last executing test programs: 27.549082023s ago: executing program 2 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) read(r0, 0x0, 0x0) (fail_nth: 1) 27.477744175s ago: executing program 2 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000500)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x11c0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x98) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000640)='6', 0x1) add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)="3082dac2423e", 0x6, 0xffffffffffffffff) 27.025142785s ago: executing program 2 (id=174): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write(r0, 0x0, 0x0) 27.003998806s ago: executing program 2 (id=175): modify_ldt$write(0x2000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000900)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000940)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x6e00, &(0x7f0000000980)={0x0, 0x8d91, 0x4000, 0x3, 0x366}, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000ac0)={0x0, 0x42cc, 0x2, 0x2, 0x1ed}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3afe, 0x80, 0x1, 0xd4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e5, 0x20, 0x0, 0x2bd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0xfffffffd, 0x230, 0x0, r5}}], 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000640)='./file0\x00', 0xb) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x40, @private0, @rand_addr=' \x01\x00', 0x80, 0x20, 0x8, 0x4}}) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x164, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1, 0xfff3}, {0xf, 0xb}, {0xb, 0x9}}, [@f_rsvp6={{0xa}, {0x94, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_POLICE={0x4c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x1, 0x6, 0x4a, 0x562745ae, {0x4, 0x1, 0x8, 0x4, 0xfffa, 0xfffffffc}, {0xa9, 0x2, 0x6958, 0x5, 0x2, 0xfffffeff}, 0xe7ec, 0x0, 0x4}}]}]}}, @f_rsvp={{0x9}, {0x64, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @private=0xa010101}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x2cf, 0xfffffffb}, {0xa2b, 0x0, 0x2}, 0x2e, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3f02, 0x7, 0x9b12}, {0x101, 0x7, 0x1ff}, 0xc, 0x8, 0x8}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x9b3e}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1c, 0xffe0}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xc677}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) 26.128902595s ago: executing program 2 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x87) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000640)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f00"], 0x48}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000feb000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="f3a6660f38f178f966b8010000000f23c80f21f866350000a0000f23f8f466b8090000000f23d80f21f86635000000c00f23f866b99f0900000f320f01df0fea77a366b8010000000f01c10f73f308", 0x4f}], 0x1, 0x70, 0x0, 0xa) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace', 0x400, 0x0) io_setup(0x4fe, &(0x7f0000000380)=0x0) io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x6, r6, &(0x7f0000000440)="a0", 0x1, 0xa}]) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fdc000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000480)="640f01c9410f3266baf80cb88e39168bef66bafc0c66b8000066efc401897db462f28f0000f3420f0966baf80cb89cc2e38cef66bafc0ced6766430fc733640f01c2c42239cf6288660fe5b508000000", 0x50}], 0x1, 0x51, &(0x7f0000000540), 0x0) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x21c0, 0x103) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12011003020000402505a1a440000102030109025c0002010280080904000001020d0000052406000105040009000d240f2001000000050809000406241a01801609058103ff03080705090401"], &(0x7f0000000700)={0x0, 0x0, 0x19, 0x0}) sendto$packet(r6, &(0x7f0000000200)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76f98691ffb71675553f", 0x33, 0x800, &(0x7f0000000300)={0x11, 0x8, r10, 0x1, 0x5f, 0x6, @local}, 0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) read(r2, 0x0, 0x0) 25.671022036s ago: executing program 2 (id=192): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/8, 0x8, 0x0, 0x0, 0x1, 0x10}}, 0x120) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000380)=""/52, 0x34}], 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/155, 0x9b}], 0x1) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xd1, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f00000004c0), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x8) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000019940)={0x2020}, 0x2020) 25.638542437s ago: executing program 32 (id=192): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/8, 0x8, 0x0, 0x0, 0x1, 0x10}}, 0x120) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000380)=""/52, 0x34}], 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/155, 0x9b}], 0x1) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xd1, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f00000004c0), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x8) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000019940)={0x2020}, 0x2020) 10.54896405s ago: executing program 4 (id=305): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000002c00)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002c40)={0x34, &(0x7f0000002c80)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000002cc0)={0x2c, &(0x7f0000002d00)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0xc, 0x4, "a81d9798"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x981252b035dc4052, 0xe, 0xbd, {0xbd, 0xd, "156d2cb1de4dfdd99b4f63ab6d20a46feecd31d4264656e83275ea3e78d72c332405149d70ecc35fb6e176750b05128cac4bc05062838ff79a443975d085654ff10b8fe71ab6e111e1d50cbd2cbe451bab0ea3493725328c1640ad81cff975fea08a75fda2eb30a1d8934943ba283da4f7bd33fb5161d2bf7b4d1d7cfd4927df3702ca992087137db102b13e564babc0477483beb13ee8de829325cd330f0d90dc7b6f564128b2a2abceca98756a8921d6bdd0207ff45f4156c9cc"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x69, "60336dff003c586b4c0bcf99a9a4bab3515573b92f9f031de8458242e4aca342210f6339fd0889c15e546d0ee1649cc0b30030650966911fb2d198b6674d1451a91df0450b3d79bad772157d5eb5cc3c80da8443d9e2cc1da1077440b5f5328505dc9de601baf76444"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000000280), &(0x7f00000002c0)={0x40, 0x5, 0x4, "a6e6f94d"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.534253099s ago: executing program 4 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2501000000000000000c410000000c00147359ec5586cd2d0a"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x842000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="303032303030302c757365030069643d0000000000003f71d5b100e4b94f00", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,seclabel,\x00']) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000000)) 7.523059849s ago: executing program 4 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) 6.986721291s ago: executing program 4 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x8000, @bearer=@l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) write(r2, &(0x7f00000001c0)='1', 0x1) rename(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='./sys/bus/pci/rescan\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) syz_open_procfs(0x0, &(0x7f0000000940)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000980)='auxv\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000009c0)='./file0\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1', 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x8, 0x17, 0x4, 0xffffffa7, {{0x30, 0x4, 0x1, 0x3b, 0xc0, 0x67, 0x0, 0xe5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xa1, [@local]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0x4d, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x12, 0x2, [{0x6, 0x4, "d9ce"}, {0x5, 0x8, "9a02aeffb537"}]}, @lsrr={0x83, 0xb, 0xdb, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0xca, [@empty, @rand_addr=0x64010101, @remote, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xb0, 0x1, 0x3, [{@multicast2, 0x2}, {@multicast2, 0x5}, {@empty, 0x9}, {@remote, 0xfffffff7}, {@private=0xa010102, 0xa010}, {@empty, 0x2}, {@broadcast, 0x3}]}]}}}}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000680)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'erspan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000700)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000740)={0x11, 0x88a8, r9}, 0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000001) 6.946015862s ago: executing program 4 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x98) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000640)='6', 0x1) add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)="3082dac2423e", 0x6, 0xffffffffffffffff) 6.856816034s ago: executing program 4 (id=338): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x80f, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x51, 0x2b, 0xe4, 0x40, 0x2c7c, 0x801, 0x4dbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7fd, 0x4, 0x0, 0x0, 0xf0, 0xf8, "", [{{0x9, 0x4, 0x6e, 0x4, 0x8, 0xff, 0xff, 0x30, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "41ac85bdba"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1ff, 0x0, 0x3}, [@mdlm_detail={0x2f, 0x24, 0x13, 0x2, "f93dd34870dca641fd2db4653f14039dfaaa61b49d246f876edecc5a48db9a1bc6b413c405ad2ed3397513"}, @mbim={0xc, 0x24, 0x1b, 0xfbc, 0xeb, 0x6, 0x4, 0x574, 0x7}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x0, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xdbb8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x25, 0x1, 0x6, [@generic={0x8d, 0xf, "48a9b304e51913a3295c4e55b3acd4d3961c08615cfb6424bd3a6f57e94b02f0133ee629e54219e63d9493b50c8eb4581d169d988c2d7a2f35bb7629519f63126c5f2ea8858d725683dbf944280c2a4e1ec0a8547e9bcea7b91a708455cd2901e9fe9edfc02c6d4936d31f15e2aa86f681519087810728cc8b65f5df69e8f6d2834611f40bc76496303630"}, @generic={0x37, 0x8, "6e286561b100077c5c3d7ef2bb67f969d9ba42dc891ad5a18a76f2f36973a1b59155c581024d49efe8ddeb2282c6726365663915b2"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0xff, 0x9}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x5, 0x37, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x352}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x81}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x0, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x6}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xda, 0x4, 0x7, [@generic={0xc, 0x8, "c3319be7a3aaaca88ebe"}, @generic={0xe3, 0x8, "2462772b873bee91f96c980a0b2d80b7c55e2268044c98689a45f8ca7ed3bf9571b0b0df050ca2af2ebce19b528290b6115a1d76dfb164f8f8a2fbd2518d0e2f28b47a9703f4543bc35c5814038df8e080f1c7d284e719441cfab5c01708ebe309ba2e573bad1bfcb478a8dd0bb26ee3ff886b9e0127744dff1deac08e8fbd5adf2dadec55d0a19a20c547601ef97ad7bd295a82d9d56630aa8ed19df5a9b54b43466857d8c15fdd1e4a176f4e701b96ffeb7b27a1ea26e4e6ba8f3c56daca6d87f224d4d360f0e1e4b6d584abcf14ec19b71a1452a8f2ced914c09895748d5176"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xdf, 0x9, 0x5, [@generic={0x30, 0x22, "5128e4220ae74d5a4dbdeea4a5b770aa0723bd376d1e9adfe66ee3afda5ad07462de6d04f5ccf17f3ec62e4baeac"}, @generic={0xf, 0xc, "6b8e54f11b4ae329e737180e85"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0xd, 0xa, [@generic={0x74, 0xc, "e393b8edae237810b627cfc719674cd842ad7b8b424aee8993ddb3f7025e0f7083736d571eea8908a23383a1bfed3a239094978cb173bc1cc4d52e82cc22cfaf642948f6f124a9f1e44a6a27260a323a4b8c94b1a87c30536bbb7165f2beda70eced1dc84d143a053c6dbdb2de97fd8ea5f5"}]}}]}}, {{0x9, 0x4, 0x60, 0x10, 0xd, 0x56, 0xb8, 0x92, 0x7, [@hid_hid={0x9, 0x21, 0x700, 0xa, 0x1, {0x22, 0x9fd}}, @hid_hid={0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x5e5}}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0xff, 0x5, 0x3, [@generic={0x9a, 0xf, "b1e4281cdc71d982357b8509bdbef86b3bec9489850676f89cc7f271e7590fac6414d49cf833c237dbbdbcaf617926c9add16e8b8ed69d13dd01dccf83b2956ccbde41b949ae79fa56e8a05b9cdddf5aac09a9607d2bc16a4f225edf843bece95ce56ac2272a1389088667c293e147e21da6c07c8140de02f6147cb0d0cd6e71dcdcde1a66d5ddfd069fd764f3a59c52ceeffdd80a25939e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x3, 0xf, 0xc, [@generic={0xc8, 0x2, "9f6ab9396ab408feca3a0e5db70aa0b97cf2fd4821c8283160fa0d8274f5d072aac7478c11e508d847a049a8a086104d7cbaac0f2e9499a8c22373625b25cf64377c1956e8710a6657456e58311f38d3b4f38842582ee360f5528ec209ed7d9e3e0d1c03c6b78d8b9dcb43de6159d9943981f4ce6ffb21f746f0b1dc80742d59689ce4011bf0086b744481c3b75cac43e6910371c0ab32388775a84605956619bc90f10a715c14efd11ddcb4324b46179c49718fb52d7821e8da490ac856e77cc4840d23297c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xe, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}, @generic={0x76, 0x9, "eafb2626c4c051eca80c7d8662bb2e8f68ed812ace7a9e38a6aefbc4626dd748b249ee32649a459a16269e4ca3fe3202fe76d8c7b3b88c36c568d3248882f719cce17230a551c9680ed11aab4cd3f224a99bf8fd0d5d25b79a0d7de0b88dc6e04ff38ef2f350259a6b97b289568ec9274132773b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x28, 0x89, 0xfd}}, {{0x9, 0x5, 0x7, 0xd, 0x8, 0x6, 0xb, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0xfa, 0x5b, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0xfb, 0x89, 0xc}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x2, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x81}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x4, 0x4, 0x3, [@generic={0x47, 0x11, "095d519d1ada0c4a0abfdbf91938ef0f1b6d9816d3334debd368b0c3f65554887a0911cb7cd752889728bc0ee03bd05b33705771a59b167d3d7ef7a0ccb41149ac91332e2b"}, @generic={0x1c, 0xf, "1afd80386c201b161d81854a6b9c94fc367af4d020fd878f4dcf"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0xe, 0x69, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xb4, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x84f}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x5d, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x59, 0x3, 0x5, 0xff, 0xff, 0xff, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1d}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x8, "6dc40d"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x6, 0x1, [0x2], 0x9}]}], [{{0x9, 0x5, 0x9, 0x35378007c352b0a1, 0x10, 0xf7, 0x5}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x76}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0xfa, 0x81}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x2, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0xa, 0x5}}]}}, {{0x9, 0x4, 0xe1, 0xd, 0x8, 0x8e, 0x89, 0xd1, 0x9a, [@hid_hid={0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x534}}, @hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x57b}}], [{{0x9, 0x5, 0xa, 0x22f85125e5b8a382, 0x400, 0x0, 0x10, 0x6d, [@generic={0xb0, 0x3a, "0bb600b7035cf6ba045922541c8fc35df5eb183ec7569a4dc4c4bb9615c8cdcee8315ac8de67d59ba0b7973b7560ef7a369e3b076424f1743a53cc9e561c39fb79347f9e5ee3b1905948b750e1d123231d3d6b1f5b26a9330ec4ad1e942ad853bffbf7e025e11f89f90eca28c5d394caa1f2b02890dbee53a88fc98ac5b6ffaae1e0d9e94ac4f562514c66f510396444c14b66e77684d61e770a3a7e5bb92c11506c3f51bd55165f637de98c5fa2"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x5, 0x2b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4ba}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x1, 0xfa, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}]}}, {{0x9, 0x5, 0xc, 0x19, 0x10, 0xe0, 0x7, 0x81, [@generic={0x4, 0x2, "b80d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x800}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x3, 0xff, 0x6}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x2, 0xfe, 0x4}}, {{0x9, 0x5, 0x3f43c21c7a3a60d7, 0x0, 0x40, 0x80, 0x0, 0x8, [@generic={0x31, 0xd, "7a5ce024529f1c215cd6f6f91273265f559f40aa9b1da1d2c5fda92ce4f5a83bad089c5aebb501d0da308bb0a80847"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x6, 0x63, 0x4}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x200, 0x5, 0x6, 0x40, 0x8, 0x1}, 0x1e4, &(0x7f0000000c40)={0x5, 0xf, 0x1e4, 0x4, [@generic={0xd8, 0x10, 0x3, "f9d009d8cfc480e03e20ff077ec52c5fe7a64bbc196f0dd920cbf3bc19308817ac6e26d8c7a5ff11500e422b325b57b35816fd221aff37f4845533ec7df4a1f2ba0c101a741d2f660f66d84b240257b9b5811713ff4dac9c63342b4e5f68506cc59fa0c278a9a00b32923e561112a91a120f4427eed8c7f77569b73623d89c61403074eef392cc49edb1e54cbb03f0e91a563f557cfe7bbc0fc19f8e36410f31bd41019ead0168b851b462ce1f12812442b19112f9923b0648a024c88c2cc7f0b6ec29423a0a8a750bb35f2d27ce19854ceefa93a0"}, @generic={0x5a, 0x10, 0x2, "3f5376bd3f7d7fdee583c9c5d395f11ca051d16d8e19fbed2b524cbc79a92776ba60708e31b664cfc69dcd0c9434791734ee99a6593d79db409da848d2ee742876eaf61d03c6d1c5c71879a6be9f6b8841b76461c1b787"}, @generic={0xa3, 0x10, 0x1, "d01265acb77d79e0f84fbb27d9123add9e613b1cd0e2072e4177aac716cc1a30c0428fd02021691a99654902b422f92fd040705aa94b3258b31000d4f22e55f74a664113051b7fb556c646f340da1d4882e06df3e1533d0f31c49c94d7d56255c732dc58817b03cb36cec7c0275224dcad5c9c6dd499d8d44c74b7b0cb1b90669016e06ee210e2c49ef5cbee9ac4a624d0da3ec95f5b66606c04c5d2548623b9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x1, 0x4}]}, 0x2, [{0x37, &(0x7f0000000e40)=@string={0x37, 0x3, "8b106cba8d571d4977cd2219640a5653022a20d0f3fb0d636b1a083d2d0ce6dfeff8f102f2b69dfb0af05eeb9de745ac8801776ba0"}}, {0x5f, &(0x7f0000000e80)=@string={0x5f, 0x3, "a3518a98e21d3fe041098e1e084e1d654ae16839413a5cde6dded972ac8bf51ad49605cf0cbbf322c21333aea7390be050c3464f417f298c422b02d60cffa8402efa8ae58c2162333c39a69df71937ffa85c8367f63c32304ae2ad0e47"}}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x28) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0021ea000000c55329"], 0x0}, 0x0) (async, rerun: 32) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xfc1, 0xfffffffc, 0x7, 0x2, 0xf, "4e1f151674a50b678acbc9c27435a275d53ecf", 0x74501dd0, 0x6}) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a4b01, 0x0) bind$inet6(r2, 0x0, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010) 6.824305475s ago: executing program 33 (id=338): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x80f, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x51, 0x2b, 0xe4, 0x40, 0x2c7c, 0x801, 0x4dbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7fd, 0x4, 0x0, 0x0, 0xf0, 0xf8, "", [{{0x9, 0x4, 0x6e, 0x4, 0x8, 0xff, 0xff, 0x30, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "41ac85bdba"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1ff, 0x0, 0x3}, [@mdlm_detail={0x2f, 0x24, 0x13, 0x2, "f93dd34870dca641fd2db4653f14039dfaaa61b49d246f876edecc5a48db9a1bc6b413c405ad2ed3397513"}, @mbim={0xc, 0x24, 0x1b, 0xfbc, 0xeb, 0x6, 0x4, 0x574, 0x7}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x0, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xdbb8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x25, 0x1, 0x6, [@generic={0x8d, 0xf, "48a9b304e51913a3295c4e55b3acd4d3961c08615cfb6424bd3a6f57e94b02f0133ee629e54219e63d9493b50c8eb4581d169d988c2d7a2f35bb7629519f63126c5f2ea8858d725683dbf944280c2a4e1ec0a8547e9bcea7b91a708455cd2901e9fe9edfc02c6d4936d31f15e2aa86f681519087810728cc8b65f5df69e8f6d2834611f40bc76496303630"}, @generic={0x37, 0x8, "6e286561b100077c5c3d7ef2bb67f969d9ba42dc891ad5a18a76f2f36973a1b59155c581024d49efe8ddeb2282c6726365663915b2"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0xff, 0x9}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x5, 0x37, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x352}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x81}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x0, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x6}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xda, 0x4, 0x7, [@generic={0xc, 0x8, "c3319be7a3aaaca88ebe"}, @generic={0xe3, 0x8, "2462772b873bee91f96c980a0b2d80b7c55e2268044c98689a45f8ca7ed3bf9571b0b0df050ca2af2ebce19b528290b6115a1d76dfb164f8f8a2fbd2518d0e2f28b47a9703f4543bc35c5814038df8e080f1c7d284e719441cfab5c01708ebe309ba2e573bad1bfcb478a8dd0bb26ee3ff886b9e0127744dff1deac08e8fbd5adf2dadec55d0a19a20c547601ef97ad7bd295a82d9d56630aa8ed19df5a9b54b43466857d8c15fdd1e4a176f4e701b96ffeb7b27a1ea26e4e6ba8f3c56daca6d87f224d4d360f0e1e4b6d584abcf14ec19b71a1452a8f2ced914c09895748d5176"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xdf, 0x9, 0x5, [@generic={0x30, 0x22, "5128e4220ae74d5a4dbdeea4a5b770aa0723bd376d1e9adfe66ee3afda5ad07462de6d04f5ccf17f3ec62e4baeac"}, @generic={0xf, 0xc, "6b8e54f11b4ae329e737180e85"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0xd, 0xa, [@generic={0x74, 0xc, "e393b8edae237810b627cfc719674cd842ad7b8b424aee8993ddb3f7025e0f7083736d571eea8908a23383a1bfed3a239094978cb173bc1cc4d52e82cc22cfaf642948f6f124a9f1e44a6a27260a323a4b8c94b1a87c30536bbb7165f2beda70eced1dc84d143a053c6dbdb2de97fd8ea5f5"}]}}]}}, {{0x9, 