last executing test programs: 6.373301277s ago: executing program 2 (id=765): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="02000000", 0x4}, {&(0x7f0000000140)="0af9516505d2f522172bf76449081c4e2d55c81c383d4bfc0bd48d3a588b2ee6161ac10d", 0x24}], 0x2, 0x0, 0x0) (async) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c240302070300040007008109040100000102f700090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 5.094063448s ago: executing program 2 (id=769): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000"], 0x10) 5.088631478s ago: executing program 2 (id=770): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070519b4", @ANYRES32=0x0], 0x0) 3.797770599s ago: executing program 2 (id=774): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904004001020d"], 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) lchown(&(0x7f0000000040)='./file1\x00', r3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 47) 3.596465193s ago: executing program 0 (id=775): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x29) read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x5, 0xc55, 0xfffffffe, {r2, r3/1000+10000}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "f7ffffffffffffff"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x1) io_setup(0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 2.682889315s ago: executing program 0 (id=776): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000bec000/0x8000)=nil, 0x8000, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write(r0, &(0x7f0000000080)='4', 0x1) ftruncate(r0, 0x7) 2.568488078s ago: executing program 1 (id=778): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000"], 0x10) 2.46293565s ago: executing program 1 (id=779): socket$packet(0x11, 0x3, 0x300) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x2, 0xfffffffd, 0x15b}, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x24, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x3f}]}]}, 0x24}}, 0x0) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = open(0x0, 0x10507e, 0xa6) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) (async) syz_ublk_setup_queues(r3, r4, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0x3, 0x6f, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40000001, 0x337, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab61, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.429642272s ago: executing program 1 (id=780): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x80, {{0x2, 0x4e22, @loopback}}, 0x0, 0x7, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x410) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x1f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xfd}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 2.374521043s ago: executing program 1 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 2.256020075s ago: executing program 1 (id=782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x802, 0x0) (async) r1 = socket(0x1e, 0x802, 0x0) r2 = epoll_create1(0x80000) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xc1) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40046721, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000180)="89e7ee2c7edad9b4b47380c988", 0xd}, {&(0x7f0000000440)="fb10ab", 0x3}, {&(0x7f0000000140)="c7095a40", 0x4}], 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0xa0002007}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0xa0002007}) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x9) (async) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x9) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0xfffffffffffffd72}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000000c0)=r8) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000200)={0x3, 0x0, 0x3}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYRESHEX=r7], 0x18) 2.202173717s ago: executing program 1 (id=783): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) request_key(&(0x7f0000000400)='.request_key_auth\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x9, 0x7432b173bc39d3d) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xe5d) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xe5d) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) ioctl$USBDEVFS_RESET(r0, 0x5514) unshare(0x60000600) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040), 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) r10 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x48f, 0x0, 0x6}]}) pidfd_send_signal(r1, 0x21, 0x0, 0x0) (async) pidfd_send_signal(r1, 0x21, 0x0, 0x0) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) bind$tipc(r11, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r13, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0x8000000, 0x2, 0xff, 0xa, 0x5, 0x8}, 0x20) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x4, 0x2, "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"}) syz_usb_connect$uac2(0x0, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x2b73, 0x3c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0xfc, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0x5, 0x21, 0xfc}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x402, 0x6, 0x1, 0xc, 0xd, 0x9}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x404, 0x8b, 0x4, 0x8, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x7, 0x3, 0x0, 0x9, 0x4, 0xca}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x2e, {0x8, 0x25, 0x1, 0x80, 0x0, 0xab, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb0, 0x80, 0xf7, {0x8, 0x25, 0x1, 0x1, 0x0, 0x1, 0x1000}}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac2(0x0, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x2b73, 0x3c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0xfc, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0x5, 0x21, 0xfc}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x402, 0x6, 0x1, 0xc, 0xd, 0x9}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x404, 0x8b, 0x4, 0x8, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x7, 0x3, 0x0, 0x9, 0x4, 0xca}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x2e, {0x8, 0x25, 0x1, 0x80, 0x0, 0xab, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb0, 0x80, 0xf7, {0x8, 0x25, 0x1, 0x1, 0x0, 0x1, 0x1000}}}}}}}}]}}, 0x0) 2.155707348s ago: executing program 2 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="bf"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r1 = openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x1, 0x55) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 2.117709639s ago: executing program 2 (id=785): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f00030100000009"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES64=r2], 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x4, 0x40, 0x7, {0x77359400}, {r5, r6/1000+10000}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "47e14b72ed311ec0"}}, 0x48}, 0x1, 0x0, 0x0, 0xc0040}, 0x40001) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0xb522f000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, 0x0) 1.810941906s ago: executing program 0 (id=786): r0 = syz_open_dev$loop(&(0x7f0000000080), 0xf, 0x200) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x8f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xd5630000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000006c0)={r1, 0x400, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400000000ffffffa100", "675237604c40f78d2cfc03d805bfa55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x200057ff]}}) 1.777489327s ago: executing program 0 (id=787): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x10) 1.752120987s ago: executing program 0 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000001c0)=[@rdmsr={0x66, 0x18, {0x8a4}}, @nested_load_syzos={0x136, 0x80, {0x0, 0x800, [@out_dx={0x6a, 0x28, {0x6b74, 0x4, 0x200}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}]}}, @out_dx={0x6a, 0x28, {0xe41f, 0x7, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0xe151}}, @code={0xa, 0x71, {"c4c178177500440f8f0000000066ba4300b8bd9a53aeef420f233eb9990a00000f32b9eb080000b800000000ba000000000f3066ba4100b800000000efc4a155fc33c74424005b000000c74424026a2e0000ff1c240f20c035200000000f22c0"}}, @wr_drn={0x68, 0x20, {0x6, 0x5}}, @cpuid={0x64, 0x18, {0x1ff, 0x2}}, @rdmsr={0x66, 0x18, {0xad5}}, @nested_vmresume={0x130, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x9e9, 0x2}}, @rdmsr={0x66, 0x18, {0xb91}}, @uexit={0x0, 0x18, 0x800}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0x800, 0xf, 0x8001, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @code={0xa, 0x80, {"c744240000480000c744240200800000c7442406000000000f011c240f01372e3e660f3882b3cace000066baf80cb8ee18a783ef66bafc0c66edc4215972d300d2b30008000036420f01c9420f01df420f53bd0010000048b800000000000000000f23d00f21f835200000090f23f8"}}, @enable_nested={0x12c, 0x18}], 0x351}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000005c0)={0xa3, 0x0, &(0x7f0000000580)}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x800, 0x10000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$FUSE_NOTIFY_POLL(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="980f01cfc744240003000000c74424023ebde88bff2c24400f01ca66baf80cb8f3efdf84ef66bafc0cecb8010000000f01c13e460f001fb9eb090000b84e714251ba3ccc174f0f30c4011855448736c7442400eb000000c744240200000080ff1c24"}], 0x1, 0x0, 0x0, 0x36) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 821.32574ms ago: executing program 0 (id=800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000340)=ANY=[], 0x200002e6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x9, 0x5}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r3, 0x39000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 668.039024ms ago: executing program 3 (id=803): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x1, 0x70) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 634.917404ms ago: executing program 3 (id=804): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000001c0)={0xa, {0x1, 0x6, 0x40}}, 0xa) (async) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c10000000000000000000", 0x58}], 0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) (async) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) (async) close(r2) (async) syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a05050300000000000000000000000904010000010230000904010101010230000905010920000308e20a25250200"], 0x0) syz_io_uring_setup(0x48cc, &(0x7f0000000140)={0x0, 0x5e99, 0x1, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000380), &(0x7f0000000000)) 427.013829ms ago: executing program 3 (id=805): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x10) 423.088049ms ago: executing program 3 (id=806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x2000, 0x1ff, 0x4, 0x6, 0x0, [{0xfa, 0x6, 0x79, '\x00', 0x85}, {0x0, 0x0, 0x7, '\x00', 0x5}, {0x6, 0x5, 0x2, '\x00', 0x20}, {0x2, 0x6, 0x1, '\x00', 0x3}, {0xa, 0x9, 0xe, '\x00', 0xd}, {0x2, 0x77, 0x5, '\x00', 0x55}, {0x6, 0x7, 0xa}, {0x1, 0x4, 0x8f, '\x00', 0xf8}, {0x38, 0xe, 0x6, '\x00', 0x5}, {0x6, 0x5, 0xd, '\x00', 0x7}, {0xf, 0x0, 0x6, '\x00', 0x3}, {0x5, 0x1, 0x9, '\x00', 0x9}, {0x92, 0x4, 0x4, '\x00', 0x9}, {0x4, 0x7, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x7f, '\x00', 0x6}, {0xc0, 0x0, 0x1, '\x00', 0xc6}, {0x1, 0x9e, 0x4, '\x00', 0x7}, {0xa, 0xe, 0x8, '\x00', 0xfc}, {0x8, 0x0, 0x9, '\x00', 0x3}, {0xc, 0xfe, 0x1, '\x00', 0x7}, {0x9, 0x70, 0x5, '\x00', 0x60}, {0xe, 0x9, 0x81, '\x00', 0x9}, {0x2, 0x80, 0x8, '\x00', 0x40}, {0x3, 0x0, 0x3, '\x00', 0x62}]}}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x40) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 165.573465ms ago: executing program 3 (id=807): r0 = socket(0x1f, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf25070000001800ca80140006"], 0x2c}}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x5, &(0x7f0000000440)=0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r5, r4, 0x0, 0x1c) (async) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/12, 0xc}}], 0x1, 0x0, 0x0) keyctl$join(0x1, 0x0) 0s ago: executing program 3 (id=808): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x200082}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x200103, 0x40, 0x30}, 0x18) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\'!