last executing test programs: 2m11.675495819s ago: executing program 1 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x121c82, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x4001af83, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0, &(0x7f0000000000)) 2m11.567903712s ago: executing program 1 (id=47): r0 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x1a, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r9) recvmmsg(r9, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1}, 0xfffffffe}], 0x1, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') read$FUSE(r10, &(0x7f00000043c0)={0x2020}, 0x2020) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0xc0, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x80000000, 0xfffffff8, 0x0, 0xff, 0xfc}) r11 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=[@wr_crn={0x67, 0x20, {0x3, 0x100000000}}, @wr_drn={0x68, 0x20, {0x0, 0x5}}], 0x40}) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="a101000000000000") 2m8.524150324s ago: executing program 1 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004c9, 0x0, 0x1000000, 0x6902, 0x5, 0x9, 0x1000000000000003], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x0, 0x8, 0xb, 0xe6, 0x40, 0x8, 0x0, 0x2e, 0x80, 0x3}, {0x5000, 0x4000, 0x0, 0x0, 0x6, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x5, 0x0, 0x9, 0xfe, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0xb, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0xed, 0xe}, {0xeeee0000, 0x1ff8, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x8, 0xf7, 0x83}, {0x9000, 0x1ffe, 0x3, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x41, 0x27}, {0x4000, 0x3000, 0x4, 0x3, 0x2, 0x5, 0x7, 0x3, 0x8, 0x81, 0x3, 0x70}, {0x10000, 0x4, 0xe, 0xf5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x30}, {0x5000, 0x7}, 0x80000030, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0xeeef0000, [0x6800000000000000, 0x204, 0xfffffffffffffffd, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 2m8.477016413s ago: executing program 1 (id=61): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) r1 = fsmount(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x10000040) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x0, 0x4000, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400008c0}, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x95) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) getdents64(r4, &(0x7f00000000c0)=""/55, 0x37) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) rename(0xfffffffffffffffd, &(0x7f0000000200)='./file0\x00') lseek(r6, 0x3, 0x0) 2m8.441331178s ago: executing program 1 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x840) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f0000000380)) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000093e1ad40402010726b5b010203010902240001010740000904bcd1010101c1e70a24010400090201"], 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f00007f4000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./dev\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4) readlinkat(r3, 0xfffffffffffffffc, &(0x7f0000000200)=""/144, 0x90) 2m8.33612891s ago: executing program 1 (id=63): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000009c0)="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", 0x641}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4, 0x100, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x2c}, 0x44004) 2m8.242331098s ago: executing program 32 (id=63): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000009c0)="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", 0x641}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4, 0x100, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x2c}, 0x44004) 20.561303521s ago: executing program 0 (id=675): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x2, 0x65b, 0x0, @loopback={0x4100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3}}) 20.511259732s ago: executing program 0 (id=677): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x7193, 0x400, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x4000002, 0x30c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x40, 0x3, 0x322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0xc5, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7a, 0x44, 0x0, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000001e40)) 20.42391876s ago: executing program 0 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 19.137044917s ago: executing program 0 (id=684): r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0xff, 0x9, 0x4, 0x7f, "0b07af79f181c567b32b1df1fa523a28539fb918c9c5af1e46b7153be5a46df3"}) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r2, r0, 0x0, 0x7ffff000) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x8, 0x13, r0, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/256, 0x107f, 0x0, 0x0}, &(0x7f0000000180)=0x8d) pwrite64(r3, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e325464360", 0x5f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000001640)={0xcdc, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x15, 0x34, @random="9d994b44532d94b870388308af6f5b0afb"}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x10a, 0xf, [@perr={0x84, 0xf5, {0x3, 0xf, [{{}, @device_a, 0x5, @void, 0x3d}, {{}, @device_b, 0x0, @void, 0x31}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x3b}, {{}, @device_b, 0x7, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x8e, @value, 0x9}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x3f}, {{}, @device_a, 0x841, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x3c}, {{}, @broadcast, 0xfffffeff, @void, 0x2b}, {{0x0, 0x1}, @device_a, 0x100, @value, 0x19}, {{}, @device_b, 0xffffffff, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x34}, {{}, @device_b, 0x8, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0xcf86, @value=@broadcast, 0x1a}]}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8}}, @erp={0x2a, 0x1, {0x1}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x121, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @random="253cf39fa5e4", {0x1, 0x4}}, 0x9, @default, 0x501, @void, @val={0x1, 0x4, [{0x1b}, {0x18, 0x1}, {0xb, 0x1}, {0xc}]}, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0xfff9}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x98, 0x76267dc2816593b6, 0x4}}, @val={0x2d, 0x1a, {0xc, 0x3, 0x4, 0x0, {0x19d00951, 0x1ffb, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x8, 0x10}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xc0, "331063231ac0946277e04452785858450c53aacb1e3030728ae073555aaa9a936e8a9e8c32d3072f904dc717cf468cc6d0fe66cbd4d914c390ec3081fbe16266f66e69fb5bc3f535bcb88568ad7593cd88927683367ae75dee991df314c5e87531701d8bc024664870e21b6c91e59dceef0667ddd051043c950247c339b2663fb3626c2623872ac95f6dead9f059cf2f5c875586803d0f5dbec445a99e803d3f7e3af035b8c63300c01c8f0d2d0dc14a3fd004114818528eb33526cc40dccfcf"}]}}, @NL80211_ATTR_PROBE_RESP={0x546, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x39, 0x80, [@random={0x46, 0x30, "9aff9893e3e86a4f1da57270a9acc60211adc6bf6563cae7ec07e2faee0b2868a374e7e6521c9caa0ce0a60c55153b6b"}, @challenge={0x10, 0x1, 0xc0}]}, @NL80211_ATTR_PROBE_RESP={0x3db, 0x91, "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"}], @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x7}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0xa}, {0x5, 0x6}, {0x5, 0x6}, {0x3, 0xa}, {0x7, 0x9}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x3, 0x1}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0xb, 0x12]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x7, 0x7, 0x1, 0x101, 0x7, 0x31d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0xb, 0x5, 0x2, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5}, {0x7, 0x2}, {0x5, 0x8}, {0x4, 0xa}, {0x3, 0x8}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x3, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x9}, {0x5}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x9}, {0x3, 0x5}, {0x7, 0x8}, {0x5, 0x5}, {0x2, 0x1}, {0x6}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x0, 0x2}, {0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x6}, {0x3, 0x2}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xc9, 0x9, 0x400, 0x9a6a, 0xc, 0xe]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a0000000000000101620000090017"], 0x28}], 0x1}, 0x0) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r8 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x500, 0x3) 18.739237103s ago: executing program 0 (id=687): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="02002b"], 0x14}}, 0x20000804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fallocate(r2, 0x40, 0x2f32, 0x40) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x100000001, 0x1, 0x1, 0x1, 0x7, 0x3, 0x1], 0x7000, 0x141200}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r7, &(0x7f0000000280)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x200000}, 0x1}}, 0x80, 0x0}}], 0x1, 0x20008850) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x1, 0x0, 0x4c, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, r3, 0x2) 18.100081311s ago: executing program 0 (id=693): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x10000000}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@empty, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4401a}, 0x0) 17.995953714s ago: executing program 33 (id=693): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x10000000}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@empty, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4401a}, 0x0) 10.065222272s ago: executing program 4 (id=730): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) recvmsg$unix(r3, &(0x7f0000000dc0)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000008c0)=""/167, 0xa7}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/109, 0x6d}, {&(0x7f0000000c00)=""/20, 0x14}, {&(0x7f0000000c40)=""/135, 0x87}], 0x6, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x63) r4 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r4, 0x0, 0xfffffffffffffde9, 0x40000c0, &(0x7f0000000180)={0x2, 0x4a21, @empty}, 0x10) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) sendfile(r2, r5, &(0x7f00000000c0)=0x1e9d44d5, 0xa80) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r7}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000280)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000002280)="80", 0x1}], 0x1, 0x0) read$FUSE(r2, &(0x7f00000022c0)={0x2020}, 0x2020) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 9.200743458s ago: executing program 4 (id=732): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf788, r2, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1}, 0xf000000}], 0x1, 0x20000081) 9.125698974s ago: executing program 4 (id=733): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 8.30994197s ago: executing program 4 (id=737): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000180)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8221, 0x20, 0x3, 0x24}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x3, 0xffffffff}, 0xffffffffffffffff}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) mmap$IORING_OFF_CQ_RING(0x0, 0xfffffffc, 0x0, 0x4010, r3, 0x8000000) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.904216289s ago: executing program 4 (id=756): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x40, 0x21, 0xf4, {0xf4, 0xb, "2eb2a631f753a86081b0b5471f4867596d494a4d1c1a5a206d9ca693e67876598a4845492e42bb1944897787b8360af1e109364ae3f01709c94fbfc4563176e8bcd693d95b667eb3e08021d97e2a5bd48b0cde727b5f435136282550227a896cadeb4b881a76d023ebb01134fa3e6dda72ae7241d96f77fe2bfe765e90828a13df5393cb38151308a118e837376d267da7746b45febd828ef875de1d51be6d8e4f9dbacd93f908468b1682deb881e1db7ce53bd39bb7fa433cef1cd8f4adeb0315bcf7518c80146956ccf0f0289fb30789604548294bc69c3ae1fae6d9a895fc0c282c129770163edec80b1559bb6ac60cbf"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x20, 0x7, 0xd5, "4ccb330235d8fc84ca4b4463fc1284fc52fb5db9a41b3b5591f7f08e9663cdb2fdecb2e291f87351d63e0811f26c2538bad77dc9b82a8337d2df50a375b48b502c1ee4ead5d7f2342f2696ae250cc1ffff33eabe86740f675dc0ba38374c3980b2dbf059370566c4685131e5fa3aa95aa0ff46e75052d03540371631541885ee167027132d83d26da917ac8ad025a2ed768950554f972abf87a5dbdb7f2fa65bd5f04f01b88984642b3d218be27a5c97452b2620ad1d0ebe03e923ae42068413376c17464c3bcff9d6177884a9acfb405500736817"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000d40)={0x20, 0x81, 0x3, "d6ec3b"}, &(0x7f0000000d80)={0x20, 0x82, 0x1, '|'}, &(0x7f0000000dc0)={0x20, 0x83, 0x1, ' '}, &(0x7f0000000e00)={0x20, 0x84, 0x1, "de"}, &(0x7f0000000e40)={0x20, 0x85, 0x3, "d1bdaf"}}) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f8efde300a06082a8648ce3d040302306b3180303606035504030c2f436572746966696361746520766572696669636174696f6e4d7f469653412073656c662d74657374696e67206b65793020170d3634303431333232313632365a180f32313234303332303232314632365a303a3138303606035504030c2f4365727469666963618b6520766572696669636174696f6e2045434453412073656c662d74657374696e672aa648ce3d020106082a8648ce3d0301070342000407e56b51af71039ee2fe6e6a714ec7299fd85b1e69adfa1690e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8478efdfdd2b2300c0603551d130101ff04023000300b0603551d0f04040b020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7a00"/472, 0x1d8, 0xffffffffffffffff) 3.003998613s ago: executing program 3 (id=766): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000280)='\x98,-^v]*\x00', 0x20100, &(0x7f00000002c0)={@align=0xc7, {0x534, 0xc860, 0x3, 0x15}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x7}) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r13, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r13, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r14 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x4000, 0x18) r15 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000200)) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000400)={0x0, 0xffff, 0x0, 0x0, r0}) statx(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x6000, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(r1, &(0x7f00000026c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="d2cb9f72c3a8d3e79858f427b46faab1a2c0b65edb90d7b7ef9cb6e9d32d4f1cb8d38de8da9b9a779c415bbda5a21ff8db00f32073c56fc2530197f487e899dbc12f2887d1c48392de83d0d52f98c42010bf2d4741921786bc99dd2d61a14ed77f734b4360940add5a1be08be3e37b7de821653083e454b91441f6d9b2", 0x7d}], 0x1, &(0x7f0000002700)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r12, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="00000000755c78fe959713eb575101703c14a76e77702ab3ee990400c6cb0fe7db4d19df301086cd240a440758967b535bcaa3ce9821291e47ae49071d22c8f19963d9"], 0x98, 0x10}, 0x800) 2.844364468s ago: executing program 3 (id=768): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120101020ba80520"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x25, &(0x7f00000004c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x8, 0xf, 0x5, [0xc0, 0xc0, 0xc0, 0x30, 0xc000]}]}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x404}}, {0xf2, &(0x7f0000000680)=@string={0xf2, 0x3, "cbbd80e49daea0e21d176301b9519544cd236d745d883c76a206699fc261773b578b3fa5d714528b063a500883e4929b554816eed5eca61603a3ea247de2ce6c4ec89d93318d686f5f74bdb15b8e43646442cfcb015122ae03c3afbb7d23d4bc4b367fb1a59f42d7e8337141b403cec5abcff7710260083616592d9484d05a039cda69a2bf255dba7e57e58404594676619df26dc19123b83470fe90c0932d88a5ab6df0ee853040fe0d79ae42bc9c183feac4655df501c8f7ef587dfdbb0430625212f4f573a863fd42a0e1f01e2ee5ea40624d56b309d393f1a113ac30683fee38155af30f91e35037e099a11a4b1e"}}]}) creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.269776702s ago: executing program 5 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x1}}, 0x24, 0x3) r0 = open$dir(&(0x7f0000000040)='./bus\x00', 0x200000, 0x34) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x3) 2.204216696s ago: executing program 5 (id=772): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x111902, 0x40) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = gettid() ptrace(0x10, r1) ptrace(0x4207, r2) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x80000000, &(0x7f0000000500)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) copy_file_range(r4, 0x0, r4, &(0x7f0000000080)=0xfffffffffffffff7, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1.774281598s ago: executing program 3 (id=775): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8004, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x2, 0x2, 0x2, 0x3}}, 0x26) fcntl$dupfd(r2, 0x0, r1) ioctl$PPPIOCSFLAGS(r3, 0x40047459, 0x0) r4 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b07de, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0xc, 0x1a, {0x1a, 0xb, "98d7dd1cfaad0b0be927071cc6f9c66859f49286ea9e6d7d"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "a2191e7f089594279bce9793f005b045539088331e00ebd3cdffd8d2a22f7d858d7326ed03479535b265740ab7702c8d00b1f8114e9c6896fa14a40e27b2c0b44a82b315d218cdbe9ef1957126c9173a1bdb081894df6f4639d390645e62637b5e0cb97e63a535cef02c92de6ddd41344f178e46a39c3bbb3e6236db3b3bb71592532bfed397b49b0c5bfad1da493abe0736d3171e63d0514e39d2e99f"}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="2b035500000076f7ff94da57b7c6c4614d85b2edf35b57d5bf91f720350336e6de059bea3573ba2b6cbdfb363e5bdf791064915822598e8895367f65847b534fa576dc2b00faa8f888df63b89c8e81897bc0329a254ec824740811"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000300)={0xc0, 0x5, 0x3, "ebebc2"}, &(0x7f0000000380)={0x40, 0x5, 0x3, "cf1c2f"}}) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000040)) syz_usb_control_io(r4, 0x0, 0x0) 1.368029766s ago: executing program 5 (id=781): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x3, 0xff, 0x66c3}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x400, @local, 0x4dd13ad2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x5, 0x4e23, 0x4, 0xa, 0x80, 0xa0, 0x1d, 