0x4, 0x60, 0x10, 0xd, 0x56, 0xb8, 0x92, 0x7, [@hid_hid={0x9, 0x21, 0x700, 0xa, 0x1, {0x22, 0x9fd}}, @hid_hid={0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x5e5}}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0xff, 0x5, 0x3, [@generic={0x9a, 0xf, "b1e4281cdc71d982357b8509bdbef86b3bec9489850676f89cc7f271e7590fac6414d49cf833c237dbbdbcaf617926c9add16e8b8ed69d13dd01dccf83b2956ccbde41b949ae79fa56e8a05b9cdddf5aac09a9607d2bc16a4f225edf843bece95ce56ac2272a1389088667c293e147e21da6c07c8140de02f6147cb0d0cd6e71dcdcde1a66d5ddfd069fd764f3a59c52ceeffdd80a25939e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x3, 0xf, 0xc, [@generic={0xc8, 0x2, "9f6ab9396ab408feca3a0e5db70aa0b97cf2fd4821c8283160fa0d8274f5d072aac7478c11e508d847a049a8a086104d7cbaac0f2e9499a8c22373625b25cf64377c1956e8710a6657456e58311f38d3b4f38842582ee360f5528ec209ed7d9e3e0d1c03c6b78d8b9dcb43de6159d9943981f4ce6ffb21f746f0b1dc80742d59689ce4011bf0086b744481c3b75cac43e6910371c0ab32388775a84605956619bc90f10a715c14efd11ddcb4324b46179c49718fb52d7821e8da490ac856e77cc4840d23297c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xe, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}, @generic={0x76, 0x9, "eafb2626c4c051eca80c7d8662bb2e8f68ed812ace7a9e38a6aefbc4626dd748b249ee32649a459a16269e4ca3fe3202fe76d8c7b3b88c36c568d3248882f719cce17230a551c9680ed11aab4cd3f224a99bf8fd0d5d25b79a0d7de0b88dc6e04ff38ef2f350259a6b97b289568ec9274132773b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x28, 0x89, 0xfd}}, {{0x9, 0x5, 0x7, 0xd, 0x8, 0x6, 0xb, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0xfa, 0x5b, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0xfb, 0x89, 0xc}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x2, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x81}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x4, 0x4, 0x3, [@generic={0x47, 0x11, "095d519d1ada0c4a0abfdbf91938ef0f1b6d9816d3334debd368b0c3f65554887a0911cb7cd752889728bc0ee03bd05b33705771a59b167d3d7ef7a0ccb41149ac91332e2b"}, @generic={0x1c, 0xf, "1afd80386c201b161d81854a6b9c94fc367af4d020fd878f4dcf"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0xe, 0x69, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xb4, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x84f}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x5d, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x59, 0x3, 0x5, 0xff, 0xff, 0xff, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1d}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x8, "6dc40d"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x6, 0x1, [0x2], 0x9}]}], [{{0x9, 0x5, 0x9, 0x35378007c352b0a1, 0x10, 0xf7, 0x5}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x76}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0xfa, 0x81}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x2, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0xa, 0x5}}]}}, {{0x9, 0x4, 0xe1, 0xd, 0x8, 0x8e, 0x89, 0xd1, 0x9a, [@hid_hid={0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x534}}, @hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x57b}}], [{{0x9, 0x5, 0xa, 0x22f85125e5b8a382, 0x400, 0x0, 0x10, 0x6d, [@generic={0xb0, 0x3a, "0bb600b7035cf6ba045922541c8fc35df5eb183ec7569a4dc4c4bb9615c8cdcee8315ac8de67d59ba0b7973b7560ef7a369e3b076424f1743a53cc9e561c39fb79347f9e5ee3b1905948b750e1d123231d3d6b1f5b26a9330ec4ad1e942ad853bffbf7e025e11f89f90eca28c5d394caa1f2b02890dbee53a88fc98ac5b6ffaae1e0d9e94ac4f562514c66f510396444c14b66e77684d61e770a3a7e5bb92c11506c3f51bd55165f637de98c5fa2"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x5, 0x2b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4ba}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x1, 0xfa, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}]}}, {{0x9, 0x5, 0xc, 0x19, 0x10, 0xe0, 0x7, 0x81, [@generic={0x4, 0x2, "b80d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x800}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x3, 0xff, 0x6}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x2, 0xfe, 0x4}}, {{0x9, 0x5, 0x3f43c21c7a3a60d7, 0x0, 0x40, 0x80, 0x0, 0x8, [@generic={0x31, 0xd, "7a5ce024529f1c215cd6f6f91273265f559f40aa9b1da1d2c5fda92ce4f5a83bad089c5aebb501d0da308bb0a80847"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x6, 0x63, 0x4}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x200, 0x5, 0x6, 0x40, 0x8, 0x1}, 0x1e4, &(0x7f0000000c40)={0x5, 0xf, 0x1e4, 0x4, [@generic={0xd8, 0x10, 0x3, "f9d009d8cfc480e03e20ff077ec52c5fe7a64bbc196f0dd920cbf3bc19308817ac6e26d8c7a5ff11500e422b325b57b35816fd221aff37f4845533ec7df4a1f2ba0c101a741d2f660f66d84b240257b9b5811713ff4dac9c63342b4e5f68506cc59fa0c278a9a00b32923e561112a91a120f4427eed8c7f77569b73623d89c61403074eef392cc49edb1e54cbb03f0e91a563f557cfe7bbc0fc19f8e36410f31bd41019ead0168b851b462ce1f12812442b19112f9923b0648a024c88c2cc7f0b6ec29423a0a8a750bb35f2d27ce19854ceefa93a0"}, @generic={0x5a, 0x10, 0x2, "3f5376bd3f7d7fdee583c9c5d395f11ca051d16d8e19fbed2b524cbc79a92776ba60708e31b664cfc69dcd0c9434791734ee99a6593d79db409da848d2ee742876eaf61d03c6d1c5c71879a6be9f6b8841b76461c1b787"}, @generic={0xa3, 0x10, 0x1, "d01265acb77d79e0f84fbb27d9123add9e613b1cd0e2072e4177aac716cc1a30c0428fd02021691a99654902b422f92fd040705aa94b3258b31000d4f22e55f74a664113051b7fb556c646f340da1d4882e06df3e1533d0f31c49c94d7d56255c732dc58817b03cb36cec7c0275224dcad5c9c6dd499d8d44c74b7b0cb1b90669016e06ee210e2c49ef5cbee9ac4a624d0da3ec95f5b66606c04c5d2548623b9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x1, 0x4}]}, 0x2, [{0x37, &(0x7f0000000e40)=@string={0x37, 0x3, "8b106cba8d571d4977cd2219640a5653022a20d0f3fb0d636b1a083d2d0ce6dfeff8f102f2b69dfb0af05eeb9de745ac8801776ba0"}}, {0x5f, &(0x7f0000000e80)=@string={0x5f, 0x3, "a3518a98e21d3fe041098e1e084e1d654ae16839413a5cde6dded972ac8bf51ad49605cf0cbbf322c21333aea7390be050c3464f417f298c422b02d60cffa8402efa8ae58c2162333c39a69df71937ffa85c8367f63c32304ae2ad0e47"}}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x28) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0021ea000000c55329"], 0x0}, 0x0) (async, rerun: 32) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xfc1, 0xfffffffc, 0x7, 0x2, 0xf, "4e1f151674a50b678acbc9c27435a275d53ecf", 0x74501dd0, 0x6}) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a4b01, 0x0) bind$inet6(r2, 0x0, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010) 6.373840396s ago: executing program 5 (id=339): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write(r0, &(0x7f0000000500)='0sA', 0x3) 6.341442486s ago: executing program 5 (id=340): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000002c00)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002c40)={0x34, &(0x7f0000002c80)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000002cc0)={0x2c, &(0x7f0000002d00)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0xc, 0x4, "a81d9798"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x981252b035dc4052, 0xe, 0xbd, {0xbd, 0xd, "156d2cb1de4dfdd99b4f63ab6d20a46feecd31d4264656e83275ea3e78d72c332405149d70ecc35fb6e176750b05128cac4bc05062838ff79a443975d085654ff10b8fe71ab6e111e1d50cbd2cbe451bab0ea3493725328c1640ad81cff975fea08a75fda2eb30a1d8934943ba283da4f7bd33fb5161d2bf7b4d1d7cfd4927df3702ca992087137db102b13e564babc0477483beb13ee8de829325cd330f0d90dc7b6f564128b2a2abceca98756a8921d6bdd0207ff45f4156c9cc"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x69, "60336dff003c586b4c0bcf99a9a4bab3515573b92f9f031de8458242e4aca342210f6339fd0889c15e546d0ee1649cc0b30030650966911fb2d198b6674d1451a91df0450b3d79bad772157d5eb5cc3c80da8443d9e2cc1da1077440b5f5328505dc9de601baf76444"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000000280), &(0x7f00000002c0)={0x40, 0x5, 0x4, "a6e6f94d"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.307327035s ago: executing program 5 (id=359): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000002c00)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002c40)={0x34, &(0x7f0000002c80)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000002cc0)={0x2c, &(0x7f0000002d00)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x0, 0x8, 0x50, {0x50, 0x7, "000d5f26dfc32e7003abd009bb2edf0f2c280b08ea608812917c5cf815aaf2ca8decb178f3ed81212369fbd250996b6dc5738d6c59e4513420b5d0f33ee661a1681c250397fea1902748c4ec9dac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x31, 0xd5, "cd65167102fe6683de4d9b2dd3e67e4132daf7fb614f2a4888be07ede9fa789b45f5a6d745bcde6fbc82c904a7030edc871204d39f0de4fe3217f04433eab915b521a01b97d005051dece21cb57baf8cc7b5da203d889c67837f96a0759329b40fb734b7d07bd9f28e4ad5413af4f7dff1351c3657f0e3e5d53e0b43260b10cd9730d42c5c4738514e08c7f457c9dbcc9d4ec288b9813ab259ac5d6c68e5211120e31e99dbeb71f21951e593c6fffa9a8b607a68ba56ddc5a65b123da0a1e20d65ca772e2b3735911c7db0346a024d82516224298a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7d}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x7e89, 0x6, 0x90, 0x7, 0x2, 0x6, 0x1ff, 0x4, 0xdad, 0x8000, 0x1000, 0x8}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000400)={0x20, 0xc, 0x4, "a81d9798"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000100)={0x0, 0x21, 0x4, {0x4, 0xd, "5394"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000780)={0x20, 0x18, 0x2c, "936b01b0ea12753c6f49be7c148f889b03954d85f1967bdfce9f922e6abe744f798458191f2ade8ff073d6f9"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000840)={0xc0, 0x5, 0x1, "98"}, &(0x7f0000000880)}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.63124341s ago: executing program 1 (id=362): r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x31, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x63, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @desc1}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x66, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000d80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)="cf8e", 0x2, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x62, 0x30, 0x61]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x64, 0x35, 0x33, 0x33, 0x30, 0x30, 0x62, 0x30, 0x38, 0x30, 0x38, 0x38, 0x64, 0x30, 0x61, 0x63]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x4040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x37, 0x36, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000001340)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x38, 0x61, 0x30, 0x31, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000001380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001400), &(0x7f0000001440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001500), &(0x7f0000001540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x30, 0x30, 0x30, 0x61, 0x36, 0x31]}, &(0x7f0000001580)={0x0, "00112233445566778899aabbccddeeff00542233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)='\r', 0x1, r0) 2.611840751s ago: executing program 1 (id=363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x0, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) (fail_nth: 8) 2.557026802s ago: executing program 1 (id=364): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000008700000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) 2.556371382s ago: executing program 1 (id=365): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="02040003120000002cbd7000fbdbdf25050006006c0000000a004e3873000001ff010000000000000000000000000001000000000000000008001900000000000a004e2200000004fc000000000000000000000000000000000000000a004e2200000009ff01000000180000000000000000000180010000030005000000000002004e20ffffffff0000000000000000"], 0x90}, 0x1, 0x7}, 0x0) 2.556286542s ago: executing program 1 (id=366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c"], 0x23c}}, 0x4000) 2.551893472s ago: executing program 1 (id=367): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000002c00)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002c40)={0x34, &(0x7f0000002c80)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000002cc0)={0x2c, &(0x7f0000002d00)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0xc, 0x4, "a81d9798"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x981252b035dc4052, 0xe, 0xbd, {0xbd, 0xd, "156d2cb1de4dfdd99b4f63ab6d20a46feecd31d4264656e83275ea3e78d72c332405149d70ecc35fb6e176750b05128cac4bc05062838ff79a443975d085654ff10b8fe71ab6e111e1d50cbd2cbe451bab0ea3493725328c1640ad81cff975fea08a75fda2eb30a1d8934943ba283da4f7bd33fb5161d2bf7b4d1d7cfd4927df3702ca992087137db102b13e564babc0477483beb13ee8de829325cd330f0d90dc7b6f564128b2a2abceca98756a8921d6bdd0207ff45f4156c9cc"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x69, "60336dff003c586b4c0bcf99a9a4bab3515573b92f9f031de8458242e4aca342210f6339fd0889c15e546d0ee1649cc0b30030650966911fb2d198b6674d1451a91df0450b3d79bad772157d5eb5cc3c80da8443d9e2cc1da1077440b5f5328505dc9de601baf76444"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000000280), &(0x7f00000002c0)={0x40, 0x5, 0x4, "a6e6f94d"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.135199324s ago: executing program 0 (id=375): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000002c0)={0x0, 0x9000}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1001, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fd, @flat=@weak_handle={0x77682a85, 0x10b, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}]}) 961.958249ms ago: executing program 0 (id=376): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000080ff00000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 950.863288ms ago: executing program 0 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc004) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = socket(0x22, 0x3, 0x97f) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000100)=@ethtool_stats}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) write(r2, &(0x7f0000000080)="1c0000001a005f0214f9f407000904ff81000000ff02000200000000", 0x1c) pipe2(&(0x7f0000000000), 0x0) 879.46779ms ago: executing program 0 (id=378): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @mcast1}}, @sadb_sa={0x2, 0x1, 0x80ff, 0x40, 0x0, 0x82, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x0) 879.20047ms ago: executing program 0 (id=379): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="d5458168d2f3b33f096d607f6c100008ab963d1a3f65a50d953dd9d4682c96585f3c01d3f937d103dd30810263ccd163a15528266d1c30a8d216bbc916186c34eeeffb5b6141cffd14f052bb2efe062a2aa1d28036cec3bd87d23dbfecfcc60027ff2cbd5cc0c8758fbc331b9575d43d5e2fb9306148", 0x76}, {&(0x7f00000001c0)="9f8df8ff3f9ecb28fe41cfa118cfe5f1a13f5817794e339773dcd598e4eca571e3d9b8d6cf4d0c38f785e83e9ec9f7e2369473a957501138560ee9ad6bf8a71e0e1dbbc8e1082bcc700050a663f515687010a339b822e74578cec8fa4fe862dd9394c81f29279063945f4c3f80168a0770c5beca30172fe571486b5f26e9c6c9f33595cb436ecb4fdf0f8ef7f1dacd634566e9886c36db9b26bdb1e46f8d9f5079a1add460e7aa8223", 0xa9}, {&(0x7f0000000280)="fdb58edebff92d7b366b3a5ef3b96300a8b3d368fef8c8362b712cd990b8b250913bc921bbca4cece7a6d7dc2f516fc3a6627dd837def6034c4e195bea48317e4c9608f9b4cda1e9e1aab6a3c5", 0x4d}, {&(0x7f0000000300)="c2e01abf3b8d2d80e2bf595b7369428eace1a6c79284d89285fb4687f1e7ce6294745f24747cc923415d625377ba727c252d31cdd697b5e62a1e6e17b7a9c56d82027dc3c4abfbf689962bd9052a9690f7244ce9b695c74cc00249429bc4b495d0b031daba01f5a938d4891134ecf604dc032c2188659f2fc5aa35ce3b4a32c92506ef6a9e0f455e5d212226c173151081d198df8d120a8981c71e72c97b38845c1e24b2e5c601e4f46cd59605063d119463bad8d5fcdb55cb1a687a5b66444ccaf2ec382dab045e572b4c6946eecbc25df4a51605ecb06dc2976b52c929437e19f9277f7271a9fad55d7b1c5e98246376e66cea39b74b", 0xf7}, {&(0x7f0000000400)="faaf98058897235a2c46d38835cd803a09f2a5997d77c9c6bd4a403ef1fa524561af839ad75fbf54b3bd835b9af0ffb9e936824c491031918950772faac7296b870425f8f1403fe3b5030b9584b1ac2b466e447405", 0x55}, {&(0x7f0000000480)="9139f6e04070cbc6f55a93368cde4316ceeb77af9406ea8c2a48846b65cd64b5a2d21912186ef76b6cfded0984daf082740ffa413b6f7cd1e32d532388d0921de926ff12b99caf6f5a7934ab20800828f0a6fc49daeb91ac948f721a219b7a728795c288ffb907dcb14e65ce008df9f6404d6d9d1b047c5c7efddaa7a6c56355f95cfeec7635768611bdb1b14df2ab24be994c9bb7f4db8ee64a6258203559e75c6ce65bf91630b1f8a1da0f7c93f11636e58be68baceeafd81d49ff52854db239eb4000036c39ba98fdac0899252b9d2ebb4209741c6b7e1ff16836ea689a89766e87d0488196d7961987f20ff072af6ac02e6d33f716", 0xf7}], 0x6, &(0x7f0000000600)=[{0x80, 0x112, 0x2, "c8664fb7ccc624602330242168c4d6c538bfeadd606f4f421a0230141b2f52cefa41c3da164fe33559cb5abfe3b85f85aa0822504ba7af27668debe99ad619910ad30fe0aed2fa094233da4960a3ca3b17a55412a73cc4959aeddbef305326aff24cab4c4197b732388e91ed"}, {0xc8, 0x10c, 0x1, "0ccce1afb12aba470c70cbcb53bf976c434ad35798acd231c6c1cec444034cab562439bcf900b0c69add7d547e994133e740ee820647fea7182111f7abee0ce2663b57c6572a33848e4c1c773aea6797445f5b988524dfeb77cbf719d0b334a8f27636b4d6d0e81aacb50461c109e8df31ca1ddf12f4f4b1ac5586d6df99a3787a74374d11f25f77d4ef9a99028eb0f1067bffa0655574a56ffb358e249af80ab81eb26891d4a5029b35848d73a861bc0a40"}, {0x28, 0x6, 0x80000001, "5146f9aa5ec5535ee5dca99fc58ebd255ce12b61"}, {0xc0, 0x8e, 0x101, "7f2e733f8a56d0ca80271823749bb9f414a7ef7e6653b0262aa4fb8edaefbf36c35f0436110aee7b49b292de7eddd0dd02e8b57abfaa25e0f942b112e17e5147c9f7b4ea00958542b6e6508872cae83657efdb145cca32a148cb3355adcca8a51a0737f85ca9fe6bb8b4455404db2a53af717196e9530d79d6e1a943d590386a771bd86a00cf60e752c49a2133403be10eecbe2eef44d947fbcfd8b4ce032e40469d0dc5258a042663"}, {0x100, 0x112, 0xfffffffa, "cfb1f573b4ba3962027d3f9427d2bce0dc017ed58a3087823cdced04d00e03e12f31048cd7186a05ee897869d5aef68b42bf79f0c1a18cc6ab3d52e8760d6b26f5096092bd3661e04bb27ba30716ba310ffcef369cf92b91f9b35b69686a0cd4afda99eaccb13c3453c769b436d78205cd49890af28563df463a756a3ee5b04fddc1315509349c2db4986edab012c9634cbab36813d38b11b5abba69ed1d0a5c26c42b202f91d681dc997ada82023b1cab14fc6b30d9b8198f099e8635411f00ab6876df1b69deff9c114cf51f033109032c9de0d06f8e7c749c51072ebb1e241557f399a34cc44ae8cd1db9358d"}, {0xe8, 0x112, 0x3, "5ce7243f37f28c19a78cc65bedba1159b2caabe6d2773739851311510b3ade184e7a4836aef886f188cf78b5896101709de891f2669217ebc161fc226be90c5eb79bdffe40b5489a04bd34b13ed293ec3d802cec81799c1c18fc846032228bd586baadb1322cb0b23bc71ba29e2dcdd09394e8e0f6db126d90ba1adabeb818d39ccc2a694001ebd44cc6f3e8cf45e448bbf0da3af8fc0a0c30092205e7dd8dc93d903835dd155ba0f15f2687713c0868a8e6543997605d94b3f78eab4848b54a1d968d8e827180a1705b3a270f2b6793094f4061e63a"}, {0x70, 0x108, 0x5, "dd6cef4fded47df1b3280c972382816ffac5e31bfee2a51eb99b99aa80f4d43615d00375a810a1e1ca9478cd93fd56c4a3058c3f476febe8c3a5f77e10320f1634dd1d5b58430d208c928de732b47db4a986e4bf51876286c0e8b6ca"}, {0x38, 0x10f, 0x8, "c007309ba9f7f1439edb62e5db269c4e7b6d2408e397986300d04b08db693953676bce0e"}], 0x4c0}}], 0x1, 0x4000000) 713.421414ms ago: executing program 3 (id=381): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000000), 0x8) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4109, 0x100d}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/128, 0x80}, 0x103}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/260, 0x104}, 0x87}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/221, 0xdd}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/140, 0x8c}, 0x8002}], 0x5, 0x40000002, 0x0) 657.339155ms ago: executing program 3 (id=382): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000ea00000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) 655.443225ms ago: executing program 3 (id=383): r0 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000000)='./dm1\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4000}, {}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={[0x1]}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x40, 0x0, 0x82, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x0) 655.208205ms ago: executing program 3 (id=384): r0 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000000)='./dm0\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x2, 0x1}) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x80082, 0x0) ioctl$HOT_ADD_DISK(r1, 0x928, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x2e, 0xd, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000004c0)={r2, 0x8000000000000001, 0xfffffffffffffffa, 0x1}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f00000008c0)={0x4, 0x8, 0x8, 0x2802, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vxcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a40)={0x0, @loopback, @broadcast}, &(0x7f0000000a80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @initdev, @broadcast}, &(0x7f0000000b00)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000c80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xf8, 0x0, 0x700, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40005}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x100, 0x8, &(0x7f0000000d00)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) wait4(0x0, &(0x7f0000000e00), 