\x00', &(0x7f00000002c0)='./file0\x00', r1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x8, 0x0}) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket(0x28, 0x801, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000120000000800080036fda7890800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000003c0)='+\'\x00', &(0x7f0000000400)='./file0\x00', r1) r10 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r11 = fcntl$dupfd(r4, 0x406, r2) ioctl$MON_IOCX_GETX(r10, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r12 = dup(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@nodevmap}]}}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@md0, 0x0, &(0x7f00000001c0)={0x8e8, 0x9, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c0a}) kernel console output (not intermixed with test programs): 735] Call Trace: [ 101.763188][ T1735] [ 101.763207][ T1735] __dump_stack+0x21/0x30 [ 101.763260][ T1735] dump_stack_lvl+0x140/0x1c0 [ 101.763304][ T1735] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.763347][ T1735] ? rb_commit+0x753/0x7b0 [ 101.763389][ T1735] dump_stack+0x19/0x20 [ 101.763441][ T1735] should_fail_ex+0x3c2/0x510 [ 101.763487][ T1735] should_fail_alloc_page+0xec/0x110 [ 101.763534][ T1735] __alloc_pages_noprof+0x1c0/0x7e0 [ 101.763584][ T1735] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 101.763635][ T1735] ? trace_event_buffer_commit+0x256/0x8f0 [ 101.763681][ T1735] __folio_alloc_noprof+0x14/0x80 [ 101.763732][ T1735] folio_prealloc+0x46/0x220 [ 101.763778][ T1735] do_pte_missing+0x16af/0x4440 [ 101.763830][ T1735] ? trace_event_buffer_commit+0x256/0x8f0 [ 101.763874][ T1735] ? pte_marker_clear+0x1b0/0x1b0 [ 101.763912][ T1735] ? cgroup_rstat_updated+0x144/0x800 [ 101.763954][ T1735] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 101.764007][ T1735] handle_mm_fault+0x1189/0x1ba0 [ 101.764043][ T1735] ? __kasan_check_write+0x18/0x20 [ 101.764086][ T1735] ? __cfi_handle_mm_fault+0x10/0x10 [ 101.764134][ T1735] ? follow_page_pte+0x4b2/0xba0 [ 101.764191][ T1735] ? gup_must_unshare+0x1e0/0x1e0 [ 101.764243][ T1735] ? vma_is_secretmem+0x11/0x50 [ 101.764284][ T1735] ? check_vma_flags+0x36d/0x3a0 [ 101.764339][ T1735] __get_user_pages+0x114b/0x22d0 [ 101.764391][ T1735] ? populate_vma_page_range+0x220/0x220 [ 101.764438][ T1735] ? down_read+0x7f/0xe0 [ 101.764488][ T1735] ? __cfi_down_read+0x10/0x10 [ 101.764536][ T1735] ? rwsem_wake+0x108/0x200 [ 101.764593][ T1735] ? rwsem_spin_on_owner+0x3b0/0x3b0 [ 101.764652][ T1735] __mm_populate+0x300/0x440 [ 101.764697][ T1735] do_mlock+0x7f3/0xa10 [ 101.764752][ T1735] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 101.764802][ T1735] ? lru_gen_add_folio+0x880/0x880 [ 101.764860][ T1735] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 101.764926][ T1735] __x64_sys_mlock+0x64/0x80 [ 101.764977][ T1735] x64_sys_call+0x670/0x2ee0 [ 101.765010][ T1735] do_syscall_64+0x57/0xf0 [ 101.765059][ T1735] ? clear_bhb_loop+0x50/0xa0 [ 101.765119][ T1735] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.765167][ T1735] RIP: 0033:0x7ffb4df9e0d9 [ 101.765203][ T1735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.765239][ T1735] RSP: 002b:00007ffb4ee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 101.765279][ T1735] RAX: ffffffffffffffda RBX: 00007ffb4e226090 RCX: 00007ffb4df9e0d9 [ 101.765315][ T1735] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 101.765349][ T1735] RBP: 00007ffb4ee04090 R08: 0000000000000000 R09: 0000000000000000 [ 101.765377][ T1735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.765404][ T1735] R13: 00007ffb4e226128 R14: 00007ffb4e226090 R15: 00007ffc884812c8 [ 101.765440][ T1735] [ 101.886623][ T345] usb 4-1: device descriptor read/8, error -71 [ 102.093862][ T337] usb 2-1: USB disconnect, device number 42 [ 102.194133][ T345] usb usb4-port1: unable to enumerate USB device [ 102.681512][ T1748] loop5: detected capacity change from 0 to 8388607 [ 102.773555][ T345] usb 1-1: USB disconnect, device number 31 [ 102.834162][ T1753] fuse: Invalid rootmode [ 102.843072][ T337] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 103.006291][ T337] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 103.023032][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.033270][ T337] usb 4-1: Product: syz [ 103.037475][ T337] usb 4-1: Manufacturer: syz [ 103.049766][ T337] usb 4-1: SerialNumber: syz [ 103.065548][ T337] usb 4-1: UAS is ignored for this device, using usb-storage instead [ 103.081259][ T337] usb 4-1: UAS is ignored for this device, using usb-storage instead [ 103.096599][ T337] usb-storage 4-1:1.0: USB Mass Storage device detected [ 103.112387][ T337] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 103.128836][ T337] scsi host1: usb-storage 4-1:1.0 [ 103.268948][ T1746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.273396][ T345] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 103.284088][ T1746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.304361][ T1746] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 103.312067][ T1746] netlink: 136 bytes leftover after parsing attributes in process `syz.3.483'. [ 103.343896][ T36] audit: type=1326 audit(1786173579.590:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.3.483" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30ce39e0d9 code=0x0 [ 103.433088][ T345] usb 1-1: device descriptor read/64, error -71 [ 103.448036][ T1771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.466044][ T1771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.643106][ T337] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 103.673177][ T345] usb 1-1: device descriptor read/64, error -71 [ 103.814691][ T337] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.843023][ T337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.851968][ T337] usb 2-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.883036][ T337] usb 2-1: config 1 interface 0 has no altsetting 0 [ 103.894444][ T337] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.903795][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.911839][ T337] usb 2-1: Product: syz [ 103.916214][ T337] usb 2-1: Manufacturer: syz [ 103.920857][ T337] usb 2-1: SerialNumber: syz [ 103.939317][ T345] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 104.093180][ T345] usb 1-1: device descriptor read/64, error -71 [ 104.206257][ T1770] FAULT_INJECTION: forcing a failure. [ 104.206257][ T1770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.220408][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: syz.1.492 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 104.220452][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.220504][ T1770] Call Trace: [ 104.220515][ T1770] [ 104.220526][ T1770] __dump_stack+0x21/0x30 [ 104.220567][ T1770] dump_stack_lvl+0x140/0x1c0 [ 104.220606][ T1770] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.220642][ T1770] ? rb_commit+0x753/0x7b0 [ 104.220671][ T1770] dump_stack+0x19/0x20 [ 104.220704][ T1770] should_fail_ex+0x3c2/0x510 [ 104.220734][ T1770] should_fail_alloc_page+0xec/0x110 [ 104.220768][ T1770] __alloc_pages_noprof+0x1c0/0x7e0 [ 104.220806][ T1770] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 104.220842][ T1770] ? trace_event_buffer_commit+0x256/0x8f0 [ 104.220876][ T1770] __folio_alloc_noprof+0x14/0x80 [ 104.220912][ T1770] folio_prealloc+0x46/0x220 [ 104.220944][ T1770] do_pte_missing+0x16af/0x4440 [ 104.220979][ T1770] ? trace_event_buffer_commit+0x256/0x8f0 [ 104.221010][ T1770] ? pte_marker_clear+0x1b0/0x1b0 [ 104.221043][ T1770] ? cgroup_rstat_updated+0x144/0x800 [ 104.221074][ T1770] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 104.221115][ T1770] handle_mm_fault+0x1189/0x1ba0 [ 104.221145][ T1770] ? __kasan_check_write+0x18/0x20 [ 104.221175][ T1770] ? __cfi_handle_mm_fault+0x10/0x10 [ 104.221205][ T1770] ? follow_page_pte+0x4b2/0xba0 [ 104.221241][ T1770] ? gup_must_unshare+0x1e0/0x1e0 [ 104.221276][ T1770] ? vma_is_secretmem+0x11/0x50 [ 104.221311][ T1770] ? check_vma_flags+0x36d/0x3a0 [ 104.221346][ T1770] __get_user_pages+0x114b/0x22d0 [ 104.221385][ T1770] ? populate_vma_page_range+0x220/0x220 [ 104.221418][ T1770] ? down_read+0x7f/0xe0 [ 104.221463][ T1770] ? __cfi_down_read+0x10/0x10 [ 104.221509][ T1770] __mm_populate+0x300/0x440 [ 104.221549][ T1770] do_mlock+0x7f3/0xa10 [ 104.221585][ T1770] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 104.221616][ T1770] ? lru_gen_add_folio+0x880/0x880 [ 104.221654][ T1770] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 104.221694][ T1770] __x64_sys_mlock+0x64/0x80 [ 104.221729][ T1770] x64_sys_call+0x670/0x2ee0 [ 104.221752][ T1770] do_syscall_64+0x57/0xf0 [ 104.221782][ T1770] ? clear_bhb_loop+0x50/0xa0 [ 104.221818][ T1770] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.221851][ T1770] RIP: 0033:0x7ffb4df9e0d9 [ 104.221874][ T1770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.221897][ T1770] RSP: 002b:00007ffb4ee25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 104.221929][ T1770] RAX: ffffffffffffffda RBX: 00007ffb4e225fa0 RCX: 00007ffb4df9e0d9 [ 104.221950][ T1770] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 104.221969][ T1770] RBP: 00007ffb4ee25090 R08: 0000000000000000 R09: 0000000000000000 [ 104.221988][ T1770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.222004][ T1770] R13: 00007ffb4e226038 R14: 00007ffb4e225fa0 R15: 00007ffc884812c8 [ 104.222028][ T1770] [ 104.348203][ T66] usb 2-1: USB disconnect, device number 43 [ 104.533202][ T345] usb 1-1: device descriptor read/64, error -71 [ 104.643304][ T345] usb usb1-port1: attempt power cycle [ 104.983139][ T345] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 105.004442][ T345] usb 1-1: device descriptor read/8, error -71 [ 105.134383][ T345] usb 1-1: device descriptor read/8, error -71 [ 105.313083][ T66] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 105.380292][ T345] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 105.403732][ T1776] loop5: detected capacity change from 0 to 8388607 [ 105.417582][ T345] usb 1-1: device descriptor read/8, error -71 [ 105.460568][ T10] usb 4-1: USB disconnect, device number 36 [ 105.470132][ T66] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 105.490963][ T1780] fuse: Bad value for 'rootmode' [ 105.494015][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 105.507581][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 105.521018][ T66] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 105.544060][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.556511][ T66] usb 2-1: config 0 descriptor?? [ 105.563433][ T1774] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 105.572175][ T345] usb 1-1: device descriptor read/8, error -71 [ 105.604323][ T667] logitech-hidpp-device 0005:046D:B012.0033: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 105.657426][ T1785] fido_id[1785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.683088][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 105.684840][ T345] usb usb1-port1: unable to enumerate USB device [ 105.775896][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 105.784191][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 105.793920][ T66] usb 2-1: USB disconnect, device number 44 [ 105.847302][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 105.854390][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.873066][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 105.883846][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 105.892636][ T1791] pic_ioport_write: 38 callbacks suppressed [ 105.892701][ T1791] kvm: pic: level sensitive irq not supported [ 105.894046][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.900121][ T1791] pic_ioport_write: 38 callbacks suppressed [ 105.900179][ T1791] kvm: pic: single mode not supported [ 105.913162][ T9] usb 3-1: SerialNumber: syz [ 105.929133][ T1791] kvm: pic: level sensitive irq not supported [ 105.931136][ T1791] kvm: pic: single mode not supported [ 105.938381][ T1791] kvm: pic: level sensitive irq not supported [ 105.959763][ T1791] kvm: pic: single mode not supported [ 105.966000][ T1791] kvm: pic: level sensitive irq not supported [ 105.988579][ T1791] kvm: pic: level sensitive irq not supported [ 106.003781][ T1791] kvm: pic: level sensitive irq not supported [ 106.016686][ T1791] kvm: pic: level sensitive irq not supported [ 106.026978][ T1791] kvm: pic: single mode not supported [ 106.033230][ T1791] kvm: pic: level sensitive irq not supported [ 106.039364][ T1791] kvm: pic: level sensitive irq not supported [ 106.046366][ T1791] kvm: pic: level sensitive irq not supported [ 106.054606][ T1791] kvm: pic: single mode not supported [ 106.061069][ T1791] kvm: pic: single mode not supported [ 106.068046][ T1791] kvm: pic: single mode not supported [ 106.074251][ T1791] kvm: pic: single mode not supported [ 106.081366][ T1791] kvm: pic: single mode not supported [ 106.088377][ T1791] kvm: pic: single mode not supported [ 106.371919][ T1806] fuse: Bad value for 'rootmode' [ 106.553041][ T66] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 106.613742][ T1818] loop5: detected capacity change from 0 to 8388607 [ 106.645071][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 106.714416][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.729630][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.743525][ T66] usb 