_read+0x15/0x20 [ 51.788105][ T518] ? ovl_dir_open+0x20c/0x3c0 [ 51.788120][ T518] ? __cfi_ovl_dir_open+0x10/0x10 [ 51.788136][ T518] ? inode_to_bdi+0x6d/0x100 [ 51.788160][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788178][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788194][ T518] ? down_write+0xee/0x2b0 [ 51.788209][ T518] ? __cfi_down_write+0x10/0x10 [ 51.788225][ T518] ? __cfi_selinux_file_permission+0x10/0x10 [ 51.788244][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788261][ T518] wrap_directory_iterator+0xa7/0xf0 [ 51.788282][ T518] ? __cfi_ovl_iterate+0x10/0x10 [ 51.788298][ T518] shared_ovl_iterate+0x28/0x40 [ 51.788313][ T518] iterate_dir+0x1fa/0x5c0 [ 51.788334][ T518] ovl_dir_read+0xf0/0x560 [ 51.788349][ T518] ? ovl_path_next+0x230/0x420 [ 51.788372][ T518] ovl_dir_read_merged+0x1cf/0x3d0 [ 51.788388][ T518] ? ovl_check_empty_dir+0x450/0x450 [ 51.788404][ T518] ? __cfi_ovl_fill_merge+0x10/0x10 [ 51.788422][ T518] ? ovl_iterate+0xcb7/0x2020 [ 51.788438][ T518] ovl_iterate+0xd79/0x2020 [ 51.788455][ T518] ? _parse_integer+0x2e/0x40 [ 51.788473][ T518] ? kstrtoull+0x13b/0x1e0 [ 51.788489][ T518] ? __cfi_ovl_iterate+0x10/0x10 [ 51.788507][ T518] ? kstrtouint+0x78/0xf0 [ 51.788523][ T518] ? kstrtouint_from_user+0x117/0x170 [ 51.788542][ T518] ? __x64_sys_openat+0x13a/0x170 [ 51.788566][ T518] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 51.788585][ T518] ? selinux_file_permission+0x318/0xb60 [ 51.788604][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788621][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788638][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788654][ T518] ? down_write+0xee/0x2b0 [ 51.788670][ T518] ? __cfi_down_write+0x10/0x10 [ 51.788685][ T518] ? __cfi_selinux_file_permission+0x10/0x10 [ 51.788702][ T518] ? __kasan_check_write+0x18/0x20 [ 51.788719][ T518] wrap_directory_iterator+0xa7/0xf0 [ 51.788745][ T518] ? __cfi_ovl_iterate+0x10/0x10 [ 51.788761][ T518] shared_ovl_iterate+0x28/0x40 [ 51.788776][ T518] iterate_dir+0x1fa/0x5c0 [ 51.788797][ T518] __se_sys_getdents64+0xf6/0x250 [ 51.788819][ T518] ? fput+0x1a4/0x230 [ 51.788840][ T518] ? __x64_sys_getdents64+0xa0/0xa0 [ 51.788861][ T518] ? ksys_write+0x1f3/0x260 [ 51.788878][ T518] ? __cfi_filldir64+0x10/0x10 [ 51.788900][ T518] ? __cfi_ksys_write+0x10/0x10 [ 51.788918][ T518] ? __kasan_check_read+0x15/0x20 [ 51.788935][ T518] __x64_sys_getdents64+0x7f/0xa0 [ 51.788957][ T518] x64_sys_call+0x27d0/0x2ee0 [ 51.788972][ T518] do_syscall_64+0x57/0xf0 [ 51.788992][ T518] ? clear_bhb_loop+0x50/0xa0 [ 51.789016][ T518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.789040][ T518] RIP: 0033:0x7feacc39e0d9 [ 51.789054][ T518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.789068][ T518] RSP: 002b:00007feacd18d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 51.789087][ T518] RAX: ffffffffffffffda RBX: 00007feacc625fa0 RCX: 00007feacc39e0d9 [ 51.789100][ T518] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 51.789111][ T518] RBP: 00007feacd18d090 R08: 0000000000000000 R09: 0000000000000000 [ 51.789122][ T518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.789133][ T518] R13: 00007feacc626038 R14: 00007feacc625fa0 R15: 00007ffda0f6ac28 [ 51.789147][ T518] [ 52.313895][ T520] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 52.322514][ T520] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 52.334605][ T520] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 52.342695][ T520] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 52.351044][ T520] overlayfs: d_ino too big (12, ino=9223372036854775894, xinobits=3) [ 52.359386][ T520] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 52.368286][ T520] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 52.377376][ T520] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 52.385765][ T520] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 52.394628][ T520] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 52.403193][ T520] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 52.411706][ T520] overlayfs: d_ino too big (kernel, ino=4611686018427389353, xinobits=3) [ 52.424588][ T337] tipc: Node number set to 2130706433 [ 52.453577][ T522] sit0: entered promiscuous mode [ 52.462619][ T522] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 52.470207][ T522] netlink: 1 bytes leftover after parsing attributes in process `syz.3.75'. [ 52.490596][ T529] netlink: 'syz.2.77': attribute type 16 has an invalid length. [ 52.500915][ T529] netlink: 'syz.2.77': attribute type 3 has an invalid length. [ 52.524669][ T529] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.77'. [ 52.545050][ T529] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.603942][ T538] FAULT_INJECTION: forcing a failure. [ 52.603942][ T538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.657631][ T538] CPU: 1 UID: 0 PID: 538 Comm: syz.3.80 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 52.657667][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.657681][ T538] Call Trace: [ 52.657688][ T538] [ 52.657703][ T538] __dump_stack+0x21/0x30 [ 52.657738][ T538] dump_stack_lvl+0x140/0x1c0 [ 52.657769][ T538] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.657801][ T538] ? check_stack_object+0x138/0x150 [ 52.657826][ T538] dump_stack+0x19/0x20 [ 52.657856][ T538] should_fail_ex+0x3c2/0x510 [ 52.657882][ T538] should_fail+0xf/0x20 [ 52.657905][ T538] should_fail_usercopy+0x1e/0x30 [ 52.657932][ T538] _copy_to_user+0x24/0xa0 [ 52.657962][ T538] simple_read_from_buffer+0xed/0x160 [ 52.657994][ T538] proc_fail_nth_read+0x1aa/0x220 [ 52.658026][ T538] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.658060][ T538] ? bpf_lsm_file_permission+0xd/0x20 [ 52.658098][ T538] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.658130][ T538] vfs_read+0x288/0xc70 [ 52.658153][ T538] ? __cfi_vfs_read+0x10/0x10 [ 52.658175][ T538] ? __kasan_check_write+0x18/0x20 [ 52.658197][ T538] ? mutex_lock+0x97/0x1d0 [ 52.658229][ T538] ? __cfi_mutex_lock+0x10/0x10 [ 52.658263][ T538] ksys_read+0x145/0x260 [ 52.658297][ T538] ? __cfi_ksys_read+0x10/0x10 [ 52.658319][ T538] ? __kasan_check_read+0x15/0x20 [ 52.658340][ T538] __x64_sys_read+0x7f/0x90 [ 52.658361][ T538] x64_sys_call+0x2638/0x2ee0 [ 52.658381][ T538] do_syscall_64+0x57/0xf0 [ 52.658404][ T538] ? clear_bhb_loop+0x50/0xa0 [ 52.658433][ T538] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.658462][ T538] RIP: 0033:0x7f2053d5e90e [ 52.658479][ T538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.658496][ T538] RSP: 002b:00007f2054bdbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.658519][ T538] RAX: ffffffffffffffda RBX: 00007f2054bdc6c0 RCX: 00007f2053d5e90e [ 52.658535][ T538] RDX: 000000000000000f RSI: 00007f2054bdc0a0 RDI: 0000000000000006 [ 52.658548][ T538] RBP: 00007f2054bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 52.658561][ T538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.658574][ T538] R13: 00007f2054026038 R14: 00007f2054025fa0 R15: 00007ffd95123e08 [ 52.658592][ T538] [ 52.895112][ T546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 52.916149][ T530] usb usb5: usbfs: process 530 (syz.0.76) did not claim interface 0 before use [ 52.940335][ T545] netlink: 5892 bytes leftover after parsing attributes in process `syz.2.82'. [ 52.961478][ T545] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc02 [ 53.178338][ T554] FAULT_INJECTION: forcing a failure. [ 53.178338][ T554] name failslab, interval 1, probability 0, space 0, times 0 [ 53.192062][ T554] CPU: 0 UID: 0 PID: 554 Comm: syz.3.84 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 53.192094][ T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.192108][ T554] Call Trace: [ 53.192115][ T554] [ 53.192123][ T554] __dump_stack+0x21/0x30 [ 53.192158][ T554] dump_stack_lvl+0x140/0x1c0 [ 53.192187][ T554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.192222][ T554] dump_stack+0x19/0x20 [ 53.192251][ T554] should_fail_ex+0x3c2/0x510 [ 53.192277][ T554] should_failslab+0xac/0x100 [ 53.192305][ T554] kmem_cache_alloc_node_noprof+0x45/0x420 [ 53.192329][ T554] ? dup_task_struct+0xc1/0xd80 [ 53.192357][ T554] ? kasan_save_alloc_info+0x3a/0x50 [ 53.192390][ T554] ? __kasan_kmalloc+0x96/0xb0 [ 53.192417][ T554] ? __kmalloc_cache_noprof+0x23c/0x470 [ 53.192440][ T554] dup_task_struct+0xc1/0xd80 [ 53.192467][ T554] ? __kasan_check_write+0x18/0x20 [ 53.192489][ T554] ? _raw_spin_lock_irq+0x93/0x120 [ 53.192516][ T554] ? copy_process+0x3350/0x3350 [ 53.192548][ T554] ? __kasan_check_write+0x18/0x20 [ 53.192589][ T554] copy_process+0x57c/0x3350 [ 53.192620][ T554] ? kasan_save_alloc_info+0x3a/0x50 [ 53.192655][ T554] ? __cfi_copy_process+0x10/0x10 [ 53.192682][ T554] ? __kmalloc_cache_noprof+0x23c/0x470 [ 53.192708][ T554] ? __kasan_check_write+0x18/0x20 [ 53.192731][ T554] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 53.192759][ T554] vhost_task_create+0x1f7/0x3f0 [ 53.192784][ T554] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 53.192812][ T554] ? __cfi_vhost_task_create+0x10/0x10 [ 53.192838][ T554] ? __cfi_vhost_task_fn+0x10/0x10 [ 53.192862][ T554] ? __kasan_check_write+0x18/0x20 [ 53.192883][ T554] ? mutex_lock+0x97/0x1d0 [ 53.192912][ T554] ? __cfi_mutex_lock+0x10/0x10 [ 53.192948][ T554] ? kernel_text_address+0xa9/0xe0 [ 53.192980][ T554] kvm_mmu_post_init_vm+0x161/0x300 [ 53.193013][ T554] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 53.193044][ T554] ? _parse_integer_limit+0x195/0x1e0 [ 53.193070][ T554] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 53.193101][ T554] ? kstrtoull+0x13b/0x1e0 [ 53.193125][ T554] ? kstrtouint+0x78/0xf0 [ 53.193148][ T554] ? ioctl_has_perm+0x1bc/0x500 [ 53.193170][ T554] ? __asan_memcpy+0x5a/0x80 [ 53.193193][ T554] ? ioctl_has_perm+0x408/0x500 [ 53.193215][ T554] ? has_cap_mac_admin+0xd0/0xd0 [ 53.193250][ T554] ? __kasan_check_write+0x18/0x20 [ 53.193272][ T554] ? mutex_lock_killable+0x97/0x1d0 [ 53.193304][ T554] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.193336][ T554] ? proc_fail_nth_write+0x184/0x220 [ 53.193370][ T554] kvm_vcpu_ioctl+0xa43/0x1000 [ 53.193393][ T554] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 53.193414][ T554] ? __cfi_vfs_write+0x10/0x10 [ 53.193438][ T554] ? __kasan_check_write+0x18/0x20 [ 53.193459][ T554] ? mutex_unlock+0x90/0x240 [ 53.193489][ T554] ? __cfi_mutex_unlock+0x10/0x10 [ 53.193523][ T554] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.193552][ T554] ? security_file_ioctl+0x3e/0x110 [ 53.193586][ T554] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 53.193607][ T554] __se_sys_ioctl+0x135/0x1b0 [ 53.193634][ T554] __x64_sys_ioctl+0x7f/0xa0 [ 53.193661][ T554] x64_sys_call+0x1878/0x2ee0 [ 53.193682][ T554] do_syscall_64+0x57/0xf0 [ 53.193707][ T554] ? clear_bhb_loop+0x50/0xa0 [ 53.193739][ T554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.193768][ T554] RIP: 0033:0x7f2053d9e0d9 [ 53.193786][ T554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.193805][ T554] RSP: 002b:00007f2054bdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.193828][ T554] RAX: ffffffffffffffda RBX: 00007f2054025fa0 RCX: 00007f2053d9e0d9 [ 53.193845][ T554] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 53.193859][ T554] RBP: 00007f2054bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 53.193883][ T554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.193896][ T554] R13: 00007f2054026038 R14: 00007f2054025fa0 R15: 00007ffd95123e08 [ 53.193915][ T554] [ 53.694606][ T337] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.758680][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.776679][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.784290][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.792500][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.810233][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.821892][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.840814][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.848565][ T31] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 53.857019][ T337] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 53.865715][ T337] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 53.875265][ T337] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 53.886590][ T31] hid-generic 0000:0000:0001.0005: hidraw0: HID v0.10 Device [syz0] on syz1 [ 53.909105][ T337] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 53.932677][ T337] usb 3-1: config 1 interface 2 has no altsetting 0 [ 53.941060][ T578] fido_id[578]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.956005][ T337] usb 3-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 53.968027][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.981563][ T337] usb 3-1: Product: syz [ 53.990396][ T337] usb 3-1: Manufacturer: syz [ 53.995209][ T337] usb 3-1: SerialNumber: syz [ 54.046541][ T583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.93'. [ 54.254139][ T337] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.266963][ T337] usb 3-1: cannot setup if 2: error -71 [ 54.272673][ T337] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 54.283764][ T337] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.292872][ T337] usb 3-1: cannot setup if 2: error -71 [ 54.298732][ T337] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 54.310491][ T337] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.319750][ T337] usb 3-1: cannot setup if 2: error -71 [ 54.325583][ T337] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -71 [ 54.336858][ T337] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.349102][ T337] usb 3-1: cannot setup if 2: error -71 [ 54.360354][ T337] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 54.372640][ T337] usb 3-1: USB disconnect, device number 5 [ 54.378984][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 54.396925][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.470587][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 54.470606][ T36] audit: type=1400 audit(1786717001.690:305): avc: denied { ioctl } for pid=597 comm="syz.0.99" path="socket:[7016]" dev="sockfs" ino=7016 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.502531][ T36] audit: type=1400 audit(1786717001.700:306): avc: denied { setopt } for pid=597 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.521994][ T36] audit: type=1400 audit(1786717001.700:307): avc: denied { bind } for pid=597 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.541410][ T36] audit: type=1400 audit(1786717001.700:308): avc: denied { name_bind } for pid=597 comm="syz.0.99" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 54.562873][ T36] audit: type=1400 audit(1786717001.700:309): avc: denied { node_bind } for pid=597 comm="syz.0.99" saddr=fe80::28 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 54.587482][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.598517][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.608561][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.617471][ T45] usb 4-1: config 0 descriptor?? [ 54.824215][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 54.825020][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 54.832406][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 54.851711][ T45] usb 4-1: USB disconnect, device number 5 [ 54.958927][ T36] audit: type=1400 audit(1786717002.180:310): avc: denied { setopt } for pid=615 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.980012][ T36] audit: type=1400 audit(1786717002.210:311): avc: denied { read write } for pid=615 comm="syz.2.106" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.003787][ T36] audit: type=1400 audit(1786717002.210:312): avc: denied { open } for pid=615 comm="syz.2.106" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.027128][ T66] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 55.035138][ T36] audit: type=1400 audit(1786717002.210:313): avc: denied { ioctl } for pid=615 comm="syz.2.106" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.060023][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.071845][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.081649][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.094628][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.103731][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.112471][ T10] usb 1-1: config 0 descriptor?? [ 55.194436][ T622] FAULT_INJECTION: forcing a failure. [ 55.194436][ T622] name failslab, interval 1, probability 0, space 0, times 0 [ 55.208621][ T622] CPU: 1 UID: 0 PID: 622 Comm: syz.2.108 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 55.208651][ T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.208664][ T622] Call Trace: [ 55.208671][ T622] [ 55.208679][ T622] __dump_stack+0x21/0x30 [ 55.208711][ T622] dump_stack_lvl+0x140/0x1c0 [ 55.208736][ T622] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.208764][ T622] dump_stack+0x19/0x20 [ 55.208789][ T622] should_fail_ex+0x3c2/0x510 [ 55.208814][ T622] should_failslab+0xac/0x100 [ 55.208837][ T622] __kmalloc_cache_noprof+0x41/0x470 [ 55.208858][ T622] ? genl_family_rcv_msg_attrs_parse+0x213/0x380 [ 55.208884][ T622] ? genl_start+0x1d0/0x830 [ 55.208914][ T622] genl_start+0x1d0/0x830 [ 55.208940][ T622] __netlink_dump_start+0x583/0x970 [ 55.208961][ T622] genl_family_rcv_msg_dumpit+0x214/0x320 [ 55.208985][ T622] ? __asan_memcpy+0x5a/0x80 [ 55.209003][ T622] ? genl_rcv_msg+0x7b0/0x7b0 [ 55.209038][ T622] ? genl_get_cmd+0x699/0x950 [ 55.209062][ T622] ? __cfi_genl_start+0x10/0x10 [ 55.209104][ T622] ? __cfi_genl_dumpit+0x10/0x10 [ 55.209127][ T622] ? __cfi_genl_done+0x10/0x10 [ 55.209151][ T622] ? kasan_save_alloc_info+0x3a/0x50 [ 55.209181][ T622] ? __kasan_slab_alloc+0x73/0x90 [ 55.209203][ T622] ? radix_tree_lookup+0x250/0x2a0 [ 55.209231][ T622] genl_rcv_msg+0x5dc/0x7b0 [ 55.209256][ T622] ? __cfi_genl_rcv_msg+0x10/0x10 [ 55.209280][ T622] ? __cfi_ethnl_default_start+0x10/0x10 [ 55.209306][ T622] ? __cfi_ethnl_default_dumpit+0x10/0x10 [ 55.209333][ T622] ? __cfi_ethnl_default_done+0x10/0x10 [ 55.209363][ T622] netlink_rcv_skb+0x24a/0x4e0 [ 55.209384][ T622] ? __cfi_genl_rcv_msg+0x10/0x10 [ 55.209409][ T622] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 55.209430][ T622] ? down_read+0x7f/0xe0 [ 55.209447][ T622] ? __cfi_down_read+0x10/0x10 [ 55.209465][ T622] genl_rcv+0x2c/0x40 [ 55.209489][ T622] netlink_unicast+0x8bc/0xa70 [ 55.209509][ T622] netlink_sendmsg+0x7d1/0xad0 [ 55.209530][ T622] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.209551][ T622] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 55.209573][ T622] ? security_socket_sendmsg+0x3d/0x100 [ 55.209601][ T622] ____sys_sendmsg+0x9a1/0xa00 [ 55.209624][ T622] ? __import_iovec+0x5b9/0x7d0 [ 55.209652][ T622] ? __sys_sendmsg_sock+0x50/0x50 [ 55.209674][ T622] ? import_iovec+0x80/0xb0 [ 55.209701][ T622] ___sys_sendmsg+0x2a6/0x370 [ 55.209723][ T622] ? __sys_sendmsg+0x2a0/0x2a0 [ 55.209743][ T622] ? proc_fail_nth_write+0x184/0x220 [ 55.209773][ T622] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 55.209806][ T622] ? __fget_files+0x2bc/0x330 [ 55.209841][ T622] __x64_sys_sendmsg+0x206/0x2e0 [ 55.209862][ T622] ? fput+0x1a4/0x230 [ 55.209885][ T622] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 55.209912][ T622] ? ksys_write+0x1f3/0x260 [ 55.209934][ T622] ? __kasan_check_read+0x15/0x20 [ 55.209953][ T622] x64_sys_call+0x2a4c/0x2ee0 [ 55.209970][ T622] do_syscall_64+0x57/0xf0 [ 55.209992][ T622] ? clear_bhb_loop+0x50/0xa0 [ 55.210018][ T622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.210047][ T622] RIP: 0033:0x7feacc39e0d9 [ 55.210063][ T622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.210079][ T622] RSP: 002b:00007feacd18d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.210099][ T622] RAX: ffffffffffffffda RBX: 00007feacc625fa0 RCX: 00007feacc39e0d9 [ 55.210114][ T622] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 55.210126][ T622] RBP: 00007feacd18d090 R08: 0000000000000000 R09: 0000000000000000 [ 55.210139][ T622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.210150][ T622] R13: 00007feacc626038 R14: 00007feacc625fa0 R15: 00007ffda0f6ac28 [ 55.210167][ T622] [ 55.214651][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 55.304765][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 55.316700][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.476603][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.495856][ T66] usb 2-1: config 10 has an invalid interface number: 91 but max is 0 [ 55.498033][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 55.502268][ T66] usb 2-1: config 10 has no interface number 0 [ 55.543276][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.549741][ T66] usb 2-1: config 10 interface 91 has no altsetting 0 [ 55.616172][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.630675][ T36] audit: type=1400 audit(1786717002.830:314): avc: denied { listen } for pid=601 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.637667][ T45] usb 4-1: config 0 descriptor?? [ 55.666302][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.704250][ T66] usb 2-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 55.715344][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 55.721327][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 55.729398][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.738485][ T10] usb 1-1: USB disconnect, device number 5 [ 55.745886][ T66] usb 2-1: Product: syz [ 55.750089][ T66] usb 2-1: Manufacturer: syz [ 55.754820][ T66] usb 2-1: SerialNumber: syz [ 55.970131][ T66] uvcvideo 2-1:10.91: Found Unit with invalid ID 0 [ 55.977286][ T66] usb 2-1: Found UVC 0.40 device syz (097b:61f6) [ 55.983747][ T66] uvcvideo 2-1:10.91: Entity type for entity Output 3 was not initialized! [ 55.992434][ T66] uvcvideo 2-1:10.91: Entity type for entity Media 2 was not initialized! [ 56.004446][ T66] usb 2-1: USB disconnect, device number 10 [ 56.154633][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 56.304666][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 56.310961][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 56.319322][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 56.329655][ T10] usb 1-1: config 179 has no interface number 0 [ 56.335961][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 56.349228][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 56.358297][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.487671][ T646] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.494996][ T646] overlayfs: failed to set xattr on upper [ 56.500776][ T646] overlayfs: ...falling back to redirect_dir=nofollow. [ 56.507741][ T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 56.508088][ T646] overlayfs: ...falling back to uuid=null. [ 56.520755][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 56.556915][ T648] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 56.568493][ T45] usb 1-1: USB disconnect, device number 6 [ 56.624621][ T312] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.774603][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 56.780833][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.791800][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.801608][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.814473][ T312] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.817696][ T655] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.33554432.0), cmd(3) [ 