0x2, &(0x7f0000000e40)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000f00)=[@sack_perm, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xe32}], 0x6) r9 = syz_open_dev$usbfs(&(0x7f0000000f40), 0x9, 0x20000) ioctl$USBDEVFS_CLEAR_HALT(r9, 0x80045515, &(0x7f0000000f80)={0xb, 0x1}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_COPY(r10, 0x4b72, &(0x7f00000013c0)={0x3, 0x1, 0x18, 0x13, 0x100, &(0x7f0000000fc0)}) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) read$FUSE(r11, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r12, &(0x7f0000003480)={0x9, 0x6}) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f00000034c0)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003580), r11) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f00000036c0)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003680)={&(0x7f00000035c0)={0xbc, r14, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x470}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}]}, 0xbc}}, 0x20008000) connect$pppl2tp(r1, &(0x7f0000003700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x4, {0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x32) 655.102115ms ago: executing program 3 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c"], 0x23c}}, 0x4000) 644.477716ms ago: executing program 3 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 4) 211.668276ms ago: executing program 5 (id=387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100}) (async, rerun: 32) r1 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r1, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x4, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x2}, {0x1, 0x1, 0x0, 0x1}}], 0x48) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000340)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) (async, rerun: 32) r5 = syz_open_pts(r4, 0x141601) (rerun: 32) write(r5, &(0x7f0000000380)="d5", 0xfffffedf) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000003c0)={0x1, 0x9, 0x5, 0xae, 0x36, "668787fe4150caf251a42dcbffe468fb06bc47", 0x7f, 0x2}) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}]}) 0s ago: executing program 0 (id=388): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs$userns(r0, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xe0602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) madvise(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x15) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) kernel console output (not intermixed with test programs): ptor read/8, error -71 [ 41.515638][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.536829][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.666805][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.675834][ T355] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.698325][ T585] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 41.706323][ T355] usb 2-1: device descriptor read/8, error -71 [ 41.710925][ T587] FAULT_INJECTION: forcing a failure. [ 41.710925][ T587] name failslab, interval 1, probability 0, space 0, times 0 [ 41.725423][ T587] CPU: 1 UID: 0 PID: 587 Comm: syz.1.100 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 41.725461][ T587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.725476][ T587] Call Trace: [ 41.725483][ T587] [ 41.725491][ T587] __dump_stack+0x21/0x30 [ 41.725527][ T587] dump_stack_lvl+0x140/0x1c0 [ 41.725559][ T587] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.725592][ T587] dump_stack+0x19/0x20 [ 41.725622][ T587] should_fail_ex+0x3c2/0x510 [ 41.725643][ T587] should_failslab+0xac/0x100 [ 41.725664][ T587] __kmalloc_cache_noprof+0x41/0x470 [ 41.725696][ T587] ? x509_cert_parse+0x122/0xbd0 [ 41.725724][ T587] x509_cert_parse+0x122/0xbd0 [ 41.725749][ T587] x509_key_preparse+0x6a/0x880 [ 41.725775][ T587] ? __cfi_down_read+0x10/0x10 [ 41.725803][ T587] asymmetric_key_preparse+0xb3/0x100 [ 41.725826][ T587] __key_create_or_update+0x433/0xa90 [ 41.725853][ T587] ? security_key_permission+0x3d/0x100 [ 41.725883][ T587] ? key_create_or_update+0x70/0x70 [ 41.725911][ T587] ? __kasan_kmalloc+0x96/0xb0 [ 41.725933][ T587] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 41.725959][ T587] key_create_or_update+0x47/0x70 [ 41.725986][ T587] __se_sys_add_key+0x355/0x4b0 [ 41.726026][ T587] ? __x64_sys_add_key+0xf0/0xf0 [ 41.726061][ T587] __x64_sys_add_key+0xc3/0xf0 [ 41.726090][ T587] x64_sys_call+0x195f/0x2ee0 [ 41.726112][ T587] do_syscall_64+0x57/0xf0 [ 41.726134][ T587] ? clear_bhb_loop+0x50/0xa0 [ 41.726164][ T587] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.726193][ T587] RIP: 0033:0x7f6d3779f559 [ 41.726211][ T587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.726253][ T587] RSP: 002b:00007f6d385e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 41.726278][ T587] RAX: ffffffffffffffda RBX: 00007f6d37a25fa0 RCX: 00007f6d3779f559 [ 41.726295][ T587] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000100 [ 41.726310][ T587] RBP: 00007f6d385e1090 R08: fffffffffffffffd R09: 0000000000000000 [ 41.726325][ T587] R10: 0000000000000110 R11: 0000000000000246 R12: 0000000000000002 [ 41.726338][ T587] R13: 00007f6d37a26038 R14: 00007f6d37a25fa0 R15: 00007ffc0c75c458 [ 41.726387][ T587] [ 41.955512][ T31] usb usb1-port1: unable to enumerate USB device [ 41.966172][ T355] usb 2-1: device descriptor read/8, error -71 [ 42.075807][ T426] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.083682][ T355] usb usb2-port1: unable to enumerate USB device [ 42.188743][ T617] ./dev/sda1: Can't lookup blockdev [ 42.235656][ T426] usb 4-1: Using ep0 maxpacket: 16 [ 42.242179][ T426] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 42.250412][ T426] usb 4-1: config 0 has no interface number 0 [ 42.256737][ T426] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 42.267226][ T426] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 42.278964][ T426] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 42.288330][ T426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.296443][ T426] usb 4-1: Product: syz [ 42.300758][ T426] usb 4-1: Manufacturer: syz [ 42.305485][ T426] usb 4-1: SerialNumber: syz [ 42.311085][ T426] usb 4-1: config 0 descriptor?? [ 42.316547][ T583] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 42.323927][ T583] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 42.395656][ T355] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.425656][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 42.532660][ T583] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 42.540067][ T583] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 42.555638][ T355] usb 2-1: Using ep0 maxpacket: 16 [ 42.555641][ T9] usb 1-1: device descriptor read/64, error -71 [ 42.568632][ T355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.578923][ T355] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 42.589541][ T355] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 42.598741][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.607105][ T355] usb 2-1: Product: syz [ 42.611419][ T355] usb 2-1: Manufacturer: syz [ 42.616661][ T355] usb 2-1: SerialNumber: syz [ 42.622173][ T355] usb 2-1: config 0 descriptor?? [ 42.748180][ T426] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 42.795646][ T9] usb 1-1: device descriptor read/64, error -71 [ 43.035688][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 43.165611][ T9] usb 1-1: device descriptor read/64, error -71 [ 43.405686][ T9] usb 1-1: device descriptor read/64, error -71 [ 43.515759][ T9] usb usb1-port1: attempt power cycle [ 43.855670][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 43.876948][ T9] usb 1-1: device descriptor read/8, error -71 [ 44.006901][ T9] usb 1-1: device descriptor read/8, error -71 [ 44.245672][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 44.266937][ T9] usb 1-1: device descriptor read/8, error -71 [ 44.396959][ T9] usb 1-1: device descriptor read/8, error -71 [ 44.505863][ T9] usb usb1-port1: unable to enumerate USB device [ 44.555888][ T426] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 44.567189][ T426] asix 4-1:0.34: probe with driver asix failed with error -71 [ 44.578312][ T426] usb 4-1: USB disconnect, device number 8 [ 44.795700][ T88] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.945629][ T88] usb 3-1: Using ep0 maxpacket: 16 [ 44.952161][ T88] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.963818][ T88] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 44.973765][ T88] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 44.983519][ T88] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.997252][ T88] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.006539][ T88] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.014889][ T88] usb 3-1: SerialNumber: syz [ 45.020711][ T633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 45.028293][ T633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 45.036249][ T88] hub 3-1:1.0: bad descriptor, ignoring hub [ 45.042399][ T88] hub 3-1:1.0: probe with driver hub failed with error -5 [ 45.059242][ T426] usb 2-1: USB disconnect, device number 10 [ 45.111919][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 45.111966][ T36] audit: type=1400 audit(1792725337.580:220): avc: denied { create } for pid=648 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 45.113454][ T649] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 45.150572][ T652] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 45.175594][ T656] capability: warning: `syz.1.123' uses deprecated v2 capabilities in a way that may be insecure [ 45.195726][ T656] tipc: Started in network mode [ 45.205252][ T656] tipc: Node identity ac1414aa, cluster identity 4711 [ 45.213967][ T656] tipc: New replicast peer: 100.1.1.1 [ 45.222822][ T656] tipc: Enabled bearer , priority 10 [ 45.238007][ T663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 45.239077][ T633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 45.247923][ T664] fuse: Unknown parameter 'fd9H' [ 45.260458][ T633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 45.295186][ T36] audit: type=1400 audit(1792725337.760:221): avc: denied { create } for pid=655 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 45.299211][ T656] capability: warning: `syz.1.123' uses 32-bit capabilities (legacy support in use) [ 45.595646][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 45.615624][ T355] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 45.674765][ T88] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 45.745605][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 45.753685][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 45.762158][ T9] usb 4-1: config 0 has no interface number 0 [ 45.769046][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 45.779482][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 45.785753][ T355] usb 1-1: Using ep0 maxpacket: 16 [ 45.792262][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 45.796548][ T355] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.814218][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.814397][ T355] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 45.827743][ T9] usb 4-1: Product: syz [ 45.836297][ T9] usb 4-1: Manufacturer: syz [ 45.840956][ T9] usb 4-1: SerialNumber: syz [ 45.846406][ T355] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 45.855899][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.857306][ T9] usb 4-1: config 0 descriptor?? [ 45.864421][ T355] usb 1-1: Product: syz [ 45.876811][ T355] usb 1-1: Manufacturer: syz [ 45.881692][ T355] usb 1-1: SerialNumber: syz [ 45.884044][ T669] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.892086][ T355] usb 1-1: config 0 descriptor?? [ 45.899240][ T669] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.036413][ C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68! [ 46.119677][ T669] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.127300][ T669] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.257571][ T88] usb 3-1: USB disconnect, device number 11 [ 46.264217][ T88] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 46.335614][ T355] tipc: Node number set to 2886997162 [ 46.341479][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 47.365845][ T753] X.509: signatureAlgorithm (103) differs from tbsCertificate.signature (7) [ 47.375596][ T36] audit: type=1400 audit(1792725339.840:222): avc: denied { read write } for pid=752 comm="syz.2.143" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.399939][ T36] audit: type=1400 audit(1792725339.850:223): avc: denied { open } for pid=752 comm="syz.2.143" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.424095][ T36] audit: type=1400 audit(1792725339.850:224): avc: denied { ioctl } for pid=752 comm="syz.2.143" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.450168][ T36] audit: type=1400 audit(1792725339.850:225): avc: denied { write } for pid=752 comm="syz.2.143" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.453316][ T755] random: crng reseeded on system resumption [ 47.475523][ T36] audit: type=1400 audit(1792725339.930:226): avc: denied { write } for pid=754 comm="syz.2.144" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.504057][ T36] audit: type=1400 audit(1792725339.930:227): avc: denied { open } for pid=754 comm="syz.2.144" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.765663][ T355] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 47.916901][ T355] usb 3-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config [ 47.927275][ T355] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.941719][ T355] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 47.950848][ T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.958921][ T355] usb 3-1: Product: syz [ 47.963134][ T355] usb 3-1: Manufacturer: syz [ 47.967802][ T355] usb 3-1: SerialNumber: syz [ 48.155875][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 48.166194][ T9] asix 4-1:0.34: probe with driver asix failed with error -71 [ 48.175184][ T9] usb 4-1: USB disconnect, device number 9 [ 48.191390][ T355] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 48.201443][ T355] usb 3-1: USB disconnect, device number 12 [ 48.241832][ T88] usb 1-1: USB disconnect, device number 16 [ 48.260017][ T36] audit: type=1400 audit(1792725340.730:228): avc: denied { create } for pid=760 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 48.281344][ T36] audit: type=1400 audit(1792725340.730:229): avc: denied { sys_admin } for pid=760 comm="syz.0.145" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 48.803854][ T792] overlayfs: unescaped trailing colons in lowerdir mount option. [ 48.815463][ T795] overlayfs: unescaped trailing colons in lowerdir mount option. [ 48.855662][ T355] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 48.905609][ T426] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 48.965638][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.005704][ T355] usb 1-1: Using ep0 maxpacket: 16 [ 49.012146][ T355] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.022747][ T355] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 49.034011][ T355] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 49.043539][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.051664][ T355] usb 1-1: Product: syz [ 49.055883][ T426] usb 4-1: Using ep0 maxpacket: 8 [ 49.060959][ T355] usb 1-1: Manufacturer: syz [ 49.065703][ T355] usb 1-1: SerialNumber: syz [ 49.070435][ T426] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 49.079210][ T355] usb 1-1: config 0 descriptor?? [ 49.084969][ T426] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 49.093111][ T426] usb 4-1: can't read configurations, error -61 [ 49.117014][ T31] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.128277][ T31] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.141166][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 49.147838][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 49.156934][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.165941][ T31] usb 3-1: config 0 descriptor?? [ 49.225663][ T314] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 49.233359][ T426] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.372492][ T826] futex_wake_op: syz.2.155 tries to shift op by 144; fix this program [ 49.383091][ T31] playstation 0003:054C:09CC.0006: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 49.395126][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 49.400334][ T426] usb 4-1: Using ep0 maxpacket: 8 [ 49.405973][ T426] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 49.414955][ T314] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 49.423291][ T426] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 49.431644][ T314] usb 2-1: config 0 has no interface number 0 [ 49.437846][ T426] usb 4-1: can't read configurations, error -61 [ 49.444241][ T314] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 49.454548][ T426] usb usb4-port1: attempt power cycle [ 49.460556][ T31] playstation 0003:054C:09CC.0006: Invalid reportID received, expected 18 got 161 [ 49.470093][ T314] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 49.480179][ T31] playstation 0003:054C:09CC.0006: Failed to retrieve DualShock4 pairing info: -22 [ 49.489763][ T31] playstation 0003:054C:09CC.0006: Failed to get MAC address from DualShock4 [ 49.499166][ T31] playstation 0003:054C:09CC.0006: Failed to create dualshock4. [ 49.508400][ T31] playstation 0003:054C:09CC.0006: probe with driver playstation failed with error -22 [ 49.518909][ T314] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 49.529048][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.537500][ T314] usb 2-1: Product: syz [ 49.541688][ T314] usb 2-1: Manufacturer: syz [ 49.546351][ T314] usb 2-1: SerialNumber: syz [ 49.551750][ T314] usb 2-1: config 0 descriptor?? [ 49.557186][ T824] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 49.564391][ T824] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 49.661093][ T31] usb 3-1: USB disconnect, device number 13 [ 49.772811][ T824] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 49.780276][ T824] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 49.805680][ T426] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.826192][ T426] usb 4-1: Using ep0 maxpacket: 8 [ 49.831723][ T426] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 49.841005][ T426] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 49.848682][ T426] usb 4-1: can't read configurations, error -61 [ 49.975670][ T426] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 49.987976][ T314] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 49.998148][ T426] usb 4-1: Using ep0 maxpacket: 8 [ 50.003649][ T426] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 50.012660][ T426] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 50.020304][ T426] usb 4-1: can't read configurations, error -61 [ 50.026744][ T426] usb usb4-port1: unable to enumerate USB device [ 50.183440][ T832] FAULT_INJECTION: forcing a failure. [ 50.183440][ T832] name failslab, interval 1, probability 0, space 0, times 0 [ 50.196314][ T832] CPU: 0 UID: 0 PID: 832 Comm: syz.2.163 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 50.196355][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.196368][ T832] Call Trace: [ 50.196377][ T832] [ 50.196385][ T832] __dump_stack+0x21/0x30 [ 50.196428][ T832] dump_stack_lvl+0x140/0x1c0 [ 50.196468][ T832] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.196521][ T832] dump_stack+0x19/0x20 [ 50.196554][ T832] should_fail_ex+0x3c2/0x510 [ 50.196578][ T832] should_failslab+0xac/0x100 [ 50.196602][ T832] __kmalloc_node_noprof+0x69/0x500 [ 50.196636][ T832] ? __kvmalloc_node_noprof+0x128/0x300 [ 50.196667][ T832] __kvmalloc_node_noprof+0x128/0x300 [ 50.196700][ T832] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 50.196722][ T832] ? memdup_user+0x70/0x170 [ 50.196762][ T832] ? strndup_user+0x40/0xd0 [ 50.196792][ T832] __se_sys_add_key+0x291/0x4b0 [ 50.196830][ T832] ? __x64_sys_add_key+0xf0/0xf0 [ 50.196855][ T832] ? __kasan_check_write+0x18/0x20 [ 50.196878][ T832] ? fpregs_restore_userregs+0x11c/0x260 [ 50.196920][ T832] __x64_sys_add_key+0xc3/0xf0 [ 50.196954][ T832] x64_sys_call+0x195f/0x2ee0 [ 50.196981][ T832] do_syscall_64+0x57/0xf0 [ 50.196997][ T832] ? clear_bhb_loop+0x50/0xa0 [ 50.197020][ T832] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.197058][ T832] RIP: 0033:0x7f3eedf9f559 [ 50.197084][ T832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.197103][ T832] RSP: 