2-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.756898][ T10] logitech-hidpp-device 0005:046D:B012.0034: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 106.777782][ T66] usb 2-1: config 1 interface 0 has no altsetting 0 [ 106.787477][ T66] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.796984][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.805085][ T66] usb 2-1: Product: syz [ 106.813012][ T66] usb 2-1: Manufacturer: syz [ 106.817664][ T66] usb 2-1: SerialNumber: syz [ 106.848098][ T1821] fido_id[1821]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.927277][ T36] audit: type=1400 audit(1786173583.170:731): avc: denied { map } for pid=1823 comm="syz.3.511" path="/proc/54/stat" dev="proc" ino=15435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 106.959023][ T36] audit: type=1400 audit(1786173583.170:732): avc: denied { execute } for pid=1823 comm="syz.3.511" path="/proc/54/stat" dev="proc" ino=15435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 107.127560][ T345] usb 2-1: USB disconnect, device number 45 [ 107.173029][ T66] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 107.323028][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 107.332250][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.349560][ T66] usb 4-1: New USB device found, idVendor=0582, idProduct=0052, bcdDevice= 0.40 [ 107.365502][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.378216][ T66] usb 4-1: Product: syz [ 107.382435][ T66] usb 4-1: Manufacturer: syz [ 107.392834][ T66] usb 4-1: SerialNumber: syz [ 107.621069][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.644857][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.663384][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.685946][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.709455][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.731889][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.788502][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.811580][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.836809][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.849861][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.876373][ T66] usb 4-1: MIDIStreaming interface descriptor not found [ 107.906674][ T66] usb 4-1: USB disconnect, device number 37 [ 107.948901][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.995604][ T1834] fuse: Bad value for 'rootmode' [ 108.293064][ T345] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 108.443240][ T345] usb 2-1: Using ep0 maxpacket: 8 [ 108.459105][ T345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.477440][ T345] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 108.488421][ T345] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 108.502773][ T345] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 108.512492][ T345] usb 2-1: config 9 has no interface number 0 [ 108.519587][ T345] usb 2-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 108.531834][ T345] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0x8A has invalid wMaxPacketSize 0 [ 108.546775][ T345] usb 2-1: config 9 interface 5 has no altsetting 0 [ 108.547581][ T667] usb 3-1: USB disconnect, device number 38 [ 108.568260][ T345] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 108.582518][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.591313][ T345] usb 2-1: Product: syz [ 108.596554][ T345] usb 2-1: Manufacturer: syz [ 108.602217][ T345] usb 2-1: SerialNumber: syz [ 108.651434][ T1844] loop5: detected capacity change from 0 to 8388607 [ 108.685547][ T317] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 108.725070][ T66] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 108.744615][ T310] logitech-hidpp-device 0005:046D:B012.0035: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 108.809563][ T1847] fido_id[1847]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.824486][ T1849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.855796][ T1849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.883342][ T345] usb 2-1: USB disconnect, device number 46 [ 108.910062][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 108.924350][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.944127][ T66] usb 4-1: config 0 descriptor?? [ 109.056188][ T36] audit: type=1400 audit(1786173585.300:733): avc: denied { read } for pid=1853 comm="syz.0.522" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.093259][ T36] audit: type=1400 audit(1786173585.300:734): avc: denied { open } for pid=1853 comm="syz.0.522" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.117617][ T36] audit: type=1400 audit(1786173585.330:735): avc: denied { ioctl } for pid=1853 comm="syz.0.522" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.125642][ T1856] fuse: Unknown parameter 'use00000000000000000000' [ 109.493044][ T345] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 109.665527][ T345] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.676200][ T345] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.690498][ T345] usb 3-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.704250][ T345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 109.713525][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.723037][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.731074][ T345] usb 3-1: Product: syz [ 109.733303][ T66] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 109.737834][ T345] usb 3-1: Manufacturer: syz [ 109.748510][ T345] usb 3-1: SerialNumber: syz [ 109.903028][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 109.915559][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.935933][ T66] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 109.956578][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 109.973007][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.981151][ T66] usb 2-1: SerialNumber: syz [ 110.053232][ T36] audit: type=1400 audit(1786173586.290:736): avc: denied { read } for pid=1873 comm="syz.0.529" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.096447][ T36] audit: type=1400 audit(1786173586.300:737): avc: denied { open } for pid=1873 comm="syz.0.529" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.146526][ T345] usb 3-1: USB disconnect, device number 39 [ 110.810354][ T1884] fuse: Unknown parameter 'use00000000000000000000' [ 110.858548][ T1886] loop5: detected capacity change from 0 to 8388607 [ 110.877809][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 110.915527][ T10] logitech-hidpp-device 0005:046D:B012.0036: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 110.966334][ T1889] fido_id[1889]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.235192][ T1901] FAULT_INJECTION: forcing a failure. [ 111.235192][ T1901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.248506][ T1901] CPU: 1 UID: 0 PID: 1901 Comm: syz.2.538 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 111.248544][ T1901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.248562][ T1901] Call Trace: [ 111.248572][ T1901] [ 111.248584][ T1901] __dump_stack+0x21/0x30 [ 111.248625][ T1901] dump_stack_lvl+0x140/0x1c0 [ 111.248660][ T1901] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.248698][ T1901] dump_stack+0x19/0x20 [ 111.248731][ T1901] should_fail_ex+0x3c2/0x510 [ 111.248761][ T1901] should_fail+0xf/0x20 [ 111.248788][ T1901] should_fail_usercopy+0x1e/0x30 [ 111.248818][ T1901] _copy_from_user+0x20/0xa0 [ 111.248853][ T1901] pending_reads_dispatch_ioctl+0x2d2/0x2080 [ 111.248893][ T1901] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 111.248940][ T1901] ? selinux_file_ioctl+0x732/0x1480 [ 111.248966][ T1901] ? __kasan_check_read+0x15/0x20 [ 111.248993][ T1901] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 111.249019][ T1901] ? __kasan_check_read+0x15/0x20 [ 111.249045][ T1901] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 111.249080][ T1901] ? bpf_lsm_file_ioctl+0xd/0x20 [ 111.249112][ T1901] ? security_file_ioctl+0x3e/0x110 [ 111.249150][ T1901] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 111.249187][ T1901] __se_sys_ioctl+0x135/0x1b0 [ 111.249220][ T1901] __x64_sys_ioctl+0x7f/0xa0 [ 111.249250][ T1901] x64_sys_call+0x1878/0x2ee0 [ 111.249274][ T1901] do_syscall_64+0x57/0xf0 [ 111.249304][ T1901] ? clear_bhb_loop+0x50/0xa0 [ 111.249339][ T1901] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.249372][ T1901] RIP: 0033:0x7feb51b9e0d9 [ 111.249395][ T1901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.249420][ T1901] RSP: 002b:00007feb52a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.249451][ T1901] RAX: ffffffffffffffda RBX: 00007feb51e25fa0 RCX: 00007feb51b9e0d9 [ 111.249472][ T1901] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 111.249491][ T1901] RBP: 00007feb52a78090 R08: 0000000000000000 R09: 0000000000000000 [ 111.249509][ T1901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.249525][ T1901] R13: 00007feb51e26038 R14: 00007feb51e25fa0 R15: 00007fff8831efd8 [ 111.249548][ T1901] [ 111.505091][ T10] usb 4-1: USB disconnect, device number 38 [ 111.627942][ T1907] fuse: Unknown parameter 'use00000000000000000000' [ 111.728260][ T1909] pic_ioport_write: 72 callbacks suppressed [ 111.728288][ T1909] kvm: pic: level sensitive irq not supported [ 111.736148][ T1909] pic_ioport_write: 130 callbacks suppressed [ 111.736176][ T1909] kvm: pic: single mode not supported [ 111.748568][ T1909] kvm: pic: level sensitive irq not supported [ 111.765840][ T1909] kvm: pic: single mode not supported [ 111.772736][ T1909] kvm: pic: level sensitive irq not supported [ 111.779363][ T1909] kvm: pic: single mode not supported [ 111.785609][ T1909] kvm: pic: level sensitive irq not supported [ 111.793956][ T1909] kvm: pic: level sensitive irq not supported [ 111.802270][ T1909] kvm: pic: level sensitive irq not supported [ 111.808895][ T1909] kvm: pic: level sensitive irq not supported [ 111.819039][ T1909] kvm: pic: single mode not supported [ 111.825328][ T1909] kvm: pic: level sensitive irq not supported [ 111.831520][ T1909] kvm: pic: level sensitive irq not supported [ 111.838362][ T1909] kvm: pic: level sensitive irq not supported [ 111.848315][ T1909] kvm: pic: single mode not supported [ 111.854978][ T1909] kvm: pic: single mode not supported [ 111.861030][ T1909] kvm: pic: single mode not supported [ 111.867687][ T1909] kvm: pic: single mode not supported [ 111.873893][ T1909] kvm: pic: single mode not supported [ 111.884569][ T1909] kvm: pic: single mode not supported [ 112.097106][ T1922] loop5: detected capacity change from 0 to 8388607 [ 112.124819][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 112.203061][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 112.346303][ T345] logitech-hidpp-device 0005:046D:B012.0037: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 112.364431][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.392885][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.422617][ T10] usb 3-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.440796][ T1928] fido_id[1928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.455049][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 112.465040][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.482798][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.491170][ T10] usb 3-1: Product: syz [ 112.495706][ T10] usb 3-1: Manufacturer: syz [ 112.500446][ T10] usb 3-1: SerialNumber: syz [ 112.599810][ T10] usb 2-1: USB disconnect, device number 47 [ 112.662753][ T1935] fuse: Unknown parameter 'user_i00000000000000000000' [ 112.939757][ T66] usb 3-1: USB disconnect, device number 40 [ 112.945951][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 113.123070][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 113.134627][ T10] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 113.152997][ T10] usb 2-1: config 0 has no interface number 1 [ 113.159376][ T10] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.181492][ T10] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 113.202994][ T10] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 113.223005][ T10] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 113.242994][ T10] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.263002][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 113.276042][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 113.294311][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 113.317664][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 113.335013][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.363080][ T10] usb 2-1: Product: syz [ 113.367314][ T10] usb 2-1: Manufacturer: syz [ 113.371949][ T10] usb 2-1: SerialNumber: syz [ 113.382640][ T1955] loop5: detected capacity change from 0 to 8388607 [ 113.398995][ T10] usb 2-1: config 0 descriptor?? [ 113.413118][ T1933] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 