0x0, r3}, {0xffffffffffffe711, 0x1, 0x1, 0x7fffffffffffffff, 0x101, 0x5, 0xffffffffffffffff, 0x9da8}, {0x4, 0x6, 0x2, 0x9}, 0x7, 0x6e6bb6, 0x2, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in6=@loopback, 0x3505, 0x0, 0x1, 0x2, 0x1000, 0x4, 0x3}}, 0xe8) r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r9, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x400008a, 0x0) sendmmsg(r8, &(0x7f00000017c0)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x500, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 1.342717831s ago: executing program 5 (id=782): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r1 = inotify_init() creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0x0, r3, {0x7}}, 0x18) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r1, &(0x7f0000000300)='./file1\x00', 0xa0000006) 888.191049ms ago: executing program 4 (id=783): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120101020ba80520"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x21, &(0x7f00000004c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x8, 0xf, 0x5, [0xc0, 0xc0, 0xc0, 0x30]}]}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x404}}, {0xf2, &(0x7f0000000680)=@string={0xf2, 0x3, "cbbd80e49daea0e21d176301b9519544cd236d745d883c76a206699fc261773b578b3fa5d714528b063a500883e4929b554816eed5eca61603a3ea247de2ce6c4ec89d93318d686f5f74bdb15b8e43646442cfcb015122ae03c3afbb7d23d4bc4b367fb1a59f42d7e8337141b403cec5abcff7710260083616592d9484d05a039cda69a2bf255dba7e57e58404594676619df26dc19123b83470fe90c0932d88a5ab6df0ee853040fe0d79ae42bc9c183feac4655df501c8f7ef587dfdbb0430625212f4f573a863fd42a0e1f01e2ee5ea40624d56b309d393f1a113ac30683fee38155af30f91e35037e099a11a4b1e"}}]}) creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 604.0262ms ago: executing program 2 (id=786): mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x1, 0x10, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0xffef, 0x3) 492.079494ms ago: executing program 5 (id=787): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x8000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x1000000, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) sendto$inet6(r5, &(0x7f0000000780)="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", 0x1000, 0x40804, &(0x7f0000001780)={0xa, 0x4e23, 0x2, @private1, 0x1}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2800000, &(0x7f00000017c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=client,uname=^-[,cache=mmap,privport,dfltuid=', @ANYRESHEX=r7, @ANYBLOB="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"]) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf788, r10, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1, 0x0, 0x0, 0xb00}}], 0x1, 0x20000081) 491.537595ms ago: executing program 2 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x408000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0x400c4d02, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0x20982) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)="1c", 0x1) openat(r4, &(0x7f0000000000)='./proc/mtrr/file0\x00', 0x121000, 0x0) sendfile(r3, r3, 0x0, 0x24002de8) 451.813273ms ago: executing program 2 (id=789): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000000040004) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="66b8bc008ec866410f3882800f0000000f01df0f7900b8010000000f01d9f30f09c4c32d7b233966b8f9000f00d048b8f27f0000000000000f23d80f21f835000000000f23f866ba420066ed", 0x4c}], 0x1, 0x2d15d74f7f8c166e, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="66b8bc008ec866410f3882800f0000000f01df0f7900b8010000000f01d9f30f09c4c32d7b233966b8f9000f00d048b8f27f0000000000000f23d80f21f835000000000f23f866ba420066ed", 0x4c}], 0x1, 0x2d15d74f7f8c166e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) 391.163596ms ago: executing program 2 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3000f0ff", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000000000000074100000014001800000005e40c62db7036746f6c304d02"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4048004) 390.993587ms ago: executing program 2 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004c9, 0x0, 0x1000000, 0x6902, 0x5, 0x9, 0x1000000000000003], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x0, 0x8, 0xb, 0xe6, 0x40, 0x8, 0x0, 0x2e, 0x80, 0x3}, {0x5000, 0x4000, 0x0, 0x0, 0x6, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x5, 0x0, 0x9, 0xfe, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0xb, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0xed, 0xe}, {0xeeee0000, 0x1ff8, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x8, 0xf7, 0x83}, {0x9000, 0x1ffe, 0x3, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x41, 0x27}, {0x4000, 0x3000, 0x4, 0x3, 0x2, 0x5, 0x7, 0x3, 0x8, 0x81, 0x3, 0x70}, {0x10000, 0x4, 0xe, 0xf5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x30}, {0x5000, 0x7}, 0x80000030, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0xeeef0000, [0x6800000000000000, 0x204, 0xfffffffffffffffd, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 333.572319ms ago: executing program 2 (id=792): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120101020ba805208205a69827100102039ffaa5cd0bb24d8af0079040340904b7"], 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x18a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x400, 0x4) rmdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00') r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000240)=0x4132, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000180)=0x7f) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r2, 0x1200}, {r2, 0x1608}, {r3, 0x2080}, {r2}, {r2, 0x8483}, {r2, 0x100}], 0x6, &(0x7f0000000440)={r4, r5+10000000}, &(0x7f0000000480)={[0x400]}, 0x8) write(r2, &(0x7f0000000000)="01", 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f00000003c0)="c4c1a35c9000000000c4c231bae9660f38012ca63664f30fa7c0f30f09f2af0f21c3660f38817e0266baf80cb888cb0c8eef66bafc0c66ed0f01ca", 0x3b}], 0x1, 0x4, 0x0, 0x0) r9 = signalfd(r1, &(0x7f0000000040)={[0x8000000000000001]}, 0x8) getsockopt$inet6_tcp_int(r9, 0x6, 0x2c, &(0x7f00000001c0), &(0x7f0000000300)=0x4) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f00000008c0)={0x20, 0x8, {0x8, @usage=0x6a80, 0x0, 0x3, 0xc, 0xa5d, 0x0, 0x3ff, 0x1f, @struct={0x9, 0x2}, 0x6, 0x3, [0x0, 0x3, 0xc, 0x3, 0x800, 0x4]}, {0x9, @struct={0x105a, 0x4}, 0x0, 0x7, 0x0, 0xf6, 0x9, 0x0, 0xcc, @usage=0x7fffffff, 0x200, 0xfffffff9, [0x3, 0xff1, 0x0, 0xffff, 0x400, 0x3]}, {0x0, @struct={0x3, 0xfffffff9}, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x6, 0x4, 0x2, 0x440, @usage=0x5, 0x6, 0x101, [0x100, 0x6, 0x0, 0x2, 0xa, 0xfffffffffffff4ad]}, {0xfffffffffffffff9, 0xfff, 0x5}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000cc0)={0xd, 0x5, {0x7fff, @struct={0x2, 0x6}, 0x0, 0x7, 0x1, 0x4, 0x0, 0x5, 0x20, @usage=0x5, 0x7, 0x2ac, [0x9, 0xffffffffffff8000, 0x7a, 0x200, 0x9, 0x2]}, {0x5, @usage=0xb28, 0x0, 0x397d, 0x7, 0x3, 0x100000000, 0x0, 0x58, @struct={0xfec2218, 0xffffffc0}, 0xfffffff8, 0x9, [0x2, 0xfffffffffffffe01, 0x4, 0x9, 0x8000000000000001, 0x2]}, {0x1, @usage=0x2, r10, 0xfffffffffffffff8, 0x101, 0x9, 0x2, 0x8000, 0x41, @usage=0xc, 0x0, 0x400, [0xa9, 0x7, 0x6, 0x5, 0x8, 0x9]}, {0x8e, 0xb650000000000, 0x1}}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$KVM_RUN(r8, 0xae80, 0x0) 120.945925ms ago: executing program 5 (id=793): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) recvmsg$unix(r3, &(0x7f0000000dc0)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000008c0)=""/167, 0xa7}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/109, 0x6d}, {&(0x7f0000000c00)=""/20, 0x14}, {&(0x7f0000000c40)=""/135, 0x87}], 0x6, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x63) r4 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r4, 0x0, 0xfffffffffffffde9, 0x40000c0, &(0x7f0000000180)={0x2, 0x4a21, @empty}, 0x10) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x1e9d44d5, 0xa80) r5 = socket$inet(0x2, 0x1, 0x0) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r7}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000002280)="80", 0x1}], 0x1, 0x0) read$FUSE(r2, &(0x7f00000022c0)={0x2020}, 0x2020) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 116.44µs ago: executing program 3 (id=794): syz_clone(0x40002211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) inotify_init() (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) (async) r10 = syz_ublk_setup_io_uring(0x14f4, &(0x7f0000000140)={0x0, 0x9889, 0x4, 0x2, 0x2a6, 0x0, r5}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) syz_ublk_setup_queues(r7, r8, &(0x7f00000004c0)={0x0, 0x53f9, 0x400, 0x1, 0x7f, 0x0, r10}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe705, 0x800, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003c000, 0x2bc, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x88802, 0x0, 0x26d}}], 0x1, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000000)={r11, r12+10000000}, 0xfffffffffffffffe) 0s ago: executing program 3 (id=795): modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): face 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 4 [ 139.396809][ T351] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 139.405925][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.414082][ T351] usb 4-1: Product: syz [ 139.418505][ T351] usb 4-1: Manufacturer: syz [ 139.423116][ T351] usb 4-1: SerialNumber: syz [ 139.504173][ T2289] FAULT_INJECTION: forcing a failure. [ 139.504173][ T2289] name failslab, interval 1, probability 0, space 0, times 0 [ 139.517359][ T2289] CPU: 0 UID: 0 PID: 2289 Comm: syz.4.604 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 139.517398][ T2289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.517414][ T2289] Call Trace: [ 139.517422][ T2289] [ 139.517433][ T2289] __dump_stack+0x21/0x30 [ 139.517504][ T2289] dump_stack_lvl+0x140/0x1c0 [ 139.517537][ T2289] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.517573][ T2289] ? unwind_get_return_address+0x51/0x90 [ 139.517595][ T2289] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 139.517637][ T2289] dump_stack+0x19/0x20 [ 139.517669][ T2289] should_fail_ex+0x3c2/0x510 [ 139.517699][ T2289] ? asymmetric_key_generate_id+0x86/0x220 [ 139.517738][ T2289] should_failslab+0xac/0x100 [ 139.517772][ T2289] __kmalloc_noprof+0x69/0x510 [ 139.517798][ T2289] ? asymmetric_key_generate_id+0x86/0x220 [ 139.517829][ T2289] ? x509_note_OID+0x12a/0x190 [ 139.517868][ T2289] asymmetric_key_generate_id+0x86/0x220 [ 139.517891][ T2289] ? asymmetric_key_preparse+0xb3/0x100 [ 139.517938][ T2289] ? __key_create_or_update+0x433/0xa90 [ 139.517970][ T2289] ? key_create_or_update+0x47/0x70 [ 139.517993][ T2289] x509_note_issuer+0x113/0x1c0 [ 139.518015][ T2289] asn1_ber_decoder+0x1974/0x1ff0 [ 139.518042][ T2289] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 139.518089][ T2289] ? kasan_save_alloc_info+0x3a/0x50 [ 139.518111][ T2289] ? __kasan_kmalloc+0x96/0xb0 [ 139.518140][ T2289] ? get_each_kmemcache_object+0x110/0x200 [ 139.518167][ T2289] x509_cert_parse+0x1e3/0xbd0 [ 139.518193][ T2289] x509_key_preparse+0x6a/0x880 [ 139.518227][ T2289] ? __cfi_down_read+0x10/0x10 [ 139.518260][ T2289] asymmetric_key_preparse+0xb3/0x100 [ 139.518292][ T2289] __key_create_or_update+0x433/0xa90 [ 139.518316][ T2289] ? security_key_permission+0x3d/0x100 [ 139.518335][ T2289] ? key_create_or_update+0x70/0x70 [ 139.518356][ T2289] ? __kasan_kmalloc+0x96/0xb0 [ 139.518402][ T2289] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 139.518437][ T2289] ? __cfi_keyring_search_iterator+0x10/0x10 [ 139.518465][ T2289] key_create_or_update+0x47/0x70 [ 139.518481][ T2289] __se_sys_add_key+0x355/0x4b0 [ 139.518502][ T2289] ? __x64_sys_add_key+0xf0/0xf0 [ 139.518541][ T2289] ? __kasan_check_write+0x18/0x20 [ 139.518565][ T2289] ? fpregs_restore_userregs+0x11c/0x260 [ 139.518594][ T2289] __x64_sys_add_key+0xc3/0xf0 [ 139.518621][ T2289] x64_sys_call+0x195f/0x2ee0 [ 139.518637][ T2289] do_syscall_64+0x57/0xf0 [ 139.518653][ T2289] ? clear_bhb_loop+0x50/0xa0 [ 139.518697][ T2289] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.518725][ T2289] RIP: 0033:0x7f891239e159 [ 139.518747][ T2289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.518770][ T2289] RSP: 002b:00007f89132f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 139.518789][ T2289] RAX: ffffffffffffffda RBX: 00007f8912625fa0 RCX: 00007f891239e159 [ 139.518802][ T2289] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 139.518814][ T2289] RBP: 00007f891243506b R08: 0000000002076453 R09: 0000000000000000 [ 139.518846][ T2289] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 139.518861][ T2289] R13: 00007f8912626038 R14: 00007f8912625fa0 R15: 00007ffdd7921c28 [ 139.518881][ T2289] [ 139.528058][ T353] usb 1-1: Using ep0 maxpacket: 32 [ 139.846163][ T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 139.856705][ T351] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 139.864127][ T351] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 139.874777][ T351] usb 4-1: unit 2 not found! [ 139.880337][ T31] usb 3-1: device descriptor read/8, error -71 [ 139.886585][ T351] usb 4-1: unit 0 not found! [ 139.895717][ T351] usb 4-1: USB disconnect, device number 42 [ 139.907772][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.980280][ T353] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.988083][ T353] usb 1-1: no configurations [ 139.992737][ T353] usb 1-1: can't read configurations, error -22 [ 140.008979][ T31] usb 3-1: device descriptor read/8, error -71 [ 140.117920][ T31] usb usb3-port1: unable to enumerate USB device [ 140.285410][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 140.285431][ T36] audit: type=1400 audit(1857520279.321:437): avc: denied { write } for pid=2302 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.311894][ T36] audit: type=1400 audit(1857520279.321:438): avc: denied { nlmsg_read } for pid=2302 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.350259][ T36] audit: type=1400 audit(1857520279.391:439): avc: denied { connect } for pid=2305 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.607845][ T696] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 140.627829][ T336] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 140.757756][ T336] usb 3-1: device descriptor read/64, error -71 [ 140.767883][ T696] usb 5-1: Using ep0 maxpacket: 16 [ 140.774377][ T696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.784882][ T696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.798203][ T696] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.810770][ T696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.819383][ T696] usb 5-1: Product: syz [ 140.823923][ T696] usb 5-1: Manufacturer: syz [ 140.828590][ T696] usb 5-1: SerialNumber: syz [ 140.984136][ T36] audit: type=1400 audit(1857520280.021:440): avc: denied { mounton } for pid=2321 comm="syz.3.615" path="/147/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 141.017753][ T336] usb 3-1: device descriptor read/64, error -71 [ 141.036060][ T696] usb 5-1: 0:2 : does not exist [ 141.043653][ T696] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 141.057860][ T696] usb 5-1: USB disconnect, device number 62 [ 141.267814][ T336] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 141.277785][ T351] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 141.397808][ T336] usb 3-1: device descriptor read/64, error -71 [ 141.437784][ T351] usb 1-1: Using ep0 maxpacket: 32 [ 141.444288][ T351] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 141.452800][ T351] usb 1-1: config 0 has no interface number 0 [ 141.459664][ T351] usb 1-1: config 0 interface 184 has no altsetting 0 [ 141.468311][ T351] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 141.477579][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.485964][ T351] usb 1-1: Product: syz [ 141.490500][ T351] usb 1-1: Manufacturer: syz [ 141.495134][ T351] usb 1-1: SerialNumber: syz [ 141.501492][ T351] usb 1-1: config 0 descriptor?? [ 141.507613][ T351] smsc75xx v1.0.0 [ 141.625940][ T2329] block device autoloading is deprecated and will be removed. [ 141.637761][ T336] usb 3-1: device descriptor read/64, error -71 [ 141.661551][ T2331] FAULT_INJECTION: forcing a failure. [ 141.661551][ T2331] name failslab, interval 1, probability 0, space 0, times 0 [ 141.674563][ T2331] CPU: 0 UID: 0 PID: 2331 Comm: syz.3.619 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 141.674604][ T2331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.674621][ T2331] Call Trace: [ 141.674630][ T2331] [ 141.674640][ T2331] __dump_stack+0x21/0x30 [ 141.674708][ T2331] dump_stack_lvl+0x140/0x1c0 [ 141.674747][ T2331] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.674797][ T2331] dump_stack+0x19/0x20 [ 141.674832][ T2331] should_fail_ex+0x3c2/0x510 [ 141.674862][ T2331] should_failslab+0xac/0x100 [ 141.674895][ T2331] __kmalloc_cache_noprof+0x41/0x470 [ 141.674914][ T2331] ? x509_cert_parse+0x122/0xbd0 [ 141.674961][ T2331] x509_cert_parse+0x122/0xbd0 [ 141.674997][ T2331] x509_key_preparse+0x6a/0x880 [ 141.675022][ T2331] ? __cfi_down_read+0x10/0x10 [ 141.675051][ T2331] asymmetric_key_preparse+0xb3/0x100 [ 141.675075][ T2331] __key_create_or_update+0x433/0xa90 [ 141.675110][ T2331] ? security_key_permission+0x3d/0x100 [ 141.675137][ T2331] ? key_create_or_update+0x70/0x70 [ 141.675159][ T2331] ? __kasan_kmalloc+0x96/0xb0 [ 141.675192][ T2331] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 141.675216][ T2331] ? __cfi_keyring_search_iterator+0x10/0x10 [ 141.675248][ T2331] key_create_or_update+0x47/0x70 [ 141.675274][ T2331] __se_sys_add_key+0x355/0x4b0 [ 141.675301][ T2331] ? __x64_sys_add_key+0xf0/0xf0 [ 141.675333][ T2331] ? __kasan_check_write+0x18/0x20 [ 141.675350][ T2331] ? fpregs_restore_userregs+0x11c/0x260 [ 141.675372][ T2331] __x64_sys_add_key+0xc3/0xf0 [ 141.675408][ T2331] x64_sys_call+0x195f/0x2ee0 [ 141.675431][ T2331] do_syscall_64+0x57/0xf0 [ 141.675453][ T2331] ? clear_bhb_loop+0x50/0xa0 [ 141.675488][ T2331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.675509][ T2331] RIP: 0033:0x7f4b6359e159 [ 141.675524][ T2331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.675553][ T2331] RSP: 002b:00007f4b64498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 141.675580][ T2331] RAX: ffffffffffffffda RBX: 00007f4b63825fa0 RCX: 00007f4b6359e159 [ 141.675599][ T2331] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 141.675614][ T2331] RBP: 00007f4b6363506b R08: 000000003c248a3e R09: 0000000000000000 [ 141.675635][ T2331] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 141.675646][ T2331] R13: 00007f4b63826038 R14: 00007f4b63825fa0 R15: 00007fffa4994be8 [ 141.675667][ T2331] [ 141.924729][ T336] usb usb3-port1: attempt power cycle [ 141.932719][ T36] audit: type=1400 audit(1857520280.981:441): avc: denied { read } for pid=2332 comm="syz.4.620" path="socket:[19378]" dev="sockfs" ino=19378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.132000][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 142.142995][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 142.152758][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 142.163104][ T351] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 142.267800][ T336] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 142.288977][ T336] usb 3-1: device descriptor read/8, error -71 [ 142.419052][ T336] usb 3-1: device descriptor read/8, error -71 [ 142.657839][ T336] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 142.678819][ T336] usb 3-1: device descriptor read/8, error -71 [ 142.685946][ T2352] FAULT_INJECTION: forcing a failure. [ 142.685946][ T2352] name failslab, interval 1, probability 0, space 0, times 0 [ 142.698925][ T2352] CPU: 0 UID: 0 PID: 2352 Comm: syz.0.616 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 142.698954][ T2352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.698966][ T2352] Call Trace: [ 142.698971][ T2352] [ 142.698979][ T2352] __dump_stack+0x21/0x30 [ 142.699008][ T2352] dump_stack_lvl+0x140/0x1c0 [ 142.699032][ T2352] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.699057][ T2352] ? do_futex+0x32a/0x510 [ 142.699088][ T2352] dump_stack+0x19/0x20 [ 142.699111][ T2352] should_fail_ex+0x3c2/0x510 [ 142.699133][ T2352] should_failslab+0xac/0x100 [ 142.699156][ T2352] kmem_cache_alloc_noprof+0x42/0x410 [ 142.699174][ T2352] ? prepare_creds+0x47/0x6b0 [ 142.699194][ T2352] ? __cfi_make_kgid+0x10/0x10 [ 142.699215][ T2352] prepare_creds+0x47/0x6b0 [ 142.699245][ T2352] __sys_setresgid+0x629/0xb10 [ 142.699268][ T2352] __x64_sys_setresgid+0x7e/0x90 [ 142.699291][ T2352] x64_sys_call+0x256c/0x2ee0 [ 142.699307][ T2352] do_syscall_64+0x57/0xf0 [ 142.699324][ T2352] ? clear_bhb_loop+0x50/0xa0 [ 142.699346][ T2352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.699367][ T2352] RIP: 0033:0x7f4e6a39e159 [ 142.699382][ T2352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.699396][ T2352] RSP: 002b:00007f4e6b1fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 142.699415][ T2352] RAX: ffffffffffffffda RBX: 00007f4e6a626090 RCX: 00007f4e6a39e159 [ 142.699428][ T2352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.699438][ T2352] RBP: 00007f4e6a43506b R08: 0000000000000000 R09: 0000000000000000 [ 142.699449][ T2352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.699460][ T2352] R13: 00007f4e6a626128 R14: 00007f4e6a626090 R15: 00007fff786e2a68 [ 142.699475][ T2352] [ 142.699998][ T2352] tmpfs: Bad value for 'size' [ 142.894510][ T696] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 142.919232][ T336] usb 3-1: device descriptor read/8, error -71 [ 143.028060][ T336] usb usb3-port1: unable to enumerate USB device [ 143.047798][ T696] usb 5-1: Using ep0 maxpacket: 32 [ 143.130381][ T696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.138283][ T696] usb 5-1: no configurations [ 143.142921][ T696] usb 5-1: can't read configurations, error -22 [ 143.427798][ T351] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 143.577770][ T351] usb 4-1: Using ep0 maxpacket: 16 [ 143.584241][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.594597][ T351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.605223][ T351] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.614340][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.622492][ T351] usb 4-1: Product: syz [ 143.626669][ T351] usb 4-1: Manufacturer: syz [ 143.631314][ T351] usb 4-1: SerialNumber: syz [ 143.647751][ T336] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 143.764008][ T2366] FAULT_INJECTION: forcing a failure. [ 143.764008][ T2366] name fail_futex, interval 1, probability 0, space 0, times 1 [ 143.777126][ T2366] CPU: 1 UID: 0 PID: 2366 Comm: syz.4.631 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 143.777164][ T2366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.777180][ T2366] Call Trace: [ 143.777197][ T2366] [ 143.777288][ T2366] __dump_stack+0x21/0x30 [ 143.777323][ T2366] dump_stack_lvl+0x140/0x1c0 [ 143.777348][ T2366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.777374][ T2366] ? __kasan_check_write+0x18/0x20 [ 143.777399][ T2366] ? _raw_spin_lock_bh+0x96/0x130 [ 143.777420][ T2366] dump_stack+0x19/0x20 [ 143.777454][ T2366] should_fail_ex+0x3c2/0x510 [ 143.777477][ T2366] should_fail+0xf/0x20 [ 143.777497][ T2366] get_futex_key+0x178/0x940 [ 143.777520][ T2366] ? __cfi_get_futex_key+0x10/0x10 [ 143.777543][ T2366] futex_wake+0x150/0x950 [ 143.777559][ T2366] ? __cfi_sk_setsockopt+0x10/0x10 [ 143.777581][ T2366] ? __cfi_futex_wake+0x10/0x10 [ 143.777597][ T2366] ? selinux_socket_setsockopt+0x324/0x3d0 [ 143.777624][ T2366] do_futex+0x37d/0x510 [ 143.777651][ T2366] ? tcp_setsockopt+0xf2/0x110 [ 143.777669][ T2366] ? __cfi_do_futex+0x10/0x10 [ 143.777693][ T2366] __se_sys_futex+0x13c/0x320 [ 143.777764][ T2366] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 143.777796][ T2366] ? __x64_sys_futex+0x110/0x110 [ 143.777833][ T2366] ? __kasan_check_write+0x18/0x20 [ 143.777862][ T2366] __x64_sys_futex+0xe9/0x110 [ 143.777886][ T2366] x64_sys_call+0x227f/0x2ee0 [ 143.777905][ T2366] do_syscall_64+0x57/0xf0 [ 143.777922][ T2366] ? clear_bhb_loop+0x50/0xa0 [ 143.777947][ T2366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.777969][ T2366] RIP: 0033:0x7f891239e159 [ 143.777986][ T2366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.778001][ T2366] RSP: 002b:00007f89132f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.778020][ T2366] RAX: ffffffffffffffda RBX: 00007f8912625fa8 RCX: 00007f891239e159 [ 143.778033][ T2366] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8912625fac [ 143.778045][ T2366] RBP: 00007f8912625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 143.778057][ T2366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.778068][ T2366] R13: 00007f8912626038 R14: 00007ffdd7921b40 R15: 00007ffdd7921c28 [ 143.778083][ T2366] [ 143.910192][ T336] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.926595][ T351] usb 4-1: 0:2 : does not exist [ 143.935508][ T336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.939229][ T351] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 143.942083][ T336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.975344][ T351] usb 4-1: USB disconnect, device number 43 [ 143.999327][ T336] usb 3-1: config 1 has no interface number 0 [ 144.021301][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.023146][ T336] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 144.082680][ T353] usb 1-1: USB disconnect, device number 53 [ 144.095459][ T336] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 144.122742][ T336] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.132613][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.140885][ T336] usb 3-1: Product: syz [ 144.145646][ T336] usb 3-1: Manufacturer: syz [ 144.150353][ T336] usb 3-1: SerialNumber: syz [ 144.157769][ T336] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 144.164696][ T336] cdc_ncm 3-1:1.1: bind() failure [ 144.186606][ T36] audit: type=1400 audit(1857520283.221:442): avc: denied { ioctl } for pid=2371 comm="syz.0.632" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.357142][ T353] usb 3-1: USB disconnect, device number 61 [ 144.644276][ T36] audit: type=1400 audit(1857520283.681:443): avc: denied { bind } for pid=2382 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.663613][ T36] audit: type=1400 audit(1857520283.691:444): avc: denied { read } for pid=2382 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.667969][ T353] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 144.707759][ T351] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 144.839136][ T353] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 144.848111][ T353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.858349][ T353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.867247][ T353] usb 3-1: config 1 has no interface number 0 [ 144.873405][ T353] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 144.884200][ T351] usb 4-1: Using ep0 maxpacket: 32 [ 144.889589][ T353] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 144.903796][ T351] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 144.912085][ T351] usb 4-1: config 0 has no interface number 0 [ 144.918529][ T351] usb 4-1: config 0 interface 184 has no altsetting 0 [ 144.925602][ T353] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.934749][ T353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.942909][ T353] usb 3-1: Product: syz [ 144.947154][ T353] usb 3-1: Manufacturer: syz [ 144.952336][ T353] usb 3-1: SerialNumber: syz [ 144.957351][ T351] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.966772][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.969199][ T336] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 144.982867][ T351] usb 4-1: Product: syz [ 144.987632][ T351] usb 4-1: Manufacturer: syz [ 144.993222][ T353] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 145.000341][ T351] usb 4-1: SerialNumber: syz [ 145.005289][ T353] cdc_ncm 3-1:1.1: bind() failure [ 145.010699][ T351] usb 4-1: config 0 descriptor?? [ 145.018925][ T351] smsc75xx v1.0.0 [ 145.127771][ T336] usb 5-1: Using ep0 maxpacket: 32 [ 145.194314][ T353] usb 3-1: USB disconnect, device number 62 [ 145.208142][ T336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.215906][ T336] usb 5-1: no configurations [ 145.220663][ T336] usb 5-1: can't read configurations, error -22 [ 145.596916][ T2391] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 145.607165][ T36] audit: type=1400 audit(1857520284.641:445): avc: denied { relabelto } for pid=2390 comm="syz.0.639" name="cgroup" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 145.609442][ T2391] rust_binder: 2390:2391 performed invalid weak decrement on ref [ 145.634724][ T36] audit: type=1400 audit(1857520284.641:446): avc: denied { associate } for pid=2390 comm="syz.0.639" name="cgroup" dev="tmpfs" ino=833 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 145.653554][ T2391] tun0: tun_chr_ioctl cmd 1074025677 [ 145.675130][ T2391] tun0: linktype set to 804 [ 145.681314][ T36] audit: type=1400 audit(1857520284.721:447): avc: denied { read } for pid=2390 comm="syz.0.639" name="cgroup" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 145.708055][ T36] audit: type=1400 audit(1857520284.721:448): avc: denied { map } for pid=2390 comm="syz.0.639" path="pipe:[4990]" dev="pipefs" ino=4990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 145.744124][ T36] audit: type=1400 audit(1857520284.781:449): avc: denied { execute } for pid=2392 comm="syz.2.640" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.792394][ T36] audit: type=1400 audit(1857520284.831:450): avc: denied { unlink } for pid=548 comm="syz-executor" name="cgroup" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 145.907508][ T2407] FAULT_INJECTION: forcing a failure. [ 145.907508][ T2407] name fail_futex, interval 1, probability 0, space 0, times 0 [ 145.920846][ T2407] CPU: 0 UID: 0 PID: 2407 Comm: syz.2.645 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 145.920884][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.920900][ T2407] Call Trace: [ 145.920910][ T2407] [ 145.920920][ T2407] __dump_stack+0x21/0x30 [ 145.920966][ T2407] dump_stack_lvl+0x140/0x1c0 [ 145.921001][ T2407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.921036][ T2407] ? __kasan_check_write+0x18/0x20 [ 145.921062][ T2407] ? _raw_spin_lock_bh+0x96/0x130 [ 145.921091][ T2407] dump_stack+0x19/0x20 [ 145.921123][ T2407] should_fail_ex+0x3c2/0x510 [ 145.921156][ T2407] should_fail+0xf/0x20 [ 145.921184][ T2407] get_futex_key+0x178/0x940 [ 145.921219][ T2407] ? __cfi_get_futex_key+0x10/0x10 [ 145.921262][ T2407] futex_wake+0x150/0x950 [ 145.921285][ T2407] ? __cfi_sk_setsockopt+0x10/0x10 [ 145.921318][ T2407] ? __cfi_futex_wake+0x10/0x10 [ 145.921340][ T2407] ? selinux_socket_setsockopt+0x324/0x3d0 [ 145.921384][ T2407] do_futex+0x37d/0x510 [ 145.921415][ T2407] ? tcp_setsockopt+0xf2/0x110 [ 145.921440][ T2407] ? __cfi_do_futex+0x10/0x10 [ 145.921475][ T2407] __se_sys_futex+0x13c/0x320 [ 145.921510][ T2407] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 145.921544][ T2407] ? __x64_sys_futex+0x110/0x110 [ 145.921581][ T2407] ? __kasan_check_write+0x18/0x20 [ 145.921599][ T2407] __x64_sys_futex+0xe9/0x110 [ 145.921647][ T2407] x64_sys_call+0x227f/0x2ee0 [ 145.921672][ T2407] do_syscall_64+0x57/0xf0 [ 145.921696][ T2407] ? clear_bhb_loop+0x50/0xa0 [ 145.921732][ T2407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.921756][ T2407] RIP: 0033:0x7fed1419e159 [ 145.921771][ T2407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.921809][ T2407] RSP: 002b:00007fed12be30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.921835][ T2407] RAX: ffffffffffffffda RBX: 00007fed14425fa8 RCX: 00007fed1419e159 [ 145.921853][ T2407] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed14425fac [ 145.921875][ T2407] RBP: 00007fed14425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 145.921887][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.921898][ T2407] R13: 00007fed14426038 R14: 00007ffd809a9030 R15: 00007ffd809a9118 [ 145.921913][ T2407] [ 146.079926][ T351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 146.123562][ T2409] FAULT_INJECTION: forcing a failure. [ 146.123562][ T2409] name failslab, interval 1, probability 0, space 0, times 0 [ 146.129304][ T353] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 146.137232][ T2409] CPU: 0 UID: 0 PID: 2409 Comm: syz.4.646 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 146.137329][ T2409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.137371][ T2409] Call Trace: [ 146.137393][ T2409] [ 146.137422][ T2409] __dump_stack+0x21/0x30 [ 146.137520][ T2409] dump_stack_lvl+0x140/0x1c0 [ 146.137606][ T2409] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.137702][ T2409] ? release_sock+0x171/0x1f0 [ 146.137786][ T2409] dump_stack+0x19/0x20 [ 146.137908][ T2409] should_fail_ex+0x3c2/0x510 [ 146.137978][ T2409] should_failslab+0xac/0x100 [ 146.138062][ T2409] kmem_cache_alloc_node_noprof+0x45/0x420 [ 146.138135][ T2409] ? netlink_data_ready+0x20/0x20 [ 146.138233][ T2409] ? __alloc_skb+0x10c/0x360 [ 146.138308][ T2409] __alloc_skb+0x10c/0x360 [ 146.138382][ T2409] netlink_alloc_large_skb+0xf7/0x1b0 [ 146.138458][ T2409] netlink_sendmsg+0x576/0xad0 [ 146.138573][ T2409] ? __cfi_netlink_sendmsg+0x10/0x10 [ 146.138681][ T2409] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 146.138763][ T2409] ? security_socket_sendmsg+0x3d/0x100 [ 146.138849][ T2409] ____sys_sendmsg+0x99e/0xa00 [ 146.138953][ T2409] ? __import_iovec+0x5b9/0x7d0 [ 146.139017][ T2409] ? __sys_sendmsg_sock+0x50/0x50 [ 146.139112][ T2409] ? import_iovec+0x80/0xb0 [ 146.139170][ T2409] ___sys_sendmsg+0x2a6/0x370 [ 146.139248][ T2409] ? __sys_sendmsg+0x260/0x260 [ 146.139341][ T2409] ? proc_fail_nth_write+0x184/0x220 [ 146.139436][ T2409] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 146.139540][ T2409] ? __fget_files+0x2bc/0x330 [ 146.139622][ T2409] __x64_sys_sendmsg+0x1be/0x2a0 [ 146.139731][ T2409] ? fput+0x1a4/0x230 [ 146.139807][ T2409] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 146.139900][ T2409] ? ksys_write+0x1f3/0x260 [ 146.139997][ T2409] ? __kasan_check_read+0x15/0x20 [ 146.140076][ T2409] x64_sys_call+0x2a4c/0x2ee0 [ 146.140139][ T2409] do_syscall_64+0x57/0xf0 [ 146.140202][ T2409] ? clear_bhb_loop+0x50/0xa0 [ 146.140275][ T2409] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.140349][ T2409] RIP: 0033:0x7f891239e159 [ 146.140410][ T2409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.140465][ T2409] RSP: 002b:00007f89132f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.140538][ T2409] RAX: ffffffffffffffda RBX: 00007f8912625fa0 RCX: 00007f891239e159 [ 146.140583][ T2409] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 146.140626][ T2409] RBP: 00007f89132f4090 R08: 0000000000000000 R09: 0000000000000000 [ 146.140669][ T2409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.140710][ T2409] R13: 00007f8912626038 R14: 00007f8912625fa0 R15: 00007ffdd7921c28 [ 146.140775][ T2409] [ 146.473556][ T351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 146.627810][ T353] usb 1-1: Using ep0 maxpacket: 16 [ 146.637401][ T353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.651597][ T353] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.662664][ T353] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.672358][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.681958][ T353] usb 1-1: Product: syz [ 146.686762][ T351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 146.698763][ T351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 146.710930][ T353] usb 1-1: Manufacturer: syz [ 146.716884][ T353] usb 1-1: SerialNumber: syz [ 