002b:00007f3eeef47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 50.197130][ T832] RAX: ffffffffffffffda RBX: 00007f3eee225fa0 RCX: 00007f3eedf9f559 [ 50.197142][ T832] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 50.197155][ T832] RBP: 00007f3eee036b20 R08: ffffffffffffffff R09: 0000000000000000 [ 50.197167][ T832] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 50.197177][ T832] R13: 00007f3eee226038 R14: 00007f3eee225fa0 R15: 00007ffc2e414358 [ 50.197210][ T832] [ 50.468342][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 50.468361][ T36] audit: type=1400 audit(1792725342.940:239): avc: denied { sqpoll } for pid=838 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.601359][ T36] audit: type=1400 audit(1792725343.070:240): avc: denied { bind } for pid=842 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.712876][ T852] FAULT_INJECTION: forcing a failure. [ 50.712876][ T852] name failslab, interval 1, probability 0, space 0, times 0 [ 50.725624][ T852] CPU: 1 UID: 0 PID: 852 Comm: syz.2.172 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 50.725662][ T852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.725676][ T852] Call Trace: [ 50.725684][ T852] [ 50.725697][ T852] __dump_stack+0x21/0x30 [ 50.725736][ T852] dump_stack_lvl+0x140/0x1c0 [ 50.725759][ T852] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.725788][ T852] ? avc_has_perm_noaudit+0x289/0x360 [ 50.725806][ T852] dump_stack+0x19/0x20 [ 50.725829][ T852] should_fail_ex+0x3c2/0x510 [ 50.725845][ T852] should_failslab+0xac/0x100 [ 50.725861][ T852] __kmalloc_node_noprof+0x69/0x500 [ 50.725884][ T852] ? __kvmalloc_node_noprof+0x128/0x300 [ 50.725907][ T852] __kvmalloc_node_noprof+0x128/0x300 [ 50.725926][ T852] ? bpf_lsm_capable+0xd/0x20 [ 50.725945][ T852] ? security_capable+0x44/0x130 [ 50.725969][ T852] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 50.725990][ T852] ? ns_capable+0xc0/0xf0 [ 50.726014][ T852] proc_sys_call_handler+0x3e6/0x880 [ 50.726035][ T852] ? __cfi_selinux_file_permission+0x10/0x10 [ 50.726058][ T852] ? proc_sys_open+0x2a0/0x2a0 [ 50.726078][ T852] ? __kasan_check_write+0x18/0x20 [ 50.726099][ T852] ? proc_fail_nth_write+0x184/0x220 [ 50.726118][ T852] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 50.726139][ T852] proc_sys_read+0x23/0x30 [ 50.726158][ T852] vfs_read+0x60e/0xc70 [ 50.726181][ T852] ? __cfi_vfs_read+0x10/0x10 [ 50.726203][ T852] ? __cfi_mutex_lock+0x10/0x10 [ 50.726225][ T852] ksys_read+0x145/0x260 [ 50.726247][ T852] ? __cfi_ksys_read+0x10/0x10 [ 50.726269][ T852] ? __kasan_check_read+0x15/0x20 [ 50.726291][ T852] __x64_sys_read+0x7f/0x90 [ 50.726313][ T852] x64_sys_call+0x2638/0x2ee0 [ 50.726329][ T852] do_syscall_64+0x57/0xf0 [ 50.726345][ T852] ? clear_bhb_loop+0x50/0xa0 [ 50.726372][ T852] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.726393][ T852] RIP: 0033:0x7f3eedf9f559 [ 50.726407][ T852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.726420][ T852] RSP: 002b:00007f3eeef47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.726443][ T852] RAX: ffffffffffffffda RBX: 00007f3eee225fa0 RCX: 00007f3eedf9f559 [ 50.726455][ T852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 50.726465][ T852] RBP: 00007f3eeef47090 R08: 0000000000000000 R09: 0000000000000000 [ 50.726475][ T852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.726484][ T852] R13: 00007f3eee226038 R14: 00007f3eee225fa0 R15: 00007ffc2e414358 [ 50.726500][ T852] [ 50.756274][ T854] FAULT_INJECTION: forcing a failure. [ 50.756274][ T854] name failslab, interval 1, probability 0, space 0, times 0 [ 51.011640][ T854] CPU: 1 UID: 0 PID: 854 Comm: syz.2.173 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 51.011732][ T854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.011749][ T854] Call Trace: [ 51.011759][ T854] [ 51.011769][ T854] __dump_stack+0x21/0x30 [ 51.011816][ T854] dump_stack_lvl+0x140/0x1c0 [ 51.011854][ T854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.011893][ T854] dump_stack+0x19/0x20 [ 51.011929][ T854] should_fail_ex+0x3c2/0x510 [ 51.011954][ T854] should_failslab+0xac/0x100 [ 51.011979][ T854] __kmalloc_node_noprof+0x69/0x500 [ 51.012014][ T854] ? __kvmalloc_node_noprof+0x128/0x300 [ 51.012048][ T854] __kvmalloc_node_noprof+0x128/0x300 [ 51.012080][ T854] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 51.012113][ T854] ? memdup_user+0x70/0x170 [ 51.012143][ T854] ? strndup_user+0x40/0xd0 [ 51.012174][ T854] __se_sys_add_key+0x291/0x4b0 [ 51.012213][ T854] ? __x64_sys_add_key+0xf0/0xf0 [ 51.012250][ T854] ? __kasan_check_write+0x18/0x20 [ 51.012283][ T854] ? fpregs_restore_userregs+0x11c/0x260 [ 51.012318][ T854] __x64_sys_add_key+0xc3/0xf0 [ 51.012355][ T854] x64_sys_call+0x195f/0x2ee0 [ 51.012381][ T854] do_syscall_64+0x57/0xf0 [ 51.012413][ T854] ? clear_bhb_loop+0x50/0xa0 [ 51.012448][ T854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.012481][ T854] RIP: 0033:0x7f3eedf9f559 [ 51.012503][ T854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.012525][ T854] RSP: 002b:00007f3eeef47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 51.012552][ T854] RAX: ffffffffffffffda RBX: 00007f3eee225fa0 RCX: 00007f3eedf9f559 [ 51.012571][ T854] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 51.012590][ T854] RBP: 00007f3eee036b20 R08: ffffffffffffffff R09: 0000000000000000 [ 51.012606][ T854] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 51.012619][ T854] R13: 00007f3eee226038 R14: 00007f3eee225fa0 R15: 00007ffc2e414358 [ 51.012637][ T854] [ 51.638440][ T9] usb 1-1: USB disconnect, device number 17 [ 51.688493][ T36] audit: type=1400 audit(1792725344.160:241): avc: denied { write } for pid=873 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.708321][ T36] audit: type=1400 audit(1792725344.160:242): avc: denied { create } for pid=873 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.756989][ T884] FAULT_INJECTION: forcing a failure. [ 51.756989][ T884] name failslab, interval 1, probability 0, space 0, times 0 [ 51.769866][ T884] CPU: 1 UID: 0 PID: 884 Comm: syz.0.182 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 51.769904][ T884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.769920][ T884] Call Trace: [ 51.769928][ T884] [ 51.769937][ T884] __dump_stack+0x21/0x30 [ 51.769981][ T884] dump_stack_lvl+0x140/0x1c0 [ 51.770016][ T884] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.770047][ T884] dump_stack+0x19/0x20 [ 51.770074][ T884] should_fail_ex+0x3c2/0x510 [ 51.770094][ T884] should_failslab+0xac/0x100 [ 51.770112][ T884] __kmalloc_node_noprof+0x69/0x500 [ 51.770140][ T884] ? __kvmalloc_node_noprof+0x128/0x300 [ 51.770165][ T884] __kvmalloc_node_noprof+0x128/0x300 [ 51.770190][ T884] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 51.770215][ T884] ? memdup_user+0x70/0x170 [ 51.770238][ T884] ? strndup_user+0x40/0xd0 [ 51.770262][ T884] __se_sys_add_key+0x291/0x4b0 [ 51.770297][ T884] ? __x64_sys_add_key+0xf0/0xf0 [ 51.770326][ T884] ? __kasan_check_write+0x18/0x20 [ 51.770353][ T884] ? fpregs_restore_userregs+0x11c/0x260 [ 51.770380][ T884] __x64_sys_add_key+0xc3/0xf0 [ 51.770409][ T884] x64_sys_call+0x195f/0x2ee0 [ 51.770429][ T884] do_syscall_64+0x57/0xf0 [ 51.770449][ T884] ? clear_bhb_loop+0x50/0xa0 [ 51.770475][ T884] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.770500][ T884] RIP: 0033:0x7f6a4dd9f559 [ 51.770516][ T884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.770533][ T884] RSP: 002b:00007f6a4eb9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 51.770554][ T884] RAX: ffffffffffffffda RBX: 00007f6a4e025fa0 RCX: 00007f6a4dd9f559 [ 51.770569][ T884] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 51.770583][ T884] RBP: 00007f6a4de36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 51.770596][ T884] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 51.770608][ T884] R13: 00007f6a4e026038 R14: 00007f6a4e025fa0 R15: 00007fff0d72a708 [ 51.770624][ T884] [ 51.984660][ T314] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 51.994907][ T314] asix 2-1:0.34: probe with driver asix failed with error -71 [ 52.005646][ T314] usb 2-1: USB disconnect, device number 11 [ 52.081548][ T897] FAULT_INJECTION: forcing a failure. [ 52.081548][ T897] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.094750][ T897] CPU: 1 UID: 0 PID: 897 Comm: syz.0.188 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 52.094787][ T897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.094807][ T897] Call Trace: [ 52.094815][ T897] [ 52.094823][ T897] __dump_stack+0x21/0x30 [ 52.094862][ T897] dump_stack_lvl+0x140/0x1c0 [ 52.094896][ T897] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.094936][ T897] ? check_stack_object+0x138/0x150 [ 52.094967][ T897] dump_stack+0x19/0x20 [ 52.095000][ T897] should_fail_ex+0x3c2/0x510 [ 52.095029][ T897] should_fail+0xf/0x20 [ 52.095047][ T897] should_fail_usercopy+0x1e/0x30 [ 52.095069][ T897] _copy_to_user+0x24/0xa0 [ 52.095097][ T897] simple_read_from_buffer+0xed/0x160 [ 52.095124][ T897] proc_fail_nth_read+0x1aa/0x220 [ 52.095152][ T897] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.095181][ T897] ? bpf_lsm_file_permission+0xd/0x20 [ 52.095205][ T897] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.095233][ T897] vfs_read+0x28b/0xc70 [ 52.095265][ T897] ? __cfi_vfs_read+0x10/0x10 [ 52.095296][ T897] ? __kasan_check_write+0x18/0x20 [ 52.095327][ T897] ? mutex_lock+0x97/0x1d0 [ 52.095356][ T897] ? __cfi_mutex_lock+0x10/0x10 [ 52.095388][ T897] ksys_read+0x145/0x260 [ 52.095419][ T897] ? __cfi_ksys_read+0x10/0x10 [ 52.095452][ T897] ? __kasan_check_read+0x15/0x20 [ 52.095483][ T897] __x64_sys_read+0x7f/0x90 [ 52.095514][ T897] x64_sys_call+0x2638/0x2ee0 [ 52.095538][ T897] do_syscall_64+0x57/0xf0 [ 52.095560][ T897] ? clear_bhb_loop+0x50/0xa0 [ 52.095591][ T897] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.095621][ T897] RIP: 0033:0x7f6a4dd5fd8e [ 52.095641][ T897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.095661][ T897] RSP: 002b:00007f6a4eb9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.095686][ T897] RAX: ffffffffffffffda RBX: 00007f6a4eb9f6c0 RCX: 00007f6a4dd5fd8e [ 52.095704][ T897] RDX: 000000000000000f RSI: 00007f6a4eb9f0a0 RDI: 0000000000000004 [ 52.095719][ T897] RBP: 00007f6a4eb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.095735][ T897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.095761][ T897] R13: 00007f6a4e026038 R14: 00007f6a4e025fa0 R15: 00007fff0d72a708 [ 52.095782][ T897] [ 52.366241][ T903] FAULT_INJECTION: forcing a failure. [ 52.366241][ T903] name failslab, interval 1, probability 0, space 0, times 0 [ 52.379029][ T903] CPU: 0 UID: 0 PID: 903 Comm: syz.0.191 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 52.379068][ T903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.379085][ T903] Call Trace: [ 52.379092][ T903] [ 52.379101][ T903] __dump_stack+0x21/0x30 [ 52.379145][ T903] dump_stack_lvl+0x140/0x1c0 [ 52.379187][ T903] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.379223][ T903] dump_stack+0x19/0x20 [ 52.379258][ T903] should_fail_ex+0x3c2/0x510 [ 52.379284][ T903] should_failslab+0xac/0x100 [ 52.379309][ T903] __kmalloc_node_noprof+0x69/0x500 [ 52.379343][ T903] ? __kvmalloc_node_noprof+0x128/0x300 [ 52.379375][ T903] __kvmalloc_node_noprof+0x128/0x300 [ 52.379405][ T903] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 52.379437][ T903] ? memdup_user+0x70/0x170 [ 52.379470][ T903] ? strndup_user+0x40/0xd0 [ 52.379501][ T903] __se_sys_add_key+0x291/0x4b0 [ 52.379537][ T903] ? __x64_sys_add_key+0xf0/0xf0 [ 52.379573][ T903] ? __kasan_check_write+0x18/0x20 [ 52.379604][ T903] ? fpregs_restore_userregs+0x11c/0x260 [ 52.379636][ T903] __x64_sys_add_key+0xc3/0xf0 [ 52.379672][ T903] x64_sys_call+0x195f/0x2ee0 [ 52.379696][ T903] do_syscall_64+0x57/0xf0 [ 52.379720][ T903] ? clear_bhb_loop+0x50/0xa0 [ 52.379752][ T903] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.379783][ T903] RIP: 0033:0x7f6a4dd9f559 [ 52.379803][ T903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.379825][ T903] RSP: 002b:00007f6a4eb9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 52.379851][ T903] RAX: ffffffffffffffda RBX: 00007f6a4e025fa0 RCX: 00007f6a4dd9f559 [ 52.379870][ T903] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 52.379888][ T903] RBP: 00007f6a4de36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 52.379906][ T903] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 52.379921][ T903] R13: 00007f6a4e026038 R14: 00007f6a4e025fa0 R15: 00007fff0d72a708 [ 52.379943][ T903] [ 52.575653][ T426] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 52.699418][ T36] audit: type=1400 audit(1700000001.910:243): avc: denied { mounton } for pid=911 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.732613][ T36] audit: type=1400 audit(1700000001.920:244): avc: denied { create } for pid=911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.774819][ T911] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.782243][ T911] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.789454][ T426] usb 4-1: Using ep0 maxpacket: 16 [ 52.789673][ T911] bridge_slave_0: entered allmulticast mode [ 52.797011][ T426] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 52.802934][ T911] bridge_slave_0: entered promiscuous mode [ 52.809620][ T426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.818785][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.825582][ T426] usb 4-1: config 0 has no interface number 0 [ 52.832630][ T911] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.839644][ T426] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.846054][ T911] bridge_slave_1: entered allmulticast mode [ 52.856567][ T426] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.863979][ T911] bridge_slave_1: entered promiscuous mode [ 52.877836][ T426] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 52.889735][ T426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.897821][ T426] usb 4-1: Product: syz [ 52.902131][ T426] usb 4-1: Manufacturer: syz [ 52.907064][ T426] usb 4-1: SerialNumber: syz [ 52.916071][ T426] usb 4-1: config 0 descriptor?? [ 52.922436][ T426] asix 4-1:0.34: probe with driver asix failed with error -22 [ 52.965546][ T314] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 52.974498][ T36] audit: type=1400 audit(1700000002.180:245): avc: denied { create } for pid=919 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.007709][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.014838][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.018715][ T36] audit: type=1400 audit(1700000002.210:246): avc: denied { listen } for pid=919 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.022510][ T911] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.048425][ T911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.063902][ T36] audit: type=1400 audit(1700000002.210:247): avc: denied { connect } for pid=919 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.084365][ T36] audit: type=1400 audit(1700000002.210:248): avc: denied { write } for pid=919 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.114631][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.122384][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.133303][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.140473][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.147423][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.158049][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.161724][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.165804][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.176785][ T314] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.196266][ T314] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.205375][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.215188][ T314] usb 2-1: config 0 descriptor?? [ 53.242621][ T911] veth0_vlan: entered promiscuous mode [ 53.259702][ T911] veth1_macvtap: entered promiscuous mode [ 53.341174][ T933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 53.354110][ T939] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.805546][ T426] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.985491][ T426] usb 5-1: Using ep0 maxpacket: 16 [ 53.991860][ T426] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 54.000124][ T426] usb 5-1: config 0 has no interface number 0 [ 54.006416][ T426] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 54.016521][ T426] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 54.028458][ T426] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 54.037705][ T426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.045835][ T426] usb 5-1: Product: syz [ 54.050041][ T426] usb 5-1: Manufacturer: syz [ 54.054663][ T426] usb 5-1: SerialNumber: syz [ 54.060240][ T426] usb 5-1: config 0 descriptor?? [ 54.066164][ T950] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 54.073550][ T950] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 54.221240][ T958] FAULT_INJECTION: forcing a failure. [ 54.221240][ T958] name failslab, interval 1, probability 0, space 0, times 0 [ 54.234362][ T958] CPU: 0 UID: 0 PID: 958 Comm: syz.0.210 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 54.234400][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.234417][ T958] Call Trace: [ 54.234425][ T958] [ 54.234433][ T958] __dump_stack+0x21/0x30 [ 54.234476][ T958] dump_stack_lvl+0x140/0x1c0 [ 54.234506][ T958] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.234544][ T958] dump_stack+0x19/0x20 [ 54.234578][ T958] should_fail_ex+0x3c2/0x510 [ 54.234602][ T958] should_failslab+0xac/0x100 [ 54.234626][ T958] __kmalloc_node_noprof+0x69/0x500 [ 54.234661][ T958] ? __kvmalloc_node_noprof+0x128/0x300 [ 54.234695][ T958] __kvmalloc_node_noprof+0x128/0x300 [ 54.234726][ T958] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 54.234756][ T958] ? memdup_user+0x70/0x170 [ 54.234784][ T958] ? strndup_user+0x40/0xd0 [ 54.234815][ T958] __se_sys_add_key+0x291/0x4b0 [ 54.234852][ T958] ? __x64_sys_add_key+0xf0/0xf0 [ 54.234889][ T958] ? __kasan_check_write+0x18/0x20 [ 54.234921][ T958] ? fpregs_restore_userregs+0x11c/0x260 [ 54.234954][ T958] __x64_sys_add_key+0xc3/0xf0 [ 54.234991][ T958] x64_sys_call+0x195f/0x2ee0 [ 54.235026][ T958] do_syscall_64+0x57/0xf0 [ 54.235050][ T958] ? clear_bhb_loop+0x50/0xa0 [ 54.235084][ T958] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.235116][ T958] RIP: 0033:0x7f6a4dd9f559 [ 54.235138][ T958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.235168][ T958] RSP: 002b:00007f6a4eb9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 54.235193][ T958] RAX: ffffffffffffffda RBX: 00007f6a4e025fa0 RCX: 00007f6a4dd9f559 [ 54.235215][ T958] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 54.235228][ T958] RBP: 00007f6a4de36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 54.235240][ T958] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 54.235276][ T958] R13: 00007f6a4e026038 R14: 00007f6a4e025fa0 R15: 00007fff0d72a708 [ 54.235299][ T958] [ 54.286502][ T950] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 54.286641][ T950] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 54.637405][ T426] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 55.070235][ T355] usb 4-1: USB disconnect, device number 14 [ 55.545405][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 55.696570][ T9] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 55.708959][ T9] usb 4-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.715525][ T355] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 55.722586][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 55.736445][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 55.745856][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.754897][ T9] usb 4-1: config 0 descriptor?? [ 55.819344][ T314] usbhid 2-1:0.0: can't add hid device: -71 [ 55.826457][ T314] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.838713][ T314] usb 2-1: USB disconnect, device number 12 [ 55.856843][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 55.856861][ T36] audit: type=1400 audit(1700000005.070:263): avc: denied { search } for pid=993 comm="syz.1.223" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.884729][ T355] usb 1-1: device descriptor read/64, error -71 [ 56.125354][ T355] usb 1-1: device descriptor read/64, error -71 [ 56.168908][ T9] hid (null): global environment stack underflow [ 56.176390][ T9] kye 0003:0458:5014.