56.823587][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.838319][ T655] device-mapper: ioctl: only supply one of name or uuid, cmd(7) [ 56.852446][ T312] usb 3-1: config 0 descriptor?? [ 56.853919][ T10] usb 4-1: USB disconnect, device number 6 [ 56.857465][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 57.083436][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.093117][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.107871][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.117252][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.191867][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.199547][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.207190][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.214665][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.222073][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.229535][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.237074][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.244572][ T66] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 57.252951][ T66] hid-generic 0000:0000:0001.0006: hidraw0: HID v0.10 Device [syz0] on syz1 [ 57.280718][ T662] fido_id[662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.327323][ T312] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 57.334882][ T312] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 57.345572][ T312] microsoft 0003:045E:07DA.0007: item fetching failed at offset 31/34 [ 57.354426][ T312] microsoft 0003:045E:07DA.0007: parse failed [ 57.367260][ T312] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 57.483435][ T685] input: syz1 as /devices/virtual/input/input7 [ 57.498108][ T687] tipc: Enabled bearer , priority 0 [ 57.527166][ T687] syzkaller0: entered promiscuous mode [ 57.533351][ T687] syzkaller0: entered allmulticast mode [ 57.537531][ T31] usb 3-1: USB disconnect, device number 6 [ 57.540668][ T687] tipc: Resetting bearer [ 57.564855][ T686] tipc: Resetting bearer [ 57.576839][ T686] tipc: Disabling bearer [ 57.874614][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 57.884604][ T66] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 58.025647][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.036623][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.045758][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.054974][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.065229][ T66] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 58.078380][ T10] usb 2-1: config 0 descriptor?? [ 58.089298][ T66] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 58.099708][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.109284][ T66] usb 4-1: Product: syz [ 58.113522][ T66] usb 4-1: Manufacturer: syz [ 58.118461][ T66] usb 4-1: SerialNumber: syz [ 58.126363][ T66] usb-storage 4-1:1.0: USB Mass Storage device detected [ 58.135050][ T66] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 58.143264][ T66] scsi host1: usb-storage 4-1:1.0 [ 58.287361][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 58.293346][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 58.304339][ T10] usb 2-1: USB disconnect, device number 11 [ 58.388764][ T705] tipc: Started in network mode [ 58.393790][ T705] tipc: Node identity a65ab7c722af, cluster identity 4711 [ 58.401300][ T705] tipc: Enabled bearer , priority 0 [ 58.416288][ T336] usb 4-1: USB disconnect, device number 7 [ 58.428534][ T705] syzkaller0: entered promiscuous mode [ 58.434035][ T705] syzkaller0: entered allmulticast mode [ 58.439941][ T705] tipc: Resetting bearer [ 58.449641][ T704] tipc: Resetting bearer [ 58.461439][ T704] tipc: Disabling bearer [ 58.724611][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 58.754602][ T66] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 58.875638][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.886692][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 58.895854][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.904611][ T10] usb 2-1: config 0 descriptor?? [ 58.915869][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.924189][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.934395][ T66] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.945625][ T66] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 58.954776][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.962835][ T66] usb 1-1: Product: syz [ 58.967128][ T66] usb 1-1: Manufacturer: syz [ 58.972109][ T66] usb 1-1: SerialNumber: syz [ 59.179581][ T707] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.196028][ T707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.205375][ T707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.216966][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 59.227775][ T66] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 59.242447][ T66] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 59.252852][ T66] usb 1-1: USB disconnect, device number 7 [ 59.264573][ T312] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 59.275832][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.415766][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.428825][ T312] usb 3-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 59.438156][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.447909][ T312] usb 3-1: config 0 descriptor?? [ 59.554120][ T723] SELinux: avtab: truncated entry [ 59.583142][ T723] SELinux: failed to load policy [ 59.714983][ T10] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 59.722828][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 59.856746][ T729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 59.864227][ T312] lenovo 0003:04B3:3100.0008: unknown main item tag 0x0 [ 59.872759][ T312] lenovo 0003:04B3:3100.0008: unknown main item tag 0x0 [ 59.875982][ T729] netlink: 5892 bytes leftover after parsing attributes in process `syz.0.145'. [ 59.880724][ T312] lenovo 0003:04B3:3100.0008: unknown main item tag 0x0 [ 59.890175][ T729] device-mapper: ioctl: only supply one of name or uuid, cmd(7) [ 59.896637][ T312] lenovo 0003:04B3:3100.0008: unknown main item tag 0x0 [ 59.910492][ T312] lenovo 0003:04B3:3100.0008: unknown main item tag 0x0 [ 59.917535][ T312] lenovo 0003:04B3:3100.0008: unknown main item tag 0x0 [ 59.925387][ T312] lenovo 0003:04B3:3100.0008: hidraw0: USB HID v0.9a Device [HID 04b3:3100] on usb-dummy_hcd.2-1/input0 [ 60.016327][ T10] usb 2-1: USB disconnect, device number 12 [ 60.016452][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 60.085866][ T715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.094424][ T715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.295014][ T31] usb 3-1: USB disconnect, device number 7 [ 60.631890][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 60.631910][ T36] audit: type=1400 audit(1786717007.850:330): avc: denied { wake_alarm } for pid=742 comm="syz.1.149" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.714604][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 60.875742][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.885940][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 60.895238][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 251: 255, using maximum allowed: 30 [ 60.906445][ T10] usb 4-1: config 1 interface 1 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 60.920101][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 60.928294][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 60.937593][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.945781][ T10] usb 4-1: Product: syz [ 60.947350][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 60.949976][ T10] usb 4-1: Manufacturer: syz [ 60.963310][ T10] usb 4-1: SerialNumber: syz [ 60.986036][ T757] netlink: 'syz.0.152': attribute type 4 has an invalid length. [ 61.054609][ T66] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 61.084624][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 61.114600][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 61.121384][ T31] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 61.129883][ T31] usb 2-1: config 0 has no interface number 0 [ 61.136203][ T31] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 61.146559][ T31] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 61.158342][ T31] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 61.167738][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.177408][ T31] usb 2-1: Product: syz [ 61.181633][ T10] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 61.181966][ T31] usb 2-1: Manufacturer: syz [ 61.192762][ T31] usb 2-1: SerialNumber: syz [ 61.194679][ T10] usb 4-1: selecting invalid altsetting 0 [ 61.214730][ T10] usb 4-1: 0:2 : does not exist [ 61.215550][ T31] usb 2-1: config 0 descriptor?? [ 61.234254][ T10] usb 4-1: USB disconnect, device number 8 [ 61.236175][ T750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.248745][ T66] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 61.254794][ T750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.268054][ T66] usb 3-1: config 0 has no interface number 0 [ 61.279818][ T66] usb 3-1: config 0 interface 41 has no altsetting 0 [ 61.296584][ T66] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 61.306194][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.314293][ T66] usb 3-1: Product: syz [ 61.318642][ T66] usb 3-1: Manufacturer: syz [ 61.323335][ T66] usb 3-1: SerialNumber: syz [ 61.332622][ T66] usb 3-1: config 0 descriptor?? [ 61.477640][ T750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.485118][ T750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.540526][ T36] audit: type=1400 audit(1786717008.760:331): avc: denied { mounton } for pid=755 comm="syz.2.153" path="/44/tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 61.565259][ T66] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 61.581260][ T66] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 61.592427][ T66] usb 3-1: USB disconnect, device number 8 [ 61.641783][ T764] kvm: kvm [763]: vcpu2, guest rIP: 0x913b Unhandled WRMSR(0x11e) = 0x0 [ 61.692873][ T31] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 61.893086][ T31] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 61.903207][ T31] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 61.913576][ T31] asix 2-1:0.34: probe with driver asix failed with error -61 [ 62.064598][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 62.072163][ T66] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.225808][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.236878][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.247801][ T66] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.256876][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.266655][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.274690][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.288514][ T66] usb 3-1: config 0 descriptor?? [ 62.293604][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.302792][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.313457][ T10] usb 4-1: config 0 descriptor?? [ 62.512263][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 62.519494][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 62.528459][ T66] usb 3-1: USB disconnect, device number 9 [ 62.728242][ T36] audit: type=1400 audit(1786717009.950:332): avc: denied { create } for pid=776 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.749162][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x2 [ 62.756661][ T10] plantronics 0003:047F:FFFF.0009: report is too long [ 62.763492][ T36] audit: type=1400 audit(1786717009.970:333): avc: denied { connect } for pid=776 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.783404][ T10] plantronics 0003:047F:FFFF.0009: item 0 4 0 11 parsing failed [ 62.791308][ T10] plantronics 0003:047F:FFFF.0009: parse failed [ 62.797689][ T10] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 62.954598][ T66] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.106517][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.117529][ T66] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 63.126627][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.135484][ T66] usb 3-1: config 0 descriptor?? [ 63.457487][ T337] usb 4-1: USB disconnect, device number 9 [ 63.576875][ T780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.605119][ T780] netlink: 5892 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.614416][ T780] device-mapper: ioctl: only supply one of name or uuid, cmd(7) [ 63.704651][ T337] usb 2-1: USB disconnect, device number 13 [ 63.944962][ T66] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 63.953786][ T66] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 64.103991][ T796] syzkaller1: entered promiscuous mode [ 64.109607][ T796] syzkaller1: entered allmulticast mode [ 64.146296][ T796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.184660][ T337] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 64.252441][ T311] usb 3-1: USB disconnect, device number 10 [ 64.252601][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 64.324801][ T36] audit: type=1400 audit(1786717011.550:334): avc: denied { connect } for pid=798 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.345059][ T36] audit: type=1400 audit(1786717011.550:335): avc: denied { read } for pid=798 comm="syz.0.165" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.370411][ T337] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.384584][ T36] audit: type=1400 audit(1786717011.550:336): avc: denied { open } for pid=798 comm="syz.0.165" path="/39/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.414711][ T337] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.416169][ T36] audit: type=1400 audit(1786717011.550:337): avc: denied { ioctl } for pid=798 comm="syz.0.165" path="/39/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.434705][ T337] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.451994][ T36] audit: type=1400 audit(1786717011.570:338): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.483681][ T337] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 64.486903][ T36] audit: type=1400 audit(1786717011.640:339): avc: denied { read write } for pid=801 comm="syz.0.166" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.493271][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 64.526303][ T337] usb 2-1: Product: syz [ 64.530531][ T337] usb 2-1: Manufacturer: syz [ 64.536441][ T337] usb 2-1: SerialNumber: syz [ 64.638506][ T808] SELinux: avtab: truncated entry [ 64.667682][ T808] SELinux: failed to load policy [ 64.756185][ T337] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 64.914597][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 64.959153][ T786] netlink: 80 bytes leftover after parsing attributes in process `syz.1.162'. [ 64.969363][ T337] usb 2-1: USB disconnect, device number 14 [ 64.976181][ T337] usblp0: removed [ 65.017751][ T828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 65.028008][ T828] netlink: 5892 bytes leftover after parsing attributes in process `syz.3.176'. [ 65.037315][ T828] device-mapper: ioctl: only supply one of name or uuid, cmd(7) [ 65.064590][ T338] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 65.066044][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 65.084695][ T45] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 65.093789][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.101923][ T45] usb 1-1: Product: syz [ 65.106176][ T45] usb 1-1: Manufacturer: syz [ 65.110798][ T45] usb 1-1: SerialNumber: syz [ 65.225748][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.236707][ T338] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.245868][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.254809][ T338] usb 3-1: config 0 descriptor?? [ 65.318541][ T810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.327856][ T810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.338436][ T45] usb 1-1: Can't get UAC3 power state for id 10 [ 65.345578][ T45] usb 1-1: BAAD HEADPHONE p_chmask mismatch [ 65.354610][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 65.365601][ T45] usb 1-1: USB disconnect, device number 9 [ 65.377043][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.515763][ T833] netlink: 'syz.1.178': attribute type 11 has an invalid length. [ 65.717231][ T338] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 65.727549][ T338] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input10 [ 65.764611][ T66] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 65.805007][ T338] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 65.866707][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 65.866724][ T36] audit: type=1400 audit(1786717013.090:346): avc: denied { bind } for pid=838 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.911551][ T837] netlink: 'syz.3.179': attribute type 13 has an invalid length. [ 65.916492][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.939198][ T818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.954564][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.972053][ T818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.981766][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.988144][ T846] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 65.997376][ T9] usb 3-1: USB disconnect, device number 11 [ 66.004250][ T846] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.009498][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.024450][ T846] FAULT_INJECTION: forcing a failure. [ 66.024450][ T846] name failslab, interval 1, probability 0, space 0, times 0 [ 66.028694][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.043591][ T846] CPU: 1 UID: 0 PID: 846 Comm: syz.0.183 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 66.043679][ T846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.043716][ T846] Call Trace: [ 66.043729][ T846] [ 66.043756][ T846] __dump_stack+0x21/0x30 [ 66.043885][ T846] dump_stack_lvl+0x140/0x1c0 [ 66.043971][ T846] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.044053][ T846] dump_stack+0x19/0x20 [ 66.044128][ T846] should_fail_ex+0x3c2/0x510 [ 66.044199][ T846] ? ovl_cache_entry_new+0x49/0x700 [ 66.044253][ T846] should_failslab+0xac/0x100 [ 66.044326][ T846] __kmalloc_noprof+0x69/0x510 [ 66.044390][ T846] ? ovl_cache_entry_new+0x49/0x700 [ 66.044472][ T846] ? ovl_cache_entry_new+0xab/0x700 [ 66.044538][ T846] ovl_cache_entry_new+0x49/0x700 [ 66.044599][ T846] ovl_fill_merge+0x3c7/0x870 [ 66.044659][ T846] ? __cfi_ovl_fill_merge+0x10/0x10 [ 66.044692][ T846] kernfs_fop_readdir+0x227/0x740 [ 66.044734][ T846] ? down_read_killable+0x7f/0x100 [ 66.044755][ T846] iterate_dir+0x1fa/0x5c0 [ 66.044816][ T846] ovl_dir_read+0xf0/0x560 [ 66.044876][ T846] ? ovl_path_next+0x230/0x420 [ 66.044930][ T846] ovl_dir_read_merged+0x1cf/0x3d0 [ 66.044983][ T846] ? ovl_check_empty_dir+0x450/0x450 [ 66.045042][ T846] ? __cfi_ovl_fill_merge+0x10/0x10 [ 66.045112][ T846] ? ovl_iterate+0xcb7/0x2020 [ 66.045165][ T846] ovl_iterate+0xd79/0x2020 [ 66.045226][ T846] ? __cfi_vfs_open+0x10/0x10 [ 66.045300][ T846] ? __cfi_ovl_iterate+0x10/0x10 [ 66.045352][ T846] ? alloc_empty_file+0x120/0x270 [ 66.045380][ T846] ? make_vfsuid+0x4d/0xa0 [ 66.045438][ T846] ? __kasan_check_write+0x18/0x20 [ 66.045486][ T846] ? __kasan_check_read+0x15/0x20 [ 66.045541][ T846] ? ovl_dir_open+0x20c/0x3c0 [ 66.045609][ T846] ? __cfi_ovl_dir_open+0x10/0x10 [ 66.045668][ T846] ? inode_to_bdi+0x6d/0x100 [ 66.045751][ T846] ? __kasan_check_write+0x18/0x20 [ 66.045804][ T846] ? __kasan_check_write+0x18/0x20 [ 66.045865][ T846] ? down_write+0xee/0x2b0 [ 66.045915][ T846] ? __cfi_down_write+0x10/0x10 [ 66.045969][ T846] ? __cfi_selinux_file_permission+0x10/0x10 [ 66.046025][ T846] ? __kasan_check_write+0x18/0x20 [ 66.046073][ T846] wrap_directory_iterator+0xa7/0xf0 [ 66.046148][ T846] ? __cfi_ovl_iterate+0x10/0x10 [ 66.046201][ T846] shared_ovl_iterate+0x28/0x40 [ 66.046252][ T846] iterate_dir+0x1fa/0x5c0 [ 66.046318][ T846] ovl_dir_read+0xf0/0x560 [ 66.046370][ T846] ? ovl_path_next+0x230/0x420 [ 66.046443][ T846] ovl_dir_read_merged+0x1cf/0x3d0 [ 66.046503][ T846] ? ovl_check_empty_dir+0x450/0x450 [ 66.046565][ T846] ? __cfi_ovl_fill_merge+0x10/0x10 [ 66.046628][ T846] ? ovl_iterate+0xcb7/0x2020 [ 66.046685][ T846] ovl_iterate+0xd79/0x2020 [ 66.046744][ T846] ? _parse_integer+0x2e/0x40 [ 66.046799][ T846] ? kstrtoull+0x13b/0x1e0 [ 66.046860][ T846] ? __cfi_ovl_iterate+0x10/0x10 [ 66.046938][ T846] ? kstrtouint+0x78/0xf0 [ 66.047011][ T846] ? kstrtouint_from_user+0x117/0x170 [ 66.047070][ T846] ? __x64_sys_openat+0x13a/0x170 [ 66.047155][ T846] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 66.047219][ T846] ? selinux_file_permission+0x318/0xb60 [ 66.047283][ T846] ? __kasan_check_write+0x18/0x20 [ 66.047356][ T846] ? __kasan_check_write+0x18/0x20 [ 66.047407][ T846] ? __kasan_check_write+0x18/0x20 [ 66.047466][ T846] ? down_write+0xee/0x2b0 [ 66.047510][ T846] ? __cfi_down_write+0x10/0x10 [ 66.047561][ T846] ? __cfi_selinux_file_permission+0x10/0x10 [ 66.047620][ T846] ? __kasan_check_write+0x18/0x20 [ 66.047679][ T846] wrap_directory_iterator+0xa7/0xf0 [ 66.047741][ T846] ? __cfi_ovl_iterate+0x10/0x10 [ 66.047793][ T846] shared_ovl_iterate+0x28/0x40 [ 66.047843][ T846] iterate_dir+0x1fa/0x5c0 [ 66.047913][ T846] __se_sys_getdents64+0xf6/0x250 [ 66.047983][ T846] ? fput+0x1a4/0x230 [ 66.048053][ T846] ? __x64_sys_getdents64+0xa0/0xa0 [ 66.048122][ T846] ? ksys_write+0x1f3/0x260 [ 66.048180][ T846] ? __cfi_filldir64+0x10/0x10 [ 66.048268][ T846] ? __cfi_ksys_write+0x10/0x10 [ 66.048329][ T846] ? __kasan_check_read+0x15/0x20 [ 66.048401][ T846] __x64_sys_getdents64+0x7f/0xa0 [ 66.048459][ T846] x64_sys_call+0x27d0/0x2ee0 [ 66.048512][ T846] do_syscall_64+0x57/0xf0 [ 66.048582][ T846] ? clear_bhb_loop+0x50/0xa0 [ 66.048663][ T846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.048734][ T846] RIP: 0033:0x7f33bbd9e0d9 [ 66.048792][ T846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.048842][ T846] RSP: 002b:00007f33bcc7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 66.048915][ T846] RAX: ffffffffffffffda RBX: 00007f33bc025fa0 RCX: 00007f33bbd9e0d9 [ 66.048964][ T846] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 66.049005][ T846] RBP: 00007f33bcc7a090 R08: 0000000000000000 R09: 0000000000000000 [ 66.049042][ T846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.049082][ T846] R13: 00007f33bc026038 R14: 00007f33bc025fa0 R15: 00007ffe60803098 [ 66.049132][ T846] [ 66.214652][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 66.218801][ T66] usb 2-1: config 0 descriptor?? [ 66.386337][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.567219][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.578912][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.590684][ T45] usb 4-1: config 0 descriptor?? [ 66.675504][ T852] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 66.685204][ T852] SELinux: failed to load policy [ 66.803185][ T66] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 66.811781][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 66.815569][ T66] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 66.824986][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 66.844455][ T45] usb 4-1: USB disconnect, device number 10 [ 66.919272][ T36] audit: type=1400 audit(1786717014.140:347): avc: denied { module_load } for