113.584531][ T1960] fuse: Unknown parameter 'user_i00000000000000000000' [ 113.636343][ T10] usb 2-1: USB disconnect, device number 48 [ 113.703140][ T667] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 113.725601][ T66] logitech-hidpp-device 0005:046D:B012.0038: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 113.765607][ T1968] overlayfs: failed to resolve './file0': -2 [ 113.801014][ T1967] fido_id[1967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.883050][ T667] usb 1-1: Using ep0 maxpacket: 16 [ 113.897336][ T667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.907895][ T667] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 113.929184][ T667] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 113.938610][ T667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.953011][ T667] usb 1-1: SerialNumber: syz [ 114.205309][ T1986] FAULT_INJECTION: forcing a failure. [ 114.205309][ T1986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.218480][ T1986] CPU: 0 UID: 0 PID: 1986 Comm: syz.3.569 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 114.218519][ T1986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.218536][ T1986] Call Trace: [ 114.218546][ T1986] [ 114.218557][ T1986] __dump_stack+0x21/0x30 [ 114.218598][ T1986] dump_stack_lvl+0x140/0x1c0 [ 114.218634][ T1986] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.218669][ T1986] ? check_stack_object+0x81/0x150 [ 114.218697][ T1986] ? __virt_addr_valid+0x2a1/0x370 [ 114.218729][ T1986] dump_stack+0x19/0x20 [ 114.218762][ T1986] should_fail_ex+0x3c2/0x510 [ 114.218792][ T1986] should_fail+0xf/0x20 [ 114.218819][ T1986] should_fail_usercopy+0x1e/0x30 [ 114.218850][ T1986] _copy_from_user+0x20/0xa0 [ 114.218884][ T1986] memdup_user+0x81/0x170 [ 114.218908][ T1986] ? strndup_user+0x40/0xd0 [ 114.218931][ T1986] strndup_user+0x6c/0xd0 [ 114.218954][ T1986] pending_reads_dispatch_ioctl+0x97b/0x2080 [ 114.218995][ T1986] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 114.219035][ T1986] ? selinux_file_ioctl+0x732/0x1480 [ 114.219060][ T1986] ? __kasan_check_read+0x15/0x20 [ 114.219093][ T1986] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 114.219120][ T1986] ? __kasan_check_read+0x15/0x20 [ 114.219146][ T1986] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 114.219180][ T1986] ? bpf_lsm_file_ioctl+0xd/0x20 [ 114.219213][ T1986] ? security_file_ioctl+0x3e/0x110 [ 114.219250][ T1986] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 114.219287][ T1986] __se_sys_ioctl+0x135/0x1b0 [ 114.219318][ T1986] __x64_sys_ioctl+0x7f/0xa0 [ 114.219348][ T1986] x64_sys_call+0x1878/0x2ee0 [ 114.219372][ T1986] do_syscall_64+0x57/0xf0 [ 114.219402][ T1986] ? clear_bhb_loop+0x50/0xa0 [ 114.219436][ T1986] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.219469][ T1986] RIP: 0033:0x7f30ce39e0d9 [ 114.219492][ T1986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.219515][ T1986] RSP: 002b:00007f30cf186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.219545][ T1986] RAX: ffffffffffffffda RBX: 00007f30ce625fa0 RCX: 00007f30ce39e0d9 [ 114.219566][ T1986] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 114.219585][ T1986] RBP: 00007f30cf186090 R08: 0000000000000000 R09: 0000000000000000 [ 114.219603][ T1986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.219621][ T1986] R13: 00007f30ce626038 R14: 00007f30ce625fa0 R15: 00007ffd7144b648 [ 114.219644][ T1986] [ 114.498161][ T1985] incfs: Error accessing: ./file0. [ 114.503449][ T1985] incfs: mount failed -20 [ 114.557211][ T1991] netlink: 148 bytes leftover after parsing attributes in process `syz.1.571'. [ 114.612067][ T1992] capability: warning: `syz.1.571' uses deprecated v2 capabilities in a way that may be insecure [ 114.777961][ T1995] overlayfs: failed to resolve './file0': -2 [ 114.799159][ T1996] fuse: Unknown parameter 'user_i00000000000000000000' [ 114.845993][ T1998] loop5: detected capacity change from 0 to 8388607 [ 114.874086][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 115.344434][ T345] logitech-hidpp-device 0005:046D:B012.0039: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 115.383057][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 115.440184][ T2015] fido_id[2015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.553426][ T36] audit: type=1400 audit(1786173591.800:738): avc: denied { create } for pid=2017 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 115.596691][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.617108][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.636306][ T10] usb 2-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.672997][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 115.694377][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.703714][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.711746][ T10] usb 2-1: Product: syz [ 115.733009][ T10] usb 2-1: Manufacturer: syz [ 115.737674][ T10] usb 2-1: SerialNumber: syz [ 115.936195][ T2022] overlayfs: failed to resolve './file0': -2 [ 116.114629][ T10] usb 2-1: USB disconnect, device number 49 [ 116.201919][ T2027] fuse: Unknown parameter 'user_id00000000000000000000' [ 116.558195][ T10] usb 1-1: USB disconnect, device number 36 [ 116.574783][ T345] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 116.644997][ T2031] FAULT_INJECTION: forcing a failure. [ 116.644997][ T2031] name failslab, interval 1, probability 0, space 0, times 0 [ 116.657779][ T2031] CPU: 1 UID: 0 PID: 2031 Comm: syz.0.586 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 116.657819][ T2031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.657836][ T2031] Call Trace: [ 116.657847][ T2031] [ 116.657858][ T2031] __dump_stack+0x21/0x30 [ 116.657899][ T2031] dump_stack_lvl+0x140/0x1c0 [ 116.657935][ T2031] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.657973][ T2031] dump_stack+0x19/0x20 [ 116.658007][ T2031] should_fail_ex+0x3c2/0x510 [ 116.658038][ T2031] should_failslab+0xac/0x100 [ 116.658070][ T2031] __kmalloc_cache_noprof+0x41/0x470 [ 116.658098][ T2031] ? file_id_to_str+0xb9/0x1f0 [ 116.658130][ T2031] file_id_to_str+0xb9/0x1f0 [ 116.658159][ T2031] ? __kasan_check_write+0x18/0x20 [ 116.658185][ T2031] ? __cfi_file_id_to_str+0x10/0x10 [ 116.658215][ T2031] ? memdup_user+0xb1/0x170 [ 116.658238][ T2031] ? validate_name+0x186/0x1d0 [ 116.658275][ T2031] pending_reads_dispatch_ioctl+0xd0b/0x2080 [ 116.658323][ T2031] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 116.658363][ T2031] ? selinux_file_ioctl+0x732/0x1480 [ 116.658388][ T2031] ? __kasan_check_read+0x15/0x20 [ 116.658414][ T2031] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 116.658441][ T2031] ? __kasan_check_read+0x15/0x20 [ 116.658466][ T2031] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 116.658500][ T2031] ? bpf_lsm_file_ioctl+0xd/0x20 [ 116.658533][ T2031] ? security_file_ioctl+0x3e/0x110 [ 116.658571][ T2031] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 116.658609][ T2031] __se_sys_ioctl+0x135/0x1b0 [ 116.658641][ T2031] __x64_sys_ioctl+0x7f/0xa0 [ 116.658671][ T2031] x64_sys_call+0x1878/0x2ee0 [ 116.658696][ T2031] do_syscall_64+0x57/0xf0 [ 116.658725][ T2031] ? clear_bhb_loop+0x50/0xa0 [ 116.658759][ T2031] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.658793][ T2031] RIP: 0033:0x7f670d19e0d9 [ 116.658817][ T2031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.658839][ T2031] RSP: 002b:00007f670e12b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.658870][ T2031] RAX: ffffffffffffffda RBX: 00007f670d425fa0 RCX: 00007f670d19e0d9 [ 116.658891][ T2031] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 116.658910][ T2031] RBP: 00007f670e12b090 R08: 0000000000000000 R09: 0000000000000000 [ 116.658937][ T2031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.658955][ T2031] R13: 00007f670d426038 R14: 00007f670d425fa0 R15: 00007fff0fa2e558 [ 116.658978][ T2031] [ 116.950563][ T2033] loop5: detected capacity change from 0 to 8388607 [ 116.994485][ T345] usb 4-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 117.005483][ T345] usb 4-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.018489][ T345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.025275][ T345] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 117.034425][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.043671][ T345] usb 4-1: config 0 descriptor?? [ 117.049129][ T2029] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.067279][ T2037] syz.0.589 uses obsolete (PF_INET,SOCK_PACKET) [ 117.330147][ T667] logitech-hidpp-device 0005:046D:B012.003A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 117.343135][ T9] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 117.408803][ T2045] fido_id[2045]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.426703][ T2047] fuse: Unknown parameter 'user_id00000000000000000000' [ 117.514364][ T9] usb 1-1: descriptor type invalid, skip [ 117.520282][ T9] usb 1-1: No LPM exit latency info found, disabling LPM. [ 117.544143][ T9] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 117.556572][ T345] itetech 0003:258A:6A88.003B: unknown main item tag 0x0 [ 117.563776][ T345] itetech 0003:258A:6A88.003B: unknown main item tag 0x0 [ 117.570952][ T345] itetech 0003:258A:6A88.003B: unknown main item tag 0x0 [ 117.583013][ T9] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 117.605683][ T345] itetech 0003:258A:6A88.003B: unknown main item tag 0x0 [ 117.612802][ T345] itetech 0003:258A:6A88.003B: unknown main item tag 0x0 [ 117.614688][ T9] usb 1-1: string descriptor 0 read error: -22 [ 117.626830][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 117.646593][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.653585][ T345] itetech 0003:258A:6A88.003B: unknown main item tag 0x5 [ 117.661716][ T345] itetech 0003:258A:6A88.003B: item fetching failed at offset 20/40 [ 117.703297][ T345] itetech 0003:258A:6A88.003B: probe with driver itetech failed with error -22 [ 117.753056][ T667] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 117.880868][ T2037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.893714][ T345] usb 4-1: USB disconnect, device number 39 [ 117.917641][ T36] audit: type=1400 audit(1786173594.160:739): avc: denied { getopt } for pid=2035 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.924095][ T10] usb 1-1: USB disconnect, device number 37 [ 117.953092][ T667] usb 3-1: Using ep0 maxpacket: 16 [ 118.002612][ T667] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.023244][ T667] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 118.083089][ T667] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 118.092197][ T667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.123005][ T667] usb 3-1: SerialNumber: syz [ 118.243058][ T46] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 118.424461][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 118.453002][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 118.473215][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 118.505140][ T46] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 118.523069][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.557287][ T46] usb 2-1: config 0 descriptor?? [ 118.562763][ T2056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.845140][ T2069] FAULT_INJECTION: forcing a failure. [ 118.845140][ T2069] name failslab, interval 1, probability 0, space 0, times 0 [ 118.857910][ T2069] CPU: 0 UID: 0 PID: 2069 Comm: syz.0.602 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 118.857949][ T2069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.857968][ T2069] Call Trace: [ 118.857979][ T2069] [ 118.857993][ T2069] __dump_stack+0x21/0x30 [ 118.858034][ T2069] dump_stack_lvl+0x140/0x1c0 [ 118.858070][ T2069] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.858107][ T2069] ? expand_files+0xda/0x6f0 [ 118.858141][ T2069] dump_stack+0x19/0x20 [ 118.858175][ T2069] should_fail_ex+0x3c2/0x510 [ 118.858206][ T2069] should_failslab+0xac/0x100 [ 118.858239][ T2069] kmem_cache_alloc_noprof+0x42/0x410 [ 118.858267][ T2069] ? alloc_empty_file+0xbf/0x270 [ 118.858301][ T2069] ? _raw_spin_unlock+0x45/0x60 [ 118.858332][ T2069] alloc_empty_file+0xbf/0x270 [ 118.858366][ T2069] dentry_open+0x4b/0xb0 [ 118.858401][ T2069] dir_relative_path_resolve+0x7e/0x110 [ 118.858441][ T2069] pending_reads_dispatch_ioctl+0x10f5/0x2080 [ 118.858483][ T2069] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 118.858523][ T2069] ? selinux_file_ioctl+0x732/0x1480 [ 118.858550][ T2069] ? __kasan_check_read+0x15/0x20 [ 118.858583][ T2069] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 118.858611][ T2069] ? __kasan_check_read+0x15/0x20 [ 118.858638][ T2069] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 118.858673][ T2069] ? bpf_lsm_file_ioctl+0xd/0x20 [ 118.858715][ T2069] ? security_file_ioctl+0x3e/0x110 [ 118.858755][ T2069] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 118.858794][ T2069] __se_sys_ioctl+0x135/0x1b0 [ 118.858827][ T2069] __x64_sys_ioctl+0x7f/0xa0 [ 118.858859][ T2069] x64_sys_call+0x1878/0x2ee0 [ 118.858884][ T2069] do_syscall_64+0x57/0xf0 [ 118.858914][ T2069] ? clear_bhb_loop+0x50/0xa0 [ 118.858949][ T2069] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.858983][ T2069] RIP: 0033:0x7f670d19e0d9 [ 118.859007][ T2069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.859031][ T2069] RSP: 002b:00007f670e12b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.859062][ T2069] RAX: ffffffffffffffda RBX: 00007f670d425fa0 RCX: 00007f670d19e0d9 [ 118.859083][ T2069] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 118.859104][ T2069] RBP: 00007f670e12b090 R08: 0000000000000000 R09: 0000000000000000 [ 118.859123][ T2069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.859142][ T2069] R13: 00007f670d426038 R14: 00007f670d425fa0 R15: 00007fff0fa2e558 [ 118.859166][ T2069] [ 118.992199][ T46] hid-steam 0003:28DE:1205.003C: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 119.206883][ T2072] fuse: Unknown parameter 'user_id00000000000000000000' [ 119.343085][ T46] hid-steam 0003:28DE:1205.003C: Steam Controller 'XXXXXXXXXX' connected [ 119.373727][ T46] input: Steam Deck as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.003C/input/input10 [ 119.397187][ T46] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.003C/input/input11 [ 119.443561][ T46] hid-steam 0003:28DE:1205.003D: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 119.486138][ T46] usb 2-1: USB disconnect, device number 50 [ 119.507778][ T46] hid-steam 0003:28DE:1205.003C: Steam Controller 'XXXXXXXXXX' disconnected [ 119.523085][ T345] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 119.557188][ T2075] fido_id[2075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.704703][ T345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.718582][ T345] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.737226][ T345] usb 1-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.764300][ T345] usb 1-1: config 1 interface 0 has no altsetting 0 [ 119.791161][ T345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.806463][ T345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.821744][ T345] usb 1-1: Product: syz [ 119.834118][ T345] usb 1-1: Manufacturer: syz [ 119.855365][ T345] usb 1-1: SerialNumber: syz [ 120.025039][ T2081] loop5: detected capacity change from 0 to 8388607 [ 120.244574][ T9] usb 1-1: USB disconnect, device number 38 [ 120.564264][ T345] usb 3-1: USB disconnect, device number 41 [ 120.689398][ T667] logitech-hidpp-device 0005:046D:B012.003E: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 120.778814][ T2102] fido_id[2102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.835206][ T2105] fuse: Bad value for 'fd' [ 120.938378][ T2111] FAULT_INJECTION: forcing a failure. [ 120.938378][ T2111] name failslab, interval 1, probability 0, space 0, times 0 [ 120.951653][ T2111] CPU: 0 UID: 0 PID: 2111 Comm: syz.0.615 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 120.951698][ T2111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.951717][ T2111] Call Trace: [ 120.951728][ T2111] [ 120.951740][ T2111] __dump_stack+0x21/0x30 [ 120.951781][ T2111] dump_stack_lvl+0x140/0x1c0 [ 120.951816][ T2111] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.951854][ T2111] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 120.951886][ T2111] dump_stack+0x19/0x20 [ 120.951919][ T2111] should_fail_ex+0x3c2/0x510 [ 120.951949][ T2111] should_failslab+0xac/0x100 [ 120.951981][ T2111] kmem_cache_alloc_noprof+0x42/0x410 [ 120.952008][ T2111] ? security_file_alloc+0x49/0x220 [ 120.952048][ T2111] security_file_alloc+0x49/0x220 [ 120.952085][ T2111] init_file+0x9e/0x210 [ 120.952118][ T2111] alloc_empty_file+0xd9/0x270 [ 120.952152][ T2111] dentry_open+0x4b/0xb0 [ 120.952193][ T2111] dir_relative_path_resolve+0x7e/0x110 [ 120.952233][ T2111] pending_reads_dispatch_ioctl+0x10f5/0x2080 [ 120.952279][ T2111] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 120.952320][ T2111] ? selinux_file_ioctl+0x732/0x1480 [ 120.952346][ T2111] ? __kasan_check_read+0x15/0x20 [ 120.952372][ T2111] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 120.952399][ T2111] ? __kasan_check_read+0x15/0x20 [ 120.952425][ T2111] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 120.952459][ T2111] ? bpf_lsm_file_ioctl+0xd/0x20 [ 120.952492][ T2111] ? security_file_ioctl+0x3e/0x110 [ 120.952535][ T2111] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 120.952574][ T2111] __se_sys_ioctl+0x135/0x1b0 [ 120.952607][ T2111] __x64_sys_ioctl+0x7f/0xa0 [ 120.952637][ T2111] x64_sys_call+0x1878/0x2ee0 [ 120.952661][ T2111] do_syscall_64+0x57/0xf0 [ 120.952688][ T2111] ? clear_bhb_loop+0x50/0xa0 [ 120.952722][ T2111] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.952754][ T2111] RIP: 0033:0x7f670d19e0d9 [ 120.952777][ T2111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.952799][ T2111] RSP: 002b:00007f670e12b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.952829][ T2111] RAX: ffffffffffffffda RBX: 00007f670d425fa0 RCX: 00007f670d19e0d9 [ 120.952851][ T2111] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 120.952869][ T2111] RBP: 00007f670e12b090 R08: 0000000000000000 R09: 0000000000000000 [ 120.952887][ T2111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.952905][ T2111] R13: 00007f670d426038 R14: 00007f670d425fa0 R15: 00007fff0fa2e558 [ 120.952933][ T2111] [ 121.214174][ T36] audit: type=1400 audit(1786173597.460:740): avc: denied { cmd } for pid=2108 comm="iou-wrk-2110" path="socket:[16263]" dev="sockfs" ino=16263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 121.294290][ T2115] fuse: Bad value for 'fd' [ 121.590330][ T2119] overlayfs: failed to resolve './file0': -2 [ 121.685708][ T667] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 121.793745][ T2125] loop5: detected capacity change from 0 to 8388607 [ 121.838130][ T317] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 121.873098][ T667] usb 1-1: Using ep0 maxpacket: 16 [ 121.889962][ T667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.912322][ T667] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 121.934154][ T667] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 121.953361][ T667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.966917][ T667] usb 1-1: SerialNumber: syz [ 121.995940][ T2129] fuse: Bad value for 'fd' [ 122.119226][ T9] logitech-hidpp-device 0005:046D:B012.003F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 122.210114][ T2136] fido_id[2136]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.309658][ T36] audit: type=1400 audit(1786173598.550:741): avc: denied { mount } for pid=2131 comm="syz.1.624" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.343770][ T2142] overlayfs: failed to resolve './file0': -2 [ 122.402015][ T36] audit: type=1400 audit(1786173598.640:742): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.442355][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 122.613985][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.633054][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.658418][ T10] usb 4-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.692500][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 122.724143][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.733415][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.741460][ T10] usb 4-1: Product: syz [ 122.773055][ T10] usb 4-1: Manufacturer: syz [ 122.777726][ T10] usb 4-1: SerialNumber: syz [ 122.796473][ T2151] FAULT_INJECTION: forcing a failure. [ 122.796473][ T2151] name failslab, interval 1, probability 0, space 0, times 0 [ 122.809249][ T2151] CPU: 1 UID: 0 PID: 2151 Comm: syz.1.631 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 122.809297][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.809316][ T2151] Call Trace: [ 122.809326][ T2151] [ 122.809339][ T2151] __dump_stack+0x21/0x30 [ 122.809379][ T2151] dump_stack_lvl+0x140/0x1c0 [ 122.809415][ T2151] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.809453][ T2151] dump_stack+0x19/0x20 [ 122.809487][ T2151] should_fail_ex+0x3c2/0x510 [ 122.809517][ T2151] should_failslab+0xac/0x100 [ 122.809554][ T2151] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 122.809584][ T2151] ? __d_alloc+0x42/0x8c0 [ 122.809609][ T2151] ? kasan_save_stack+0x4d/0x60 [ 122.809639][ T2151] __d_alloc+0x42/0x8c0 [ 122.809664][ T2151] ? __se_sys_ioctl+0x135/0x1b0 [ 122.809695][ T2151] ? __x64_sys_ioctl+0x7f/0xa0 [ 122.809727][ T2151] d_alloc_parallel+0xe4/0x1370 [ 122.809754][ T2151] ? avc_has_perm_noaudit+0x26b/0x360 [ 122.809786][ T2151] ? __asan_memcpy+0x5a/0x80 [ 122.809814][ T2151] ? selinux_inode_permission+0x3f2/0x5d0 [ 122.809852][ T2151] ? __cfi_d_alloc_parallel+0x10/0x10 [ 122.809879][ T2151] ? __cfi_selinux_inode_permission+0x10/0x10 [ 122.809917][ T2151] ? make_vfsuid+0x4d/0xa0 [ 122.809941][ T2151] ? generic_permission+0x1ec/0x590 [ 122.809971][ T2151] __lookup_slow+0x150/0x420 [ 122.810002][ T2151] ? __d_lookup+0x4e8/0x550 [ 122.810029][ T2151] ? lookup_one_len+0x300/0x300 [ 122.810061][ T2151] ? lookup_one_common+0x320/0x470 [ 122.810094][ T2151] lookup_one_len+0x1a1/0x300 [ 122.810126][ T2151] ? __kasan_check_write+0x18/0x20 [ 122.810153][ T2151] ? __cfi_lookup_one_len+0x10/0x10 [ 122.810185][ T2151] ? close_fd+0x7e/0xa0 [ 122.810214][ T2151] incfs_lookup_dentry+0x64/0xc0 [ 122.810246][ T2151] pending_reads_dispatch_ioctl+0x1213/0x2080 [ 122.810295][ T2151] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 122.810334][ T2151] ? selinux_file_ioctl+0x732/0x1480 [ 122.810360][ T2151] ? __kasan_check_read+0x15/0x20 [ 122.810386][ T2151] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 122.810413][ T2151] ? __kasan_check_read+0x15/0x20 [ 122.810439][ T2151] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 122.810474][ T2151] ? bpf_lsm_file_ioctl+0xd/0x20 [ 122.810507][ T2151] ? security_file_ioctl+0x3e/0x110 [ 122.810546][ T2151] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 122.810585][ T2151] __se_sys_ioctl+0x135/0x1b0 [ 122.810617][ T2151] __x64_sys_ioctl+0x7f/0xa0 [ 122.810648][ T2151] x64_sys_call+0x1878/0x2ee0 [ 122.810672][ T2151] do_syscall_64+0x57/0xf0 [ 122.810706][ T2151] ? clear_bhb_loop+0x50/0xa0 [ 122.810742][ T2151] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.810775][ T2151] RIP: 0033:0x7ffb4df9e0d9 [ 122.810798][ T2151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.810822][ T2151] RSP: 002b:00007ffb4ee25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.810853][ T2151] RAX: ffffffffffffffda RBX: 00007ffb4e225fa0 RCX: 00007ffb4df9e0d9 [ 122.810875][ T2151] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 122.810894][ T2151] RBP: 00007ffb4ee25090 R08: 0000000000000000 R09: 0000000000000000 [ 122.810913][ T2151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.810932][ T2151] R13: 00007ffb4e226038 R14: 00007ffb4e225fa0 R15: 00007ffc884812c8 [ 122.810961][ T2151] [ 122.810978][ T2151] incfs_lookup_dentry err:-12 [ 123.303718][ T10] usb 4-1: USB disconnect, device number 40 [ 123.511464][ T2156] /dev/rnullb0: Can't open blockdev [ 123.927900][ T2158] fuse: Bad value for 'fd' [ 124.016723][ T2160] loop5: detected capacity change from 0 to 8388607 [ 124.053955][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 124.220977][ T2165] overlayfs: failed to resolve './file0': -2 [ 124.445484][ T2174] FAULT_INJECTION: forcing a failure. [ 124.445484][ T2174] name failslab, interval 1, probability 0, space 0, times 0 [ 124.458229][ T2174] CPU: 0 UID: 0 PID: 2174 Comm: syz.3.641 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 124.458269][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.458287][ T2174] Call Trace: [ 124.458299][ T2174] [ 124.458311][ T2174] __dump_stack+0x21/0x30 [ 124.458352][ T2174] dump_stack_lvl+0x140/0x1c0 [ 124.458388][ T2174] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.458424][ T2174] ? trace_event_buffer_commit+0x256/0x8f0 [ 124.458456][ T2174] dump_stack+0x19/0x20 [ 124.458490][ T2174] should_fail_ex+0x3c2/0x510 [ 124.458520][ T2174] should_failslab+0xac/0x100 [ 124.458554][ T2174] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 124.458583][ T2174] ? __d_alloc+0x42/0x8c0 [ 124.458608][ T2174] ? _raw_spin_lock+0x92/0x120 [ 124.458639][ T2174] __d_alloc+0x42/0x8c0 [ 124.458664][ T2174] d_alloc_parallel+0xe4/0x1370 [ 124.458692][ T2174] ? avc_has_perm_noaudit+0x26b/0x360 [ 124.458724][ T2174] ? __asan_memcpy+0x5a/0x80 [ 124.458752][ T2174] ? selinux_inode_permission+0x3f2/0x5d0 [ 124.458790][ T2174] ? __cfi_d_alloc_parallel+0x10/0x10 [ 124.458818][ T2174] ? __cfi_selinux_inode_permission+0x10/0x10 [ 124.458855][ T2174] ? _raw_spin_lock+0x92/0x120 [ 