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 56.187275][ T9] kye 0003:0458:5014.0007: global environment stack underflow [ 56.194793][ T9] kye 0003:0458:5014.0007: item 0 4 1 11 parsing failed [ 56.195547][ T314] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 56.202655][ T9] kye 0003:0458:5014.0007: parse failed [ 56.215276][ T9] kye 0003:0458:5014.0007: probe with driver kye failed with error -22 [ 56.355369][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 56.361643][ T314] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 56.370219][ T355] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 56.377977][ T314] usb 2-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 56.379031][ T10] usb 4-1: USB disconnect, device number 15 [ 56.394601][ T314] usb 2-1: config 0 has no interface number 1 [ 56.401066][ T314] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.412399][ T314] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 56.424249][ T314] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 56.435665][ T314] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 56.446051][ T314] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.459253][ T314] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 56.472267][ T426] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 56.482422][ T314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 56.489191][ T426] asix 5-1:0.34: probe with driver asix failed with error -71 [ 56.498214][ T314] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 56.507632][ T426] usb 5-1: USB disconnect, device number 2 [ 56.514497][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.523385][ T314] usb 2-1: Product: syz [ 56.527691][ T314] usb 2-1: Manufacturer: syz [ 56.532321][ T314] usb 2-1: SerialNumber: syz [ 56.537776][ T314] usb 2-1: config 0 descriptor?? [ 56.543151][ T994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.575335][ T355] usb 1-1: device descriptor read/64, error -71 [ 56.751520][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.760220][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.771829][ T314] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 56.781945][ T314] usb 2-1: USB disconnect, device number 13 [ 56.812142][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.815855][ T355] usb 1-1: device descriptor read/64, error -71 [ 56.918204][ T36] audit: type=1400 audit(1700000006.130:264): avc: denied { mounton } for pid=995 comm="syz.3.224" path="/47/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 56.945647][ T355] usb usb1-port1: attempt power cycle [ 57.036681][ T1004] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 57.074031][ T1004] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 57.188658][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 57.226864][ T1004] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 57.238433][ T1004] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 57.245458][ T1004] pci 0000:00:05.0: vgaarb: bridge control possible [ 57.252093][ T1004] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 57.262459][ T1004] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 57.285553][ T355] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 57.322098][ T355] usb 1-1: device descriptor read/8, error -71 [ 57.336076][ T1011] FAULT_INJECTION: forcing a failure. [ 57.336076][ T1011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.349778][ T1011] CPU: 0 UID: 0 PID: 1011 Comm: syz.1.231 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 57.349837][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 57.349870][ T1011] Call Trace: [ 57.349885][ T1011] [ 57.349895][ T1011] __dump_stack+0x21/0x30 [ 57.349959][ T1011] dump_stack_lvl+0x140/0x1c0 [ 57.349999][ T1011] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.350039][ T1011] ? __kmalloc_node_noprof+0x252/0x500 [ 57.350105][ T1011] ? __kvmalloc_node_noprof+0x128/0x300 [ 57.350138][ T1011] ? check_stack_object+0x81/0x150 [ 57.350165][ T1011] dump_stack+0x19/0x20 [ 57.350193][ T1011] should_fail_ex+0x3c2/0x510 [ 57.350211][ T1011] should_fail+0xf/0x20 [ 57.350232][ T1011] should_fail_usercopy+0x1e/0x30 [ 57.350252][ T1011] _copy_from_user+0x20/0xa0 [ 57.350274][ T1011] __se_sys_add_key+0x2be/0x4b0 [ 57.350303][ T1011] ? __x64_sys_add_key+0xf0/0xf0 [ 57.350331][ T1011] ? __kasan_check_write+0x18/0x20 [ 57.350357][ T1011] ? fpregs_restore_userregs+0x11c/0x260 [ 57.350388][ T1011] __x64_sys_add_key+0xc3/0xf0 [ 57.350422][ T1011] x64_sys_call+0x195f/0x2ee0 [ 57.350443][ T1011] do_syscall_64+0x57/0xf0 [ 57.350467][ T1011] ? clear_bhb_loop+0x50/0xa0 [ 57.350494][ T1011] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.350520][ T1011] RIP: 0033:0x7f6d3779f559 [ 57.350545][ T1011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.350561][ T1011] RSP: 002b:00007f6d385e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 57.350588][ T1011] RAX: ffffffffffffffda RBX: 00007f6d37a25fa0 RCX: 00007f6d3779f559 [ 57.350603][ T1011] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 57.350616][ T1011] RBP: 00007f6d37836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 57.350632][ T1011] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 57.350644][ T1011] R13: 00007f6d37a26038 R14: 00007f6d37a25fa0 R15: 00007ffc0c75c458 [ 57.350660][ T1011] [ 57.558469][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 57.566818][ T10] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 57.575072][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.585406][ T10] usb 4-1: config 0 has no interface number 0 [ 57.587794][ T355] usb 1-1: device descriptor read/8, error -71 [ 57.592686][ T10] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.609634][ T10] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.636568][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 57.645893][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.654137][ T10] usb 4-1: Product: syz [ 57.658639][ T10] usb 4-1: Manufacturer: syz [ 57.663288][ T10] usb 4-1: SerialNumber: syz [ 57.667715][ T1016] FAULT_INJECTION: forcing a failure. [ 57.667715][ T1016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.682067][ T10] usb 4-1: config 0 descriptor?? [ 57.682767][ T1016] CPU: 1 UID: 0 PID: 1016 Comm: syz.1.234 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 57.682862][ T1016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 57.682898][ T1016] Call Trace: [ 57.682920][ T1016] [ 57.682942][ T1016] __dump_stack+0x21/0x30 [ 57.683040][ T1016] dump_stack_lvl+0x140/0x1c0 [ 57.683138][ T1016] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.683217][ T1016] ? _parse_integer+0x2e/0x40 [ 57.683303][ T1016] ? kstrtoull+0x13b/0x1e0 [ 57.683386][ T1016] dump_stack+0x19/0x20 [ 57.683466][ T1016] should_fail_ex+0x3c2/0x510 [ 57.683515][ T1016] should_fail+0xf/0x20 [ 57.683570][ T1016] should_fail_usercopy+0x1e/0x30 [ 57.683662][ T1016] _copy_from_user+0x20/0xa0 [ 57.683750][ T1016] ___sys_sendmsg+0x1c7/0x370 [ 57.683828][ T1016] ? __sys_sendmsg+0x260/0x260 [ 57.683904][ T1016] ? proc_fail_nth_write+0x184/0x220 [ 57.683978][ T1016] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 57.684056][ T1016] ? __fget_files+0x2bc/0x330 [ 57.684130][ T1016] __x64_sys_sendmsg+0x1be/0x2a0 [ 57.684207][ T1016] ? fput+0x1a4/0x230 [ 57.684272][ T1016] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 57.684348][ T1016] ? ksys_write+0x1f3/0x260 [ 57.684434][ T1016] ? __kasan_check_read+0x15/0x20 [ 57.684512][ T1016] x64_sys_call+0x2a4c/0x2ee0 [ 57.684569][ T1016] do_syscall_64+0x57/0xf0 [ 57.684635][ T1016] ? clear_bhb_loop+0x50/0xa0 [ 57.684718][ T1016] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.684796][ T1016] RIP: 0033:0x7f6d3779f559 [ 57.684849][ T1016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.684894][ T1016] RSP: 002b:00007f6d385e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.684960][ T1016] RAX: ffffffffffffffda RBX: 00007f6d37a25fa0 RCX: 00007f6d3779f559 [ 57.685028][ T1016] RDX: 0000000000008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 57.685078][ T1016] RBP: 00007f6d385e1090 R08: 0000000000000000 R09: 0000000000000000 [ 57.685136][ T1016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.685173][ T1016] R13: 00007f6d37a26038 R14: 00007f6d37a25fa0 R15: 00007ffc0c75c458 [ 57.685227][ T1016] [ 57.866386][ T355] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 57.878649][ T10] asix 4-1:0.34: probe with driver asix failed with error -22 [ 57.906910][ T355] usb 1-1: device descriptor read/8, error -71 [ 57.985587][ T426] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.056526][ T355] usb 1-1: device descriptor read/8, error -71 [ 58.146755][ T426] usb 5-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 58.158119][ T426] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.171327][ T426] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.178054][ T355] usb usb1-port1: unable to enumerate USB device [ 58.184887][ T426] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 58.194136][ T426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.202982][ T426] usb 5-1: config 0 descriptor?? [ 58.359620][ T1028] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 58.391296][ T1028] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 58.524515][ T1028] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 58.538458][ T1028] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 58.545385][ T1028] pci 0000:00:05.0: vgaarb: bridge control possible [ 58.552115][ T1028] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 58.568176][ T1028] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 58.609530][ T1036] FAULT_INJECTION: forcing a failure. [ 58.609530][ T1036] name failslab, interval 1, probability 0, space 0, times 0 [ 58.622412][ T1036] CPU: 0 UID: 0 PID: 1036 Comm: syz.1.242 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 58.622455][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 58.622500][ T1036] Call Trace: [ 58.622514][ T1036] [ 58.622531][ T1036] __dump_stack+0x21/0x30 [ 58.622589][ T1036] dump_stack_lvl+0x140/0x1c0 [ 58.622615][ T1036] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.622660][ T1036] dump_stack+0x19/0x20 [ 58.622694][ T1036] should_fail_ex+0x3c2/0x510 [ 58.622727][ T1036] should_failslab+0xac/0x100 [ 58.622744][ T1036] __kmalloc_node_noprof+0x69/0x500 [ 58.622768][ T1036] ? __kvmalloc_node_noprof+0x128/0x300 [ 58.622809][ T1036] __kvmalloc_node_noprof+0x128/0x300 [ 58.622840][ T1036] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 58.622872][ T1036] ? memdup_user+0x70/0x170 [ 58.622899][ T1036] ? strndup_user+0x40/0xd0 [ 58.622920][ T1036] __se_sys_add_key+0x291/0x4b0 [ 58.622965][ T1036] ? __x64_sys_add_key+0xf0/0xf0 [ 58.623001][ T1036] ? __kasan_check_write+0x18/0x20 [ 58.623106][ T1036] ? fpregs_restore_userregs+0x11c/0x260 [ 58.623141][ T1036] __x64_sys_add_key+0xc3/0xf0 [ 58.623182][ T1036] x64_sys_call+0x195f/0x2ee0 [ 58.623199][ T1036] do_syscall_64+0x57/0xf0 [ 58.623222][ T1036] ? clear_bhb_loop+0x50/0xa0 [ 58.623266][ T1036] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.623297][ T1036] RIP: 0033:0x7f6d3779f559 [ 58.623330][ T1036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.623345][ T1036] RSP: 002b:00007f6d385e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 58.623369][ T1036] RAX: ffffffffffffffda RBX: 00007f6d37a25fa0 RCX: 00007f6d3779f559 [ 58.623382][ T1036] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 58.623413][ T1036] RBP: 00007f6d37836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 58.623431][ T1036] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 58.623446][ T1036] R13: 00007f6d37a26038 R14: 00007f6d37a25fa0 R15: 00007ffc0c75c458 [ 58.623466][ T1036] [ 58.665566][ T426] hid (null): global environment stack underflow [ 58.842150][ T426] kye 0003:0458:5014.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 58.852953][ T426] kye 0003:0458:5014.0008: global environment stack underflow [ 58.860547][ T426] kye 0003:0458:5014.0008: item 0 4 1 11 parsing failed [ 58.868002][ T426] kye 0003:0458:5014.0008: parse failed [ 58.873661][ T426] kye 0003:0458:5014.0008: probe with driver kye failed with error -22 [ 58.908635][ T36] audit: type=1400 audit(1700000008.120:265): avc: denied { write } for pid=1042 comm="syz.1.245" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.937582][ T426] usb 5-1: USB disconnect, device number 3 [ 58.937825][ T36] audit: type=1400 audit(1700000008.120:266): avc: denied { open } for pid=1042 comm="syz.1.245" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.970524][ T36] audit: type=1400 audit(1700000008.120:267): avc: denied { read } for pid=1042 comm="syz.1.245" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.994470][ T36] audit: type=1400 audit(1700000008.120:268): avc: denied { ioctl } for pid=1042 comm="syz.1.245" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.456411][ T1058] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 59.487697][ T1058] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 59.614440][ T1058] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 59.626151][ T1058] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 59.633059][ T1058] pci 0000:00:05.0: vgaarb: bridge control possible [ 59.639662][ T1058] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 59.650142][ T1058] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 59.741089][ T1066] FAULT_INJECTION: forcing a failure. [ 59.741089][ T1066] name failslab, interval 1, probability 0, space 0, times 0 [ 59.753996][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 59.761714][ T1066] CPU: 1 UID: 0 PID: 1066 Comm: syz.4.254 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 59.761763][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.761791][ T1066] Call Trace: [ 59.761803][ T1066] [ 59.761813][ T1066] __dump_stack+0x21/0x30 [ 59.761868][ T1066] dump_stack_lvl+0x140/0x1c0 [ 59.761922][ T1066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.761960][ T1066] dump_stack+0x19/0x20 [ 59.761994][ T1066] should_fail_ex+0x3c2/0x510 [ 59.762025][ T1066] should_failslab+0xac/0x100 [ 59.762049][ T1066] __kmalloc_node_noprof+0x69/0x500 [ 59.762087][ T1066] ? __kvmalloc_node_noprof+0x128/0x300 [ 59.762121][ T1066] __kvmalloc_node_noprof+0x128/0x300 [ 59.762152][ T1066] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 59.762183][ T1066] ? memdup_user+0x70/0x170 [ 59.762212][ T1066] ? strndup_user+0x40/0xd0 [ 59.762241][ T1066] __se_sys_add_key+0x291/0x4b0 [ 59.762278][ T1066] ? __x64_sys_add_key+0xf0/0xf0 [ 59.762304][ T1066] ? __kasan_check_write+0x18/0x20 [ 59.762352][ T1066] ? fpregs_restore_userregs+0x11c/0x260 [ 59.762395][ T1066] __x64_sys_add_key+0xc3/0xf0 [ 59.762430][ T1066] x64_sys_call+0x195f/0x2ee0 [ 59.762459][ T1066] do_syscall_64+0x57/0xf0 [ 59.762499][ T1066] ? clear_bhb_loop+0x50/0xa0 [ 59.762534][ T1066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.762573][ T1066] RIP: 0033:0x7f7acd59f559 [ 59.762602][ T1066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.762622][ T1066] RSP: 002b:00007f7ace43d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 59.762659][ T1066] RAX: ffffffffffffffda RBX: 00007f7acd825fa0 RCX: 00007f7acd59f559 [ 59.762672][ T1066] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 59.762685][ T1066] RBP: 00007f7acd636b20 R08: ffffffffffffffff R09: 0000000000000000 [ 59.762718][ T1066] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 59.762734][ T1066] R13: 00007f7acd826038 R14: 00007f7acd825fa0 R15: 00007ffd3bce33b8 [ 59.762756][ T1066] [ 59.885335][ T10] usb 1-1: device descriptor read/64, error -71 [ 59.980430][ T426] usb 4-1: USB disconnect, device number 16 [ 60.010479][ T1068] netlink: 140 bytes leftover after parsing attributes in process `syz.3.256'. [ 60.051994][ T36] audit: type=1400 audit(1700000009.260:269): avc: denied { ioctl } for pid=1075 comm="syz.4.259" path="socket:[8810]" dev="sockfs" ino=8810 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.137170][ T1068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 60.146454][ T1068] netlink: 80 bytes leftover after parsing attributes in process `syz.3.256'. [ 60.225102][ T10] usb 1-1: device descriptor read/64, error -71 [ 60.455094][ T426] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 60.465119][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 60.543602][ T1083] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 60.553667][ T355] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.582229][ T1083] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 60.602440][ T10] usb 1-1: device descriptor read/64, error -71 [ 60.607587][ T426] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 60.653615][ T426] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 60.698690][ T426] usb 4-1: config 0 has no interface number 0 [ 60.728268][ T1083] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 60.728956][ T426] usb 4-1: config 0 interface 255 has no altsetting 0 [ 60.741163][ T1083] pci 0000:00:05.0: pci_fixup_video+0x0/0x310 took 12934 usecs [ 60.744723][ T426] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 60.762065][ T1083] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 60.762773][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.768975][ T1083] pci 0000:00:05.0: vgaarb: bridge control possible [ 60.768995][ T1083] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 60.779018][ T355] usb 5-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 60.789481][ T1083] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 60.797004][ T355] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.825740][ T426] usb 4-1: config 0 descriptor?? [ 60.830874][ T355] usb 5-1: config 0 interface 0 has no altsetting 0 [ 60.838625][ T426] ftdi_sio 4-1:0.255: FTDI USB Serial Device converter detected [ 60.847315][ T426] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 60.856032][ T355] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 60.865184][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.877249][ T355] usb 5-1: config 0 descriptor?? [ 60.895010][ T10] usb 1-1: device descriptor read/64, error -71 [ 61.007602][ T10] usb usb1-port1: attempt power cycle [ 61.015761][ T1089] FAULT_INJECTION: forcing a failure. [ 61.015761][ T1089] name failslab, interval 1, probability 0, space 0, times 0 [ 61.028734][ T1089] CPU: 0 UID: 0 PID: 1089 Comm: syz.1.264 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 61.028790][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.028830][ T1089] Call Trace: [ 61.028842][ T1089] [ 61.028855][ T1089] __dump_stack+0x21/0x30 [ 61.028886][ T1089] dump_stack_lvl+0x140/0x1c0 [ 61.028929][ T1089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.028967][ T1089] dump_stack+0x19/0x20 [ 61.029009][ T1089] should_fail_ex+0x3c2/0x510 [ 61.029030][ T1089] should_failslab+0xac/0x100 [ 61.029046][ T1089] __kmalloc_node_noprof+0x69/0x500 [ 61.029091][ T1089] ? __kvmalloc_node_noprof+0x128/0x300 [ 61.029123][ T1089] __kvmalloc_node_noprof+0x128/0x300 [ 61.029157][ T1089] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 61.029179][ T1089] ? memdup_user+0x70/0x170 [ 61.029199][ T1089] ? strndup_user+0x40/0xd0 [ 61.029241][ T1089] __se_sys_add_key+0x291/0x4b0 [ 61.029276][ T1089] ? __x64_sys_add_key+0xf0/0xf0 [ 61.029315][ T1089] ? __kasan_check_write+0x18/0x20 [ 61.029337][ T1089] ? fpregs_restore_userregs+0x11c/0x260 [ 61.029376][ T1089] __x64_sys_add_key+0xc3/0xf0 [ 61.029411][ T1089] x64_sys_call+0x195f/0x2ee0 [ 61.029434][ T1089] do_syscall_64+0x57/0xf0 [ 61.029460][ T1089] ? clear_bhb_loop+0x50/0xa0 [ 61.029483][ T1089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.029519][ T1089] RIP: 0033:0x7f6d3779f559 [ 61.029547][ T1089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.029567][ T1089] RSP: 002b:00007f6d385e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 61.029601][ T1089] RAX: ffffffffffffffda RBX: 00007f6d37a25fa0 RCX: 00007f6d3779f559 [ 61.029614][ T1089] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 61.029626][ T1089] RBP: 00007f6d37836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 61.029638][ T1089] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 61.029648][ T1089] R13: 00007f6d37a26038 R14: 00007f6d37a25fa0 R15: 00007ffc0c75c458 [ 61.029681][ T1089] [ 61.288074][ T355] hid (null): global environment stack underflow [ 61.295511][ T355] kye 0003:0458:5014.