pid=862 comm="syz.2.189" path="/sys/kernel/address_bits" dev="sysfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 66.948681][ T36] audit: type=1400 audit(1786717014.170:348): avc: denied { setopt } for pid=862 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.033453][ T868] FAULT_INJECTION: forcing a failure. [ 67.033453][ T868] name failslab, interval 1, probability 0, space 0, times 0 [ 67.046212][ T868] CPU: 0 UID: 0 PID: 868 Comm: syz.2.190 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 67.046246][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.046260][ T868] Call Trace: [ 67.046267][ T868] [ 67.046276][ T868] __dump_stack+0x21/0x30 [ 67.046312][ T868] dump_stack_lvl+0x140/0x1c0 [ 67.046344][ T868] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.046367][ T868] ? __kasan_check_write+0x18/0x20 [ 67.046383][ T868] ? copy_mm+0x307/0x1da0 [ 67.046402][ T868] dump_stack+0x19/0x20 [ 67.046422][ T868] should_fail_ex+0x3c2/0x510 [ 67.046440][ T868] should_failslab+0xac/0x100 [ 67.046459][ T868] kmem_cache_alloc_noprof+0x42/0x410 [ 67.046476][ T868] ? alloc_pid+0xa5/0xb80 [ 67.046492][ T868] ? __asan_memcpy+0x5a/0x80 [ 67.046508][ T868] alloc_pid+0xa5/0xb80 [ 67.046525][ T868] copy_process+0x1467/0x3350 [ 67.046547][ T868] ? __cfi_copy_process+0x10/0x10 [ 67.046566][ T868] ? __kmalloc_cache_noprof+0x23c/0x470 [ 67.046583][ T868] ? __kasan_check_write+0x18/0x20 [ 67.046598][ T868] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 67.046623][ T868] vhost_task_create+0x1f7/0x3f0 [ 67.046639][ T868] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 67.046658][ T868] ? __cfi_vhost_task_create+0x10/0x10 [ 67.046675][ T868] ? __cfi_vhost_task_fn+0x10/0x10 [ 67.046691][ T868] ? __kasan_check_write+0x18/0x20 [ 67.046706][ T868] ? mutex_lock+0x97/0x1d0 [ 67.046732][ T868] ? __cfi_mutex_lock+0x10/0x10 [ 67.046753][ T868] ? kernel_text_address+0xa9/0xe0 [ 67.046775][ T868] kvm_mmu_post_init_vm+0x161/0x300 [ 67.046798][ T868] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 67.046819][ T868] ? _parse_integer_limit+0x195/0x1e0 [ 67.046837][ T868] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 67.046858][ T868] ? kstrtoull+0x13b/0x1e0 [ 67.046874][ T868] ? kstrtouint+0x78/0xf0 [ 67.046889][ T868] ? ioctl_has_perm+0x1bc/0x500 [ 67.046904][ T868] ? __asan_memcpy+0x5a/0x80 [ 67.046919][ T868] ? ioctl_has_perm+0x408/0x500 [ 67.046933][ T868] ? has_cap_mac_admin+0xd0/0xd0 [ 67.046948][ T868] ? __kasan_check_write+0x18/0x20 [ 67.046963][ T868] ? mutex_lock_killable+0x97/0x1d0 [ 67.046986][ T868] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.047008][ T868] ? proc_fail_nth_write+0x184/0x220 [ 67.047032][ T868] kvm_vcpu_ioctl+0xa43/0x1000 [ 67.047048][ T868] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.047063][ T868] ? __cfi_vfs_write+0x10/0x10 [ 67.047079][ T868] ? __kasan_check_write+0x18/0x20 [ 67.047093][ T868] ? mutex_unlock+0x90/0x240 [ 67.047117][ T868] ? __cfi_mutex_unlock+0x10/0x10 [ 67.047141][ T868] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.047161][ T868] ? security_file_ioctl+0x3e/0x110 [ 67.047184][ T868] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.047199][ T868] __se_sys_ioctl+0x135/0x1b0 [ 67.047219][ T868] __x64_sys_ioctl+0x7f/0xa0 [ 67.047237][ T868] x64_sys_call+0x1878/0x2ee0 [ 67.047251][ T868] do_syscall_64+0x57/0xf0 [ 67.047268][ T868] ? clear_bhb_loop+0x50/0xa0 [ 67.047290][ T868] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.047311][ T868] RIP: 0033:0x7feacc39e0d9 [ 67.047324][ T868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.047337][ T868] RSP: 002b:00007feacd18d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.047354][ T868] RAX: ffffffffffffffda RBX: 00007feacc625fa0 RCX: 00007feacc39e0d9 [ 67.047366][ T868] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 67.047376][ T868] RBP: 00007feacd18d090 R08: 0000000000000000 R09: 0000000000000000 [ 67.047386][ T868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.047396][ T868] R13: 00007feacc626038 R14: 00007feacc625fa0 R15: 00007ffda0f6ac28 [ 67.047409][ T868] [ 67.309020][ T871] FAULT_INJECTION: forcing a failure. [ 67.309020][ T871] name failslab, interval 1, probability 0, space 0, times 0 [ 67.440334][ T871] CPU: 0 UID: 0 PID: 871 Comm: syz.0.191 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 67.440368][ T871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.440382][ T871] Call Trace: [ 67.440389][ T871] [ 67.440398][ T871] __dump_stack+0x21/0x30 [ 67.440432][ T871] dump_stack_lvl+0x140/0x1c0 [ 67.440461][ T871] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.440492][ T871] dump_stack+0x19/0x20 [ 67.440520][ T871] should_fail_ex+0x3c2/0x510 [ 67.440545][ T871] should_failslab+0xac/0x100 [ 67.440572][ T871] kmem_cache_alloc_noprof+0x42/0x410 [ 67.440594][ T871] ? security_file_alloc+0x49/0x220 [ 67.440616][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 67.440628][ T871] ? kasan_save_alloc_info+0x3a/0x50 [ 67.440678][ T871] security_file_alloc+0x49/0x220 [ 67.440810][ T871] init_file+0x9e/0x210 [ 67.440902][ T871] alloc_empty_file+0xd9/0x270 [ 67.440977][ T871] dentry_open+0x4b/0xb0 [ 67.441053][ T871] open_namespace+0xf8/0x180 [ 67.441128][ T871] ? __cfi_open_namespace+0x10/0x10 [ 67.441195][ T871] ? __kasan_check_write+0x18/0x20 [ 67.441260][ T871] ns_ioctl+0x602/0xc20 [ 67.441325][ T871] ? __cfi_ns_ioctl+0x10/0x10 [ 67.441408][ T871] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.441475][ T871] ? security_file_ioctl+0x3e/0x110 [ 67.441557][ T871] ? __cfi_ns_ioctl+0x10/0x10 [ 67.441623][ T871] __se_sys_ioctl+0x135/0x1b0 [ 67.441702][ T871] __x64_sys_ioctl+0x7f/0xa0 [ 67.441775][ T871] x64_sys_call+0x1878/0x2ee0 [ 67.441827][ T871] do_syscall_64+0x57/0xf0 [ 67.441900][ T871] ? clear_bhb_loop+0x50/0xa0 [ 67.441974][ T871] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.442052][ T871] RIP: 0033:0x7f33bbd9e0d9 [ 67.442107][ T871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.442174][ T871] RSP: 002b:00007f33bcc7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.442252][ T871] RAX: ffffffffffffffda RBX: 00007f33bc025fa0 RCX: 00007f33bbd9e0d9 [ 67.442302][ T871] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 67.442335][ T871] RBP: 00007f33bcc7a090 R08: 0000000000000000 R09: 0000000000000000 [ 67.442370][ T871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.442397][ T871] R13: 00007f33bc026038 R14: 00007f33bc025fa0 R15: 00007ffe60803098 [ 67.442449][ T871] [ 67.825620][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.836544][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 67.845615][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.854305][ T45] usb 4-1: config 0 descriptor?? [ 67.964599][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 67.976036][ T66] usb 2-1: USB disconnect, device number 15 [ 67.998810][ T36] audit: type=1400 audit(1786717015.230:349): avc: denied { write } for pid=884 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.044635][ T337] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 68.114627][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 68.121034][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 68.129202][ T9] usb 3-1: config 0 has no interface number 0 [ 68.135377][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 68.153958][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 68.167256][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 68.176417][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.185016][ T9] usb 3-1: Product: syz [ 68.189258][ T9] usb 3-1: Manufacturer: syz [ 68.193938][ T9] usb 3-1: SerialNumber: syz [ 68.195976][ T337] usb 1-1: not running at top speed; connect to a high speed hub [ 68.201589][ T9] usb 3-1: config 0 descriptor?? [ 68.213369][ T881] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.220724][ T881] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.228846][ T337] usb 1-1: config 192 has an invalid interface number: 48 but max is 0 [ 68.237324][ T337] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 68.247992][ T337] usb 1-1: config 192 has no interface number 0 [ 68.254452][ T337] usb 1-1: config 192 interface 48 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 68.265388][ T337] usb 1-1: config 192 interface 48 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.282419][ T337] usb 1-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice= 0.7a [ 68.291653][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.299723][ T337] usb 1-1: Product: syz [ 68.303990][ T337] usb 1-1: Manufacturer: syz [ 68.308656][ T337] usb 1-1: SerialNumber: syz [ 68.430190][ T881] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.437601][ T881] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.517182][ T337] ftdi_sio 1-1:192.48: FTDI USB Serial Device converter detected [ 68.527793][ T337] usb 1-1: Detected SIO [ 68.531997][ T337] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 12 [ 68.544000][ T337] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 68.555226][ T337] usb 1-1: USB disconnect, device number 10 [ 68.568053][ T337] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 68.581958][ T337] ftdi_sio 1-1:192.48: device disconnected [ 68.646422][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 68.674968][ T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 68.691327][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 68.988704][ T66] usb 4-1: USB disconnect, device number 11 [ 68.988756][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 69.047815][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 69.069529][ T9] asix 3-1:0.34: probe with driver asix failed with error -32 [ 69.083875][ T36] audit: type=1400 audit(1786717016.300:350): avc: denied { read } for pid=905 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.097757][ T9] usb 3-1: USB disconnect, device number 12 [ 69.401956][ T36] audit: type=1400 audit(1786717016.620:351): avc: denied { create } for pid=910 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.884596][ T66] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 70.046861][ T66] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 70.056038][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.064042][ T66] usb 3-1: Product: syz [ 70.068348][ T66] usb 3-1: Manufacturer: syz [ 70.072972][ T66] usb 3-1: SerialNumber: syz [ 70.074717][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 70.234584][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 70.240917][ T45] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 70.251241][ T45] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 70.262254][ T45] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 70.264684][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 70.276766][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.292249][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.300788][ T45] usb 4-1: SerialNumber: syz [ 70.302652][ T66] usb 3-1: MIDIStreaming interface descriptor not found [ 70.318154][ T66] usb 3-1: USB disconnect, device number 13 [ 70.329556][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.434610][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 70.441072][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.452037][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.461955][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.474859][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.484027][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.492898][ T9] usb 1-1: config 0 descriptor?? [ 70.519781][ T928] tipc: Enabled bearer , priority 0 [ 70.542906][ T928] syzkaller0: entered promiscuous mode [ 70.548456][ T928] syzkaller0: entered allmulticast mode [ 70.554362][ T928] tipc: Resetting