146.721716][ T351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 146.733410][ T351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 146.745793][ T351] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 146.761761][ T351] usb 4-1: USB disconnect, device number 44 [ 146.826382][ T36] audit: type=1400 audit(1857520285.861:451): avc: denied { write } for pid=2425 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.960353][ T353] usb 1-1: 0:2 : does not exist [ 146.968374][ T353] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 146.981237][ T353] usb 1-1: USB disconnect, device number 54 [ 146.993356][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.037941][ T31] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 147.067985][ T45] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 147.197824][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 147.217827][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 147.226199][ T45] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.236233][ T45] usb 5-1: config 0 has no interface number 0 [ 147.244156][ T45] usb 5-1: config 0 interface 184 has no altsetting 0 [ 147.252949][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 147.264248][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.273330][ T45] usb 5-1: Product: syz [ 147.277955][ T45] usb 5-1: Manufacturer: syz [ 147.282900][ T45] usb 5-1: SerialNumber: syz [ 147.288602][ T45] usb 5-1: config 0 descriptor?? [ 147.295034][ T45] smsc75xx v1.0.0 [ 147.302215][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.310004][ T31] usb 3-1: no configurations [ 147.314665][ T31] usb 3-1: can't read configurations, error -22 [ 147.447892][ T353] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 147.492158][ T36] audit: type=1400 audit(1857520286.531:452): avc: denied { create } for pid=2432 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 147.599199][ T353] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.611285][ T353] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.626905][ T353] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.634476][ T353] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 147.645389][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.654372][ T353] usb 4-1: config 0 descriptor?? [ 147.821510][ T2439] FAULT_INJECTION: forcing a failure. [ 147.821510][ T2439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 147.834650][ T2439] CPU: 1 UID: 0 PID: 2439 Comm: syz.2.657 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 147.834692][ T2439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.834716][ T2439] Call Trace: [ 147.834726][ T2439] [ 147.834736][ T2439] __dump_stack+0x21/0x30 [ 147.834778][ T2439] dump_stack_lvl+0x140/0x1c0 [ 147.834810][ T2439] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.834846][ T2439] ? __kasan_check_write+0x18/0x20 [ 147.834865][ T2439] ? _raw_spin_lock_bh+0x96/0x130 [ 147.834882][ T2439] dump_stack+0x19/0x20 [ 147.834905][ T2439] should_fail_ex+0x3c2/0x510 [ 147.834927][ T2439] should_fail+0xf/0x20 [ 147.834946][ T2439] get_futex_key+0x178/0x940 [ 147.834970][ T2439] ? __cfi_get_futex_key+0x10/0x10 [ 147.834993][ T2439] futex_wake+0x150/0x950 [ 147.835009][ T2439] ? __cfi_sk_setsockopt+0x10/0x10 [ 147.835031][ T2439] ? __cfi_futex_wake+0x10/0x10 [ 147.835046][ T2439] ? selinux_socket_setsockopt+0x324/0x3d0 [ 147.835073][ T2439] do_futex+0x37d/0x510 [ 147.835095][ T2439] ? tcp_setsockopt+0xf2/0x110 [ 147.835113][ T2439] ? __cfi_do_futex+0x10/0x10 [ 147.835137][ T2439] __se_sys_futex+0x13c/0x320 [ 147.835160][ T2439] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 147.835184][ T2439] ? __x64_sys_futex+0x110/0x110 [ 147.835210][ T2439] ? __kasan_check_write+0x18/0x20 [ 147.835229][ T2439] __x64_sys_futex+0xe9/0x110 [ 147.835252][ T2439] x64_sys_call+0x227f/0x2ee0 [ 147.835268][ T2439] do_syscall_64+0x57/0xf0 [ 147.835284][ T2439] ? clear_bhb_loop+0x50/0xa0 [ 147.835306][ T2439] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.835328][ T2439] RIP: 0033:0x7fed1419e159 [ 147.835342][ T2439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.835356][ T2439] RSP: 002b:00007fed12be30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 147.835374][ T2439] RAX: ffffffffffffffda RBX: 00007fed14425fa8 RCX: 00007fed1419e159 [ 147.835388][ T2439] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed14425fac [ 147.835399][ T2439] RBP: 00007fed14425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 147.835411][ T2439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.835422][ T2439] R13: 00007fed14426038 R14: 00007ffd809a9030 R15: 00007ffd809a9118 [ 147.835437][ T2439] [ 148.277778][ T353] playstation 0003:054C:09CC.0008: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 148.493171][ T353] playstation 0003:054C:09CC.0008: Invalid reportID received, expected 18 got 130 [ 148.502895][ T353] playstation 0003:054C:09CC.0008: Failed to retrieve DualShock4 pairing info: -22 [ 148.512479][ T353] playstation 0003:054C:09CC.0008: Failed to get MAC address from DualShock4 [ 148.521683][ T353] playstation 0003:054C:09CC.0008: Failed to create dualshock4. [ 148.530560][ T353] playstation 0003:054C:09CC.0008: probe with driver playstation failed with error -22 [ 148.557819][ T354] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 148.676642][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 148.687726][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 148.697504][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 148.702147][ T2428] FAULT_INJECTION: forcing a failure. [ 148.702147][ T2428] name failslab, interval 1, probability 0, space 0, times 0 [ 148.709083][ T354] usb 1-1: Using ep0 maxpacket: 16 [ 148.723072][ T2428] CPU: 0 UID: 0 PID: 2428 Comm: syz.3.652 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 148.723177][ T2428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.723219][ T2428] Call Trace: [ 148.723242][ T2428] [ 148.723273][ T2428] __dump_stack+0x21/0x30 [ 148.723381][ T2428] dump_stack_lvl+0x140/0x1c0 [ 148.723503][ T2428] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.723619][ T2428] dump_stack+0x19/0x20 [ 148.723707][ T2428] should_fail_ex+0x3c2/0x510 [ 148.723791][ T2428] should_failslab+0xac/0x100 [ 148.723877][ T2428] kmem_cache_alloc_noprof+0x42/0x410 [ 148.723938][ T2428] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 148.724022][ T2428] ? alloc_empty_file+0xbf/0x270 [ 148.724110][ T2428] ? arch_stack_walk+0x10a/0x170 [ 148.724183][ T2428] alloc_empty_file+0xbf/0x270 [ 148.724269][ T2428] path_openat+0xf4/0x35a0 [ 148.724355][ T2428] ? stack_depot_save_flags+0x38/0x800 [ 148.724448][ T2428] ? try_to_wake_up+0x119e/0x1fd0 [ 148.724525][ T2428] ? kasan_save_track+0x4f/0x80 [ 148.724599][ T2428] ? kasan_save_track+0x3e/0x80 [ 148.724672][ T2428] ? kasan_save_alloc_info+0x3a/0x50 [ 148.724727][ T2428] ? __kasan_slab_alloc+0x73/0x90 [ 148.724818][ T2428] ? getname+0x1b/0x30 [ 148.724912][ T2428] ? do_sys_openat2+0xda/0x1d0 [ 148.725231][ T2428] ? __x64_sys_openat+0x13a/0x170 [ 148.725336][ T2428] ? x64_sys_call+0xe69/0x2ee0 [ 148.725401][ T2428] ? do_syscall_64+0x57/0xf0 [ 148.725478][ T2428] ? do_filp_open+0x440/0x440 [ 148.725583][ T2428] do_filp_open+0x1f2/0x440 [ 148.725681][ T2428] ? __cfi_do_filp_open+0x10/0x10 [ 148.725780][ T2428] ? alloc_fd+0x4c1/0x570 [ 148.725867][ T2428] do_sys_openat2+0x134/0x1d0 [ 148.725964][ T2428] ? putname+0x27/0x150 [ 148.726040][ T2428] ? do_sys_open+0x100/0x100 [ 148.726132][ T2428] __x64_sys_openat+0x13a/0x170 [ 148.726255][ T2428] x64_sys_call+0xe69/0x2ee0 [ 148.726327][ T2428] do_syscall_64+0x57/0xf0 [ 148.726392][ T2428] ? clear_bhb_loop+0x50/0xa0 [ 148.726479][ T2428] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.726565][ T2428] RIP: 0033:0x7f4b6359e159 [ 148.726622][ T2428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.726685][ T2428] RSP: 002b:00007f4b64498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.726760][ T2428] RAX: ffffffffffffffda RBX: 00007f4b63825fa0 RCX: 00007f4b6359e159 [ 148.726814][ T2428] RDX: 0000000000042000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 148.726867][ T2428] RBP: 00007f4b6363506b R08: 0000000000000000 R09: 0000000000000000 [ 148.726911][ T2428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.726953][ T2428] R13: 00007f4b63826038 R14: 00007f4b63825fa0 R15: 00007fffa4994be8 [ 148.727016][ T2428] [ 148.738565][ T336] usb 4-1: USB disconnect, device number 45 [ 149.007086][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 149.016954][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 149.027282][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 149.037078][ T45] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 149.046513][ T45] usb 5-1: USB disconnect, device number 67 [ 149.054784][ T354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.065417][ T354] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.076514][ T354] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.085909][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.094241][ T354] usb 1-1: Product: syz [ 149.098683][ T354] usb 1-1: Manufacturer: syz [ 149.103323][ T354] usb 1-1: SerialNumber: syz [ 149.315337][ T354] usb 1-1: 0:2 : does not exist [ 149.322270][ T354] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 149.333711][ T354] usb 1-1: USB disconnect, device number 55 [ 149.345380][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.367780][ T336] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 149.517875][ T45] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 149.527765][ T336] usb 3-1: Using ep0 maxpacket: 32 [ 149.581326][ T336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.589685][ T336] usb 3-1: no configurations [ 149.594390][ T336] usb 3-1: can't read configurations, error -22 [ 149.615624][ T2468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.657809][ T45] usb 5-1: device descriptor read/64, error -71 [ 149.695170][ T2471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.668'. [ 149.862456][ T2478] FAULT_INJECTION: forcing a failure. [ 149.862456][ T2478] name failslab, interval 1, probability 0, space 0, times 0 [ 149.875432][ T2478] CPU: 1 UID: 0 PID: 2478 Comm: syz.3.671 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 149.875476][ T2478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.875500][ T2478] Call Trace: [ 149.875508][ T2478] [ 149.875518][ T2478] __dump_stack+0x21/0x30 [ 149.875559][ T2478] dump_stack_lvl+0x140/0x1c0 [ 149.875593][ T2478] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.875629][ T2478] ? crypto_shash_init_tfm+0x1ef/0x350 [ 149.875668][ T2478] dump_stack+0x19/0x20 [ 149.875700][ T2478] should_fail_ex+0x3c2/0x510 [ 149.875729][ T2478] ? x509_get_sig_params+0x1fe/0x6a0 [ 149.875755][ T2478] should_failslab+0xac/0x100 [ 149.875785][ T2478] __kmalloc_noprof+0x69/0x510 [ 149.875812][ T2478] ? x509_get_sig_params+0x1fe/0x6a0 [ 149.875837][ T2478] x509_get_sig_params+0x1fe/0x6a0 [ 149.875863][ T2478] x509_cert_parse+0x53e/0xbd0 [ 149.875898][ T2478] x509_key_preparse+0x6a/0x880 [ 149.875922][ T2478] ? __cfi_down_read+0x10/0x10 [ 149.875955][ T2478] asymmetric_key_preparse+0xb3/0x100 [ 149.875987][ T2478] __key_create_or_update+0x433/0xa90 [ 149.876010][ T2478] ? security_key_permission+0x3d/0x100 [ 149.876037][ T2478] ? key_create_or_update+0x70/0x70 [ 149.876060][ T2478] ? __kasan_kmalloc+0x96/0xb0 [ 149.876092][ T2478] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 149.876125][ T2478] ? __cfi_keyring_search_iterator+0x10/0x10 [ 149.876152][ T2478] key_create_or_update+0x47/0x70 [ 149.876175][ T2478] __se_sys_add_key+0x355/0x4b0 [ 149.876203][ T2478] ? __x64_sys_add_key+0xf0/0xf0 [ 149.876231][ T2478] ? __kasan_check_write+0x18/0x20 [ 149.876255][ T2478] ? fpregs_restore_userregs+0x11c/0x260 [ 149.876285][ T2478] __x64_sys_add_key+0xc3/0xf0 [ 149.876313][ T2478] x64_sys_call+0x195f/0x2ee0 [ 149.876336][ T2478] do_syscall_64+0x57/0xf0 [ 149.876358][ T2478] ? clear_bhb_loop+0x50/0xa0 [ 149.876389][ T2478] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.876419][ T2478] RIP: 0033:0x7f4b6359e159 [ 149.876439][ T2478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.876460][ T2478] RSP: 002b:00007f4b64498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 149.876495][ T2478] RAX: ffffffffffffffda RBX: 00007f4b63825fa0 RCX: 00007f4b6359e159 [ 149.876514][ T2478] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 149.876532][ T2478] RBP: 00007f4b6363506b R08: 000000001c3514ad R09: 0000000000000000 [ 149.876549][ T2478] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 149.876564][ T2478] R13: 00007f4b63826038 R14: 00007f4b63825fa0 R15: 00007fffa4994be8 [ 149.876586][ T2478] [ 150.139310][ T45] usb 5-1: device descriptor read/64, error -71 [ 150.377767][ T45] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 150.378063][ T36] audit: type=1400 audit(1857520289.411:453): avc: denied { connect } for pid=2484 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.413836][ T36] audit: type=1400 audit(1857520289.411:454): avc: denied { read } for pid=2484 comm="syz.2.672" path="socket:[21250]" dev="sockfs" ino=21250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.537768][ T45] usb 5-1: device descriptor read/64, error -71 [ 150.722565][ T36] audit: type=1400 audit(1857520289.761:455): avc: denied { cmd } for pid=2500 comm="iou-wrk-2501" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 150.742398][ T2505] FAULT_INJECTION: forcing a failure. [ 150.742398][ T2505] name failslab, interval 1, probability 0, space 0, times 0 [ 150.760088][ T2505] CPU: 0 UID: 0 PID: 2505 Comm: syz.3.678 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 150.760125][ T2505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.760141][ T2505] Call Trace: [ 150.760149][ T2505] [ 150.760159][ T2505] __dump_stack+0x21/0x30 [ 150.760201][ T2505] dump_stack_lvl+0x140/0x1c0 [ 150.760237][ T2505] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.760287][ T2505] ? __kasan_check_write+0x18/0x20 [ 150.760314][ T2505] ? rwsem_read_trylock+0x275/0x5a0 [ 150.760356][ T2505] dump_stack+0x19/0x20 [ 150.760390][ T2505] should_fail_ex+0x3c2/0x510 [ 150.760422][ T2505] should_failslab+0xac/0x100 [ 150.760455][ T2505] __kmalloc_cache_noprof+0x41/0x470 [ 150.760481][ T2505] ? posix_clock_open+0xc9/0x2e0 [ 150.760502][ T2505] ? kobject_get_unless_zero+0x163/0x1f0 [ 150.760530][ T2505] posix_clock_open+0xc9/0x2e0 [ 150.760553][ T2505] ? selinux_file_open+0x46c/0x630 [ 150.760581][ T2505] chrdev_open+0x4e8/0x610 [ 150.760611][ T2505] ? __cfi_chrdev_open+0x10/0x10 [ 150.760642][ T2505] ? bpf_lsm_file_open+0xd/0x20 [ 150.760675][ T2505] ? __cfi_chrdev_open+0x10/0x10 [ 150.760705][ T2505] do_dentry_open+0x97f/0x1510 [ 150.760743][ T2505] vfs_open+0x86/0x240 [ 150.760777][ T2505] ? __cfi_vfs_open+0x10/0x10 [ 150.760815][ T2505] ? may_open+0x352/0x430 [ 150.760849][ T2505] path_openat+0x2c49/0x35a0 [ 150.760883][ T2505] ? schedule+0xc5/0x240 [ 150.760912][ T2505] ? kasan_save_alloc_info+0x3a/0x50 [ 150.760936][ T2505] ? getname+0x1b/0x30 [ 150.760964][ T2505] ? x64_sys_call+0xe69/0x2ee0 [ 150.760987][ T2505] ? do_syscall_64+0x57/0xf0 [ 150.761013][ T2505] ? do_filp_open+0x440/0x440 [ 150.761050][ T2505] do_filp_open+0x1f2/0x440 [ 150.761085][ T2505] ? __cfi_do_filp_open+0x10/0x10 [ 150.761124][ T2505] ? alloc_fd+0x4c1/0x570 [ 150.761155][ T2505] do_sys_openat2+0x134/0x1d0 [ 150.761192][ T2505] ? fput+0x1a4/0x230 [ 150.761222][ T2505] ? do_sys_open+0x100/0x100 [ 150.761254][ T2505] __x64_sys_openat+0x13a/0x170 [ 150.761297][ T2505] x64_sys_call+0xe69/0x2ee0 [ 150.761318][ T2505] do_syscall_64+0x57/0xf0 [ 150.761341][ T2505] ? clear_bhb_loop+0x50/0xa0 [ 150.761376][ T2505] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.761405][ T2505] RIP: 0033:0x7f4b6359e159 [ 150.761424][ T2505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.761443][ T2505] RSP: 002b:00007f4b64498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.761466][ T2505] RAX: ffffffffffffffda RBX: 00007f4b63825fa0 RCX: 00007f4b6359e159 [ 150.761484][ T2505] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 150.761500][ T2505] RBP: 00007f4b6363506b R08: 0000000000000000 R09: 0000000000000000 [ 150.761515][ T2505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.761530][ T2505] R13: 00007f4b63826038 R14: 00007f4b63825fa0 R15: 00007fffa4994be8 [ 150.761551][ T2505] [ 150.818203][ T45] usb 5-1: device descriptor read/64, error -71 [ 151.127816][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 151.187965][ T45] usb usb5-port1: attempt power cycle [ 151.277786][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 151.284192][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.294453][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.304772][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.314111][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.323083][ T9] usb 1-1: Product: syz [ 151.327358][ T9] usb 1-1: Manufacturer: syz [ 151.327888][ T354] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 151.332011][ T9] usb 1-1: SerialNumber: syz [ 151.487792][ T354] usb 4-1: Using ep0 maxpacket: 32 [ 151.527758][ T45] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 151.549387][ T9] usb 1-1: 0:2 : does not exist [ 151.562246][ T354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.571275][ T45] usb 5-1: device descriptor read/8, error -71 [ 151.577855][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 151.578516][ T354] usb 4-1: no configurations [ 151.591782][ T354] usb 4-1: can't read configurations, error -22 [ 151.599777][ T9] usb 1-1: USB disconnect, device number 56 [ 151.612571][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.719044][ T45] usb 5-1: device descriptor read/8, error -71 [ 151.957833][ T45] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 151.978999][ T45] usb 5-1: device descriptor read/8, error -71 [ 