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 61.306483][ T355] kye 0003:0458:5014.0009: global environment stack underflow [ 61.314229][ T355] kye 0003:0458:5014.0009: item 0 4 1 11 parsing failed [ 61.321807][ T355] kye 0003:0458:5014.0009: parse failed [ 61.327686][ T355] kye 0003:0458:5014.0009: probe with driver kye failed with error -22 [ 61.490890][ T9] usb 5-1: USB disconnect, device number 4 [ 61.505071][ T426] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 61.515020][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 61.554070][ T10] usb 1-1: device descriptor read/8, error -71 [ 61.607146][ T401] usb 4-1: USB disconnect, device number 17 [ 61.613482][ T401] ftdi_sio 4-1:0.255: device disconnected [ 61.655019][ T426] usb 2-1: Using ep0 maxpacket: 16 [ 61.661457][ T426] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 61.669813][ T426] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.679995][ T426] usb 2-1: config 0 has no interface number 0 [ 61.686136][ T426] usb 2-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.696755][ T10] usb 1-1: device descriptor read/8, error -71 [ 61.697052][ T426] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.717691][ T426] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 61.726877][ T426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.734972][ T426] usb 2-1: Product: syz [ 61.739246][ T426] usb 2-1: Manufacturer: syz [ 61.743880][ T426] usb 2-1: SerialNumber: syz [ 61.749332][ T426] usb 2-1: config 0 descriptor?? [ 61.755454][ T426] asix 2-1:0.34: probe with driver asix failed with error -22 [ 61.935049][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 61.956232][ T10] usb 1-1: device descriptor read/8, error -71 [ 62.044788][ T1098] input: syz0 as /devices/virtual/input/input5 [ 62.051817][ T36] audit: type=1400 audit(1700000011.260:270): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=509 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.074243][ T36] audit: type=1400 audit(1700000011.260:271): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=509 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.097622][ T36] audit: type=1400 audit(1700000011.260:272): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=509 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.107214][ T10] usb 1-1: device descriptor read/8, error -71 [ 62.122535][ T36] audit: type=1400 audit(1700000011.260:273): avc: denied { cmd } for pid=1097 comm="iou-wrk-1098" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 62.234991][ T10] usb usb1-port1: unable to enumerate USB device [ 62.360639][ T1118] FAULT_INJECTION: forcing a failure. [ 62.360639][ T1118] name failslab, interval 1, probability 0, space 0, times 0 [ 62.373484][ T1118] CPU: 0 UID: 0 PID: 1118 Comm: syz.4.273 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 62.373511][ T1118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.373524][ T1118] Call Trace: [ 62.373531][ T1118] [ 62.373538][ T1118] __dump_stack+0x21/0x30 [ 62.373569][ T1118] dump_stack_lvl+0x140/0x1c0 [ 62.373594][ T1118] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.373622][ T1118] dump_stack+0x19/0x20 [ 62.373646][ T1118] should_fail_ex+0x3c2/0x510 [ 62.373662][ T1118] should_failslab+0xac/0x100 [ 62.373679][ T1118] __kmalloc_node_noprof+0x69/0x500 [ 62.373702][ T1118] ? __kvmalloc_node_noprof+0x128/0x300 [ 62.373773][ T1118] __kvmalloc_node_noprof+0x128/0x300 [ 62.373795][ T1118] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 62.373817][ T1118] ? memdup_user+0x70/0x170 [ 62.373837][ T1118] ? strndup_user+0x40/0xd0 [ 62.373858][ T1118] __se_sys_add_key+0x291/0x4b0 [ 62.373885][ T1118] ? __x64_sys_add_key+0xf0/0xf0 [ 62.373910][ T1118] ? __kasan_check_write+0x18/0x20 [ 62.373934][ T1118] ? fpregs_restore_userregs+0x11c/0x260 [ 62.373959][ T1118] __x64_sys_add_key+0xc3/0xf0 [ 62.373985][ T1118] x64_sys_call+0x195f/0x2ee0 [ 62.374002][ T1118] do_syscall_64+0x57/0xf0 [ 62.374020][ T1118] ? clear_bhb_loop+0x50/0xa0 [ 62.374049][ T1118] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.374077][ T1118] RIP: 0033:0x7f7acd59f559 [ 62.374092][ T1118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.374108][ T1118] RSP: 002b:00007f7ace43d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 62.374131][ T1118] RAX: ffffffffffffffda RBX: 00007f7acd825fa0 RCX: 00007f7acd59f559 [ 62.374144][ T1118] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 62.374156][ T1118] RBP: 00007f7acd636b20 R08: ffffffffffffffff R09: 0000000000000000 [ 62.374168][ T1118] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 62.374177][ T1118] R13: 00007f7acd826038 R14: 00007f7acd825fa0 R15: 00007ffd3bce33b8 [ 62.374192][ T1118] [ 62.644953][ T401] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 62.774963][ T401] usb 4-1: device descriptor read/64, error -71 [ 62.824921][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.976222][ T9] usb 5-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 62.987627][ T9] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.000664][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.007371][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 63.016532][ T401] usb 4-1: device descriptor read/64, error -71 [ 63.022841][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.031587][ T9] usb 5-1: config 0 descriptor?? [ 63.254874][ T401] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 63.384876][ T401] usb 4-1: device descriptor read/64, error -71 [ 63.440148][ T9] hid (null): global environment stack underflow [ 63.447310][ T9] kye 0003:0458:5014.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 63.464847][ T9] kye 0003:0458:5014.000A: global environment stack underflow [ 63.472417][ T9] kye 0003:0458:5014.000A: item 0 4 1 11 parsing failed [ 63.479871][ T9] kye 0003:0458:5014.000A: parse failed [ 63.485860][ T9] kye 0003:0458:5014.000A: probe with driver kye failed with error -22 [ 63.496864][ T36] audit: type=1400 audit(1700000012.710:274): avc: denied { wake_alarm } for pid=1133 comm="syz.0.279" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.624936][ T401] usb 4-1: device descriptor read/64, error -71 [ 63.648957][ T426] usb 5-1: USB disconnect, device number 5 [ 63.734966][ T401] usb usb4-port1: attempt power cycle [ 64.074873][ T401] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 64.096305][ T401] usb 4-1: device descriptor read/8, error -71 [ 64.228204][ T401] usb 4-1: device descriptor read/8, error -71 [ 64.269155][ T9] usb 2-1: USB disconnect, device number 14 [ 64.284898][ T1147] FAULT_INJECTION: forcing a failure. [ 64.284898][ T1147] name failslab, interval 1, probability 0, space 0, times 0 [ 64.297646][ T1147] CPU: 0 UID: 0 PID: 1147 Comm: syz.1.283 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 64.297672][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.297683][ T1147] Call Trace: [ 64.297689][ T1147] [ 64.297696][ T1147] __dump_stack+0x21/0x30 [ 64.297727][ T1147] dump_stack_lvl+0x140/0x1c0 [ 64.297752][ T1147] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.297779][ T1147] dump_stack+0x19/0x20 [ 64.297803][ T1147] should_fail_ex+0x3c2/0x510 [ 64.297820][ T1147] should_failslab+0xac/0x100 [ 64.297836][ T1147] __kmalloc_node_noprof+0x69/0x500 [ 64.297860][ T1147] ? __kvmalloc_node_noprof+0x128/0x300 [ 64.297882][ T1147] __kvmalloc_node_noprof+0x128/0x300 [ 64.297903][ T1147] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 64.297925][ T1147] ? memdup_user+0x70/0x170 [ 64.297945][ T1147] ? strndup_user+0x40/0xd0 [ 64.297966][ T1147] __se_sys_add_key+0x291/0x4b0 [ 64.297992][ T1147] ? __x64_sys_add_key+0xf0/0xf0 [ 64.298018][ T1147] ? __kasan_check_write+0x18/0x20 [ 64.298040][ T1147] ? fpregs_restore_userregs+0x11c/0x260 [ 64.298063][ T1147] __x64_sys_add_key+0xc3/0xf0 [ 64.298090][ T1147] x64_sys_call+0x195f/0x2ee0 [ 64.298107][ T1147] do_syscall_64+0x57/0xf0 [ 64.298123][ T1147] ? clear_bhb_loop+0x50/0xa0 [ 64.298145][ T1147] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.298167][ T1147] RIP: 0033:0x7f6d3779f559 [ 64.298181][ T1147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.298195][ T1147] RSP: 002b:00007f6d385e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 64.298212][ T1147] RAX: ffffffffffffffda RBX: 00007f6d37a25fa0 RCX: 00007f6d3779f559 [ 64.298225][ T1147] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 64.298237][ T1147] RBP: 00007f6d37836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 64.298249][ T1147] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 64.298282][ T1147] R13: 00007f6d37a26038 R14: 00007f6d37a25fa0 R15: 00007ffc0c75c458 [ 64.298302][ T1147] [ 64.328699][ T1149] netlink: 'syz.1.284': attribute type 4 has an invalid length. [ 64.484859][ T401] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 64.556127][ T401] usb 4-1: device descriptor read/8, error -71 [ 64.614847][ T426] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.686021][ T401] usb 4-1: device descriptor read/8, error -71 [ 64.744892][ T426] usb 5-1: device descriptor read/64, error -71 [ 64.794925][ T401] usb usb4-port1: unable to enumerate USB device [ 64.804797][ T31] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 64.956084][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 64.966993][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.978011][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 64.991151][ T426] usb 5-1: device descriptor read/64, error -71 [ 64.997502][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0382, bcdDevice= 0.00 [ 65.006661][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.015502][ T31] usb 2-1: config 0 descriptor?? [ 65.244850][ T426] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 65.281007][ T1160] FAULT_INJECTION: forcing a failure. [ 65.281007][ T1160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.294220][ T1160] CPU: 1 UID: 0 PID: 1160 Comm: syz.3.289 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 65.294258][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.294273][ T1160] Call Trace: [ 65.294282][ T1160] [ 65.294297][ T1160] __dump_stack+0x21/0x30 [ 65.294336][ T1160] dump_stack_lvl+0x140/0x1c0 [ 65.294359][ T1160] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.294421][ T1160] dump_stack+0x19/0x20 [ 65.294444][ T1160] should_fail_ex+0x3c2/0x510 [ 65.294460][ T1160] should_fail+0xf/0x20 [ 65.294474][ T1160] should_fail_usercopy+0x1e/0x30 [ 65.294490][ T1160] _copy_from_iter+0x1a6/0x1520 [ 65.294510][ T1160] ? __cfi__copy_from_iter+0x10/0x10 [ 65.294528][ T1160] ? __check_object_size+0x54c/0x870 [ 65.294551][ T1160] ? __cfi___check_object_size+0x10/0x10 [ 65.294574][ T1160] ? skb_put+0x10e/0x200 [ 65.294592][ T1160] netlink_sendmsg+0x66d/0xad0 [ 65.294615][ T1160] ? __cfi_netlink_sendmsg+0x10/0x10 [ 65.294638][ T1160] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 65.294684][ T1160] ? security_socket_sendmsg+0x3d/0x100 [ 65.294711][ T1160] ____sys_sendmsg+0x99e/0xa00 [ 65.294744][ T1160] ? __import_iovec+0x5b9/0x7d0 [ 65.294763][ T1160] ? __sys_sendmsg_sock+0x50/0x50 [ 65.294786][ T1160] ? import_iovec+0x80/0xb0 [ 65.294806][ T1160] ___sys_sendmsg+0x2a6/0x370 [ 65.294828][ T1160] ? __sys_sendmsg+0x260/0x260 [ 65.294849][ T1160] ? proc_fail_nth_write+0x184/0x220 [ 65.294869][ T1160] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 65.294894][ T1160] ? __fget_files+0x2bc/0x330 [ 65.294910][ T1160] __x64_sys_sendmsg+0x1be/0x2a0 [ 65.294932][ T1160] ? fput+0x1a4/0x230 [ 65.294948][ T1160] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 65.294969][ T1160] ? ksys_write+0x1f3/0x260 [ 65.294993][ T1160] ? __kasan_check_read+0x15/0x20 [ 65.295018][ T1160] x64_sys_call+0x2a4c/0x2ee0 [ 65.295034][ T1160] do_syscall_64+0x57/0xf0 [ 65.295050][ T1160] ? clear_bhb_loop+0x50/0xa0 [ 65.295072][ T1160] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.295092][ T1160] RIP: 0033:0x7f315a99f559 [ 65.295106][ T1160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.295119][ T1160] RSP: 002b:00007f315b8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.295136][ T1160] RAX: ffffffffffffffda RBX: 00007f315ac25fa0 RCX: 00007f315a99f559 [ 65.295149][ T1160] RDX: 0000000000008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 65.295159][ T1160] RBP: 00007f315b8af090 R08: 0000000000000000 R09: 0000000000000000 [ 65.295169][ T1160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.295179][ T1160] R13: 00007f315ac26038 R14: 00007f315ac25fa0 R15: 00007ffe124f8848 [ 65.295192][ T1160] [ 65.568062][ T31] wacom 0003:056A:0382.000B: Unknown device_type for 'HID 056a:0382'. Ignoring. [ 65.624769][ T426] usb 5-1: device descriptor read/64, error -71 [ 65.834781][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 65.864762][ T426] usb 5-1: device descriptor read/64, error -71 [ 65.974877][ T426] usb usb5-port1: attempt power cycle [ 65.984908][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 65.991296][ T31] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 65.999495][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.009718][ T31] usb 4-1: config 0 has no interface number 0 [ 66.015893][ T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 66.025981][ T31] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.040400][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 66.049612][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.057912][ T31] usb 4-1: Product: syz [ 66.062108][ T31] usb 4-1: Manufacturer: syz [ 66.066758][ T31] usb 4-1: SerialNumber: syz [ 66.072195][ T31] usb 4-1: config 0 descriptor?? [ 66.077588][ T1164] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.085516][ T31] asix 4-1:0.34: probe with driver asix failed with error -22 [ 66.324728][ T426] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 66.346079][ T426] usb 5-1: device descriptor read/8, error -71 [ 66.475972][ T426] usb 5-1: device descriptor read/8, error -71 [ 66.715035][ T426] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 66.736023][ T426] usb 5-1: device descriptor read/8, error -71 [ 66.866005][ T426] usb 5-1: device descriptor read/8, error -71 [ 66.954675][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 66.974795][ T426] usb usb5-port1: unable to enumerate USB device [ 67.084656][ T31] usb 1-1: device descriptor read/64, error -71 [ 67.259948][ T1181] FAULT_INJECTION: forcing a failure. [ 67.259948][ T1181] name failslab, interval 1, probability 0, space 0, times 0 [ 67.272775][ T1181] CPU: 0 UID: 0 PID: 1181 Comm: syz.4.298 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 67.272802][ T1181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 67.272814][ T1181] Call Trace: [ 67.272819][ T1181] [ 67.272825][ T1181] __dump_stack+0x21/0x30 [ 67.272853][ T1181] dump_stack_lvl+0x140/0x1c0 [ 67.272877][ T1181] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.272903][ T1181] dump_stack+0x19/0x20 [ 67.272925][ T1181] should_fail_ex+0x3c2/0x510 [ 67.272942][ T1181] should_failslab+0xac/0x100 [ 67.272958][ T1181] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 67.272983][ T1181] ? __cfi_avc_has_perm+0x10/0x10 [ 67.272997][ T1181] ? sel_write_checkreqprot+0x1b8/0x350 [ 67.273013][ T1181] ? selinux_file_permission+0x318/0xb60 [ 67.273036][ T1181] memdup_user_nul+0x40/0x1a0 [ 67.273056][ T1181] ? sel_write_checkreqprot+0x198/0x350 [ 67.273072][ T1181] sel_write_checkreqprot+0x1b8/0x350 [ 67.273088][ T1181] ? __cfi_sel_write_checkreqprot+0x10/0x10 [ 67.273103][ T1181] ? proc_fail_nth_write+0x184/0x220 [ 67.273123][ T1181] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 67.273143][ T1181] ? bpf_lsm_file_permission+0xd/0x20 [ 67.273160][ T1181] ? __cfi_sel_write_checkreqprot+0x10/0x10 [ 67.273176][ T1181] vfs_write+0x3c4/0xfd0 [ 67.273199][ T1181] ? __cfi_vfs_write+0x10/0x10 [ 67.273220][ T1181] ? __kasan_check_write+0x18/0x20 [ 67.273282][ T1181] ? mutex_lock+0x97/0x1d0 [ 67.273302][ T1181] ? __cfi_mutex_lock+0x10/0x10 [ 67.273323][ T1181] ksys_write+0x145/0x260 [ 67.273345][ T1181] ? __cfi_ksys_write+0x10/0x10 [ 67.273368][ T1181] ? __kasan_check_read+0x15/0x20 [ 67.273389][ T1181] __x64_sys_write+0x7f/0x90 [ 67.273412][ T1181] x64_sys_call+0x271c/0x2ee0 [ 67.273427][ T1181] do_syscall_64+0x57/0xf0 [ 67.273443][ T1181] ? clear_bhb_loop+0x50/0xa0 [ 67.273466][ T1181] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.273487][ T1181] RIP: 0033:0x7f7acd59f559 [ 67.273501][ T1181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.273514][ T1181] RSP: 002b:00007f7ace43d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.273531][ T1181] RAX: ffffffffffffffda RBX: 00007f7acd825fa0 RCX: 00007f7acd59f559 [ 67.273543][ T1181] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000003 [ 67.273553][ T1181] RBP: 00007f7ace43d090 R08: 0000000000000000 R09: 0000000000000000 [ 67.273563][ T1181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.273573][ T1181] R13: 00007f7acd826038 R14: 00007f7acd825fa0 R15: 00007ffd3bce33b8 [ 67.273587][ T1181] [ 67.535341][ T31] usb 1-1: device descriptor read/64, error -71 [ 67.575864][ T1190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.300'. [ 67.586297][ T36] audit: type=1400 audit(1700000016.801:275): avc: denied { bind } for pid=1189 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.592335][ T9] usb 2-1: USB disconnect, device number 15 [ 67.620383][ T36] audit: type=1400 audit(1700000016.821:276): avc: denied { write } for pid=1189 comm="syz.4.300" name="udp6" dev="proc" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.643039][ T36] audit: type=1400 audit(1700000016.821:277): avc: denied { getopt } for pid=1189 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.690658][ T1198] netlink: 'syz.1.304': attribute type 4 has an invalid length. [ 67.735150][ T36] audit: type=1400 audit(1700000016.951:278): avc: denied { getopt } for pid=1201 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.774659][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 67.817341][ T1206] netlink: 220 bytes leftover after parsing attributes in process `syz.1.307'. [ 67.817341][ T36] audit: type=1400 audit(1700000017.031:279): avc: denied { nlmsg_read } for pid=1205 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.904597][ T31] usb 1-1: device descriptor read/64, error -71 [ 67.944586][ T314] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 68.074626][ T314] usb 5-1: device descriptor read/64, error -71 [ 68.144599][ T31] usb 1-1: device descriptor read/64, error -71 [ 68.244626][ T990] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 68.254857][ T31] usb usb1-port1: attempt power cycle [ 68.314620][ T314] usb 5-1: device descriptor read/64, error -71 [ 68.396118][ T990] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.404703][ T990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.414931][ T990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.425504][ T990] usb 2-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 68.434662][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.442680][ T990] usb 2-1: Product: syz [ 68.446910][ T990] usb 2-1: Manufacturer: syz [ 68.451575][ T990] usb 2-1: SerialNumber: syz [ 68.554594][ T314] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 68.594532][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 68.611254][ T401] usb 4-1: USB disconnect, device number 22 [ 68.616543][ T31] usb 1-1: device descriptor read/8, error -71 [ 68.631676][ T1222] FAULT_INJECTION: forcing a failure. [ 68.631676][ T1222] name failslab, interval 1, probability 0, space 0, times 0 [ 68.644484][ T1222] CPU: 0 UID: 0 PID: 1222 Comm: syz.3.314 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 68.644521][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.644537][ T1222] Call Trace: [ 68.644546][ T1222] [ 68.644554][ T1222] __dump_stack+0x21/0x30 [ 68.644598][ T1222] dump_stack_lvl+0x140/0x1c0 [ 68.644622][ T1222] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.644649][ T1222] dump_stack+0x19/0x20 [ 68.644698][ T1222] should_fail_ex+0x3c2/0x510 [ 68.644720][ T1222] should_failslab+0xac/0x100 [ 68.644747][ T1222] kmem_cache_alloc_noprof+0x42/0x410 [ 68.644771][ T1222] ? selinux_perf_event_alloc+0x110/0x110 [ 68.644794][ T1222] ? xfrm_state_alloc+0x3f/0x380 [ 68.644837][ T1222] ? __nla_validate+0x70/0x70 [ 68.644866][ T1222] xfrm_state_alloc+0x3f/0x380 [ 68.644900][ T1222] ? xfrm_add_sa+0x129d/0x37b0 [ 68.644923][ T1222] xfrm_add_sa+0x135a/0x37b0 [ 68.644946][ T1222] ? __cfi_xfrm_add_sa+0x10/0x10 [ 68.644993][ T1222] xfrm_user_rcv_msg+0x699/0x900 [ 68.645024][ T1222] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 68.645062][ T1222] ? __asan_memcpy+0x5a/0x80 [ 68.645083][ T1222] ? avc_has_perm_noaudit+0x289/0x360 [ 68.645101][ T1222] ? avc_has_perm+0x155/0x240 [ 68.645137][ T1222] netlink_rcv_skb+0x24a/0x4e0 [ 68.645166][ T1222] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 68.645233][ T1222] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 68.645257][ T1222] ? __kasan_check_write+0x18/0x20 [ 68.645303][ T1222] ? mutex_lock+0x97/0x1d0 [ 68.645330][ T1222] ? __cfi_mutex_lock+0x10/0x10 [ 68.645361][ T1222] ? netlink_autobind+0x1c0/0x1c0 [ 68.645384][ T1222] xfrm_netlink_rcv+0x76/0x90 [ 68.645406][ T1222] netlink_unicast+0x8bf/0xa70 [ 68.645449][ T1222] netlink_sendmsg+0x7d1/0xad0 [ 68.645485][ T1222] ? __cfi_netlink_sendmsg+0x10/0x10 [ 68.645518][ T1222] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 68.645541][ T1222] ? security_socket_sendmsg+0x3d/0x100 [ 68.645574][ T1222] ____sys_sendmsg+0x99e/0xa00 [ 68.645606][ T1222] ? __import_iovec+0x5b9/0x7d0 [ 68.645634][ T1222] ? __sys_sendmsg_sock+0x50/0x50 [ 68.645666][ T1222] ? import_iovec+0x80/0xb0 [ 68.645687][ T1222] ___sys_sendmsg+0x2a6/0x370 [ 68.645708][ T1222] ? __sys_sendmsg+0x260/0x260 [ 68.645753][ T1222] ? proc_fail_nth_write+0x184/0x220 [ 68.645780][ T1222] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 68.645814][ T1222] ? __fget_files+0x2bc/0x330 [ 68.645833][ T1222] __x64_sys_sendmsg+0x1be/0x2a0 [ 68.645855][ T1222] ? fput+0x1a4/0x230 [ 68.645892][ T1222] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 68.645938][ T1222] ? ksys_write+0x1f3/0x260 [ 68.645972][ T1222] ? __kasan_check_read+0x15/0x20 [ 68.645995][ T1222] x64_sys_call+0x2a4c/0x2ee0 [ 68.646011][ T1222] do_syscall_64+0x57/0xf0 [ 68.646048][ T1222] ? clear_bhb_loop+0x50/0xa0 [ 68.646077][ T1222] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.646113][ T1222] RIP: 0033:0x7f315a99f559 [ 68.646127][ T1222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.646140][ T1222] RSP: 002b:00007f315b8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.646158][ T1222] RAX: ffffffffffffffda RBX: 00007f315ac25fa0 RCX: 00007f315a99f559 [ 68.646185][ T1222] RDX: 0000000000008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 68.646202][ T1222] RBP: 00007f315b8af090 R08: 0000000000000000 R09: 0000000000000000 [ 68.646216][ T1222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.646230][ T1222] R13: 00007f315ac26038 R14: 00007f315ac25fa0 R15: 00007ffe124f8848 [ 68.646248][ T1222] [ 68.684707][ T314] usb 5-1: device descriptor read/64, error -71 [ 68.825648][ T1227] overlayfs: failed to resolve 'upper': -2 [ 68.836169][ T990] usb 2-1: unit 2 not found! [ 68.846230][ T31] usb 1-1: device descriptor read/8, error -71 [ 69.030250][ T990] usb 2-1: USB disconnect, device number 16 [ 69.040843][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.164593][ T314] usb 5-1: device descriptor read/64, error -71 [ 69.274516][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 69.282332][ T314] usb usb5-port1: attempt power cycle [ 69.305744][ T31] usb 1-1: device descriptor read/8, error -71 [ 69.435876][ T31] usb 1-1: device descriptor read/8, error -71 [ 69.454548][ T990] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 69.544613][ T31] usb usb1-port1: unable to enumerate USB device [ 69.605587][ T990] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 69.616947][ T990] usb 2-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.630097][ T990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.636815][ T314] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 69.644541][ T990] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 69.653703][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.663107][ T990] usb 2-1: config 0 descriptor?? [ 69.675560][ T314] usb 5-1: device descriptor read/8, error -71 [ 69.741680][ T1243] netlink: 180 bytes leftover after parsing attributes in process `syz.0.322'. [ 69.810832][ T314] usb 5-1: device descriptor read/8, error -71 [ 69.933662][ T1256] fuse: Unknown parameter 'dd' [ 70.064472][ T314] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 70.074236][ T990] hid (null): global environment stack underflow [ 70.083911][ T990] kye 0003:0458:5014.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 70.098670][ T990] kye 0003:0458:5014.000C: global environment stack underflow [ 70.106540][ T314] usb 5-1: device descriptor read/8, error -71 [ 70.113037][ T990] kye 0003:0458:5014.000C: item 0 4 1 11 parsing failed [ 70.120604][ T990] kye 0003:0458:5014.000C: parse failed [ 70.126407][ T990] kye 0003:0458:5014.000C: probe with driver kye failed with error -22 [ 70.134875][ T401] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 70.245692][ T314] usb 5-1: device descriptor read/8, error -71 [ 70.276703][ T9] usb 2-1: USB disconnect, device number 17 [ 70.294432][ T401] usb 1-1: Using ep0 maxpacket: 16 [ 70.300813][ T401] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 70.309032][ T401] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.320283][ T401] usb 1-1: config 0 has no interface number 0 [ 70.326749][ T401] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 70.336840][ T401] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.351140][ T401] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 70.360343][ T401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.365142][ T314] usb usb5-port1: unable to enumerate USB device [ 70.368774][ T401] usb 1-1: Product: syz [ 70.378941][ T401] usb 1-1: Manufacturer: syz [ 70.383760][ T401] usb 1-1: SerialNumber: syz [ 70.388542][ T88] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 70.397021][ T401] usb 1-1: config 0 descriptor?? [ 70.402433][ T1245] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 70.410660][ T401] asix 1-1:0.34: probe with driver asix failed with error -22 [ 70.534476][ T88] usb 4-1: device descriptor read/64, error -71 [ 70.744008][ T1274] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 70.775313][ T1274] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 70.782404][ T88] usb 4-1: device descriptor read/64, error -71 [ 70.919889][ T1276] FAULT_INJECTION: forcing a failure. [ 70.919889][ T1276] name failslab, interval 1, probability 0, space 0, times 0 [ 70.940657][ T1274] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 70.943574][ T1276] CPU: 1 UID: 0 PID: 1276 Comm: syz.1.334 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 70.943669][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.943772][ T1276] Call Trace: [ 70.943802][ T1276] [ 70.943825][ T1276] __dump_stack+0x21/0x30 [ 70.943994][ T1276] dump_stack_lvl+0x140/0x1c0 [ 70.944080][ T1276] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.944166][ T1276] ? kstrtouint_from_user+0x117/0x170 [ 70.944227][ T1276] dump_stack+0x19/0x20 [ 70.944323][ T1276] should_fail_ex+0x3c2/0x510 [ 70.944411][ T1276] ? kernfs_fop_write_iter+0x15e/0x510 [ 70.944501][ T1276] should_failslab+0xac/0x100 [ 70.944564][ T1276] __kmalloc_noprof+0x69/0x510 [ 70.944652][ T1276] ? kernfs_fop_write_iter+0x15e/0x510 [ 70.944724][ T1276] ? __kasan_check_write+0x18/0x20 [ 70.944787][ T1276] ? proc_fail_nth_write+0x184/0x220 [ 70.944860][ T1276] kernfs_fop_write_iter+0x15e/0x510 [ 70.944933][ T1276] vfs_write+0x762/0xfd0 [ 70.945011][ T1276] ? __cfi_vfs_write+0x10/0x10 [ 70.945080][ T1276] ? __cfi_mutex_lock+0x10/0x10 [ 70.945172][ T1276] ksys_write+0x145/0x260 [ 70.945264][ T1276] ? __cfi_ksys_write+0x10/0x10 [ 70.945342][ T1276] ? __kasan_check_read+0x15/0x20 [ 70.945424][ T1276] __x64_sys_write+0x7f/0x90 [ 70.945502][ T1276] x64_sys_call+0x271c/0x2ee0 [ 70.945565][ T1276] do_syscall_64+0x57/0xf0 [ 70.945628][ T1276] ? clear_bhb_loop+0x50/0xa0 [ 70.945738][ T1276] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.945831][ T1276] RIP: 0033:0x7f6d3779f559 [ 70.945902][ T1276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.945953][ T1276] RSP: 002b:00007f6d385e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.946026][ T1276] RAX: ffffffffffffffda RBX: 00007f6d37a25fa0 RCX: 00007f6d3779f559 [ 70.946070][ T1276] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 70.946104][ T1276] RBP: 00007f6d385e1090 R08: 0000000000000000 R09: 0000000000000000 [ 70.946145][ T1276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.946179][ T1276] R13: 00007f6d37a26038 R14: 00007f6d37a25fa0 R15: 00007ffc0c75c458 [ 70.946232][ T1276] [ 71.174794][ T1274] pci 0000:00:05.0: pci_fixup_video+0x0/0x310 took 228791 usecs [ 71.186799][ T1274] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 71.193717][ T1274] pci 0000:00:05.0: vgaarb: bridge control possible [ 71.198622][ T36] audit: type=1326 audit(1700000020.411:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.1.335" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d3779f559 code=0x0 [ 71.200342][ T1274] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 71.234364][ T88] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 71.236605][ T1274] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 71.287274][ T36] audit: type=1400 audit(1700000020.501:281): avc: denied { unmount } for pid=911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.347306][ T310] bridge_slave_1: left allmulticast mode [ 71.353383][ T310] bridge_slave_1: left promiscuous mode [ 71.359244][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.367141][ T310] bridge_slave_0: left allmulticast mode [ 71.372837][ T310] bridge_slave_0: left promiscuous mode [ 71.374437][ T88] usb 4-1: device descriptor read/64, error -71 [ 71.379681][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.487339][ T310] veth1_macvtap: left promiscuous mode [ 71.493007][ T310] veth0_vlan: left promiscuous mode [ 71.585027][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.592128][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.602074][ T1285] bridge_slave_0: entered allmulticast mode [ 71.609021][ T1285] bridge_slave_0: entered promiscuous mode [ 71.616012][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.623110][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.630273][ T1285] bridge_slave_1: entered allmulticast mode [ 71.636651][ T1285] bridge_slave_1: entered promiscuous mode [ 71.654343][ T88] usb 4-1: device descriptor read/64, error -71 [ 71.692053][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.699150][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.706531][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.713591][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.737932][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.745464][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.755510][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.762598][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.770791][ T88] usb usb4-port1: attempt power cycle [ 71.778824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.785956][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.816220][ T1285] veth0_vlan: entered promiscuous mode [ 71.829541][ T1285] veth1_macvtap: entered promiscuous mode [ 71.849950][ T36] audit: type=1400 audit(1700000021.061:282): avc: denied { mount } for pid=1285 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.884858][ T36] audit: type=1400 audit(1700000021.101:283): avc: denied { setcheckreqprot } for pid=1290 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.037856][ T1295] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 72.115038][ T88] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 72.135624][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.145671][ T88] usb 4-1: device descriptor read/8, error -71 [ 72.164338][ T401] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.275640][ T88] usb 4-1: device descriptor read/8, error -71 [ 72.314338][ T401] usb 6-1: Using ep0 maxpacket: 16 [ 72.320984][ T401] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.331433][ T401] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.342230][ T401] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 72.351493][ T401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.359811][ T401] usb 6-1: Product: syz [ 72.364020][ T401] usb 6-1: Manufacturer: syz [ 72.369162][ T401] usb 6-1: SerialNumber: syz [ 72.375021][ T401] usb 6-1: config 0 descriptor?? [ 72.514313][ T88] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 72.535281][ T88] usb 4-1: device descriptor read/8, error -71 [ 72.665520][ T88] usb 4-1: device descriptor read/8, error -71 [ 72.774383][ T88] usb usb4-port1: unable to enumerate USB device [ 72.776693][ T314] usb 1-1: USB disconnect, device number 30 [ 72.927423][ T1320] FAULT_INJECTION: forcing a failure. [ 72.927423][ T1320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.940729][ T1320] CPU: 0 UID: 0 PID: 1320 Comm: syz.0.349 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 72.940770][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.940786][ T1320] Call Trace: [ 72.940795][ T1320] [ 72.940804][ T1320] __dump_stack+0x21/0x30 [ 72.940843][ T1320] dump_stack_lvl+0x140/0x1c0 [ 72.940880][ T1320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.940919][ T1320] dump_stack+0x19/0x20 [ 72.940952][ T1320] should_fail_ex+0x3c2/0x510 [ 72.941003][ T1320] should_fail+0xf/0x20 [ 72.941026][ T1320] should_fail_usercopy+0x1e/0x30 [ 72.941051][ T1320] _copy_from_iter+0x1a6/0x1520 [ 72.941081][ T1320] ? __cfi__copy_from_iter+0x10/0x10 [ 72.941110][ T1320] ? __check_object_size+0x54c/0x870 [ 72.941144][ T1320] ? __cfi___check_object_size+0x10/0x10 [ 72.941181][ T1320] ? __kmalloc_noprof+0x261/0x510 [ 72.941207][ T1320] kernfs_fop_write_iter+0x1a4/0x510 [ 72.941230][ T1320] vfs_write+0x762/0xfd0 [ 72.941256][ T1320] ? __cfi_vfs_write+0x10/0x10 [ 72.941281][ T1320] ? __cfi_mutex_lock+0x10/0x10 [ 72.941306][ T1320] ksys_write+0x145/0x260 [ 72.941331][ T1320] ? __cfi_ksys_write+0x10/0x10 [ 72.941357][ T1320] ? __kasan_check_read+0x15/0x20 [ 72.941381][ T1320] __x64_sys_write+0x7f/0x90 [ 72.941406][ T1320] x64_sys_call+0x271c/0x2ee0 [ 72.941424][ T1320] do_syscall_64+0x57/0xf0 [ 72.941442][ T1320] ? clear_bhb_loop+0x50/0xa0 [ 72.941469][ T1320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.941493][ T1320] RIP: 0033:0x7f6a4dd9f559 [ 72.941509][ T1320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.941524][ T1320] RSP: 002b:00007f6a4eb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.941543][ T1320] RAX: ffffffffffffffda RBX: 00007f6a4e025fa0 RCX: 00007f6a4dd9f559 [ 72.941557][ T1320] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 72.941569][ T1320] RBP: 00007f6a4eb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.941580][ T1320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.941591][ T1320] R13: 00007f6a4e026038 R14: 00007f6a4e025fa0 R15: 00007fff0d72a708 [ 72.941606][ T1320] [ 73.184470][ T36] audit: type=1400 audit(1700000022.391:284): avc: denied { read } for pid=1324 comm="syz.3.351" name="transaction_log" dev="binder" ino=1048633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.208131][ T36] audit: type=1400 audit(1700000022.391:285): avc: denied { open } for pid=1324 comm="syz.3.351" path="/dev/binderfs/binder_logs/transaction_log" dev="binder" ino=1048633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.234649][ T36] audit: type=1400 audit(1700000022.401:286): avc: denied { sqpoll } for pid=1324 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.256096][ T36] audit: type=1400 audit(1700000022.461:287): avc: denied { append } for pid=1327 comm="syz.3.352" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.574241][ T314] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 73.725667][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.735983][ T314] usb 4-1: config 1 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 73.747103][ T314] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 73.761716][ T314] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 73.770892][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.778998][ T314] usb 4-1: Product: syz [ 73.783228][ T314] usb 4-1: Manufacturer: syz [ 73.787986][ T314] usb 4-1: SerialNumber: syz [ 73.794417][ T314] usb-storage 4-1:1.0: USB Mass Storage device detected [ 73.802500][ T314] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 73.810752][ T314] scsi host1: usb-storage 4-1:1.0 [ 74.144215][ T1305] Bluetooth: hci0: command 0x1003 tx timeout [ 74.144221][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.160650][ T31] usb 4-1: USB disconnect, device number 27 [ 74.264185][ T314] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 74.277173][ T36] audit: type=1400 audit(1700000023.491:288): avc: denied { ioctl } for pid=1342 comm="syz.1.356" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.414169][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 74.420604][ T314] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 74.428802][ T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.438962][ T314] usb 1-1: config 0 has no interface number 0 [ 74.445129][ T314] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 74.455169][ T314] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.469885][ T314] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 74.479309][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.487501][ T314] usb 1-1: Product: syz [ 74.491816][ T314] usb 1-1: Manufacturer: syz [ 74.496496][ T314] usb 1-1: SerialNumber: syz [ 74.501901][ T314] usb 1-1: config 0 descriptor?? [ 74.507337][ T1337] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 74.515604][ T314] asix 1-1:0.34: probe with driver asix failed with error -22 [ 74.584175][ T88] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 74.745590][ T88] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 74.754006][ T88] usb 2-1: config 0 has no interface number 0 [ 74.760328][ T88] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 74.772692][ T88] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 74.782018][ T88] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.784288][ T314] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 74.790081][ T88] usb 2-1: Product: syz [ 74.801843][ T88] usb 2-1: Manufacturer: syz [ 74.806577][ T88] usb 2-1: SerialNumber: syz [ 74.811915][ T88] usb 2-1: config 0 descriptor?? [ 74.817248][ T1346] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 74.826887][ T88] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 5e:e5:a8:12:29:01 [ 74.934262][ T88] usb 6-1: USB disconnect, device number 2 [ 74.961330][ T314] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 74.980243][ T314] usb 4-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.993365][ T314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.000062][ T314] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 75.009220][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.018032][ T314] usb 4-1: config 0 descriptor?? [ 75.044230][ T990] usb 2-1: USB disconnect, device number 18 [ 75.050893][ T990] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 75.274138][ T88] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.414157][ T88] usb 6-1: device descriptor read/64, error -71 [ 75.426456][ T314] hid (null): global environment stack underflow [ 75.434570][ T314] kye 0003:0458:5014.