124.458884][ T2174] ? make_vfsuid+0x4d/0xa0 [ 124.458909][ T2174] ? generic_permission+0x1ec/0x590 [ 124.458940][ T2174] __lookup_slow+0x150/0x420 [ 124.458971][ T2174] ? __d_lookup+0x4e8/0x550 [ 124.458999][ T2174] ? lookup_one_len+0x300/0x300 [ 124.459031][ T2174] ? lookup_one_common+0x320/0x470 [ 124.459065][ T2174] lookup_one_len+0x1a1/0x300 [ 124.459096][ T2174] ? __kasan_check_write+0x18/0x20 [ 124.459130][ T2174] ? __cfi_lookup_one_len+0x10/0x10 [ 124.459162][ T2174] ? __kasan_check_write+0x18/0x20 [ 124.459188][ T2174] incfs_lookup_dentry+0x64/0xc0 [ 124.459220][ T2174] pending_reads_dispatch_ioctl+0x1661/0x2080 [ 124.459261][ T2174] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 124.459301][ T2174] ? selinux_file_ioctl+0x732/0x1480 [ 124.459326][ T2174] ? __kasan_check_read+0x15/0x20 [ 124.459352][ T2174] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 124.459379][ T2174] ? __kasan_check_read+0x15/0x20 [ 124.459405][ T2174] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 124.459439][ T2174] ? bpf_lsm_file_ioctl+0xd/0x20 [ 124.459473][ T2174] ? security_file_ioctl+0x3e/0x110 [ 124.459518][ T2174] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 124.459561][ T2174] __se_sys_ioctl+0x135/0x1b0 [ 124.459594][ T2174] __x64_sys_ioctl+0x7f/0xa0 [ 124.459626][ T2174] x64_sys_call+0x1878/0x2ee0 [ 124.459651][ T2174] do_syscall_64+0x57/0xf0 [ 124.459680][ T2174] ? clear_bhb_loop+0x50/0xa0 [ 124.459715][ T2174] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.459748][ T2174] RIP: 0033:0x7f30ce39e0d9 [ 124.459771][ T2174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.459796][ T2174] RSP: 002b:00007f30cf186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.459829][ T2174] RAX: ffffffffffffffda RBX: 00007f30ce625fa0 RCX: 00007f30ce39e0d9 [ 124.459850][ T2174] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 124.459870][ T2174] RBP: 00007f30cf186090 R08: 0000000000000000 R09: 0000000000000000 [ 124.459889][ T2174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.459907][ T2174] R13: 00007f30ce626038 R14: 00007f30ce625fa0 R15: 00007ffd7144b648 [ 124.459930][ T2174] [ 124.459946][ T2174] incfs_lookup_dentry err:-12 [ 124.822439][ T345] usb 1-1: USB disconnect, device number 39 [ 124.883691][ T2179] fuse: Unknown parameter '0x0000000000000005' [ 124.972800][ T36] audit: type=1326 audit(1786173601.210:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2180 comm="syz.1.642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df9e0d9 code=0x0 [ 125.225962][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 125.274472][ T2197] loop5: detected capacity change from 0 to 8388607 [ 125.427086][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.453027][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.482589][ T10] usb 4-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.513058][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 125.524799][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.552994][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.571469][ T10] usb 4-1: Product: syz [ 125.581640][ T10] usb 4-1: Manufacturer: syz [ 125.589265][ T10] usb 4-1: SerialNumber: syz [ 125.633061][ T378] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 125.717565][ T345] logitech-hidpp-device 0005:046D:B012.0040: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 125.784547][ T2207] fido_id[2207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.808448][ T378] usb 1-1: Using ep0 maxpacket: 16 [ 125.820066][ T378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.830941][ T378] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 125.861169][ T378] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 125.870604][ T378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.883032][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 125.901070][ T378] usb 1-1: SerialNumber: syz [ 125.997192][ T378] usb 4-1: USB disconnect, device number 41 [ 126.016777][ T2211] fuse: Unknown parameter '0x0000000000000005' [ 126.064067][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 126.114594][ T10] usb 2-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 126.133041][ T10] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.156805][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.173012][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=0095, bcdDevice= 0.00 [ 126.212859][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.222037][ T10] usb 2-1: config 0 descriptor?? [ 126.234121][ T2213] FAULT_INJECTION: forcing a failure. [ 126.234121][ T2213] name failslab, interval 1, probability 0, space 0, times 0 [ 126.246897][ T2213] CPU: 0 UID: 0 PID: 2213 Comm: syz.2.655 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 126.246939][ T2213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.246958][ T2213] Call Trace: [ 126.246970][ T2213] [ 126.246982][ T2213] __dump_stack+0x21/0x30 [ 126.247027][ T2213] dump_stack_lvl+0x140/0x1c0 [ 126.247068][ T2213] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.247105][ T2213] ? trace_event_buffer_commit+0x256/0x8f0 [ 126.247138][ T2213] dump_stack+0x19/0x20 [ 126.247175][ T2213] should_fail_ex+0x3c2/0x510 [ 126.247206][ T2213] should_failslab+0xac/0x100 [ 126.247240][ T2213] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 126.247269][ T2213] ? __d_alloc+0x42/0x8c0 [ 126.247294][ T2213] ? _raw_spin_lock+0x92/0x120 [ 126.247325][ T2213] __d_alloc+0x42/0x8c0 [ 126.247351][ T2213] d_alloc_parallel+0xe4/0x1370 [ 126.247379][ T2213] ? avc_has_perm_noaudit+0x26b/0x360 [ 126.247411][ T2213] ? __asan_memcpy+0x5a/0x80 [ 126.247440][ T2213] ? selinux_inode_permission+0x3f2/0x5d0 [ 126.247478][ T2213] ? __cfi_d_alloc_parallel+0x10/0x10 [ 126.247506][ T2213] ? __cfi_selinux_inode_permission+0x10/0x10 [ 126.247545][ T2213] ? _raw_spin_lock+0x92/0x120 [ 126.247581][ T2213] ? make_vfsuid+0x4d/0xa0 [ 126.247606][ T2213] ? generic_permission+0x1ec/0x590 [ 126.247637][ T2213] __lookup_slow+0x150/0x420 [ 126.247670][ T2213] ? __d_lookup+0x4e8/0x550 [ 126.247697][ T2213] ? lookup_one_len+0x300/0x300 [ 126.247730][ T2213] ? lookup_one_common+0x320/0x470 [ 126.247764][ T2213] lookup_one_len+0x1a1/0x300 [ 126.247796][ T2213] ? __kasan_check_write+0x18/0x20 [ 126.247824][ T2213] ? __cfi_lookup_one_len+0x10/0x10 [ 126.247857][ T2213] ? __kasan_check_write+0x18/0x20 [ 126.247884][ T2213] incfs_lookup_dentry+0x64/0xc0 [ 126.247916][ T2213] pending_reads_dispatch_ioctl+0x1837/0x2080 [ 126.247958][ T2213] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 126.247999][ T2213] ? selinux_file_ioctl+0x732/0x1480 [ 126.248025][ T2213] ? __kasan_check_read+0x15/0x20 [ 126.248051][ T2213] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 126.248080][ T2213] ? __kasan_check_read+0x15/0x20 [ 126.248106][ T2213] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 126.248142][ T2213] ? bpf_lsm_file_ioctl+0xd/0x20 [ 126.248175][ T2213] ? security_file_ioctl+0x3e/0x110 [ 126.248214][ T2213] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 126.248254][ T2213] __se_sys_ioctl+0x135/0x1b0 [ 126.248286][ T2213] __x64_sys_ioctl+0x7f/0xa0 [ 126.248318][ T2213] x64_sys_call+0x1878/0x2ee0 [ 126.248343][ T2213] do_syscall_64+0x57/0xf0 [ 126.248373][ T2213] ? clear_bhb_loop+0x50/0xa0 [ 126.248410][ T2213] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.248444][ T2213] RIP: 0033:0x7feb51b9e0d9 [ 126.248468][ T2213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.248491][ T2213] RSP: 002b:00007feb52a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.248524][ T2213] RAX: ffffffffffffffda RBX: 00007feb51e25fa0 RCX: 00007feb51b9e0d9 [ 126.248546][ T2213] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 126.248572][ T2213] RBP: 00007feb52a78090 R08: 0000000000000000 R09: 0000000000000000 [ 126.248592][ T2213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.248610][ T2213] R13: 00007feb51e26038 R14: 00007feb51e25fa0 R15: 00007fff8831efd8 [ 126.248634][ T2213] [ 126.248688][ T2213] incfs_lookup_dentry err:-12 [ 126.903030][ T345] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 127.003832][ T2226] loop5: detected capacity change from 0 to 8388607 [ 127.023780][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 127.115355][ T345] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 127.130552][ T345] usb 3-1: config 0 has no interface number 0 [ 127.158208][ T345] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 127.167799][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.182996][ T345] usb 3-1: Product: syz [ 127.198036][ T345] usb 3-1: Manufacturer: syz [ 127.202693][ T345] usb 3-1: SerialNumber: syz [ 127.237223][ T345] usb 3-1: config 0 descriptor?? [ 127.326940][ T36] audit: type=1400 audit(1786173603.570:744): avc: denied { read append } for pid=2203 comm="syz.1.652" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.399102][ T36] audit: type=1400 audit(1786173603.600:745): avc: denied { open } for pid=2203 comm="syz.1.652" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.460130][ T36] audit: type=1400 audit(1786173603.610:746): avc: denied { ioctl } for pid=2203 comm="syz.1.652" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.863039][ T345] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 127.883534][ T345] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 127.913056][ T345] asix 3-1:0.251: probe with driver asix failed with error -71 [ 127.934463][ T345] usb 3-1: USB disconnect, device number 42 [ 128.432768][ T46] usb 1-1: USB disconnect, device number 40 [ 128.458813][ T2239] fuse: Unknown parameter '0x0000000000000005' [ 128.523530][ T10] logitech-hidpp-device 0005:046D:B012.0041: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 128.631855][ T2245] fido_id[2245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.777619][ T2254] FAULT_INJECTION: forcing a failure. [ 128.777619][ T2254] name failslab, interval 1, probability 0, space 0, times 0 [ 128.790415][ T2254] CPU: 1 UID: 0 PID: 2254 Comm: syz.2.669 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 128.790454][ T2254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.790472][ T2254] Call Trace: [ 128.790483][ T2254] [ 128.790496][ T2254] __dump_stack+0x21/0x30 [ 128.790536][ T2254] dump_stack_lvl+0x140/0x1c0 [ 128.790572][ T2254] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.790611][ T2254] dump_stack+0x19/0x20 [ 128.790645][ T2254] should_fail_ex+0x3c2/0x510 [ 128.790676][ T2254] should_failslab+0xac/0x100 [ 128.790716][ T2254] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 128.790746][ T2254] ? shmem_alloc_inode+0x3b/0xd0 [ 128.790779][ T2254] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 128.790812][ T2254] shmem_alloc_inode+0x3b/0xd0 [ 128.790845][ T2254] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 128.790877][ T2254] alloc_inode+0x7d/0x270 [ 128.790911][ T2254] new_inode+0x25/0x1e0 [ 128.790942][ T2254] ? show_sid+0x1e0/0x1e0 [ 128.790966][ T2254] shmem_get_inode+0x352/0xc10 [ 128.790999][ T2254] shmem_mknod+0x63/0x200 [ 128.791035][ T2254] shmem_create+0x38/0x50 [ 128.791069][ T2254] vfs_create+0x4f2/0x730 [ 128.791103][ T2254] pending_reads_dispatch_ioctl+0x1973/0x2080 [ 128.791144][ T2254] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 128.791183][ T2254] ? selinux_file_ioctl+0x732/0x1480 [ 128.791208][ T2254] ? __kasan_check_read+0x15/0x20 [ 128.791235][ T2254] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 128.791262][ T2254] ? __kasan_check_read+0x15/0x20 [ 128.791288][ T2254] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 128.791323][ T2254] ? bpf_lsm_file_ioctl+0xd/0x20 [ 128.791356][ T2254] ? security_file_ioctl+0x3e/0x110 [ 128.791394][ T2254] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 128.791432][ T2254] __se_sys_ioctl+0x135/0x1b0 [ 128.791464][ T2254] __x64_sys_ioctl+0x7f/0xa0 [ 128.791495][ T2254] x64_sys_call+0x1878/0x2ee0 [ 128.791519][ T2254] do_syscall_64+0x57/0xf0 [ 128.791549][ T2254] ? clear_bhb_loop+0x50/0xa0 [ 128.791584][ T2254] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.791617][ T2254] RIP: 0033:0x7feb51b9e0d9 [ 128.791639][ T2254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.791663][ T2254] RSP: 002b:00007feb52a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.791701][ T2254] RAX: ffffffffffffffda RBX: 00007feb51e25fa0 RCX: 00007feb51b9e0d9 [ 128.791722][ T2254] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 128.791742][ T2254] RBP: 00007feb52a78090 R08: 0000000000000000 R09: 0000000000000000 [ 128.791761][ T2254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.791780][ T2254] R13: 00007feb51e26038 R14: 00007feb51e25fa0 R15: 00007fff8831efd8 [ 128.791803][ T2254] [ 129.158288][ T10] usb 2-1: USB disconnect, device number 51 [ 129.507244][ T378] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 129.623122][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 