bearer [ 70.562896][ T927] tipc: Resetting bearer [ 70.577008][ T927] tipc: Disabling bearer [ 70.610057][ T45] usb 4-1: bad CDC descriptors [ 70.617545][ T45] usb 4-1: USB disconnect, device number 12 [ 70.818214][ T932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 70.899775][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 70.906170][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 70.915181][ T9] usb 1-1: USB disconnect, device number 11 [ 71.094599][ T800] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 71.184169][ T940] overlayfs: failed to resolve '/EΚ1Yb1F0@;': -2 [ 71.191692][ T940] overlay: Unknown parameter '/' [ 71.245733][ T800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.256782][ T800] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.265897][ T800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.274808][ T800] usb 3-1: config 0 descriptor?? [ 71.307726][ T942] netlink: 188 bytes leftover after parsing attributes in process `syz.3.216'. [ 71.339033][ T36] audit: type=1400 audit(1786717018.560:352): avc: denied { checkpoint_restore } for pid=941 comm="syz.3.216" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.424482][ T36] audit: type=1400 audit(1786717018.640:353): avc: denied { audit_write } for pid=944 comm="syz.0.217" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.490538][ T800] usbhid 3-1:0.0: can't add hid device: -71 [ 71.500053][ T800] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 71.511378][ T800] usb 3-1: USB disconnect, device number 14 [ 71.713838][ T36] audit: type=1400 audit(1786717018.930:354): avc: denied { write } for pid=952 comm="syz.0.220" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 71.793981][ T957] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.874471][ T960] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 71.884822][ T960] SELinux: failed to load policy [ 71.954591][ T800] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 72.105773][ T800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.116775][ T800] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 72.126052][ T800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.138474][ T800] usb 3-1: config 0 descriptor?? [ 72.204593][ T66] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 72.240888][ T36] audit: type=1400 audit(1786717019.460:355): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 72.262926][ T36] audit: type=1400 audit(1786717019.490:356): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.284399][ T36] audit: type=1400 audit(1786717019.490:357): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=1955 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.306238][ T36] audit: type=1400 audit(1786717019.490:358): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1955 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.329436][ T36] audit: type=1400 audit(1786717019.490:359): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1955 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.354131][ T36] audit: type=1400 audit(1786717019.560:360): avc: denied { read } for pid=970 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.377407][ T36] audit: type=1400 audit(1786717019.560:361): avc: denied { open } for pid=970 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.414575][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 72.424031][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.442595][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.459979][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.474597][ T45] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 72.498336][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.519318][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.538649][ T66] usb 1-1: Manufacturer: ᥢ꺠瘿䓻蠏泍㆑䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸駏᯻쌲钧욢 [ 72.570454][ T66] usb 1-1: SerialNumber: syz [ 72.625909][ T45] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 72.644262][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.662421][ T45] usb 4-1: config 0 has no interface number 0 [ 72.675012][ T45] usb 4-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 72.688444][ T45] usb 4-1: config 0 interface 41 has no altsetting 0 [ 72.704777][ T45] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 72.714000][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.727240][ T45] usb 4-1: Product: syz [ 72.731646][ T45] usb 4-1: Manufacturer: syz [ 72.744932][ T45] usb 4-1: SerialNumber: syz [ 72.760006][ T45] usb 4-1: config 0 descriptor?? [ 72.770328][ T45] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 72.781331][ T963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'. [ 72.810540][ T963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 72.965007][ T800] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 72.973151][ T800] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 73.201324][ T1010] Zero length message leads to an empty skb [ 73.266651][ T10] usb 3-1: USB disconnect, device number 15 [ 73.272627][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 73.544583][ T800] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 73.694571][ T800] usb 2-1: Using ep0 maxpacket: 16 [ 73.701157][ T800] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.712299][ T800] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.722760][ T800] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.731916][ T800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.740011][ T800] usb 2-1: Product: syz [ 73.744204][ T800] usb 2-1: Manufacturer: syz [ 73.748958][ T800] usb 2-1: SerialNumber: syz [ 73.961178][ T800] usb 2-1: 0:2 : does not exist [ 73.972743][ T800] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 73.987887][ T800] usb 2-1: USB disconnect, device number 16 [ 74.002303][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.044638][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 74.194607][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 74.200980][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 74.209404][ T10] usb 3-1: config 0 has no interface number 0 [ 74.215719][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 74.225978][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 74.237571][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 74.246781][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.254872][ T10] usb 3-1: Product: syz [ 74.259131][ T10] usb 3-1: Manufacturer: syz [ 74.263762][ T10] usb 3-1: SerialNumber: syz [ 74.269445][ T10] usb 3-1: config 0 descriptor?? [ 74.274715][ T1023] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 74.282089][ T1023] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 74.491097][ T1023] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 74.498455][ T1023] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 74.708047][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 74.918942][ T66] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 74.926413][ T66] cdc_ncm 1-1:1.0: bind() failure [ 74.933348][ T66] usb 1-1: USB disconnect, device number 12 [ 74.974610][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 75.114576][ T45] usb 2-1: device descriptor read/64, error -71 [ 75.249903][ T800] usb 4-1: USB disconnect, device number 13 [ 75.335691][ T1023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.354767][ T1023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.363364][ T45] usb 2-1: device descriptor read/64, error -71 [ 75.370713][ T1050] syzkaller0: entered promiscuous mode [ 75.379322][ T1050] syzkaller0: entered allmulticast mode [ 75.614578][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 75.754587][ T45] usb 2-1: device descriptor read/64, error -71 [ 75.924599][ T800] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 76.014608][ T45] usb 2-1: device descriptor read/64, error -71 [ 76.075033][ T800] usb 4-1: no configurations [ 76.079775][ T800] usb 4-1: can't read configurations, error -22 [ 76.126544][ T45] usb usb2-port1: attempt power cycle [ 76.154605][ T66] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 76.214616][ T800] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 76.304679][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 76.315738][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.324473][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.334796][ T66] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.347877][ T66] usb 1-1: config 1 interface 0 has no altsetting 0 [ 76.365894][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.384658][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.388448][ T800] usb 4-1: no configurations [ 76.392750][ T66] usb 1-1: Product: syz [ 76.401636][ T66] usb 1-1: Manufacturer: syz [ 76.406755][ T66] usb 1-1: SerialNumber: syz [ 76.407738][ T800] usb 4-1: can't read configurations, error -22 [ 76.421937][ T800] usb usb4-port1: attempt power cycle [ 76.474601][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 76.495721][ T45] usb 2-1: device descriptor read/8, error -71 [ 76.570970][ T1116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.579613][ T1116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.603359][ T1121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.612170][ T1121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.625620][ T45] usb 2-1: device descriptor read/8, error -71 [ 76.635249][ T66] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 76.645178][ T66] usb 1-1: USB disconnect, device number 13 [ 76.764699][ T800] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 76.785380][ T800] usb 4-1: no configurations [ 76.790032][ T800] usb 4-1: can't read configurations, error -22 [ 76.864634][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 76.885683][ T45] usb 2-1: device descriptor read/8, error -71 [ 76.924648][ T800] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 76.945379][ T800] usb 4-1: no configurations [ 76.950055][ T800] usb 4-1: can't read configurations, error -22 [ 76.956548][ T800] usb usb4-port1: unable to enumerate USB device [ 77.015808][ T45] usb 2-1: device descriptor read/8, error -71 [ 77.124724][ T45] usb usb2-port1: unable to enumerate USB device [ 77.165692][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 77.165713][ T36] audit: type=1400 audit(1786717024.390:375): avc: denied { mounton } for pid=1124 comm="syz.0.254" path="/67/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.274954][ T1128] process 'syz.0.254' launched './file0' with NULL argv: empty string added [ 77.274980][ T1125] tmpfs: Bad value for 'nr_inodes' [ 77.746169][ T36] audit: type=1400 audit(1786717024.970:376): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.158134][ T338] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 78.173640][ T1147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.182607][ T1147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.190946][ T1147] netlink: 164 bytes leftover after parsing attributes in process `syz.2.262'. [ 78.346426][ T338] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 78.356607][ T338] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 78.368036][ T338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.377217][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.385437][ T338] usb 2-1: Product: syz [ 78.389645][ T338] usb 2-1: Manufacturer: syz [ 78.394284][ T338] usb 2-1: SerialNumber: syz [ 78.592031][ T1152] kvm: kvm [1151]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 78.601262][ T1152] kvm: kvm [1151]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 78.616103][ T1152] kvm: kvm [1151]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 78.617105][ T338] cdc_ncm 2-1:1.0: bind() failure [ 78.630586][ T1152] kvm: kvm [1151]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 78.642855][ T1152] kvm: kvm [1151]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 78.654142][ T338] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 78.664621][ T338] cdc_ncm 2-1:1.1: bind() failure [ 78.680177][ T338] usb 2-1: USB disconnect, device number 21 [ 78.994644][ T1145] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 79.024641][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 79.155143][ T1145] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 79.163240][ T1145] usb 4-1: config 0 has no interface number 0 [ 79.174573][ T1145] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.194586][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 79.194904][ T1145] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.206186][ T45] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 79.220761][ T1145] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 79.234554][ T45] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.234594][ T1145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.268870][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.276339][ T1145] usb 4-1: config 0 descriptor?? [ 79.294411][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 79.310986][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.339625][ T45] usb 1-1: config 0 descriptor?? [ 79.375070][ T1178] FAULT_INJECTION: forcing a failure. [ 79.375070][ T1178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.388360][ T1178] CPU: 0 UID: 0 PID: 1178 Comm: syz.1.272 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 79.388397][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.388412][ T1178] Call Trace: [ 79.388419][ T1178] [ 79.388432][ T1178] __dump_stack+0x21/0x30 [ 79.388469][ T1178] dump_stack_lvl+0x140/0x1c0 [ 79.388500][ T1178] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.388543][ T1178] ? is_bpf_text_address+0x17b/0x1a0 [ 79.388578][ T1178] ? kernel_text_address+0xa9/0xe0 [ 79.388611][ T1178] dump_stack+0x19/0x20 [ 79.388643][ T1178] should_fail_ex+0x3c2/0x510 [ 79.388671][ T1178] should_fail+0xf/0x20 [ 79.388695][ T1178] should_fail_usercopy+0x1e/0x30 [ 79.388724][ T1178] _copy_from_user+0x20/0xa0 [ 79.388756][ T1178] ___sys_sendmsg+0x1c7/0x370 [ 79.388783][ T1178] ? __sys_sendmsg+0x2a0/0x2a0 [ 79.388808][ T1178] ? kstrtouint+0x78/0xf0 [ 79.388836][ T1178] ? __fget_files+0x2bc/0x330 [ 79.388867][ T1178] __sys_sendmmsg+0x2b4/0x4e0 [ 79.388893][ T1178] ? __cfi___sys_sendmmsg+0x10/0x10 [ 79.388924][ T1178] ? __cfi_ksys_write+0x10/0x10 [ 79.388950][ T1178] __x64_sys_sendmmsg+0xa4/0xc0 [ 79.388975][ T1178] x64_sys_call+0xfec/0x2ee0 [ 79.388997][ T1178] do_syscall_64+0x57/0xf0 [ 79.389024][ T1178] ? clear_bhb_loop+0x50/0xa0 [ 79.389057][ T1178] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.389088][ T1178] RIP: 0033:0x7f685499e0d9 [ 79.389107][ T1178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.389129][ T1178] RSP: 002b:00007f68557f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.389155][ T1178] RAX: ffffffffffffffda RBX: 00007f6854c25fa0 RCX: 00007f685499e0d9 [ 79.389186][ T1178] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 79.389202][ T1178] RBP: 00007f68557f1090 R08: 0000000000000000 R09: 0000000000000000 [ 79.389216][ T1178] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 79.389231][ T1178] R13: 00007f6854c26038 R14: 00007f6854c25fa0 R15: 00007fff47a0ade8 [ 79.389251][ T1178] [ 79.603680][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.612294][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.824262][ T1145] uclogic 0003:5543:0045.000C: interface is invalid, ignoring [ 79.904593][ T338] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 79.951384][ T36] audit: type=1400 audit(1786717027.170:377): avc: denied { write } for pid=1159 comm="syz.0.267" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.951401][ T1160] random: crng reseeded on system resumption [ 80.008425][ T1160] bridge: RTM_NEWNEIGH with invalid ether address [ 80.015967][ T1160] bridge: RTM_NEWNEIGH with invalid ether address [ 80.026267][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 80.033184][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.046047][ T45] usb 1-1: USB disconnect, device number 14 [ 80.054705][ T338] usb 2-1: Using ep0 maxpacket: 8 [ 80.072417][ T338] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 80.084790][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.092836][ T338] usb 2-1: Product: syz [ 80.097568][ T338] usb 2-1: Manufacturer: syz [ 80.102246][ T338] usb 2-1: SerialNumber: syz [ 80.163944][ T1158] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.173150][ T800] usb 4-1: USB disconnect, device number 18 [ 80.312456][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.323628][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.332478][ T36] audit: type=1400 audit(1786717027.560:378): avc: denied { bind } for pid=1181 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.353527][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.363368][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.372804][ T36] audit: type=1400 audit(1786717027.580:379): avc: denied { listen } for pid=1181 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.375293][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 80.411810][ T10] asix 3-1:0.34: probe with driver asix failed with error -110 [ 80.594316][ T338] usb 2-1: MIDIStreaming interface descriptor not found [ 80.610816][ T338] usb 2-1: USB disconnect, device number 22 [ 80.627554][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.634020][ T36] audit: type=1400 audit(1786717027.850:380): avc: denied { load_policy } for pid=1217 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.684403][ T1218] SELinux: avtab: truncated entry [ 80.708964][ T1218] SELinux: failed to load policy [ 80.856225][ T1225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 80.865934][ T1225] 9pnet_fd: Insufficient options for proto=fd [ 81.039284][ T36] audit: type=1400 audit(1786717028.260:381): avc: denied { read write } for pid=1231 comm="syz.3.285" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 81.062806][ T36] audit: type=1400 audit(1786717028.260:382): avc: denied { open } for pid=1231 comm="syz.3.285" path="/67/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 81.062903][ T1232] size and base must be multiples of 4 kiB [ 81.086408][ T36] audit: type=1400 audit(1786717028.280:383): avc: denied { ioctl } for pid=1231 comm="syz.3.285" path="/67/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 81.103488][ T1232] CPU: 1 UID: 0 PID: 1232 Comm: syz.3.285 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 81.103596][ T1232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.103654][ T1232] Call Trace: [ 81.103682][ T1232] [ 81.103712][ T1232] __dump_stack+0x21/0x30 [ 81.103817][ T1232] dump_stack_lvl+0x140/0x1c0 [ 81.103896][ T1232] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.104032][ T1232] dump_stack+0x19/0x20 [ 81.104117][ T1232] mtrr_add+0xd8/0x100 [ 81.104190][ T1232] mtrr_ioctl+0xbd8/0x1170 [ 81.104265][ T1232] ? do_futex+0x37d/0x510 [ 81.104349][ T1232] ? __cfi_mtrr_ioctl+0x10/0x10 [ 81.104434][ T1232] ? __cfi_mtrr_ioctl+0x10/0x10 [ 81.104510][ T1232] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 81.104571][ T1232] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 81.104641][ T1232] __se_sys_ioctl+0x135/0x1b0 [ 81.104716][ T1232] __x64_sys_ioctl+0x7f/0xa0 [ 81.104789][ T1232] x64_sys_call+0x1878/0x2ee0 [ 81.104850][ T1232] do_syscall_64+0x57/0xf0 [ 81.104923][ T1232] ? clear_bhb_loop+0x50/0xa0 [ 81.105045][ T1232] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.105150][ T1232] RIP: 0033:0x7f2053d9e0d9 [ 81.105196][ T1232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.105251][ T1232] RSP: 002b:00007f2054bdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.105322][ T1232] RAX: ffffffffffffffda RBX: 00007f2054025fa0 RCX: 00007f2053d9e0d9 [ 81.105364][ T1232] RDX: 0000200000000340 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 81.105407][ T1232] RBP: 00007f2053e35024 R08: 0000000000000000 R09: 0000000000000000 [ 81.105447][ T1232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.105479][ T1232] R13: 00007f2054026038 R14: 00007f2054025fa0 R15: 00007ffd95123e08 [ 81.105531][ T1232] [ 81.334813][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 81.360524][ T36] audit: type=1400 audit(1786717028.580:384): avc: denied { read } for pid=1240 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.365217][ T1241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.390164][ T1241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.464610][ T311] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 81.495010][ T45] usb 1-1: no configurations [ 81.499678][ T45] usb 1-1: can't read configurations, error -22 [ 81.625700][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.636702][ T311] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.645789][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 81.653391][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.662546][ T311] usb 2-1: config 0 descriptor?? [ 81.784662][ T800] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 81.804995][ T45] usb 1-1: no configurations [ 81.809639][ T45] usb 1-1: can't read configurations, error -22 [ 81.816049][ T45] usb usb1-port1: attempt power cycle [ 81.869848][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 81.875942][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 81.884513][ T311] usb 2-1: USB disconnect, device number 23 [ 81.926738][ T1249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.935483][ T1249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.936758][ T800] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 81.954378][ T800] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.961042][ T800] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 81.970367][ T800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.979116][ T800] usb 4-1: config 0 descriptor?? [ 81.984423][ T1245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 82.155993][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 82.175614][ T45] usb 1-1: no configurations [ 82.180287][ T45] usb 1-1: can't read configurations, error -22 [ 82.193095][ T1245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.201784][ T1245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.304594][ T311] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 82.314602][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 82.335232][ T45] usb 1-1: no configurations [ 82.339891][ T45] usb 1-1: can't read configurations, error -22 [ 82.346369][ T45] usb usb1-port1: unable to enumerate USB device [ 82.455786][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.466829][ T311] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 82.475985][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.490280][ T311] usb 2-1: config 0 descriptor?? [ 82.598963][ T36] audit: type=1400 audit(1786717029.820:385): avc: denied { mounton } for pid=1252 comm="syz.2.293" path="/86/file0" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 83.305063][ T311] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 83.306359][ T1234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.320070][ T311] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 83.333173][ T1234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.342323][ T1234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.351220][ T1234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.370522][ C1] ------------[ cut here ]------------ [ 