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 75.445552][ T314] kye 0003:0458:5014.000D: global environment stack underflow [ 75.453072][ T314] kye 0003:0458:5014.000D: item 0 4 1 11 parsing failed [ 75.460341][ T314] kye 0003:0458:5014.000D: parse failed [ 75.466018][ T314] kye 0003:0458:5014.000D: probe with driver kye failed with error -22 [ 75.634086][ T990] usb 4-1: USB disconnect, device number 28 [ 75.654099][ T88] usb 6-1: device descriptor read/64, error -71 [ 75.662982][ T1394] netlink: 'syz.1.364': attribute type 4 has an invalid length. [ 75.894126][ T88] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.944095][ T314] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 76.024085][ T88] usb 6-1: device descriptor read/64, error -71 [ 76.094093][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 76.100425][ T314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.110686][ T314] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.121252][ T314] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 76.130423][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.138484][ T314] usb 2-1: Product: syz [ 76.142695][ T314] usb 2-1: Manufacturer: syz [ 76.147593][ T314] usb 2-1: SerialNumber: syz [ 76.153118][ T314] usb 2-1: config 0 descriptor?? [ 76.284085][ T88] usb 6-1: device descriptor read/64, error -71 [ 76.394160][ T88] usb usb6-port1: attempt power cycle [ 76.574085][ T314] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 76.725720][ T314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.733880][ T314] usb 4-1: not running at top speed; connect to a high speed hub [ 76.734195][ T88] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.742783][ T314] usb 4-1: config 1 has an invalid interface number: 90 but max is 0 [ 76.757365][ T314] usb 4-1: config 1 has no interface number 0 [ 76.763508][ T314] usb 4-1: config 1 interface 90 has no altsetting 0 [ 76.765677][ T88] usb 6-1: device descriptor read/8, error -71 [ 76.772187][ T314] usb 4-1: New USB device found, idVendor=1435, idProduct=0210, bcdDevice=54.43 [ 76.785749][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.793844][ T314] usb 4-1: Product: syz [ 76.798096][ T314] usb 4-1: Manufacturer: syz [ 76.802730][ T314] usb 4-1: SerialNumber: syz [ 76.905122][ T88] usb 6-1: device descriptor read/8, error -71 [ 77.013127][ T314] usb 4-1: USB disconnect, device number 29 [ 77.039921][ T401] usb 1-1: USB disconnect, device number 31 [ 77.092829][ T36] audit: type=1400 audit(1700000026.301:289): avc: denied { ioctl } for pid=1424 comm="syz.0.375" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.118404][ T36] audit: type=1400 audit(1700000026.301:290): avc: denied { set_context_mgr } for pid=1424 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.139451][ T36] audit: type=1400 audit(1700000026.301:291): avc: denied { map } for pid=1424 comm="syz.0.375" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.143289][ T1425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.171542][ T36] audit: type=1400 audit(1700000026.381:292): avc: denied { call } for pid=1424 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.171623][ T1425] rust_binder: 1424:1425 error while translating object: ENOENT [ 77.198513][ T88] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.204514][ T1425] rust_binder: 1424:1425 transaction call to 1424:0 failed ENOENT, code 0 size 72-24 line thread.rs:878 [ 77.221407][ T314] rust_binder: 1424: undelivered TRANSACTION_ERROR: 29201 [ 77.236317][ T88] usb 6-1: device descriptor read/8, error -71 [ 77.307864][ T36] audit: type=1400 audit(1700000026.521:293): avc: denied { create } for pid=1429 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.366663][ T88] usb 6-1: device descriptor read/8, error -71 [ 77.474147][ T88] usb usb6-port1: unable to enumerate USB device [ 77.556058][ T1443] netlink: 'syz.3.382': attribute type 4 has an invalid length. [ 77.613848][ T1451] FAULT_INJECTION: forcing a failure. [ 77.613848][ T1451] name failslab, interval 1, probability 0, space 0, times 0 [ 77.627301][ T1451] CPU: 0 UID: 0 PID: 1451 Comm: syz.3.386 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 77.627327][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.627339][ T1451] Call Trace: [ 77.627364][ T1451] [ 77.627373][ T1451] __dump_stack+0x21/0x30 [ 77.627419][ T1451] dump_stack_lvl+0x140/0x1c0 [ 77.627443][ T1451] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.627469][ T1451] dump_stack+0x19/0x20 [ 77.627491][ T1451] should_fail_ex+0x3c2/0x510 [ 77.627508][ T1451] should_failslab+0xac/0x100 [ 77.627523][ T1451] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 77.627547][ T1451] ? kvasprintf_const+0xf6/0x250 [ 77.627572][ T1451] kvasprintf+0xf1/0x260 [ 77.627598][ T1451] ? __cfi_device_for_each_child+0x10/0x10 [ 77.627627][ T1451] ? __cfi_kvasprintf+0x10/0x10 [ 77.627649][ T1451] ? acpi_dev_for_each_child+0x9c/0xe0 [ 77.627669][ T1451] ? __cfi_acpi_dev_for_each_child+0x10/0x10 [ 77.627690][ T1451] kvasprintf_const+0xf6/0x250 [ 77.627713][ T1451] kobject_set_name_vargs+0x65/0x120 [ 77.627730][ T1451] dev_set_name+0xe3/0x140 [ 77.627746][ T1451] ? __kasan_check_write+0x18/0x20 [ 77.627767][ T1451] ? mutex_unlock+0x90/0x240 [ 77.627787][ T1451] ? __cfi_dev_set_name+0x10/0x10 [ 77.627804][ T1451] ? pci_dev_assign_slot+0x14f/0x180 [ 77.627828][ T1451] pci_setup_device+0x4da/0x1a80 [ 77.627854][ T1451] ? __cfi_pci_setup_device+0x10/0x10 [ 77.627878][ T1451] ? kasan_save_alloc_info+0x3a/0x50 [ 77.627898][ T1451] ? __kasan_slab_alloc+0x80/0x90 [ 77.627913][ T1451] ? __kasan_check_write+0x18/0x20 [ 77.627935][ T1451] pci_scan_single_device+0x4c2/0x710 [ 77.627951][ T1451] ? __cfi_pci_scan_single_device+0x10/0x10 [ 77.627966][ T1451] ? kasan_save_track+0x4f/0x80 [ 77.627989][ T1451] ? kasan_save_alloc_info+0x3a/0x50 [ 77.628009][ T1451] ? __kasan_kmalloc+0x96/0xb0 [ 77.628025][ T1451] pci_scan_slot+0x1e6/0x680 [ 77.628040][ T1451] ? __cfi_pci_scan_slot+0x10/0x10 [ 77.628055][ T1451] ? down_read+0x7f/0xe0 [ 77.628076][ T1451] pci_scan_child_bus_extend+0x95/0x8b0 [ 77.628092][ T1451] ? __kasan_check_write+0x18/0x20 [ 77.628114][ T1451] pci_rescan_bus+0x1d/0x40 [ 77.628136][ T1451] rescan_store+0xcd/0x150 [ 77.628157][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 77.628174][ T1451] ? __kasan_check_write+0x18/0x20 [ 77.628195][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 77.628217][ T1451] bus_attr_store+0x91/0xb0 [ 77.628240][ T1451] ? __cfi_bus_attr_store+0x10/0x10 [ 77.628258][ T1451] sysfs_kf_write+0x141/0x160 [ 77.628280][ T1451] ? __cfi_sysfs_kf_write+0x10/0x10 [ 77.628301][ T1451] kernfs_fop_write_iter+0x319/0x510 [ 77.628321][ T1451] vfs_write+0x762/0xfd0 [ 77.628344][ T1451] ? __cfi_vfs_write+0x10/0x10 [ 77.628367][ T1451] ? __cfi_mutex_lock+0x10/0x10 [ 77.628388][ T1451] ksys_write+0x145/0x260 [ 77.628411][ T1451] ? __cfi_ksys_write+0x10/0x10 [ 77.628434][ T1451] ? __kasan_check_read+0x15/0x20 [ 77.628481][ T1451] __x64_sys_write+0x7f/0x90 [ 77.628516][ T1451] x64_sys_call+0x271c/0x2ee0 [ 77.628532][ T1451] do_syscall_64+0x57/0xf0 [ 77.628548][ T1451] ? clear_bhb_loop+0x50/0xa0 [ 77.628569][ T1451] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.628590][ T1451] RIP: 0033:0x7f315a99f559 [ 77.628604][ T1451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.628618][ T1451] RSP: 002b:00007f315b8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.628635][ T1451] RAX: ffffffffffffffda RBX: 00007f315ac25fa0 RCX: 00007f315a99f559 [ 77.628647][ T1451] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 77.628658][ T1451] RBP: 00007f315b8af090 R08: 0000000000000000 R09: 0000000000000000 [ 77.628668][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.628677][ T1451] R13: 00007f315ac26038 R14: 00007f315ac25fa0 R15: 00007ffe124f8848 [ 77.628691][ T1451] [ 77.628781][ T1451] pci (null): [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 78.051848][ T1451] pci (null): BAR 0 [mem 0xc0000000-0xc07fffff] [ 78.140802][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.157524][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.180627][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.187478][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.203381][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.210119][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.228910][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.245681][ T1451] pci (null): Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 78.254458][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.254493][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.267827][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 78.267849][ T36] audit: type=1400 audit(1700000027.471:296): avc: denied { transfer } for pid=1453 comm="syz.5.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.280073][ T1451] pci (null): pci_fixup_video+0x0/0x310 took 33667 usecs [ 78.303123][ T1451] ------------[ cut here ]------------ [ 78.307522][ T314] rust_binder: 1453: undelivered TRANSACTION_COMPLETE [ 78.309276][ T1451] WARNING: CPU: 0 PID: 1451 at drivers/pci/probe.c:2712 pci_device_add+0x126f/0x1600 [ 78.325114][ T1451] Modules linked in: [ 78.329095][ T1451] CPU: 0 UID: 0 PID: 1451 Comm: syz.3.386 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 78.340654][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.350833][ T1451] RIP: 0010:pci_device_add+0x126f/0x1600 [ 78.356575][ T1451] Code: f9 ff ff e9 77 f9 ff ff e8 ce 67 99 fe 0f 0b 4c 8b 6c 24 30 e9 9f f9 ff ff e8 bd 67 99 fe 0f 0b e9 6e fc ff ff e8 b1 67 99 fe <0f> 0b e9 64 fd ff ff 49 8d 8f 09 0b 00 00 80 e1 07 38 c1 0f 8c 1e [ 78.376354][ T1451] RSP: 0018:ffffc9000ee97800 EFLAGS: 00010293 [ 78.382497][ T1451] RAX: ffffffff82efe74f RBX: 00000000ffffffea RCX: ffff888119a74f00 [ 78.390709][ T1451] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000000 [ 78.398757][ T1451] RBP: ffffc9000ee978f0 R08: ffff88811a2c4103 R09: 1ffff11023458820 [ 78.403109][ T36] audit: type=1400 audit(1700000027.611:297): avc: denied { bind } for pid=1465 comm="syz.5.390" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.407071][ T1451] R10: dffffc0000000000 R11: ffffed1023458821 R12: ffff88810fa7a028 [ 78.407093][ T1451] R13: ffff88811a2c4320 R14: dffffc0000000000 R15: ffff88811a2c4b08 [ 78.443081][ T1451] FS: 00007f315b8af6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 78.452133][ T1451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.458802][ T1451] CR2: 000000110c35695e CR3: 0000000116de6000 CR4: 00000000003526b0 [ 78.459608][ T36] audit: type=1400 audit(1700000027.641:298): avc: denied { name_bind } for pid=1465 comm="syz.5.390" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 78.467106][ T1451] Call Trace: [ 78.467123][ T1451] [ 78.467133][ T1451] ? __cfi_pci_device_add+0x10/0x10 [ 78.467162][ T1451] ? __kasan_check_write+0x18/0x20 [ 78.505765][ T1451] pci_scan_single_device+0x520/0x710 [ 78.511195][ T1451] ? __cfi_pci_scan_single_device+0x10/0x10 [ 78.517188][ T1451] ? kasan_save_track+0x4f/0x80 [ 78.517863][ T36] audit: type=1400 audit(1700000027.641:299): avc: denied { node_bind } for pid=1465 comm="syz.5.390" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 78.522887][ T1451] ? kasan_save_alloc_info+0x3a/0x50 [ 78.551002][ T1451] ? __kasan_kmalloc+0x96/0xb0 [ 78.555888][ T1451] pci_scan_slot+0x1e6/0x680 [ 78.560538][ T1451] ? __cfi_pci_scan_slot+0x10/0x10 [ 78.565748][ T1451] ? down_read+0x7f/0xe0 [ 78.570062][ T1451] pci_scan_child_bus_extend+0x95/0x8b0 [ 78.575796][ T1451] ? __kasan_check_write+0x18/0x20 [ 78.580968][ T1451] pci_rescan_bus+0x1d/0x40 [ 78.585565][ T1451] rescan_store+0xcd/0x150 [ 78.590139][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 78.595367][ T1451] ? __kasan_check_write+0x18/0x20 [ 78.600537][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 78.605781][ T1451] bus_attr_store+0x91/0xb0 [ 78.610355][ T1451] ? __cfi_bus_attr_store+0x10/0x10 [ 78.615652][ T1451] sysfs_kf_write+0x141/0x160 [ 78.620384][ T1451] ? __cfi_sysfs_kf_write+0x10/0x10 [ 78.625686][ T1451] kernfs_fop_write_iter+0x319/0x510 [ 78.631030][ T1451] vfs_write+0x762/0xfd0 [ 78.635486][ T1451] ? __cfi_vfs_write+0x10/0x10 [ 78.640310][ T1451] ? __cfi_mutex_lock+0x10/0x10 [ 78.645393][ T1451] ksys_write+0x145/0x260 [ 78.649799][ T1451] ? __cfi_ksys_write+0x10/0x10 [ 78.654843][ T1451] ? __kasan_check_read+0x15/0x20 [ 78.660028][ T1451] __x64_sys_write+0x7f/0x90 [ 78.664751][ T1451] x64_sys_call+0x271c/0x2ee0 [ 78.669540][ T1451] do_syscall_64+0x57/0xf0 [ 78.674058][ T1451] ? clear_bhb_loop+0x50/0xa0 [ 78.678787][ T1451] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.679596][ T36] audit: type=1400 audit(1700000027.891:300): avc: denied { ioctl } for pid=1465 comm="syz.5.390" path="socket:[12314]" dev="sockfs" ino=12314 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.684766][ T1451] RIP: 0033:0x7f315a99f559 [ 78.713646][ T1451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.733390][ T1451] RSP: 002b:00007f315b8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.741907][ T1451] RAX: ffffffffffffffda RBX: 00007f315ac25fa0 RCX: 00007f315a99f559 [ 78.749964][ T1451] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 78.758028][ T1451] RBP: 00007f315b8af090 R08: 0000000000000000 R09: 0000000000000000 [ 78.766071][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.774222][ T1451] R13: 00007f315ac26038 R14: 00007f315ac25fa0 R15: 00007ffe124f8848 [ 78.782598][ T1451] [ 78.785734][ T1451] ---[ end trace 0000000000000000 ]--- [ 78.793759][ T1451] pci (null): BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 78.801249][ T1451] ------------[ cut here ]------------ [ 78.807069][ T1451] WARNING: CPU: 0 PID: 1451 at fs/sysfs/file.c:579 sysfs_create_bin_file+0x16a/0x330 [ 78.816235][ T31] usb 2-1: USB disconnect, device number 19 [ 78.816646][ T1451] Modules linked in: [ 78.826571][ T1451] CPU: 0 UID: 0 PID: 1451 Comm: syz.3.386 Tainted: G W syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 78.840481][ T1451] Tainted: [W]=WARN [ 78.844400][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.854543][ T1451] RIP: 0010:sysfs_create_bin_file+0x16a/0x330 [ 78.860670][ T1451] Code: 08 48 89 df e8 27 c3 ce ff 48 83 3b 00 44 89 74 24 14 74 22 e8 17 3b 75 ff 49 c7 c6 a0 85 39 86 e9 80 00 00 00 e8 06 3b 75 ff <0f> 0b b8 ea ff ff ff e9 46 01 00 00 49 8d 7d 28 48 89 f8 48 c1 e8 [ 78.880357][ T1451] RSP: 0018:ffffc9000ee97940 EFLAGS: 00010293 [ 78.886534][ T1451] RAX: ffffffff82141592 RBX: 1ffff1102345881f RCX: ffff888119a74f00 [ 78.894587][ T1451] RDX: 0000000000000000 RSI: ffff88810fbd0d00 RDI: ffff88811a2c40c8 [ 78.902613][ T1451] RBP: ffffc9000ee979f0 R08: ffffc9000ee977d7 R09: 0000000000000000 [ 78.910700][ T1451] R10: ffffc9000ee977c0 R11: fffff52001dd2efb R12: 1ffff92001dd2f2c [ 78.918822][ T1451] R13: ffff88810fbd0d00 R14: ffff88811a2c40c8 R15: dffffc0000000000 [ 78.926905][ T1451] FS: 00007f315b8af6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 78.935930][ T1451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.942564][ T1451] CR2: 000000110c35695e CR3: 0000000116de6000 CR4: 00000000003526b0 [ 78.950681][ T1451] Call Trace: [ 78.954060][ T1451] [ 78.957050][ T1451] ? __cfi_sprintf+0x10/0x10 [ 78.961726][ T1451] ? __cfi_sysfs_create_bin_file+0x10/0x10 [ 78.967647][ T1451] ? pci_create_attr+0x5a/0x580 [ 78.972653][ T1451] pci_create_attr+0x33c/0x580 [ 78.977529][ T1451] pci_create_sysfs_dev_files+0xd5/0x1e0 [ 78.983228][ T1451] pci_bus_add_device+0x68/0x1f0 [ 78.988303][ T1451] pci_bus_add_devices+0x98/0x1c0 [ 78.993452][ T1451] pci_rescan_bus+0x30/0x40 [ 78.998100][ T1451] rescan_store+0xcd/0x150 [ 79.002575][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 79.007718][ T1451] ? __kasan_check_write+0x18/0x20 [ 79.012895][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 79.018021][ T1451] bus_attr_store+0x91/0xb0 [ 79.022591][ T1451] ? __cfi_bus_attr_store+0x10/0x10 [ 79.027920][ T1451] sysfs_kf_write+0x141/0x160 [ 79.032676][ T1451] ? __cfi_sysfs_kf_write+0x10/0x10 [ 79.038255][ T1451] kernfs_fop_write_iter+0x319/0x510 [ 79.043598][ T1451] vfs_write+0x762/0xfd0 [ 79.048096][ T1451] ? __cfi_vfs_write+0x10/0x10 [ 79.052942][ T1451] ? __cfi_mutex_lock+0x10/0x10 [ 79.057940][ T1451] ksys_write+0x145/0x260 [ 79.062326][ T1451] ? __cfi_ksys_write+0x10/0x10 [ 79.067352][ T1451] ? __kasan_check_read+0x15/0x20 [ 79.072485][ T1451] __x64_sys_write+0x7f/0x90 [ 79.077662][ T1451] x64_sys_call+0x271c/0x2ee0 [ 79.082404][ T1451] do_syscall_64+0x57/0xf0 [ 79.086957][ T1451] ? clear_bhb_loop+0x50/0xa0 [ 79.091795][ T1451] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.097813][ T1451] RIP: 0033:0x7f315a99f559 [ 79.102286][ T1451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.122036][ T1451] RSP: 002b:00007f315b8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.130540][ T1451] RAX: ffffffffffffffda RBX: 00007f315ac25fa0 RCX: 00007f315a99f559 [ 79.138653][ T1451] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 79.146719][ T1451] RBP: 00007f315b8af090 R08: 0000000000000000 R09: 0000000000000000 [ 79.154791][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.162867][ T1451] R13: 00007f315ac26038 R14: 00007f315ac25fa0 R15: 00007ffe124f8848 [ 79.170950][ T1451] [ 79.174036][ T1451] ---[ end trace 0000000000000000 ]--- [ 79.181920][ T1451] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001a: 0000 [#1] PREEMPT SMP KASAN PTI [ 79.194562][ T1451] KASAN: null-ptr-deref in range [0x00000000000000d0-0x00000000000000d7] [ 79.203020][ T1451] CPU: 0 UID: 0 PID: 1451 Comm: syz.3.386 Tainted: G W syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 79.216392][ T1451] Tainted: [W]=WARN [ 79.220231][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.230331][ T1451] RIP: 0010:__device_attach+0xb2/0x3c0 [ 79.235864][ T1451] Code: 8d 66 68 4c 89 e0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 a0 29 9c fe 4d 8b 2c 24 4d 8d a5 d0 00 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 dd 02 00 00 41 0f b6 1c 24 89 de 83 e6 01 [ 79.255521][ T1451] RSP: 0018:ffffc9000ee979c0 EFLAGS: 00010202 [ 79.261636][ T1451] RAX: 000000000000001a RBX: dffffc0000000000 RCX: ffffffff85a975c7 [ 79.269672][ T1451] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000ee97940 [ 79.277688][ T1451] RBP: ffffc9000ee97a68 R08: ffffc9000ee97947 R09: 1ffff92001dd2f28 [ 79.285744][ T1451] R10: dffffc0000000000 R11: fffff52001dd2f29 R12: 00000000000000d0 [ 79.293772][ T1451] R13: 0000000000000000 R14: ffff88811a2c40c8 R15: 0000000000000000 [ 79.301796][ T1451] FS: 00007f315b8af6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 79.310781][ T1451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.317451][ T1451] CR2: 000000110c35695e CR3: 0000000116de6000 CR4: 00000000003526b0 [ 79.325589][ T1451] Call Trace: [ 79.328936][ T1451] [ 79.331908][ T1451] ? device_attach+0x40/0x40 [ 79.336555][ T1451] ? pci_save_vc_state+0x163/0x260 [ 79.341723][ T1451] device_attach+0x1b/0x40 [ 79.346196][ T1451] pci_bus_add_device+0x11f/0x1f0 [ 79.351279][ T1451] pci_bus_add_devices+0x98/0x1c0 [ 79.356445][ T1451] pci_rescan_bus+0x30/0x40 [ 79.361002][ T1451] rescan_store+0xcd/0x150 [ 79.365463][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 79.370536][ T1451] ? __kasan_check_write+0x18/0x20 [ 79.375708][ T1451] ? __cfi_rescan_store+0x10/0x10 [ 79.380780][ T1451] bus_attr_store+0x91/0xb0 [ 79.385431][ T1451] ? __cfi_bus_attr_store+0x10/0x10 [ 79.390801][ T1451] sysfs_kf_write+0x141/0x160 [ 79.395541][ T1451] ? __cfi_sysfs_kf_write+0x10/0x10 [ 79.400805][ T1451] kernfs_fop_write_iter+0x319/0x510 [ 79.406154][ T1451] vfs_write+0x762/0xfd0 [ 79.410455][ T1451] ? __cfi_vfs_write+0x10/0x10 [ 79.415570][ T1451] ? __cfi_mutex_lock+0x10/0x10 [ 79.420482][ T1451] ksys_write+0x145/0x260 [ 79.424865][ T1451] ? __cfi_ksys_write+0x10/0x10 [ 79.429772][ T1451] ? __kasan_check_read+0x15/0x20 [ 79.434841][ T1451] __x64_sys_write+0x7f/0x90 [ 79.439492][ T1451] x64_sys_call+0x271c/0x2ee0 [ 79.444222][ T1451] do_syscall_64+0x57/0xf0 [ 79.448691][ T1451] ? clear_bhb_loop+0x50/0xa0 [ 79.453426][ T1451] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.459378][ T1451] RIP: 0033:0x7f315a99f559 [ 79.463847][ T1451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.483512][ T1451] RSP: 002b:00007f315b8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.492322][ T1451] RAX: ffffffffffffffda RBX: 00007f315ac25fa0 RCX: 00007f315a99f559 [ 79.500341][ T1451] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 79.508364][ T1451] RBP: 00007f315b8af090 R08: 0000000000000000 R09: 0000000000000000 [ 79.516386][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.524404][ T1451] R13: 00007f315ac26038 R14: 00007f315ac25fa0 R15: 00007ffe124f8848 [ 79.532437][ T1451] [ 79.535502][ T1451] Modules linked in: [ 79.539550][ T1451] ---[ end trace 0000000000000000 ]--- [ 79.545791][ T1451] RIP: 0010:__device_attach+0xb2/0x3c0 [ 79.551429][ T1451] Code: 8d 66 68 4c 89 e0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 a0 29 9c fe 4d 8b 2c 24 4d 8d a5 d0 00 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 dd 02 00 00 41 0f b6 1c 24 89 de 83 e6 01 [ 79.553939][ T36] audit: type=1400 audit(1700000028.761:301): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 79.571553][ T1451] RSP: 0018:ffffc9000ee979c0 EFLAGS: 00010202 [ 79.605132][ T36] audit: type=1400 audit(1700000028.761:302): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.630641][ T1451] RAX: 000000000000001a RBX: dffffc0000000000 RCX: ffffffff85a975c7 [ 79.638925][ T1451] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000ee97940 [ 79.647264][ T1451] RBP: ffffc9000ee97a68 R08: ffffc9000ee97947 R09: 1ffff92001dd2f28 [ 79.655526][ T1451] R10: dffffc0000000000 R11: fffff52001dd2f29 R12: 00000000000000d0 [ 79.658022][ T36] audit: type=1400 audit(1700000028.761:303): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.664169][ T1451] R13: 0000000000000000 R14: ffff88811a2c40c8 R15: 0000000000000000 [ 79.685424][ T36] audit: type=1400 audit(1700000028.761:304): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.707838][ T1451] FS: 00007f315b8af6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 79.714357][ T36] audit: type=1400 audit(1700000028.761:305): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.735220][ T1451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.763802][ T1451] CR2: 0000000002e92000 CR3: 0000000116de6000 CR4: 00000000003526b0 [ 79.772005][ T1451] Kernel panic - not syncing: Fatal exception [ 79.778708][ T1451] Kernel Offset: disabled [ 79.783065][ T1451] Rebooting in 86400 seconds..