129.673025][ T46] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 129.712185][ T378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.723025][ T378] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.731977][ T378] usb 1-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.783288][ T378] usb 1-1: config 1 interface 0 has no altsetting 0 [ 129.803033][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 129.814104][ T378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.824307][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.834623][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.842659][ T378] usb 1-1: Product: syz [ 129.848776][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 129.853373][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 129.872039][ T46] usb 2-1: config 4 has an invalid interface number: 32 but max is 0 [ 129.873120][ T378] usb 1-1: Manufacturer: syz [ 129.895580][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 129.900271][ T46] usb 2-1: config 4 has no interface number 0 [ 129.913002][ T378] usb 1-1: SerialNumber: syz [ 129.917792][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.920938][ T46] usb 2-1: config 4 interface 32 has no altsetting 0 [ 129.938516][ T10] usb 3-1: SerialNumber: syz [ 129.947431][ T46] usb 2-1: New USB device found, idVendor=8fb9, idProduct=e21f, bcdDevice=1d.ab [ 129.977639][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.001863][ T46] usb 2-1: Product: syz [ 130.016386][ T46] usb 2-1: Manufacturer: syz [ 130.031510][ T46] usb 2-1: SerialNumber: syz [ 130.129973][ T2262] fuse: Unknown parameter '0x0000000000000005' [ 130.270189][ T2267] loop5: detected capacity change from 0 to 8388607 [ 130.396615][ T667] logitech-hidpp-device 0005:046D:B012.0042: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 130.407799][ T345] usb 1-1: USB disconnect, device number 41 [ 130.469926][ T2270] fido_id[2270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.498284][ T46] usb-storage 2-1:4.32: USB Mass Storage device detected [ 130.545099][ T46] usb 2-1: USB disconnect, device number 52 [ 131.188709][ T378] logitech-hidpp-device 0005:046D:B012.0043: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 131.292406][ T2288] fido_id[2288]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.568300][ T2296] fuse: Unknown parameter '0x0000000000000005' [ 131.658290][ T2299] FAULT_INJECTION: forcing a failure. [ 131.658290][ T2299] name failslab, interval 1, probability 0, space 0, times 0 [ 131.671071][ T2299] CPU: 0 UID: 0 PID: 2299 Comm: syz.3.684 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 131.671109][ T2299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.671129][ T2299] Call Trace: [ 131.671140][ T2299] [ 131.671153][ T2299] __dump_stack+0x21/0x30 [ 131.671194][ T2299] dump_stack_lvl+0x140/0x1c0 [ 131.671231][ T2299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.671270][ T2299] dump_stack+0x19/0x20 [ 131.671304][ T2299] should_fail_ex+0x3c2/0x510 [ 131.671336][ T2299] should_failslab+0xac/0x100 [ 131.671369][ T2299] kmem_cache_alloc_noprof+0x42/0x410 [ 131.671398][ T2299] ? security_inode_alloc+0x51/0x230 [ 131.671433][ T2299] security_inode_alloc+0x51/0x230 [ 131.671466][ T2299] inode_init_always_gfp+0x756/0x9e0 [ 131.671498][ T2299] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 131.671531][ T2299] alloc_inode+0xc5/0x270 [ 131.671565][ T2299] new_inode+0x25/0x1e0 [ 131.671595][ T2299] ? show_sid+0x1e0/0x1e0 [ 131.671619][ T2299] shmem_get_inode+0x352/0xc10 [ 131.671652][ T2299] shmem_mknod+0x63/0x200 [ 131.671687][ T2299] shmem_create+0x38/0x50 [ 131.671722][ T2299] vfs_create+0x4f2/0x730 [ 131.671756][ T2299] pending_reads_dispatch_ioctl+0x1973/0x2080 [ 131.671796][ T2299] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 131.671836][ T2299] ? selinux_file_ioctl+0x732/0x1480 [ 131.671861][ T2299] ? __kasan_check_read+0x15/0x20 [ 131.671887][ T2299] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 131.671922][ T2299] ? __kasan_check_read+0x15/0x20 [ 131.671949][ T2299] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 131.671983][ T2299] ? bpf_lsm_file_ioctl+0xd/0x20 [ 131.672017][ T2299] ? security_file_ioctl+0x3e/0x110 [ 131.672055][ T2299] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 131.672095][ T2299] __se_sys_ioctl+0x135/0x1b0 [ 131.672126][ T2299] __x64_sys_ioctl+0x7f/0xa0 [ 131.672157][ T2299] x64_sys_call+0x1878/0x2ee0 [ 131.672183][ T2299] do_syscall_64+0x57/0xf0 [ 131.672213][ T2299] ? clear_bhb_loop+0x50/0xa0 [ 131.672248][ T2299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.672282][ T2299] RIP: 0033:0x7f30ce39e0d9 [ 131.672305][ T2299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.672330][ T2299] RSP: 002b:00007f30cf186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.672361][ T2299] RAX: ffffffffffffffda RBX: 00007f30ce625fa0 RCX: 00007f30ce39e0d9 [ 131.672383][ T2299] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 131.672403][ T2299] RBP: 00007f30cf186090 R08: 0000000000000000 R09: 0000000000000000 [ 131.672422][ T2299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.672440][ T2299] R13: 00007f30ce626038 R14: 00007f30ce625fa0 R15: 00007ffd7144b648 [ 131.672464][ T2299] [ 132.593486][ T378] usb 3-1: USB disconnect, device number 43 [ 132.735702][ T2311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2311 comm=syz.2.688 [ 132.807756][ T2313] loop5: detected capacity change from 0 to 8388607 [ 133.177339][ T2322] fuse: Unknown parameter '0x0000000000000005' [ 133.223034][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 133.235345][ T46] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 133.373779][ T345] logitech-hidpp-device 0005:046D:B012.0044: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 133.417801][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.447908][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.453231][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.477434][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 133.482168][ T2325] fido_id[2325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.498843][ T10] usb 3-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.518660][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 133.532991][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 133.545004][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.575401][ T46] usb 2-1: Product: syz [ 133.581092][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.590208][ T46] usb 2-1: Manufacturer: syz [ 133.590235][ T46] usb 2-1: SerialNumber: syz [ 133.599091][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.625074][ T10] usb 3-1: Product: syz [ 133.629320][ T10] usb 3-1: Manufacturer: syz [ 133.654196][ T10] usb 3-1: SerialNumber: syz [ 133.851462][ T46] usb 2-1: invalid MIDI in EP 0 [ 133.872134][ T46] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.904125][ T46] usb 2-1: USB disconnect, device number 53 [ 133.961070][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.074040][ T345] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 134.094759][ T66] usb 3-1: USB disconnect, device number 44 [ 134.233012][ T345] usb 4-1: Using ep0 maxpacket: 16 [ 134.258634][ T345] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.279215][ T345] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 134.309757][ T345] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 134.326638][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.345220][ T345] usb 4-1: SerialNumber: syz [ 134.710677][ T2339] FAULT_INJECTION: forcing a failure. [ 134.710677][ T2339] name failslab, interval 1, probability 0, space 0, times 0 [ 134.723499][ T2339] CPU: 1 UID: 0 PID: 2339 Comm: syz.2.699 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 134.723536][ T2339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.723554][ T2339] Call Trace: [ 134.723563][ T2339] [ 134.723576][ T2339] __dump_stack+0x21/0x30 [ 134.723617][ T2339] dump_stack_lvl+0x140/0x1c0 [ 134.723662][ T2339] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.723700][ T2339] ? get_cached_acl+0x2a4/0x2f0 [ 134.723739][ T2339] dump_stack+0x19/0x20 [ 134.723774][ T2339] should_fail_ex+0x3c2/0x510 [ 134.723804][ T2339] ? security_inode_init_security+0x11c/0x600 [ 134.723840][ T2339] should_failslab+0xac/0x100 [ 134.723873][ T2339] __kmalloc_noprof+0x69/0x510 [ 134.723901][ T2339] ? get_inode_acl+0x50/0x50 [ 134.723938][ T2339] ? security_inode_init_security+0x11c/0x600 [ 134.723972][ T2339] ? from_vfsgid+0x76/0xb0 [ 134.723997][ T2339] ? __cfi_shmem_initxattrs+0x10/0x10 [ 134.724035][ T2339] security_inode_init_security+0x11c/0x600 [ 134.724070][ T2339] ? current_umask+0x1a/0x80 [ 134.724098][ T2339] ? __cfi_security_inode_init_security+0x10/0x10 [ 134.724133][ T2339] ? simple_acl_create+0x190/0x1c0 [ 134.724162][ T2339] shmem_mknod+0xd5/0x200 [ 134.724199][ T2339] shmem_create+0x38/0x50 [ 134.724235][ T2339] vfs_create+0x4f2/0x730 [ 134.724270][ T2339] pending_reads_dispatch_ioctl+0x1973/0x2080 [ 134.724312][ T2339] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 134.724352][ T2339] ? selinux_file_ioctl+0x732/0x1480 [ 134.724379][ T2339] ? __kasan_check_read+0x15/0x20 [ 134.724405][ T2339] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 134.724433][ T2339] ? __kasan_check_read+0x15/0x20 [ 134.724459][ T2339] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 134.724494][ T2339] ? bpf_lsm_file_ioctl+0xd/0x20 [ 134.724527][ T2339] ? security_file_ioctl+0x3e/0x110 [ 134.724565][ T2339] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 134.724605][ T2339] __se_sys_ioctl+0x135/0x1b0 [ 134.724636][ T2339] __x64_sys_ioctl+0x7f/0xa0 [ 134.724711][ T2339] x64_sys_call+0x1878/0x2ee0 [ 134.724737][ T2339] do_syscall_64+0x57/0xf0 [ 134.724766][ T2339] ? clear_bhb_loop+0x50/0xa0 [ 134.724807][ T2339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.724842][ T2339] RIP: 0033:0x7feb51b9e0d9 [ 134.724865][ T2339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.724889][ T2339] RSP: 002b:00007feb52a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.724920][ T2339] RAX: ffffffffffffffda RBX: 00007feb51e25fa0 RCX: 00007feb51b9e0d9 [ 134.724942][ T2339] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 134.724967][ T2339] RBP: 00007feb52a78090 R08: 0000000000000000 R09: 0000000000000000 [ 134.724986][ T2339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.725003][ T2339] R13: 00007feb51e26038 R14: 00007feb51e25fa0 R15: 00007fff8831efd8 [ 134.725028][ T2339] [ 134.753387][ T66] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 135.063673][ T2343] loop5: detected capacity change from 0 to 8388607 [ 135.088751][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 135.133819][ T2345] fuse: Unknown parameter 'fd0x0000000000000005' [ 135.173091][ T46] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 135.253418][ T66] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 135.262596][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.326523][ T2348] incfs: Can't find or create .index dir in ./file0 [ 135.333332][ T2348] incfs: mount failed -1 [ 135.337765][ T36] audit: type=1400 audit(1786173611.570:747): avc: denied { mounton } for pid=2346 comm="syz.2.703" path="/177/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 135.374562][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.393195][ T46] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 135.413018][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.432618][ T46] usb 1-1: config 0 descriptor?? [ 135.798541][ T2336] tipc: Enabling of bearer rejected, failed to enable media [ 135.810494][ T2336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 135.861525][ T46] smartjoyplus 0003:0B43:0003.0046: item fetching failed at offset 13/40 [ 135.873738][ T46] smartjoyplus 0003:0B43:0003.0046: parse failed [ 135.876186][ T66] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0045/input/input12 [ 135.897786][ T46] smartjoyplus 0003:0B43:0003.0046: probe with driver smartjoyplus failed with error -22 [ 135.909353][ T66] hid-picolcd 0003:04D8:C002.0045: No report with id 0x92 found [ 135.943267][ T66] hid-picolcd 0003:04D8:C002.0045: No report with id 0x94 found [ 135.951013][ T66] hid-picolcd 0003:04D8:C002.0045: failed to configure display [ 136.075690][ T66] usb 1-1: USB disconnect, device number 42 [ 136.876941][ T46] usb 4-1: USB disconnect, device number 42 [ 136.940873][ T2359] netlink: 7 bytes leftover after parsing attributes in process `syz.3.707'. [ 136.988683][ T66] logitech-hidpp-device 0005:046D:B012.0047: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 137.028248][ T310] usb 2-1: USB disconnect, device number 54 [ 137.055858][ T2362] fido_id[2362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.493047][ T66] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 137.591065][ T2370] fuse: Unknown