83.375999][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 83.384629][ C1] index 39 is out of range for type 'const int[34]' [ 83.391231][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 83.391255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.391266][ C1] Call Trace: [ 83.391273][ C1] [ 83.391280][ C1] __dump_stack+0x21/0x30 [ 83.391307][ C1] dump_stack_lvl+0x140/0x1c0 [ 83.391330][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.391353][ C1] ? common_startup_64+0x13b/0x157 [ 83.391378][ C1] dump_stack+0x19/0x20 [ 83.391409][ C1] ubsan_epilogue+0xe/0x40 [ 83.391423][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 83.391447][ C1] aiptek_irq+0x208d/0x2a00 [ 83.391471][ C1] ? _raw_spin_unlock+0x45/0x60 [ 83.391490][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 83.391509][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 83.391535][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 83.391560][ C1] dummy_timer+0xa3f/0x4900 [ 83.391582][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.391598][ C1] ? timerqueue_del+0xd7/0x130 [ 83.391614][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 83.391639][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.391654][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 83.391708][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 83.391743][ C1] ? read_tsc+0xd/0x20 [ 83.391774][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 83.391806][ C1] hrtimer_run_softirq+0x159/0x560 [ 83.391821][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 83.391845][ C1] handle_softirqs+0x1aa/0x620 [ 83.391862][ C1] __irq_exit_rcu+0x47/0xb0 [ 83.391878][ C1] irq_exit_rcu+0xd/0x30 [ 83.391892][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 83.391918][ C1] [ 83.391923][ C1] [ 83.391929][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 83.391953][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 83.391969][ C1] Code: cc cc cc cc cc cc cc b8 85 73 a9 6d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 09 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 83.391983][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 83.391997][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff85a454fd [ 83.392011][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000188b74 [ 83.392021][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 83.392034][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 83.392045][ C1] R13: 1ffff110206cd980 R14: dffffc0000000000 R15: ffffffff87ecc268 [ 83.392059][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 83.392075][ C1] default_idle+0x17/0x30 [ 83.392091][ C1] arch_cpu_idle+0xd/0x20 [ 83.392107][ C1] default_idle_call+0x3e/0x80 [ 83.392123][ C1] do_idle+0x2fc/0x570 [ 83.392141][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 83.392160][ C1] cpu_startup_entry+0x47/0x60 [ 83.392178][ C1] start_secondary+0x12e/0x140 [ 83.392200][ C1] common_startup_64+0x13b/0x157 [ 83.392225][ C1] [ 83.392231][ C1] ---[ end trace ]--- [ 83.684014][ C1] ================================================================== [ 83.692079][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 83.699640][ C1] Read of size 4 at addr ffffffff86704c7c by task swapper/1/0 [ 83.707096][ C1] [ 83.709420][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 83.709442][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.709453][ C1] Call Trace: [ 83.709459][ C1] [ 83.709466][ C1] __dump_stack+0x21/0x30 [ 83.709492][ C1] dump_stack_lvl+0x140/0x1c0 [ 83.709515][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.709539][ C1] ? __cfi__printk+0x10/0x10 [ 83.709561][ C1] print_address_description+0x71/0x210 [ 83.709586][ C1] print_report+0x4a/0x70 [ 83.709608][ C1] kasan_report+0x162/0x1a0 [ 83.709630][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 83.709653][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 83.709676][ C1] __asan_report_load4_noabort+0x18/0x20 [ 83.709692][ C1] aiptek_irq+0x20ab/0x2a00 [ 83.709714][ C1] ? _raw_spin_unlock+0x45/0x60 [ 83.709734][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 83.709753][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 83.709780][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 83.709805][ C1] dummy_timer+0xa3f/0x4900 [ 83.709829][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.709845][ C1] ? timerqueue_del+0xd7/0x130 [ 83.709861][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 83.709887][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.709903][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 83.709930][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 83.709953][ C1] ? read_tsc+0xd/0x20 [ 83.709976][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 83.709997][ C1] hrtimer_run_softirq+0x159/0x560 [ 83.710013][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 83.710037][ C1] handle_softirqs+0x1aa/0x620 [ 83.710055][ C1] __irq_exit_rcu+0x47/0xb0 [ 83.710071][ C1] irq_exit_rcu+0xd/0x30 [ 83.710086][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 83.710112][ C1] [ 83.710117][ C1] [ 83.710123][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 83.710146][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 83.710164][ C1] Code: cc cc cc cc cc cc cc b8 85 73 a9 6d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 09 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 83.710177][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 83.710193][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff85a454fd [ 83.710206][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000188b74 [ 83.710216][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 83.710229][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 83.710241][ C1] R13: 1ffff110206cd980 R14: dffffc0000000000 R15: ffffffff87ecc268 [ 83.710261][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 83.710279][ C1] default_idle+0x17/0x30 [ 83.710295][ C1] arch_cpu_idle+0xd/0x20 [ 83.710311][ C1] default_idle_call+0x3e/0x80 [ 83.710328][ C1] do_idle+0x2fc/0x570 [ 83.710346][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 83.710366][ C1] cpu_startup_entry+0x47/0x60 [ 83.710384][ C1] start_secondary+0x12e/0x140 [ 83.710407][ C1] common_startup_64+0x13b/0x157 [ 83.710433][ C1] [ 83.710439][ C1] [ 84.015388][ C1] The buggy address belongs to the variable: [ 84.021369][ C1] macroKeyEvents+0x9c/0xe0 [ 84.025904][ C1] [ 84.028238][ C1] The buggy address belongs to the physical page: [ 84.034686][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6704 [ 84.043364][ C1] flags: 0x4000(reserved|zone=0) [ 84.048310][ C1] raw: 0000000000004000 ffffea000019c108 ffffea000019c108 0000000000000000 [ 84.056919][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 84.065514][ C1] page dumped because: kasan: bad access detected [ 84.071974][ C1] page_owner info is not present (never set?) [ 84.078052][ C1] [ 84.080375][ C1] Memory state around the buggy address: [ 84.086003][ C1] ffffffff86704b00: 00 f9 f9 f9 07 f9 f9 f9 00 00 00 04 f9 f9 f9 f9 [ 84.094070][ C1] ffffffff86704b80: 00 00 00 00 00 00 04 f9 f9 f9 f9 f9 00 00 00 00 [ 84.102141][ C1] >ffffffff86704c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 [ 84.110235][ C1] ^ [ 84.118235][ C1] ffffffff86704c80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 04 [ 84.126305][ C1] ffffffff86704d00: f9 f9 f9 f9 00 00 00 00 06 f9 f9 f9 f9 f9 f9 f9 [ 84.134370][ C1] ================================================================== [ 84.142430][ C1] Disabling lock debugging due to kernel taint [ 84.148586][ C1] ------------[ cut here ]------------ [ 84.154075][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 84.162663][ C1] index 40 is out of range for type 'const int[34]' [ 84.169254][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 86f3ff7ab8a869fe03d44b50c09486ae323cce6b [ 84.169281][ C1] Tainted: [B]=BAD_PAGE [ 84.169286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.169297][ C1] Call Trace: [ 84.169303][ C1] [ 84.169311][ C1] __dump_stack+0x21/0x30 [ 84.169338][ C1] dump_stack_lvl+0x140/0x1c0 [ 84.169361][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.169385][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 84.169412][ C1] dump_stack+0x19/0x20 [ 84.169434][ C1] ubsan_epilogue+0xe/0x40 [ 84.169448][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 84.169473][ C1] aiptek_irq+0x1f3c/0x2a00 [ 84.169502][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 84.169520][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 84.169547][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 84.169572][ C1] dummy_timer+0xa3f/0x4900 [ 84.169595][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 84.169612][ C1] ? timerqueue_del+0xd7/0x130 [ 84.169629][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 84.169654][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 84.169672][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 84.169698][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 84.169722][ C1] ? read_tsc+0xd/0x20 [ 84.169743][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 84.169765][ C1] hrtimer_run_softirq+0x159/0x560 [ 84.169780][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 84.169804][ C1] handle_softirqs+0x1aa/0x620 [ 84.169822][ C1] __irq_exit_rcu+0x47/0xb0 [ 84.169855][ C1] irq_exit_rcu+0xd/0x30 [ 84.169879][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 84.169916][ C1] [ 84.169921][ C1] [ 84.169927][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 84.169951][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 84.169968][ C1] Code: cc cc cc cc cc cc cc b8 85 73 a9 6d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 09 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 84.169983][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 84.169998][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff85a454fd [ 84.170011][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000188b74 [ 84.170021][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 84.170034][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 84.170045][ C1] R13: 1ffff110206cd980 R14: dffffc0000000000 R15: ffffffff87ecc268 [ 84.170071][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 84.170087][ C1] default_idle+0x17/0x30 [ 84.170102][ C1] arch_cpu_idle+0xd/0x20 [ 84.170117][ C1] default_idle_call+0x3e/0x80 [ 84.170132][ C1] do_idle+0x2fc/0x570 [ 84.170149][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 84.170188][ C1] cpu_startup_entry+0x47/0x60 [ 84.170210][ C1] start_secondary+0x12e/0x140 [ 84.170232][ C1] common_startup_64+0x13b/0x157 [ 84.170255][ C1] [ 84.170261][ C1] ---[ end trace ]--- [ 84.473178][ T36] audit: type=1400 audit(1786717031.690:386): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 84.495109][ T36] audit: type=1400 audit(1786717031.690:387): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.518169][ T1145] usb 2-1: USB disconnect, device number 24 [ 84.518354][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 84.555354][ T800] usbhid 4-1:0.0: can't add hid device: -71 [ 84.561381][ T800] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 84.574563][ T36] audit: type=1400 audit(1786717031.690:388): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.600577][ T36] audit: type=1400 audit(1786717031.690:389): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.603109][ T800] usb 4-1: USB disconnect, device number 19 [ 84.627735][ T36] audit: type=1400 audit(1786717031.690:390): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.648295][ T36] audit: type=1400 audit(1786717031.690:391): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.675641][ T36] audit: type=1400 audit(1786717031.690:392): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1