152.077878][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 152.108906][ T45] usb 5-1: device descriptor read/8, error -71 [ 152.180558][ T2520] FAULT_INJECTION: forcing a failure. [ 152.180558][ T2520] name failslab, interval 1, probability 0, space 0, times 0 [ 152.194123][ T2520] CPU: 1 UID: 0 PID: 2520 Comm: syz.3.685 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 152.194164][ T2520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.194181][ T2520] Call Trace: [ 152.194190][ T2520] [ 152.194200][ T2520] __dump_stack+0x21/0x30 [ 152.194244][ T2520] dump_stack_lvl+0x140/0x1c0 [ 152.194280][ T2520] ? __cfi_dump_stack_lvl+0x10/0x10 [ 152.194317][ T2520] ? __kasan_check_write+0x18/0x20 [ 152.194344][ T2520] ? rwsem_read_trylock+0x275/0x5a0 [ 152.194384][ T2520] dump_stack+0x19/0x20 [ 152.194417][ T2520] should_fail_ex+0x3c2/0x510 [ 152.194448][ T2520] should_failslab+0xac/0x100 [ 152.194481][ T2520] __kmalloc_node_noprof+0x69/0x500 [ 152.194508][ T2520] ? crypto_create_tfm_node+0xa0/0x4d0 [ 152.194533][ T2520] ? __kasan_check_write+0x18/0x20 [ 152.194559][ T2520] ? up_read+0x26/0x1c0 [ 152.194595][ T2520] crypto_create_tfm_node+0xa0/0x4d0 [ 152.194620][ T2520] crypto_alloc_tfm_node+0x166/0x350 [ 152.194646][ T2520] ? kmemdup_noprof+0x5b/0x80 [ 152.194669][ T2520] crypto_alloc_shash+0x34/0x40 [ 152.194707][ T2520] x509_get_sig_params+0x110/0x6a0 [ 152.194735][ T2520] x509_cert_parse+0x53e/0xbd0 [ 152.194774][ T2520] x509_key_preparse+0x6a/0x880 [ 152.194799][ T2520] ? __cfi_down_read+0x10/0x10 [ 152.194834][ T2520] asymmetric_key_preparse+0xb3/0x100 [ 152.194868][ T2520] __key_create_or_update+0x433/0xa90 [ 152.194892][ T2520] ? security_key_permission+0x3d/0x100 [ 152.194919][ T2520] ? key_create_or_update+0x70/0x70 [ 152.194943][ T2520] ? __kasan_kmalloc+0x96/0xb0 [ 152.194976][ T2520] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 152.195012][ T2520] ? __cfi_keyring_search_iterator+0x10/0x10 [ 152.195041][ T2520] key_create_or_update+0x47/0x70 [ 152.195064][ T2520] __se_sys_add_key+0x355/0x4b0 [ 152.195094][ T2520] ? __x64_sys_add_key+0xf0/0xf0 [ 152.195132][ T2520] ? __kasan_check_write+0x18/0x20 [ 152.195158][ T2520] ? fpregs_restore_userregs+0x11c/0x260 [ 152.195192][ T2520] __x64_sys_add_key+0xc3/0xf0 [ 152.195221][ T2520] x64_sys_call+0x195f/0x2ee0 [ 152.195246][ T2520] do_syscall_64+0x57/0xf0 [ 152.195271][ T2520] ? clear_bhb_loop+0x50/0xa0 [ 152.195304][ T2520] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.195336][ T2520] RIP: 0033:0x7f4b6359e159 [ 152.195358][ T2520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.195380][ T2520] RSP: 002b:00007f4b64498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 152.195408][ T2520] RAX: ffffffffffffffda RBX: 00007f4b63825fa0 RCX: 00007f4b6359e159 [ 152.195428][ T2520] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 152.195447][ T2520] RBP: 00007f4b6363506b R08: 0000000020e32fc4 R09: 0000000000000000 [ 152.195464][ T2520] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 152.195481][ T2520] R13: 00007f4b63826038 R14: 00007f4b63825fa0 R15: 00007fffa4994be8 [ 152.195504][ T2520] [ 152.488377][ T45] usb usb5-port1: unable to enumerate USB device [ 152.512854][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 152.523045][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.539838][ T548] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 152.552922][ T36] audit: type=1400 audit(1857520291.581:456): avc: denied { load_policy } for pid=2525 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 152.573761][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.590953][ T548] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 152.603683][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.619992][ T548] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 152.636500][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.649544][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.653390][ T548] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 152.663234][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.685203][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 152.698290][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 152.703645][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.707550][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.728154][ T548] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 152.746612][ T2526] SELinux: failed to load policy [ 152.755880][ T31] usb 3-1: config 0 descriptor?? [ 152.761335][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.778395][ T548] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 152.791088][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.806863][ T548] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 152.820270][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.836330][ T548] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 152.848947][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.864860][ T548] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 152.878087][ T548] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 152.893870][ T548] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 152.902811][ T2531] rust_binder: Failed to allocate buffer. len:5476377146882523136, is_oneway:false [ 152.906081][ T2531] rust_binder: Failure in copy_transaction_data: ENOSPC [ 152.915622][ T2531] rust_binder: 2530:2531 transaction call to 2530:0 failed ENOSPC, code 0 size 0-0 [ 152.932848][ T354] rust_binder: 2530: undelivered TRANSACTION_ERROR: 29201 [ 153.162621][ T1755] bridge_slave_1: left allmulticast mode [ 153.168522][ T1755] bridge_slave_1: left promiscuous mode [ 153.174369][ T1755] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.182418][ T1755] bridge_slave_0: left allmulticast mode [ 153.188221][ T1755] bridge_slave_0: left promiscuous mode [ 153.193999][ T1755] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.218172][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input16 [ 153.243163][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input17 [ 153.279360][ T31] kye 0003:0458:5011.0009: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 153.291757][ T354] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 153.357776][ T45] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 153.371232][ T1755] veth1_macvtap: left promiscuous mode [ 153.386627][ T1755] veth0_vlan: left promiscuous mode [ 153.392900][ T31] usb 3-1: USB disconnect, device number 67 [ 153.428159][ T36] audit: type=1400 audit(1857520292.471:457): avc: denied { ioctl } for pid=2540 comm="syz.4.692" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.447933][ T354] usb 4-1: Using ep0 maxpacket: 32 [ 153.507842][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 153.514144][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.524643][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.535385][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.545110][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.554469][ T45] usb 5-1: Product: syz [ 153.558872][ T354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.566577][ T354] usb 4-1: no configurations [ 153.571720][ T45] usb 5-1: Manufacturer: syz [ 153.576360][ T45] usb 5-1: SerialNumber: syz [ 153.578684][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.581877][ T354] usb 4-1: can't read configurations, error -22 [ 153.588752][ T2544] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.602027][ T2544] bridge_slave_0: entered allmulticast mode [ 153.608895][ T2544] bridge_slave_0: entered promiscuous mode [ 153.615667][ T2544] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.622836][ T2544] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.629975][ T2544] bridge_slave_1: entered allmulticast mode [ 153.636396][ T2544] bridge_slave_1: entered promiscuous mode [ 153.695073][ T2544] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.702213][ T2544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.709649][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.717139][ T2544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.742597][ T1755] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.750197][ T1755] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.760940][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.768043][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.777425][ T1755] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.784540][ T1755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.809906][ T45] usb 5-1: 0:2 : does not exist [ 153.823437][ T45] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 153.829589][ T2544] veth0_vlan: entered promiscuous mode [ 153.844362][ T2544] veth1_macvtap: entered promiscuous mode [ 153.849514][ T45] usb 5-1: USB disconnect, device number 72 [ 153.864494][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.903691][ T36] audit: type=1400 audit(1857520292.941:458): avc: denied { read write } for pid=2549 comm="syz.5.694" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.927144][ T36] audit: type=1400 audit(1857520292.941:459): avc: denied { open } for pid=2549 comm="syz.5.694" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.157983][ T336] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.287781][ T336] usb 6-1: device descriptor read/64, error -71 [ 154.357779][ T45] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 154.459092][ T2564] FAULT_INJECTION: forcing a failure. [ 154.459092][ T2564] name failslab, interval 1, probability 0, space 0, times 0 [ 154.472110][ T2564] CPU: 0 UID: 0 PID: 2564 Comm: syz.4.699 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 154.472150][ T2564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.472166][ T2564] Call Trace: [ 154.472175][ T2564] [ 154.472185][ T2564] __dump_stack+0x21/0x30 [ 154.472226][ T2564] dump_stack_lvl+0x140/0x1c0 [ 154.472261][ T2564] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.472297][ T2564] dump_stack+0x19/0x20 [ 154.472330][ T2564] should_fail_ex+0x3c2/0x510 [ 154.472360][ T2564] ? asymmetric_key_generate_id+0x86/0x220 [ 154.472393][ T2564] should_failslab+0xac/0x100 [ 154.472423][ T2564] __kmalloc_noprof+0x69/0x510 [ 154.472448][ T2564] ? asymmetric_key_generate_id+0x86/0x220 [ 154.472481][ T2564] ? kfree_sensitive+0x61/0x70 [ 154.472510][ T2564] asymmetric_key_generate_id+0x86/0x220 [ 154.472545][ T2564] x509_cert_parse+0x5e8/0xbd0 [ 154.472582][ T2564] x509_key_preparse+0x6a/0x880 [ 154.472606][ T2564] ? __cfi_down_read+0x10/0x10 [ 154.472640][ T2564] asymmetric_key_preparse+0xb3/0x100 [ 154.472674][ T2564] __key_create_or_update+0x433/0xa90 [ 154.472697][ T2564] ? security_key_permission+0x3d/0x100 [ 154.472724][ T2564] ? key_create_or_update+0x70/0x70 [ 154.472746][ T2564] ? __kasan_kmalloc+0x96/0xb0 [ 154.472780][ T2564] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 154.472816][ T2564] ? __cfi_keyring_search_iterator+0x10/0x10 [ 154.472842][ T2564] key_create_or_update+0x47/0x70 [ 154.472866][ T2564] __se_sys_add_key+0x355/0x4b0 [ 154.472894][ T2564] ? __x64_sys_add_key+0xf0/0xf0 [ 154.472923][ T2564] ? __kasan_check_write+0x18/0x20 [ 154.472947][ T2564] ? fpregs_restore_userregs+0x11c/0x260 [ 154.472989][ T2564] __x64_sys_add_key+0xc3/0xf0 [ 154.473017][ T2564] x64_sys_call+0x195f/0x2ee0 [ 154.473041][ T2564] do_syscall_64+0x57/0xf0 [ 154.473064][ T2564] ? clear_bhb_loop+0x50/0xa0 [ 154.473098][ T2564] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.473129][ T2564] RIP: 0033:0x7f891239e159 [ 154.473149][ T2564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.473171][ T2564] RSP: 002b:00007f89132f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 154.473198][ T2564] RAX: ffffffffffffffda RBX: 00007f8912625fa0 RCX: 00007f891239e159 [ 154.473217][ T2564] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 154.473234][ T2564] RBP: 00007f891243506b R08: 000000001f6120e6 R09: 0000000000000000 [ 154.473251][ T2564] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 154.473267][ T2564] R13: 00007f8912626038 R14: 00007f8912625fa0 R15: 00007ffdd7921c28 [ 154.473290][ T2564] [ 154.508690][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 154.537877][ T336] usb 6-1: device descriptor read/64, error -71 [ 154.792780][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.806643][ T45] usb 3-1: too many configurations: 159, using maximum allowed: 8 [ 154.815775][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 154.839470][ T45] usb 3-1: can't read configurations, error -71 [ 154.926077][ T2571] overlayfs: upper fs does not support tmpfile. [ 154.987870][ T336] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 155.117797][ T336] usb 6-1: device descriptor read/64, error -71 [ 155.187864][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 155.314040][ T36] audit: type=1400 audit(1857520294.351:460): avc: denied { transfer } for pid=2574 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.314058][ T2575] rust_binder: 2574:2575 error while translating object: EINVAL [ 155.314240][ T2575] rust_binder: Failure in copy_transaction_data: EINVAL [ 155.341766][ T2575] rust_binder: 2574:2575 transaction call to 2574:0 failed EINVAL, code 0 size 88-24 [ 155.358417][ T336] usb 6-1: device descriptor read/64, error -71 [ 155.368396][ T66] rust_binder: 2574: undelivered TRANSACTION_ERROR: 29201 [ 155.383240][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.398579][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.408768][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.424088][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.438352][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 155.447476][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 155.455546][ T9] usb 4-1: Product: syz [ 155.459819][ T9] usb 4-1: Manufacturer: syz [ 155.478272][ T336] usb usb6-port1: attempt power cycle [ 155.667568][ T2571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.676460][ T2571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.686360][ T9] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 155.693857][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 155.703465][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 155.712878][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 155.722903][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 155.732507][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 155.741751][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 155.751377][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 155.761061][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 155.770699][ T9] usb 4-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 155.779819][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 155.789073][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 155.798473][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 155.807775][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 155.817232][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 7 on unit 48: -71 (exp. 1). [ 155.826376][ T336] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 155.833986][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 155.843355][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 155.852597][ T9] usb 4-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 155.861920][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 16 on unit 48: -71 (exp. 1). [ 155.872174][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 155.881573][ T9] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 155.890692][ T336] usb 6-1: device descriptor read/8, error -71 [ 155.897130][ T9] usb 4-1: No streaming interface found for terminal 2. [ 155.906075][ T9] usb 4-1: USB disconnect, device number 50 [ 155.907946][ T45] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 156.019024][ T336] usb 6-1: device descriptor read/8, error -71 [ 156.068110][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 156.149324][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.157117][ T45] usb 3-1: no configurations [ 156.161777][ T45] usb 3-1: can't read configurations, error -22 [ 156.168226][ T45] usb usb3-port1: attempt power cycle [ 156.267813][ T336] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 156.288871][ T336] usb 6-1: device descriptor read/8, error -71 [ 156.304185][ T2586] FAULT_INJECTION: forcing a failure. [ 156.304185][ T2586] name failslab, interval 1, probability 0, space 0, times 0 [ 156.317089][ T2586] CPU: 1 UID: 0 PID: 2586 Comm: syz.4.713 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 156.317122][ T2586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.317136][ T2586] Call Trace: [ 156.317144][ T2586] [ 156.317154][ T2586] __dump_stack+0x21/0x30 [ 156.317194][ T2586] dump_stack_lvl+0x140/0x1c0 [ 156.317229][ T2586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.317266][ T2586] dump_stack+0x19/0x20 [ 156.317297][ T2586] should_fail_ex+0x3c2/0x510 [ 156.317327][ T2586] ? x509_fabricate_name+0x61b/0xcb0 [ 156.317351][ T2586] should_failslab+0xac/0x100 [ 156.317382][ T2586] __kmalloc_noprof+0x69/0x510 [ 156.317407][ T2586] ? x509_fabricate_name+0x61b/0xcb0 [ 156.317429][ T2586] ? x509_note_OID+0x12a/0x190 [ 156.317465][ T2586] x509_fabricate_name+0x61b/0xcb0 [ 156.317490][ T2586] x509_note_subject+0x8b/0xc0 [ 156.317512][ T2586] asn1_ber_decoder+0x1974/0x1ff0 [ 156.317550][ T2586] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 156.317583][ T2586] ? kasan_save_alloc_info+0x3a/0x50 [ 156.317605][ T2586] ? __kasan_kmalloc+0x96/0xb0 [ 156.317633][ T2586] ? get_each_kmemcache_object+0x110/0x200 [ 156.317659][ T2586] x509_cert_parse+0x1e3/0xbd0 [ 156.317699][ T2586] x509_key_preparse+0x6a/0x880 [ 156.317724][ T2586] ? __cfi_down_read+0x10/0x10 [ 156.317758][ T2586] asymmetric_key_preparse+0xb3/0x100 [ 156.317792][ T2586] __key_create_or_update+0x433/0xa90 [ 156.317815][ T2586] ? security_key_permission+0x3d/0x100 [ 156.317849][ T2586] ? key_create_or_update+0x70/0x70 [ 156.317870][ T2586] ? __kasan_kmalloc+0x96/0xb0 [ 156.317919][ T2586] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 156.317953][ T2586] ? __cfi_keyring_search_iterator+0x10/0x10 [ 156.317979][ T2586] key_create_or_update+0x47/0x70 [ 156.318000][ T2586] __se_sys_add_key+0x355/0x4b0 [ 156.318027][ T2586] ? __x64_sys_add_key+0xf0/0xf0 [ 156.318054][ T2586] ? __kasan_check_write+0x18/0x20 [ 156.318077][ T2586] ? fpregs_restore_userregs+0x11c/0x260 [ 156.318107][ T2586] __x64_sys_add_key+0xc3/0xf0 [ 156.318133][ T2586] x64_sys_call+0x195f/0x2ee0 [ 156.318156][ T2586] do_syscall_64+0x57/0xf0 [ 156.318177][ T2586] ? clear_bhb_loop+0x50/0xa0 [ 156.318207][ T2586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.318234][ T2586] RIP: 0033:0x7f891239e159 [ 156.318254][ T2586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.318275][ T2586] RSP: 002b:00007f89132f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 156.318303][ T2586] RAX: ffffffffffffffda RBX: 00007f8912625fa0 RCX: 00007f891239e159 [ 156.318322][ T2586] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 156.318337][ T2586] RBP: 00007f891243506b R08: 000000000064c098 R09: 0000000000000000 [ 156.318352][ T2586] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 156.318365][ T2586] R13: 00007f8912626038 R14: 00007f8912625fa0 R15: 00007ffdd7921c28 [ 156.318384][ T2586] [ 156.638512][ T336] usb 6-1: device descriptor read/8, error -71 [ 156.686361][ T36] audit: type=1400 audit(1857520295.721:461): avc: denied { nlmsg_write } for pid=2589 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.715676][ T2592] FAULT_INJECTION: forcing a failure. [ 156.715676][ T2592] name failslab, interval 1, probability 0, space 0, times 0 [ 156.728655][ T2592] CPU: 1 UID: 0 PID: 2592 Comm: syz.3.707 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 156.728692][ T2592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.728708][ T2592] Call Trace: [ 156.728715][ T2592] [ 156.728725][ T2592] __dump_stack+0x21/0x30 [ 156.728764][ T2592] dump_stack_lvl+0x140/0x1c0 [ 156.728810][ T2592] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.728846][ T2592] dump_stack+0x19/0x20 [ 156.728880][ T2592] should_fail_ex+0x3c2/0x510 [ 156.728911][ T2592] should_failslab+0xac/0x100 [ 156.728942][ T2592] __kmalloc_cache_noprof+0x41/0x470 [ 156.728969][ T2592] ? x509_cert_parse+0x18c/0xbd0 [ 156.729007][ T2592] x509_cert_parse+0x18c/0xbd0 [ 156.729044][ T2592] x509_key_preparse+0x6a/0x880 [ 156.729068][ T2592] ? __cfi_down_read+0x10/0x10 [ 156.729102][ T2592] asymmetric_key_preparse+0xb3/0x100 [ 156.729136][ T2592] __key_create_or_update+0x433/0xa90 [ 156.729160][ T2592] ? security_key_permission+0x3d/0x100 [ 156.729185][ T2592] ? key_create_or_update+0x70/0x70 [ 156.729206][ T2592] ? __kasan_kmalloc+0x96/0xb0 [ 156.729239][ T2592] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 156.729272][ T2592] ? __cfi_keyring_search_iterator+0x10/0x10 [ 156.729299][ T2592] key_create_or_update+0x47/0x70 [ 156.729322][ T2592] __se_sys_add_key+0x355/0x4b0 [ 156.729349][ T2592] ? __x64_sys_add_key+0xf0/0xf0 [ 156.729375][ T2592] ? __kasan_check_write+0x18/0x20 [ 156.729398][ T2592] ? fpregs_restore_userregs+0x11c/0x260 [ 156.729428][ T2592] __x64_sys_add_key+0xc3/0xf0 [ 156.729456][ T2592] x64_sys_call+0x195f/0x2ee0 [ 156.729480][ T2592] do_syscall_64+0x57/0xf0 [ 156.729504][ T2592] ? clear_bhb_loop+0x50/0xa0 [ 156.729534][ T2592] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.729562][ T2592] RIP: 0033:0x7f4b6359e159 [ 156.729582][ T2592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.729604][ T2592] RSP: 002b:00007f4b64498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 156.729649][ T2592] RAX: ffffffffffffffda RBX: 00007f4b63825fa0 RCX: 00007f4b6359e159 [ 156.729679][ T2592] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 156.729696][ T2592] RBP: 00007f4b6363506b R08: 00000000289974f6 R09: 0000000000000000 [ 156.729714][ T2592] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 156.729738][ T2592] R13: 00007f4b63826038 R14: 00007f4b63825fa0 R15: 00007fffa4994be8 [ 156.729768][ T2592] [ 156.788426][ T336] usb usb6-port1: unable to enumerate USB device [ 156.999383][ T2602] Invalid logical block size (131072) [ 157.024218][ T2604] FAULT_INJECTION: forcing a failure. [ 157.024218][ T2604] name failslab, interval 1, probability 0, space 0, times 0 [ 157.037068][ T2604] CPU: 0 UID: 0 PID: 2604 Comm: syz.2.710 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 157.037103][ T2604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.037120][ T2604] Call Trace: [ 157.037128][ T2604] [ 157.037138][ T2604] __dump_stack+0x21/0x30 [ 157.037190][ T2604] dump_stack_lvl+0x140/0x1c0 [ 157.037227][ T2604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.037265][ T2604] dump_stack+0x19/0x20 [ 157.037298][ T2604] should_fail_ex+0x3c2/0x510 [ 157.037329][ T2604] should_failslab+0xac/0x100 [ 157.037362][ T2604] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 157.037392][ T2604] ? x509_cert_parse+0x2f5/0xbd0 [ 157.037429][ T2604] ? get_each_kmemcache_object+0x110/0x200 [ 157.037456][ T2604] kmemdup_noprof+0x31/0x80 [ 157.037479][ T2604] x509_cert_parse+0x2f5/0xbd0 [ 157.037518][ T2604] x509_key_preparse+0x6a/0x880 [ 157.037543][ T2604] ? __cfi_down_read+0x10/0x10 [ 157.037578][ T2604] asymmetric_key_preparse+0xb3/0x100 [ 157.037612][ T2604] __key_create_or_update+0x433/0xa90 [ 157.037635][ T2604] ? security_key_permission+0x3d/0x100 [ 157.037660][ T2604] ? key_create_or_update+0x70/0x70 [ 157.037688][ T2604] ? __kasan_kmalloc+0x96/0xb0 [ 157.037721][ T2604] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 157.037755][ T2604] ? __cfi_keyring_search_iterator+0x10/0x10 [ 157.037782][ T2604] key_create_or_update+0x47/0x70 [ 157.037806][ T2604] __se_sys_add_key+0x355/0x4b0 [ 157.037853][ T2604] ? __x64_sys_add_key+0xf0/0xf0 [ 157.037883][ T2604] ? __kasan_check_write+0x18/0x20 [ 157.037910][ T2604] ? fpregs_restore_userregs+0x11c/0x260 [ 157.037943][ T2604] __x64_sys_add_key+0xc3/0xf0 [ 157.037972][ T2604] x64_sys_call+0x195f/0x2ee0 [ 157.037996][ T2604] do_syscall_64+0x57/0xf0 [ 157.038019][ T2604] ? clear_bhb_loop+0x50/0xa0 [ 157.038052][ T2604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.038083][ T2604] RIP: 0033:0x7fed1419e159 [ 157.038105][ T2604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.038128][ T2604] RSP: 002b:00007fed12be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 157.038160][ T2604] RAX: ffffffffffffffda RBX: 00007fed14425fa0 RCX: 00007fed1419e159 [ 157.038179][ T2604] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 157.038197][ T2604] RBP: 00007fed1423506b R08: 00000000174e8143 R09: 0000000000000000 [ 157.038214][ T2604] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 157.038230][ T2604] R13: 00007fed14426038 R14: 00007fed14425fa0 R15: 00007ffd809a9118 [ 157.038252][ T2604] [ 157.557853][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 157.718889][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 157.742102][ T10] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 157.754929][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.775942][ T10] usb 5-1: config 0 has no interface number 0 [ 157.785415][ T10] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 157.796080][ T10] usb 5-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.809477][ T10] usb 5-1: config 0 interface 98 has no altsetting 0 [ 157.818700][ T10] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 157.827910][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.838160][ T10] usb 5-1: Product: syz [ 157.844580][ T10] usb 5-1: Manufacturer: syz [ 157.851497][ T10] usb 5-1: SerialNumber: syz [ 157.870441][ T10] usb 5-1: config 0 descriptor?? [ 157.879879][ T2613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.896950][ T10] asix 5-1:0.98: probe with driver asix failed with error -22 [ 158.101851][ T10] usb 5-1: USB disconnect, device number 73 [ 158.147773][ T45] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 158.287792][ T45] usb 4-1: device descriptor read/64, error -71 [ 158.527778][ T45] usb 4-1: device descriptor read/64, error -71 [ 158.737741][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 158.768291][ T45] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 158.897737][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 158.908023][ T45] usb 4-1: device descriptor read/64, error -71 [ 158.998986][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.008838][ T9] usb 3-1: no configurations [ 159.013565][ T9] usb 3-1: can't read configurations, error -22 [ 159.117747][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.157746][ T45] usb 4-1: device descriptor read/64, error -71 [ 159.267895][ T45] usb usb4-port1: attempt power cycle [ 159.277760][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 159.286147][ T31] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 159.301607][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.319271][ T31] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 159.328590][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.347215][ T31] usb 6-1: Product: syz [ 159.351646][ T31] usb 6-1: Manufacturer: syz [ 159.356470][ T31] usb 6-1: SerialNumber: syz [ 159.364188][ T31] usb 6-1: config 0 descriptor?? [ 159.598200][ T2620] syz.5.712 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 159.607902][ T45] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 159.616422][ T31] usb 6-1: USB disconnect, device number 6 [ 159.626596][ T2620] CPU: 0 UID: 0 PID: 2620 Comm: syz.5.712 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 159.626632][ T2620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.626648][ T2620] Call Trace: [ 159.626656][ T2620] [ 159.626666][ T2620] __dump_stack+0x21/0x30 [ 159.626705][ T2620] dump_stack_lvl+0x140/0x1c0 [ 159.626743][ T2620] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.626777][ T2620] ? ___ratelimit+0x41c/0x5c0 [ 159.626804][ T2620] ? __kasan_check_write+0x18/0x20 [ 159.626831][ T2620] dump_stack+0x19/0x20 [ 159.626862][ T2620] dump_header+0xd9/0x460 [ 159.626903][ T2620] oom_kill_process+0x35d/0x640 [ 159.626933][ T2620] out_of_memory+0x5d1/0xa20 [ 159.626962][ T2620] ? __cfi_out_of_memory+0x10/0x10 [ 159.626989][ T2620] ? mutex_lock_killable+0x97/0x1d0 [ 159.627020][ T2620] ? __cfi_mutex_lock_killable+0x10/0x10 [ 159.627052][ T2620] mem_cgroup_out_of_memory+0x2c5/0x390 [ 159.627080][ T2620] ? css_next_descendant_pre+0x1ec/0x210 [ 159.627110][ T2620] ? __kasan_check_write+0x18/0x20 [ 159.627134][ T2620] ? drain_obj_stock+0xec0/0xec0 [ 159.627162][ T2620] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 159.627188][ T2620] try_charge_memcg+0x925/0xe10 [ 159.627221][ T2620] ? static_key_count+0x45/0x70 [ 159.627253][ T2620] ? lruvec_init+0x1f1/0x280 [ 159.627280][ T2620] ? __cfi_try_charge_memcg+0x10/0x10 [ 159.627314][ T2620] ? __alloc_pages_noprof+0x35a/0x7e0 [ 159.627349][ T2620] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 159.627386][ T2620] __mem_cgroup_charge+0xfc/0x420 [ 159.627410][ T2620] ? do_pte_missing+0x3894/0x4440 [ 159.627441][ T2620] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 159.627468][ T2620] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 159.627501][ T2620] ? shmem_replace_folio+0x9b0/0x9b0 [ 159.627531][ T2620] ? shmem_huge_global_enabled+0x2da/0x360 [ 159.627559][ T2620] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 159.627587][ T2620] ? __kasan_check_write+0x18/0x20 [ 159.627611][ T2620] ? _raw_spin_lock+0x92/0x120 [ 159.627634][ T2620] shmem_get_folio_gfp+0x5cd/0x12e0 [ 159.627665][ T2620] ? shmem_get_folio+0xc0/0xc0 [ 159.627690][ T2620] ? follow_page_pte+0x8fb/0xba0 [ 159.627722][ T2620] ? inode_to_bdi+0x6d/0x100 [ 159.627755][ T2620] shmem_write_begin+0xf4/0x260 [ 159.627782][ T2620] generic_perform_write+0x32c/0x970 [ 159.627815][ T2620] ? __cfi_generic_perform_write+0x10/0x10 [ 159.627846][ T2620] ? generic_write_checks_count+0x426/0x540 [ 159.627890][ T2620] ? file_update_time+0xa3/0x210 [ 159.627910][ T2620] shmem_file_write_iter+0x105/0x130 [ 159.627943][ T2620] __kernel_write_iter+0x462/0x900 [ 159.627970][ T2620] ? __cfi___kernel_write_iter+0x10/0x10 [ 159.627993][ T2620] ? get_dump_page+0x165/0x220 [ 159.628022][ T2620] ? __asan_memset+0x39/0x50 [ 159.628044][ T2620] ? iov_iter_bvec+0xc0/0x180 [ 159.628077][ T2620] dump_user_range+0xb8b/0xe60 [ 159.628105][ T2620] ? __cfi_dump_user_range+0x10/0x10 [ 159.628131][ T2620] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 159.628167][ T2620] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 159.628203][ T2620] ? elf_core_dump+0x23cf/0x3840 [ 159.628234][ T2620] elf_core_dump+0x2d61/0x3840 [ 159.628266][ T2620] ? __cfi_elf_core_dump+0x10/0x10 [ 159.628296][ T2620] ? mas_next_slot+0xf01/0xfd0 [ 159.628335][ T2620] ? dump_interrupted+0xf0/0xf0 [ 159.628360][ T2620] ? filp_open+0x199/0x1f0 [ 159.628393][ T2620] ? 0xffffffffff600000 [ 159.628414][ T2620] do_coredump+0x20d2/0x3050 [ 159.628443][ T2620] ? __cfi_do_coredump+0x10/0x10 [ 159.628466][ T2620] ? asm_exc_page_fault+0x2b/0x30 [ 159.628502][ T2620] ? __kasan_slab_free+0x6a/0x80 [ 159.628532][ T2620] ? get_signal+0xa2a/0x1490 [ 159.628565][ T2620] get_signal+0x11bf/0x1490 [ 159.628602][ T2620] arch_do_signal_or_restart+0xbc/0x700 [ 159.628626][ T2620] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 159.628652][ T2620] ? __bad_area_nosemaphore+0x2fb/0x680 [ 159.628676][ T2620] irqentry_exit_to_user_mode+0x4d/0xb0 [ 159.628710][ T2620] irqentry_exit+0x16/0x60 [ 159.628742][ T2620] exc_page_fault+0x65/0xc0 [ 159.628773][ T2620] asm_exc_page_fault+0x2b/0x30 [ 159.628800][ T2620] RIP: 0033:0x7fc59139e161 [ 159.628820][ T2620] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 159.628841][ T2620] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 159.628863][ T2620] RAX: 0000000000000000 RBX: 00007fc591626090 RCX: 00007fc59139e159 [ 159.628924][ T2620] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000020000011 [ 159.628941][ T2620] RBP: 00007fc59143506b R08: 0000000000000000 R09: 0000000000000000 [ 159.628957][ T2620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 159.628973][ T2620] R13: 00007fc591626128 R14: 00007fc591626090 R15: 00007ffd04790838 [ 159.628994][ T2620] [ 159.629173][ T45] usb 4-1: device descriptor read/8, error -71 [ 159.656324][ T2620] memory: usage 307200kB, limit 307200kB, failcnt 8677 [ 159.809148][ T45] usb 4-1: device descriptor read/8, error -71 [ 159.818015][ T2620] memory+swap: usage 366484kB, limit 9007199254740988kB, failcnt 0 [ 159.818040][ T2620] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 160.077878][ T45] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 160.084421][ T2620] Memory cgroup stats for [ 160.119698][ T45] usb 4-1: device descriptor read/8, error -71 [ 160.125239][ T2620] /syz5: [ 160.148887][ T2620] cache 314359808 [ 160.155490][ T2620] rss 172032 [ 160.158870][ T2620] rss_huge 0 [ 160.162107][ T2620] shmem 314359808 [ 160.165761][ T2620] mapped_file 125022208 [ 160.170072][ T2620] dirty 0 [ 160.173085][ T2620] writeback 0 [ 160.176388][ T2620] workingset_refault_anon 8 [ 160.180947][ T2620] workingset_refault_file 0 [ 160.185475][ T2620] swap 60706816 [ 160.189034][ T2620] swapcached 28672 [ 160.192778][ T2620] pgpgin 96680 [ 160.196177][ T2620] pgpgout 19883 [ 160.199904][ T2620] pgfault 47779 [ 160.203396][ T2620] pgmajfault 1 [ 160.206793][ T2620] inactive_anon 165429248 [ 160.216601][ T2620] active_anon 149131264 [ 160.221221][ T2620] inactive_file 0 [ 160.224930][ T2620] active_file 0 [ 160.228812][ T2620] unevictable 0 [ 160.232308][ T2620] hierarchical_memory_limit 314572800 [ 160.238106][ T2620] hierarchical_memsw_limit 9223372036854771712 [ 160.244557][ T2620] total_cache 314359808 [ 160.249719][ T2620] total_rss 172032 [ 160.258733][ T45] usb 4-1: device descriptor read/8, error -71 [ 160.263735][ T2620] total_rss_huge 0 [ 160.276844][ T2620] total_shmem 314359808 [ 160.281235][ T2620] total_mapped_file 125022208 [ 160.286051][ T2620] total_dirty 0 [ 160.289825][ T2620] total_writeback 0 [ 160.293748][ T2620] total_workingset_refault_anon 8 [ 160.300473][ T2620] total_workingset_refault_file 0 [ 160.305869][ T2620] total_swap 60706816 [ 160.311518][ T2620] total_swapcached 28672 [ 160.315802][ T2620] total_pgpgin 96680 [ 160.319781][ T2620] total_pgpgout 19883 [ 160.324094][ T2620] total_pgfault 47779 [ 160.328166][ T2620] total_pgmajfault 1 [ 160.331456][ T2661] FAULT_INJECTION: forcing a failure. [ 160.331456][ T2661] name failslab, interval 1, probability 0, space 0, times 0 [ 160.332083][ T2620] total_inactive_anon 165429248 [ 160.345552][ T2661] CPU: 1 UID: 0 PID: 2661 Comm: syz.4.725 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 160.345646][ T2661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.345689][ T2661] Call Trace: [ 160.345712][ T2661] [ 160.345735][ T2661] __dump_stack+0x21/0x30 [ 160.345847][ T2661] dump_stack_lvl+0x140/0x1c0 [ 160.345947][ T2661] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.346044][ T2661] dump_stack+0x19/0x20 [ 160.346130][ T2661] should_fail_ex+0x3c2/0x510 [ 160.346213][ T2661] ? asymmetric_key_generate_id+0x86/0x220 [ 160.346337][ T2661] should_failslab+0xac/0x100 [ 160.346429][ T2661] __kmalloc_noprof+0x69/0x510 [ 160.346500][ T2661] ? asymmetric_key_generate_id+0x86/0x220 [ 160.346586][ T2661] ? x509_note_OID+0x12a/0x190 [ 160.346674][ T2661] ? __asan_memcpy+0x5a/0x80 [ 160.346747][ T2661] asymmetric_key_generate_id+0x86/0x220 [ 160.346838][ T2661] ? __cfi_x509_extract_key_data+0x10/0x10 [ 160.346902][ T2661] x509_akid_note_kid+0x9f/0x120 [ 160.346966][ T2661] asn1_ber_decoder+0x14e2/0x1ff0 [ 160.347060][ T2661] ? asn1_ber_decoder+0x742/0x1ff0 [ 160.347149][ T2661] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 160.347241][ T2661] ? kasan_save_alloc_info+0x3a/0x50 [ 160.347300][ T2661] ? __kasan_kmalloc+0x96/0xb0 [ 160.347393][ T2661] ? get_each_kmemcache_object+0x110/0x200 [ 160.347465][ T2661] x509_cert_parse+0x251/0xbd0 [ 160.347554][ T2661] x509_key_preparse+0x6a/0x880 [ 160.347634][ T2661] ? __cfi_down_read+0x10/0x10 [ 160.347752][ T2661] asymmetric_key_preparse+0xb3/0x100 [ 160.347832][ T2661] __key_create_or_update+0x433/0xa90 [ 160.347894][ T2661] ? security_key_permission+0x3d/0x100 [ 160.347964][ T2661] ? key_create_or_update+0x70/0x70 [ 160.348019][ T2661] ? __kasan_kmalloc+0x96/0xb0 [ 160.348106][ T2661] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 160.348198][ T2661] ? __cfi_keyring_search_iterator+0x10/0x10 [ 160.348264][ T2661] key_create_or_update+0x47/0x70 [ 160.348335][ T2661] __se_sys_add_key+0x355/0x4b0 [ 160.348408][ T2661] ? __x64_sys_add_key+0xf0/0xf0 [ 160.348480][ T2661] ? __kasan_check_write+0x18/0x20 [ 160.348544][ T2661] ? fpregs_restore_userregs+0x11c/0x260 [ 160.348616][ T2661] __x64_sys_add_key+0xc3/0xf0 [ 160.348691][ T2661] x64_sys_call+0x195f/0x2ee0 [ 160.348753][ T2661] do_syscall_64+0x57/0xf0 [ 160.348811][ T2661] ? clear_bhb_loop+0x50/0xa0 [ 160.348895][ T2661] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.348970][ T2661] RIP: 0033:0x7f891239e159 [ 160.349040][ T2661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.349101][ T2661] RSP: 002b:00007f89132f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 160.349167][ T2661] RAX: ffffffffffffffda RBX: 00007f8912625fa0 RCX: 00007f891239e159 [ 160.349219][ T2661] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 160.349263][ T2661] RBP: 00007f891243506b R08: 00000000352885a2 R09: 0000000000000000 [ 160.349315][ T2661] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 160.349362][ T2661] R13: 00007f8912626038 R14: 00007f8912625fa0 R15: 00007ffdd7921c28 [ 160.349416][ T2661] [ 160.357067][ T2661] X.509: Couldn't decode AuthKeyIdentifier [ 160.363799][ T2620] total_active_anon 149131264 [ 160.374195][ T45] usb usb4-port1: unable to enumerate USB device [ 160.375566][ T2620] total_inactive_file 0 [ 160.682769][ T2620] total_active_file 0 [ 160.687250][ T2620] total_unevictable 0 [ 160.691565][ T2620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.712,pid=2620,uid=0 [ 160.707999][ T2620] Memory cgroup out of memory: Killed process 2620 (syz.5.712) total-vm:188632kB, anon-rss:1232kB, file-rss:20480kB, shmem-rss:122012kB, UID:0 pgtables:340kB oom_score_adj:1000 [ 160.766658][ T2662] syz.5.724 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 160.793023][ T2662] CPU: 1 UID: 0 PID: 2662 Comm: syz.5.724 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 160.793063][ T2662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.793080][ T2662] Call Trace: [ 160.793090][ T2662] [ 160.793100][ T2662] __dump_stack+0x21/0x30 [ 160.793142][ T2662] dump_stack_lvl+0x140/0x1c0 [ 160.793176][ T2662] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.793213][ T2662] ? ___ratelimit+0x41c/0x5c0 [ 160.793240][ T2662] ? __kasan_check_write+0x18/0x20 [ 160.793276][ T2662] dump_stack+0x19/0x20 [ 160.793310][ T2662] dump_header+0xd9/0x460 [ 160.793344][ T2662] oom_kill_process+0x35d/0x640 [ 160.793376][ T2662] out_of_memory+0x5d1/0xa20 [ 160.793406][ T2662] ? __cfi_out_of_memory+0x10/0x10 [ 160.793434][ T2662] ? mutex_lock_killable+0x97/0x1d0 [ 160.793466][ T2662] ? __cfi_mutex_lock_killable+0x10/0x10 [ 160.793499][ T2662] mem_cgroup_out_of_memory+0x2c5/0x390 [ 160.793528][ T2662] ? css_next_descendant_pre+0x1ec/0x210 [ 160.793559][ T2662] ? __kasan_check_write+0x18/0x20 [ 160.793585][ T2662] ? drain_obj_stock+0xec0/0xec0 [ 160.793613][ T2662] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 160.793640][ T2662] try_charge_memcg+0x925/0xe10 [ 160.793674][ T2662] ? static_key_count+0x45/0x70 [ 160.793707][ T2662] ? lruvec_init+0x1f1/0x280 [ 160.793736][ T2662] ? __cfi_try_charge_memcg+0x10/0x10 [ 160.793773][ T2662] ? __alloc_pages_noprof+0x35a/0x7e0 [ 160.793810][ T2662] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 160.793848][ T2662] __mem_cgroup_charge+0xfc/0x420 [ 160.793872][ T2662] ? preempt_schedule_common+0x2d/0x60 [ 160.793899][ T2662] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 160.793924][ T2662] ? preempt_schedule+0xc5/0xe0 [ 160.793950][ T2662] ? __cfi_preempt_schedule+0x10/0x10 [ 160.793979][ T2662] folio_prealloc+0x67/0x220 [ 160.794017][ T2662] do_pte_missing+0x16af/0x4440 [ 160.794049][ T2662] ? irqentry_exit+0x16/0x60 [ 160.794083][ T2662] ? plist_del+0x3f0/0x410 [ 160.794105][ T2662] ? pte_marker_clear+0x1b0/0x1b0 [ 160.794138][ T2662] ? __kasan_check_write+0x18/0x20 [ 160.794162][ T2662] ? wake_up_q+0x10a/0x1c0 [ 160.794186][ T2662] ? futex_wake+0x666/0x950 [ 160.794208][ T2662] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 160.794234][ T2662] handle_mm_fault+0x1189/0x1ba0 [ 160.794274][ T2662] ? __cfi_handle_mm_fault+0x10/0x10 [ 160.794304][ T2662] ? lock_vma_under_rcu+0x4cf/0x590 [ 160.794335][ T2662] ? __set_current_blocked+0x98/0x2d0 [ 160.794374][ T2662] ? __se_sys_futex+0x13c/0x320 [ 160.794407][ T2662] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 160.794435][ T2662] do_user_addr_fault+0x951/0x1230 [ 160.794458][ T2662] ? fpregs_restore_userregs+0x11c/0x260 [ 160.794491][ T2662] exc_page_fault+0x58/0xc0 [ 160.794523][ T2662] asm_exc_page_fault+0x2b/0x30 [ 160.794552][ T2662] RIP: 0033:0x7fc5912659e6 [ 160.794574][ T2662] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 58 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 160.794595][ T2662] RSP: 002b:00007fc5922d2f60 EFLAGS: 00010206 [ 160.794618][ T2662] RAX: 0000000000000000 RBX: 00007fc591626090 RCX: 0000000000000000 [ 160.794637][ T2662] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007fc591435b28 [ 160.794656][ T2662] RBP: 00007fc59143506b R08: 00007fc591252850 R09: 0000000000000000 [ 160.794673][ T2662] R10: 0000000000000000 R11: 0000200000000000 R12: 0000000000000063 [ 160.794691][ T2662] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffd04790838 [ 160.794712][ T2662] [ 160.794846][ T2662] memory: usage 304136kB, limit 307200kB, failcnt 8918 [ 160.795220][ T36] audit: type=1400 audit(1857520299.831:462): avc: denied { setattr } for pid=2669 comm="syz.2.727" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 160.816419][ T2662] memory+swap: usage 358240kB, limit 9007199254740988kB, failcnt 0 [ 160.816481][ T2662] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 160.816497][ T2662] Memory cgroup stats for /syz5: [ 161.107959][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 161.196806][ T2662] cache 301076480 [ 161.203717][ T2662] rss 188416 [ 161.215469][ T2662] rss_huge 0 [ 161.220225][ T2662] shmem 301076480 [ 161.223914][ T2662] mapped_file 111816704 [ 161.228634][ T2662] dirty 0 [ 161.231864][ T2662] writeback 4096 [ 161.235575][ T2662] workingset_refault_anon 8 [ 161.245499][ T2676] FAULT_INJECTION: forcing a failure. [ 161.245499][ T2676] name failslab, interval 1, probability 0, space 0, times 0 [ 161.259617][ T2676] CPU: 0 UID: 0 PID: 2676 Comm: syz.4.730 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 161.259655][ T2676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.259671][ T2676] Call Trace: [ 161.259681][ T2676] [ 161.259690][ T2676] __dump_stack+0x21/0x30 [ 161.259743][ T2676] dump_stack_lvl+0x140/0x1c0 [ 161.259778][ T2676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.259815][ T2676] ? __kasan_check_write+0x18/0x20 [ 161.259841][ T2676] ? rwsem_read_trylock+0x275/0x5a0 [ 161.259880][ T2676] dump_stack+0x19/0x20 [ 161.259913][ T2676] should_fail_ex+0x3c2/0x510 [ 161.259943][ T2676] should_failslab+0xac/0x100 [ 161.259973][ T2676] __kmalloc_node_noprof+0x69/0x500 [ 161.260000][ T2676] ? crypto_create_tfm_node+0xa0/0x4d0 [ 161.260024][ T2676] ? __kasan_check_write+0x18/0x20 [ 161.260049][ T2676] ? up_read+0x26/0x1c0 [ 161.260084][ T2676] crypto_create_tfm_node+0xa0/0x4d0 [ 161.260110][ T2676] crypto_alloc_tfm_node+0x166/0x350 [ 161.260135][ T2676] ? kmemdup_noprof+0x5b/0x80 [ 161.260158][ T2676] crypto_alloc_shash+0x34/0x40 [ 161.260194][ T2676] x509_get_sig_params+0x110/0x6a0 [ 161.260221][ T2676] x509_cert_parse+0x53e/0xbd0 [ 161.260259][ T2676] x509_key_preparse+0x6a/0x880 [ 161.260283][ T2676] ? __cfi_down_read+0x10/0x10 [ 161.260317][ T2676] asymmetric_key_preparse+0xb3/0x100 [ 161.260352][ T2676] __key_create_or_update+0x433/0xa90 [ 161.260374][ T2676] ? security_key_permission+0x3d/0x100 [ 161.260401][ T2676] ? key_create_or_update+0x70/0x70 [ 161.260423][ T2676] ? __kasan_kmalloc+0x96/0xb0 [ 161.260458][ T2676] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 161.260493][ T2676] ? __cfi_keyring_search_iterator+0x10/0x10 [ 161.260519][ T2676] key_create_or_update+0x47/0x70 [ 161.260541][ T2676] __se_sys_add_key+0x355/0x4b0 [ 161.260569][ T2676] ? __x64_sys_add_key+0xf0/0xf0 [ 161.260598][ T2676] ? __kasan_check_write+0x18/0x20 [ 161.260623][ T2676] ? fpregs_restore_userregs+0x11c/0x260 [ 161.260655][ T2676] __x64_sys_add_key+0xc3/0xf0 [ 161.260682][ T2676] x64_sys_call+0x195f/0x2ee0 [ 161.260705][ T2676] do_syscall_64+0x57/0xf0 [ 161.260737][ T2676] ? clear_bhb_loop+0x50/0xa0 [ 161.260770][ T2676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 161.260801][ T2676] RIP: 0033:0x7f891239e159 [ 161.260821][ T2676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.260843][ T2676] RSP: 002b:00007f89132f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 161.260869][ T2676] RAX: ffffffffffffffda RBX: 00007f8912625fa0 RCX: 00007f891239e159 [ 161.260888][ T2676] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 161.260905][ T2676] RBP: 00007f891243506b R08: 000000000877ab78 R09: 0000000000000000 [ 161.260922][ T2676] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 161.260937][ T2676] R13: 00007f8912626038 R14: 00007f8912625fa0 R15: 00007ffdd7921c28 [ 161.260959][ T2676] [ 161.265097][ T2662] workingset_refault_file 0 [ 161.561605][ T2662] swap 30498816 [ 161.565122][ T2662] swapcached 28672 [ 161.568920][ T2662] pgpgin 96717 [ 161.572352][ T2662] pgpgout 23159 [ 161.575857][ T2662] pgfault 47875 [ 161.579394][ T2662] pgmajfault 1 [ 161.582801][ T2662] inactive_anon 152309760 [ 161.587162][ T2662] active_anon 148975616 [ 161.591389][ T2662] inactive_file 0 [ 161.595148][ T2662] active_file 0 [ 161.598934][ T2662] unevictable 0 [ 161.602429][ T2662] hierarchical_memory_limit 314572800 [ 161.607883][ T2662] hierarchical_memsw_limit 9223372036854771712 [ 161.614068][ T2662] total_cache 301076480 [ 161.618356][ T9] usb 3-1: device descriptor read/64, error -71 [ 161.624684][ T2662] total_rss 188416 [ 161.628976][ T2662] total_rss_huge 0 [ 161.632754][ T2662] total_shmem 301076480 [ 161.636943][ T2662] total_mapped_file 111816704 [ 161.641738][ T2662] total_dirty 0 [ 161.645321][ T2662] total_writeback 4096 [ 161.649471][ T2662] total_workingset_refault_anon 8 [ 161.654578][ T2662] total_workingset_refault_file 0 [ 161.659687][ T2662] total_swap 30498816 [ 161.663706][ T2662] total_swapcached 28672 [ 161.668103][ T2662] total_pgpgin 96717 [ 161.672514][ T2662] total_pgpgout 23159 [ 161.677143][ T2662] total_pgfault 47875 [ 161.681227][ T2662] total_pgmajfault 1 [ 161.685149][ T2662] total_inactive_anon 152309760 [ 161.690199][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 161.698109][ T2662] total_active_anon 148975616 [ 161.703068][ T2662] total_inactive_file 0 [ 161.707269][ T2662] total_active_file 0 [ 161.711667][ T2662] total_unevictable 0 [ 161.715712][ T2662] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.712,pid=2619,uid=0 [ 161.730770][ T2662] Memory cgroup out of memory: Killed process 2619 (syz.5.712) total-vm:188632kB, anon-rss:1216kB, file-rss:20480kB, shmem-rss:94652kB, UID:0 pgtables:344kB oom_score_adj:1000 [ 161.847737][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 161.877801][ T9] usb 3-1: device descriptor read/64, error -71 [ 161.933461][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.946654][ T10] usb 4-1: no configurations [ 161.951671][ T10] usb 4-1: can't read configurations, error -22 [ 162.127768][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 162.268643][ T9] usb 3-1: device descriptor read/64, error -71 [ 162.507805][ T9] usb 3-1: device descriptor read/64, error -71 [ 162.617895][ T9] usb usb3-port1: attempt power cycle [ 162.797785][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 162.927822][ T10] usb 4-1: device descriptor read/64, error -71 [ 162.957951][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 162.978987][ T9] usb 3-1: device descriptor read/8, error -71 [ 163.108955][ T9] usb 3-1: device descriptor read/8, error -71 [ 163.167784][ T10] usb 4-1: device descriptor read/64, error -71 [ 163.197780][ T352] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 163.277866][ T10] usb usb4-port1: attempt power cycle [ 163.336689][ T2701] FAULT_INJECTION: forcing a failure. [ 163.336689][ T2701] name failslab, interval 1, probability 0, space 0, times 0 [ 163.349484][ T352] usb 5-1: Using ep0 maxpacket: 32 [ 163.349489][ T2701] CPU: 1 UID: 0 PID: 2701 Comm: syz.5.739 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 163.349522][ T2701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.349566][ T2701] Call Trace: [ 163.349597][ T2701] [ 163.349644][ T2701] __dump_stack+0x21/0x30 [ 163.349766][ T2701] dump_stack_lvl+0x140/0x1c0 [ 163.349851][ T2701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.349954][ T2701] dump_stack+0x19/0x20 [ 163.350056][ T2701] should_fail_ex+0x3c2/0x510 [ 163.350140][ T2701] ? asymmetric_key_generate_id+0x86/0x220 [ 163.350234][ T2701] should_failslab+0xac/0x100 [ 163.350318][ T2701] __kmalloc_noprof+0x69/0x510 [ 163.350382][ T2701] ? asymmetric_key_generate_id+0x86/0x220 [ 163.350468][ T2701] ? x509_note_OID+0x12a/0x190 [ 163.350558][ T2701] asymmetric_key_generate_id+0x86/0x220 [ 163.350643][ T2701] ? __cfi_x509_extract_key_data+0x10/0x10 [ 163.350706][ T2701] x509_process_extension+0x252/0xa20 [ 163.350770][ T2701] asn1_ber_decoder+0x14e2/0x1ff0 [ 163.350862][ T2701] ? asn1_ber_decoder+0x742/0x1ff0 [ 163.350957][ T2701] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 163.351082][ T2701] ? kasan_save_alloc_info+0x3a/0x50 [ 163.351159][ T2701] ? __kasan_kmalloc+0x96/0xb0 [ 163.351234][ T2701] ? get_each_kmemcache_object+0x110/0x200 [ 163.351307][ T2701] x509_cert_parse+0x1e3/0xbd0 [ 163.351405][ T2701] x509_key_preparse+0x6a/0x880 [ 163.351469][ T2701] ? __cfi_down_read+0x10/0x10 [ 163.351555][ T2701] asymmetric_key_preparse+0xb3/0x100 [ 163.351639][ T2701] __key_create_or_update+0x433/0xa90 [ 163.351705][ T2701] ? security_key_permission+0x3d/0x100 [ 163.351777][ T2701] ? key_create_or_update+0x70/0x70 [ 163.351831][ T2701] ? __kasan_kmalloc+0x96/0xb0 [ 163.351923][ T2701] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 163.352052][ T2701] ? __cfi_keyring_search_iterator+0x10/0x10 [ 163.352120][ T2701] key_create_or_update+0x47/0x70 [ 163.352183][ T2701] __se_sys_add_key+0x355/0x4b0 [ 163.352257][ T2701] ? __x64_sys_add_key+0xf0/0xf0 [ 163.352332][ T2701] ? __kasan_check_write+0x18/0x20 [ 163.352404][ T2701] ? fpregs_restore_userregs+0x11c/0x260 [ 163.352511][ T2701] __x64_sys_add_key+0xc3/0xf0 [ 163.352592][ T2701] x64_sys_call+0x195f/0x2ee0 [ 163.352648][ T2701] do_syscall_64+0x57/0xf0 [ 163.352711][ T2701] ? clear_bhb_loop+0x50/0xa0 [ 163.352795][ T2701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.352871][ T2701] RIP: 0033:0x7fc59139e159 [ 163.352924][ T2701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.352986][ T2701] RSP: 002b:00007fc5922f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 163.353067][ T2701] RAX: ffffffffffffffda RBX: 00007fc591625fa0 RCX: 00007fc59139e159 [ 163.353112][ T2701] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 163.353161][ T2701] RBP: 00007fc59143506b R08: 000000000343562c R09: 0000000000000000 [ 163.353205][ T2701] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 163.353246][ T2701] R13: 00007fc591626038 R14: 00007fc591625fa0 R15: 00007ffd04790838 [ 163.353300][ T2701] [ 163.659123][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 163.668532][ T352] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 163.676756][ T352] usb 5-1: config 0 has no interface number 0 [ 163.683400][ T352] usb 5-1: config 0 interface 184 has no altsetting 0 [ 163.691049][ T9] usb 3-1: device descriptor read/8, error -71 [ 163.698092][ T352] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 163.707184][ T352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.715238][ T352] usb 5-1: Product: syz [ 163.719472][ T352] usb 5-1: Manufacturer: syz [ 163.724092][ T352] usb 5-1: SerialNumber: syz [ 163.729418][ T352] usb 5-1: config 0 descriptor?? [ 163.735235][ T352] smsc75xx v1.0.0 [ 163.818316][ T9] usb 3-1: device descriptor read/8, error -71 [ 163.842215][ T2709] netlink: 80 bytes leftover after parsing attributes in process `syz.2.741'. [ 163.855211][ T2709] usb usb8: usbfs: process 2709 (syz.2.741) did not claim interface 0 before use [ 163.927871][ T9] usb usb3-port1: unable to enumerate USB device [ 163.934342][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 163.958911][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.088852][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.202757][ T2714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 164.227786][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 164.337753][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 164.387834][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 164.393971][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.461736][ T352] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 164.472970][ T352] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 164.489165][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.497090][ T9] usb 3-1: no configurations [ 164.501956][ T9] usb 3-1: can't read configurations, error -22 [ 164.528862][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.647776][ T10] usb usb4-port1: unable to enumerate USB device [ 164.717765][ T353] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 164.868906][ T353] usb 6-1: config 1 has an invalid interface number: 93 but max is 0 [ 164.877133][ T353] usb 6-1: config 1 has no interface number 0 [ 164.883601][ T353] usb 6-1: config 1 interface 93 has no altsetting 0 [ 164.890756][ T353] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 164.900103][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.060589][ T36] audit: type=1400 audit(1857520304.101:463): avc: denied { getopt } for pid=2725 comm="syz.2.747" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.095130][ T36] audit: type=1326 audit(1857520304.131:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2725 comm="syz.2.747" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed1419e159 code=0x0 [ 165.179063][ T353] usb 6-1: string descriptor 0 read error: -71 [ 165.188462][ T353] gl620a 6-1:1.93: probe with driver gl620a failed with error -22 [ 165.199957][ T353] usb 6-1: USB disconnect, device number 7 [ 165.513002][ T36] audit: type=1400 audit(1857520304.551:465): avc: denied { map } for pid=2731 comm="syz.3.748" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.947782][ T353] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 166.029845][ T2740] FAULT_INJECTION: forcing a failure. [ 166.029845][ T2740] name failslab, interval 1, probability 0, space 0, times 0 [ 166.042754][ T2740] CPU: 0 UID: 0 PID: 2740 Comm: syz.2.751 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 166.042794][ T2740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.042811][ T2740] Call Trace: [ 166.042821][ T2740] [ 166.042831][ T2740] __dump_stack+0x21/0x30 [ 166.042878][ T2740] dump_stack_lvl+0x140/0x1c0 [ 166.042914][ T2740] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.042952][ T2740] dump_stack+0x19/0x20 [ 166.042986][ T2740] should_fail_ex+0x3c2/0x510 [ 166.043018][ T2740] ? x509_fabricate_name+0x61b/0xcb0 [ 166.043043][ T2740] should_failslab+0xac/0x100 [ 166.043076][ T2740] __kmalloc_noprof+0x69/0x510 [ 166.043102][ T2740] ? x509_fabricate_name+0x61b/0xcb0 [ 166.043126][ T2740] ? x509_note_OID+0x12a/0x190 [ 166.043164][ T2740] x509_fabricate_name+0x61b/0xcb0 [ 166.043191][ T2740] x509_note_subject+0x8b/0xc0 [ 166.043215][ T2740] asn1_ber_decoder+0x1974/0x1ff0 [ 166.043255][ T2740] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 166.043292][ T2740] ? kasan_save_alloc_info+0x3a/0x50 [ 166.043325][ T2740] ? __kasan_kmalloc+0x96/0xb0 [ 166.043358][ T2740] ? get_each_kmemcache_object+0x110/0x200 [ 166.043388][ T2740] x509_cert_parse+0x1e3/0xbd0 [ 166.043427][ T2740] x509_key_preparse+0x6a/0x880 [ 166.043452][ T2740] ? __cfi_down_read+0x10/0x10 [ 166.043487][ T2740] asymmetric_key_preparse+0xb3/0x100 [ 166.043522][ T2740] __key_create_or_update+0x433/0xa90 [ 166.043546][ T2740] ? security_key_permission+0x3d/0x100 [ 166.043574][ T2740] ? key_create_or_update+0x70/0x70 [ 166.043598][ T2740] ? __kasan_kmalloc+0x96/0xb0 [ 166.043632][ T2740] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 166.043668][ T2740] ? __cfi_keyring_search_iterator+0x10/0x10 [ 166.043696][ T2740] key_create_or_update+0x47/0x70 [ 166.043721][ T2740] __se_sys_add_key+0x355/0x4b0 [ 166.043751][ T2740] ? __x64_sys_add_key+0xf0/0xf0 [ 166.043781][ T2740] ? __kasan_check_write+0x18/0x20 [ 166.043806][ T2740] ? fpregs_restore_userregs+0x11c/0x260 [ 166.043841][ T2740] __x64_sys_add_key+0xc3/0xf0 [ 166.043870][ T2740] x64_sys_call+0x195f/0x2ee0 [ 166.043894][ T2740] do_syscall_64+0x57/0xf0 [ 166.043919][ T2740] ? clear_bhb_loop+0x50/0xa0 [ 166.043952][ T2740] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.043983][ T2740] RIP: 0033:0x7fed1419e159 [ 166.044005][ T2740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.044027][ T2740] RSP: 002b:00007fed12be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 166.044054][ T2740] RAX: ffffffffffffffda RBX: 00007fed14425fa0 RCX: 00007fed1419e159 [ 166.044074][ T2740] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 166.044092][ T2740] RBP: 00007fed1423506b R08: 0000000024d16165 R09: 0000000000000000 [ 166.044110][ T2740] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 166.044125][ T2740] R13: 00007fed14426038 R14: 00007fed14425fa0 R15: 00007ffd809a9118 [ 166.044148][ T2740] [ 166.097823][ T353] usb 6-1: Using ep0 maxpacket: 32 [ 166.346668][ T353] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.355020][ T353] usb 6-1: config 0 has no interface number 0 [ 166.361284][ T353] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.372280][ T353] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.382085][ T353] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 166.391246][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.401610][ T353] usb 6-1: config 0 descriptor?? [ 166.608198][ T2738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.617308][ T2738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.028878][ T353] usbhid 6-1:0.1: can't add hid device: -71 [ 167.035528][ T353] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 167.045112][ T353] usb 6-1: USB disconnect, device number 8 [ 167.157747][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 167.212463][ T352] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 167.224803][ T352] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 167.234882][ T352] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 167.244827][ T352] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 167.254503][ T352] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 167.264700][ T352] usb 5-1: USB disconnect, device number 74 [ 167.320158][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 167.401512][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.410732][ T9] usb 3-1: no configurations [ 167.415382][ T9] usb 3-1: can't read configurations, error -22 [ 167.647870][ T352] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 167.780483][ T352] usb 5-1: device descriptor read/64, error -71 [ 167.867776][ T2688] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 167.935564][ T2768] syzkaller1: entered promiscuous mode [ 167.941681][ T2768] syzkaller1: entered allmulticast mode [ 168.017860][ T352] usb 5-1: device descriptor read/64, error -71 [ 168.026979][ T2688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.049142][ T2688] usb 6-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 168.058590][ T2688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.068724][ T2688] usb 6-1: config 0 descriptor?? [ 168.082251][ T2688] usb 6-1: unsupported MDLM descriptors [ 168.154818][ T2780] cgroup: release_agent respecified [ 168.163193][ T2780] syzkaller0: entered promiscuous mode [ 168.168837][ T2780] syzkaller0: entered allmulticast mode [ 168.284310][ T352] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 168.320435][ T336] usb 6-1: USB disconnect, device number 9 [ 168.457746][ T352] usb 5-1: device descriptor read/64, error -71 [ 168.677779][ T353] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 168.697756][ T352] usb 5-1: device descriptor read/64, error -71 [ 168.817844][ T352] usb usb5-port1: attempt power cycle [ 168.837725][ T353] usb 4-1: Using ep0 maxpacket: 32 [ 168.968442][ T353] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.976172][ T353] usb 4-1: no configurations [ 168.993656][ T353] usb 4-1: can't read configurations, error -22 [ 169.101225][ T36] audit: type=1326 audit(1857520308.141:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.5.772" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc59139e159 code=0x0 [ 169.108432][ T2810] netlink: 'syz.2.774': attribute type 3 has an invalid length. [ 169.147372][ T2810] netlink: 104 bytes leftover after parsing attributes in process `syz.2.774'. [ 169.157387][ T2810] FAULT_INJECTION: forcing a failure. [ 169.157387][ T2810] name fail_futex, interval 1, probability 0, space 0, times 0 [ 169.170318][ T352] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 169.178189][ T2810] CPU: 0 UID: 0 PID: 2810 Comm: syz.2.774 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 169.178224][ T2810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.178240][ T2810] Call Trace: [ 169.178249][ T2810] [ 169.178259][ T2810] __dump_stack+0x21/0x30 [ 169.178298][ T2810] dump_stack_lvl+0x140/0x1c0 [ 169.178331][ T2810] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.178367][ T2810] dump_stack+0x19/0x20 [ 169.178400][ T2810] should_fail_ex+0x3c2/0x510 [ 169.178440][ T2810] should_fail+0xf/0x20 [ 169.178467][ T2810] get_futex_key+0x178/0x940 [ 169.178500][ T2810] ? kasan_save_track+0x3e/0x80 [ 169.178527][ T2810] ? __cfi_get_futex_key+0x10/0x10 [ 169.178557][ T2810] ? do_sys_openat2+0x170/0x1d0 [ 169.178592][ T2810] ? x64_sys_call+0xe69/0x2ee0 [ 169.178613][ T2810] ? do_syscall_64+0x57/0xf0 [ 169.178636][ T2810] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.178666][ T2810] futex_wake+0x150/0x950 [ 169.178689][ T2810] ? __cfi_futex_wake+0x10/0x10 [ 169.178715][ T2810] do_futex+0x37d/0x510 [ 169.178747][ T2810] ? __cfi_do_futex+0x10/0x10 [ 169.178779][ T2810] __se_sys_futex+0x13c/0x320 [ 169.178812][ T2810] ? __x64_sys_futex+0x110/0x110 [ 169.178859][ T2810] __x64_sys_futex+0xe9/0x110 [ 169.178893][ T2810] x64_sys_call+0x227f/0x2ee0 [ 169.178915][ T2810] do_syscall_64+0x57/0xf0 [ 169.178938][ T2810] ? clear_bhb_loop+0x50/0xa0 [ 169.178968][ T2810] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.178996][ T2810] RIP: 0033:0x7fed1419e159 [ 169.179017][ T2810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.179037][ T2810] RSP: 002b:00007fed12be30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.179064][ T2810] RAX: ffffffffffffffda RBX: 00007fed14425fa8 RCX: 00007fed1419e159 [ 169.179082][ T2810] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed14425fac [ 169.179098][ T2810] RBP: 00007fed14425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 169.179116][ T2810] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 169.179131][ T2810] R13: 00007fed14426038 R14: 00007ffd809a9030 R15: 00007ffd809a9118 [ 169.179152][ T2810] [ 169.416808][ T352] usb 5-1: device descriptor read/8, error -71 [ 169.508500][ T36] audit: type=1400 audit(1857520308.531:467): avc: denied { ioctl } for pid=2815 comm="syz.3.775" path="socket:[25877]" dev="sockfs" ino=25877 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.549748][ T352] usb 5-1: device descriptor read/8, error -71 [ 169.569581][ T2820] 9pnet_fd: Insufficient options for proto=fd [ 169.797756][ T352] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 169.828866][ T352] usb 5-1: device descriptor read/8, error -71 [ 169.897740][ T353] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 169.959018][ T352] usb 5-1: device descriptor read/8, error -71 [ 170.048204][ T353] usb 4-1: too many configurations: 222, using maximum allowed: 8 [ 170.063723][ T353] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 170.073014][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.078013][ T352] usb usb5-port1: unable to enumerate USB device [ 170.081990][ T353] usb 4-1: Product: syz [ 170.091921][ T353] usb 4-1: Manufacturer: syz [ 170.096631][ T353] usb 4-1: SerialNumber: syz [ 170.705018][ T353] (unnamed net_device) (uninitialized): Assigned a random MAC address: 6e:1f:f2:07:f5:74 [ 170.717315][ T353] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 170.727811][ T353] usb 4-1: USB disconnect, device number 60 [ 170.737737][ T45] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 170.897807][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 170.991115][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.998944][ T45] usb 5-1: no configurations [ 171.003620][ T45] usb 5-1: can't read configurations, error -22 [ 171.187856][ T31] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 171.347750][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 171.357491][ T36] audit: type=1400 audit(1857520310.391:468): avc: denied { read } for pid=2862 comm="syz.2.792" name="g1" dev="configfs" ino=7157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.379727][ T36] audit: type=1400 audit(1857520310.391:469): avc: denied { open } for pid=2862 comm="syz.2.792" path="/189/config/usb_gadget/g1" dev="configfs" ino=7157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.399838][ T2864] ------------[ cut here ]------------ [ 171.407853][ T36] audit: type=1400 audit(1857520310.391:470): avc: denied { remove_name } for pid=2862 comm="syz.2.792" name="g1" dev="configfs" ino=7157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.409255][ T2864] skb_assert_len [ 171.439114][ T36] audit: type=1400 audit(1857520310.391:471): avc: denied { rmdir } for pid=2862 comm="syz.2.792" name="g1" dev="configfs" ino=7157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.470559][ T2864] WARNING: CPU: 0 PID: 2864 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 171.480593][ T2864] Modules linked in: [ 171.484531][ T2864] CPU: 0 UID: 0 PID: 2864 Comm: syz.2.792 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 171.496076][ T2864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.506306][ T2864] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 171.512237][ T2864] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 0d e2 04 fd c6 05 85 d4 62 03 01 48 c7 c7 a0 2d 8b 86 48 c7 c6 73 bc 19 87 e8 a3 b2 81 fc <0f> 0b 80 3d 6a d4 62 03 01 0f 84 af e3 ff ff e8 df e1 04 fd c6 05 [ 171.531945][ T2864] RSP: 0018:ffffc900066d7500 EFLAGS: 00010246 [ 171.538088][ T2864] RAX: 24cb1ea8a9364300 RBX: ffff88811e676070 RCX: 0000000000080000 [ 171.546110][ T2864] RDX: ffffc90001e63000 RSI: 0000000000022532 RDI: 0000000000022533 [ 171.554251][ T2864] RBP: ffffc900066d77e0 R08: ffffc900066d71e7 R09: 1ffff92000cdae3c [ 171.562357][ T2864] R10: dffffc0000000000 R11: fffff52000cdae3d R12: 1ffff11023ccec02 [ 171.570422][ T2864] R13: ffff88811e676000 R14: 0000000000000000 R15: dffffc0000000000 [ 171.578474][ T2864] FS: 00007fed12be36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 171.587459][ T2864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.594161][ T2864] CR2: 00005555589ae4e8 CR3: 00000001215c4000 CR4: 00000000003526b0 [ 171.602225][ T2864] Call Trace: [ 171.605545][ T2864] [ 171.608549][ T2864] ? __kasan_check_write+0x18/0x20 [ 171.613730][ T2864] ? alloc_skb_with_frags+0x80b/0x8b0 [ 171.619226][ T2864] ? __cfi___dev_queue_xmit+0x10/0x10 [ 171.624666][ T2864] ? __kasan_check_write+0x18/0x20 [ 171.629919][ T2864] ? skb_set_owner_w+0x280/0x3d0 [ 171.634961][ T2864] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 171.640451][ T2864] ? packet_parse_headers+0x7f0/0xb10 [ 171.645871][ T2864] ? packet_parse_headers+0x883/0xb10 [ 171.651348][ T2864] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 171.657143][ T2864] ? skb_setup_tx_timestamp+0x210/0x210 [ 171.662787][ T2864] packet_xmit+0x76/0x360 [ 171.667166][ T2864] ? is_vmalloc_addr+0x11/0x40 [ 171.672036][ T2864] packet_sendmsg+0x228b/0x56b0 [ 171.676946][ T2864] ? avc_has_perm_noaudit+0x26b/0x360 [ 171.682468][ T2864] ? __cfi_packet_sendmsg+0x10/0x10 [ 171.687762][ T2864] ? avc_has_perm+0x155/0x240 [ 171.692503][ T2864] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 171.697886][ T2864] ? security_socket_sendmsg+0x3d/0x100 [ 171.703519][ T2864] ? __cfi_packet_sendmsg+0x10/0x10 [ 171.708832][ T2864] sock_write_iter+0x445/0x490 [ 171.713641][ T2864] ? __cfi_sock_write_iter+0x10/0x10 [ 171.719042][ T2864] ? __cfi_futex_wait+0x10/0x10 [ 171.723943][ T2864] ? put_timespec64+0xd9/0x130 [ 171.728824][ T2864] vfs_write+0x75f/0xfd0 [ 171.733120][ T2864] ? __cfi_vfs_write+0x10/0x10 [ 171.737988][ T2864] ksys_write+0x145/0x260 [ 171.742374][ T2864] ? xfd_validate_state+0x68/0x140 [ 171.747542][ T2864] ? __cfi_ksys_write+0x10/0x10 [ 171.752492][ T2864] ? __kasan_check_write+0x18/0x20 [ 171.757662][ T2864] ? fpregs_restore_userregs+0x11c/0x260 [ 171.763386][ T2864] __x64_sys_write+0x7f/0x90 [ 171.768091][ T2864] x64_sys_call+0x271c/0x2ee0 [ 171.772821][ T2864] do_syscall_64+0x57/0xf0 [ 171.777279][ T2864] ? clear_bhb_loop+0x50/0xa0 [ 171.782056][ T2864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.788059][ T2864] RIP: 0033:0x7fed1419e159 [ 171.792527][ T2864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.812295][ T2864] RSP: 002b:00007fed12be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.820805][ T2864] RAX: ffffffffffffffda RBX: 00007fed14425fa0 RCX: 00007fed1419e159 [ 171.828858][ T2864] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 171.836880][ T2864] RBP: 00007fed1423506b R08: 0000000000000000 R09: 0000000000000000 [ 171.844986][ T2864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.853038][ T2864] R13: 00007fed14426038 R14: 00007fed14425fa0 R15: 00007ffd809a9118 [ 171.861107][ T2864] [ 171.864170][ T2864] ---[ end trace 0000000000000000 ]--- [ 171.873376][ T2864] skb len=0 headroom=128 headlen=0 tailroom=256 [ 171.873376][ T2864] mac=(128,0) mac_len=0 net=(128,-1) trans=-1 [ 171.873376][ T2864] shinfo(txflags=66 nr_frags=0 gso(size=0 type=0 segs=0)) [ 171.873376][ T2864] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 171.873376][ T2864] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 171.873376][ T2864] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 171.873376][ T2864] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 171.924723][ T36] audit: type=1400 audit(1857520310.971:472): avc: denied { ioctl } for pid=2862 comm="syz.2.792" path="/189/config/usb_gadget/g1" dev="configfs" ino=7157 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.951343][ T2864] dev name=tunl0 feat=0x00000006401d4869 [ 171.957290][ T2864] sk family=17 type=2 proto=0 [ 172.090918][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.102851][ T31] usb 3-1: too many configurations: 159, using maximum allowed: 8 [ 172.112436][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 172.124038][ T31] usb 3-1: can't read configurations, error -71