parameter 'fd0x0000000000000005' [ 137.664751][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.682991][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.691940][ T66] usb 4-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.732996][ T66] usb 4-1: config 1 interface 0 has no altsetting 0 [ 137.742014][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.753677][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.761726][ T66] usb 4-1: Product: syz [ 137.766427][ T66] usb 4-1: Manufacturer: syz [ 137.771067][ T66] usb 4-1: SerialNumber: syz [ 137.973042][ T310] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 138.037917][ T2368] FAULT_INJECTION: forcing a failure. [ 138.037917][ T2368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.051420][ T2368] CPU: 0 UID: 0 PID: 2368 Comm: syz.3.710 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 138.051459][ T2368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.051476][ T2368] Call Trace: [ 138.051487][ T2368] [ 138.051499][ T2368] __dump_stack+0x21/0x30 [ 138.051540][ T2368] dump_stack_lvl+0x140/0x1c0 [ 138.051565][ T2368] ? __cfi_dump_stack_lvl+0x10/0x10 [ 138.051590][ T2368] ? rb_commit+0x753/0x7b0 [ 138.051610][ T2368] dump_stack+0x19/0x20 [ 138.051633][ T2368] should_fail_ex+0x3c2/0x510 [ 138.051654][ T2368] should_fail_alloc_page+0xec/0x110 [ 138.051677][ T2368] __alloc_pages_noprof+0x1c0/0x7e0 [ 138.051702][ T2368] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 138.051727][ T2368] ? trace_event_buffer_commit+0x256/0x8f0 [ 138.051749][ T2368] __folio_alloc_noprof+0x14/0x80 [ 138.051774][ T2368] folio_prealloc+0x46/0x220 [ 138.051796][ T2368] do_pte_missing+0x16af/0x4440 [ 138.051820][ T2368] ? trace_event_buffer_commit+0x256/0x8f0 [ 138.051839][ T2368] ? pte_marker_clear+0x1b0/0x1b0 [ 138.051863][ T2368] ? cgroup_rstat_updated+0x144/0x800 [ 138.051885][ T2368] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 138.051913][ T2368] handle_mm_fault+0x1189/0x1ba0 [ 138.051933][ T2368] ? __kasan_check_write+0x18/0x20 [ 138.051953][ T2368] ? __cfi_handle_mm_fault+0x10/0x10 [ 138.051974][ T2368] ? follow_page_pte+0x4b2/0xba0 [ 138.051999][ T2368] ? gup_must_unshare+0x1e0/0x1e0 [ 138.052023][ T2368] ? vma_is_secretmem+0x11/0x50 [ 138.052047][ T2368] ? check_vma_flags+0x36d/0x3a0 [ 138.052071][ T2368] __get_user_pages+0x114b/0x22d0 [ 138.052098][ T2368] ? populate_vma_page_range+0x220/0x220 [ 138.052120][ T2368] ? down_read+0x7f/0xe0 [ 138.052146][ T2368] ? __cfi_down_read+0x10/0x10 [ 138.052172][ T2368] __mm_populate+0x300/0x440 [ 138.052195][ T2368] do_mlock+0x7f3/0xa10 [ 138.052219][ T2368] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 138.052240][ T2368] ? lru_gen_add_folio+0x880/0x880 [ 138.052267][ T2368] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 138.052295][ T2368] __x64_sys_mlock+0x64/0x80 [ 138.052319][ T2368] x64_sys_call+0x670/0x2ee0 [ 138.052335][ T2368] do_syscall_64+0x57/0xf0 [ 138.052361][ T2368] ? clear_bhb_loop+0x50/0xa0 [ 138.052390][ T2368] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.052425][ T2368] RIP: 0033:0x7f30ce39e0d9 [ 138.052442][ T2368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.052459][ T2368] RSP: 002b:00007f30cf186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 138.052480][ T2368] RAX: ffffffffffffffda RBX: 00007f30ce625fa0 RCX: 00007f30ce39e0d9 [ 138.052495][ T2368] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 138.052508][ T2368] RBP: 00007f30cf186090 R08: 0000000000000000 R09: 0000000000000000 [ 138.052521][ T2368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.052533][ T2368] R13: 00007f30ce626038 R14: 00007f30ce625fa0 R15: 00007ffd7144b648 [ 138.052550][ T2368] [ 138.133311][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 138.175891][ T66] usb 4-1: USB disconnect, device number 43 [ 138.185861][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.378598][ T310] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 138.388727][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 138.398098][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.406450][ T310] usb 2-1: SerialNumber: syz [ 138.469126][ T310] rust_binder: 2383: undelivered TRANSACTION_ERROR: 29189 [ 138.513203][ T10] logitech-hidpp-device 0005:046D:B012.0048: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 138.566288][ T2387] fido_id[2387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.949762][ T2396] syzkaller1: entered promiscuous mode [ 138.955842][ T2396] syzkaller1: entered allmulticast mode [ 139.004867][ T2398] fuse: Unknown parameter 'fd0x0000000000000005' [ 139.197867][ T2416] FAULT_INJECTION: forcing a failure. [ 139.197867][ T2416] name failslab, interval 1, probability 0, space 0, times 0 [ 139.210655][ T2416] CPU: 1 UID: 0 PID: 2416 Comm: syz.2.726 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 139.210694][ T2416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.210712][ T2416] Call Trace: [ 139.210724][ T2416] [ 139.210736][ T2416] __dump_stack+0x21/0x30 [ 139.210785][ T2416] dump_stack_lvl+0x140/0x1c0 [ 139.210822][ T2416] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.210858][ T2416] ? __kvmalloc_node_noprof+0x128/0x300 [ 139.210899][ T2416] dump_stack+0x19/0x20 [ 139.210933][ T2416] should_fail_ex+0x3c2/0x510 [ 139.210963][ T2416] ? shmem_initxattrs+0x2a8/0x530 [ 139.211000][ T2416] should_failslab+0xac/0x100 [ 139.211033][ T2416] __kmalloc_noprof+0x69/0x510 [ 139.211061][ T2416] ? shmem_initxattrs+0x2a8/0x530 [ 139.211097][ T2416] ? simple_xattr_alloc+0xa2/0x140 [ 139.211128][ T2416] shmem_initxattrs+0x2a8/0x530 [ 139.211166][ T2416] security_inode_init_security+0x431/0x600 [ 139.211201][ T2416] ? current_umask+0x1a/0x80 [ 139.211227][ T2416] ? __cfi_shmem_initxattrs+0x10/0x10 [ 139.211266][ T2416] ? __cfi_security_inode_init_security+0x10/0x10 [ 139.211300][ T2416] ? simple_acl_create+0x190/0x1c0 [ 139.211327][ T2416] shmem_mknod+0xd5/0x200 [ 139.211364][ T2416] shmem_create+0x38/0x50 [ 139.211399][ T2416] vfs_create+0x4f2/0x730 [ 139.211434][ T2416] pending_reads_dispatch_ioctl+0x1973/0x2080 [ 139.211478][ T2416] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 139.211519][ T2416] ? selinux_file_ioctl+0x732/0x1480 [ 139.211545][ T2416] ? __kasan_check_read+0x15/0x20 [ 139.211571][ T2416] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 139.211599][ T2416] ? __kasan_check_read+0x15/0x20 [ 139.211624][ T2416] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 139.211660][ T2416] ? bpf_lsm_file_ioctl+0xd/0x20 [ 139.211693][ T2416] ? security_file_ioctl+0x3e/0x110 [ 139.211731][ T2416] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 139.211778][ T2416] __se_sys_ioctl+0x135/0x1b0 [ 139.211810][ T2416] __x64_sys_ioctl+0x7f/0xa0 [ 139.211842][ T2416] x64_sys_call+0x1878/0x2ee0 [ 139.211866][ T2416] do_syscall_64+0x57/0xf0 [ 139.211896][ T2416] ? clear_bhb_loop+0x50/0xa0 [ 139.211932][ T2416] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.211965][ T2416] RIP: 0033:0x7feb51b9e0d9 [ 139.211989][ T2416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.212012][ T2416] RSP: 002b:00007feb52a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.212043][ T2416] RAX: ffffffffffffffda RBX: 00007feb51e25fa0 RCX: 00007feb51b9e0d9 [ 139.212065][ T2416] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 139.212092][ T2416] RBP: 00007feb52a78090 R08: 0000000000000000 R09: 0000000000000000 [ 139.212110][ T2416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.212129][ T2416] R13: 00007feb51e26038 R14: 00007feb51e25fa0 R15: 00007fff8831efd8 [ 139.212152][ T2416] [ 139.926839][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 140.094403][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.113064][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.142603][ T10] usb 1-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.156090][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 140.177799][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.187173][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.198366][ T10] usb 1-1: Product: syz [ 140.205095][ T10] usb 1-1: Manufacturer: syz [ 140.212762][ T10] usb 1-1: SerialNumber: syz [ 140.263383][ T310] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 140.424546][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.434927][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.443919][ T310] usb 4-1: config 1 has no interface number 0 [ 140.465028][ T310] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.493023][ T310] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 140.507932][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.517461][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.533016][ T310] usb 4-1: Product: syz [ 140.537342][ T310] usb 4-1: Manufacturer: syz [ 140.552273][ T310] usb 4-1: SerialNumber: syz [ 140.603491][ T10] usb 1-1: USB disconnect, device number 43 [ 140.666527][ T2432] overlayfs: missing 'lowerdir' [ 140.722148][ T2434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 140.783099][ T345] usb 2-1: USB disconnect, device number 55 [ 141.199304][ T2445] loop5: detected capacity change from 0 to 8388607 [ 141.239180][ T310] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 141.250545][ T310] cdc_ncm 4-1:1.1: bind() failure [ 141.272660][ T310] usb 4-1: USB disconnect, device number 44 [ 141.285087][ T2447] capability: warning: `syz.1.737' uses 32-bit capabilities (legacy support in use) [ 141.456939][ T2451] pic_ioport_write: 72 callbacks suppressed [ 141.456965][ T2451] kvm: pic: level sensitive irq not supported [ 141.473466][ T2451] kvm: pic: level sensitive irq not supported [ 141.481723][ T2451] kvm: pic: level sensitive irq not supported [ 141.493295][ T2451] kvm: pic: level sensitive irq not supported [ 141.551501][ T345] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 141.593089][ T66] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 141.643266][ T2456] overlayfs: missing 'lowerdir' [ 141.724632][ T345] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 141.734930][ T345] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 141.747189][ T345] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 141.756690][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.764874][ T345] usb 3-1: Product: syz [ 141.769438][ T345] usb 3-1: Manufacturer: syz [ 141.774159][ T345] usb 3-1: SerialNumber: syz [ 141.788276][ T2443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.795745][ T2443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.804043][ T345] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 141.822201][ T345] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 141.833351][ T345] usbserial_generic 3-1:1.0: generic converter detected [ 141.849017][ T345] usb 3-1: generic converter now attached to ttyUSB0 [ 141.849347][ T2461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.883233][ T2461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.918195][ T36] audit: type=1400 audit(1786173618.160:748): avc: denied { bind } for pid=2462 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.943142][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 142.025009][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 142.045657][ T345] usb 3-1: USB disconnect, device number 45 [ 142.053817][ T345] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 142.074605][ T345] usbserial_generic 3-1:1.0: device disconnected [ 142.103033][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 142.109817][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.121588][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 142.132733][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 142.142837][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.152021][ T10] usb 1-1: SerialNumber: syz [ 142.173184][ T378] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 142.323141][ T378] usb 4-1: Using ep0 maxpacket: 32 [ 142.330578][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.342850][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.360774][ T378] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 142.389533][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.405135][ T378] usb 4-1: config 0 descriptor?? [ 142.583454][ T2467] loop5: detected capacity change from 0 to 8388607 [ 142.629213][ T2469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 142.638621][ T2463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.650535][ T2463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.669458][ T378] usbhid 4-1:0.0: can't add hid device: -71 [ 142.679032][ T378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.700956][ T378] usb 4-1: USB disconnect, device number 45 [ 142.893161][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 143.003092][ T378] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 143.023093][ T10] usb 3-1: device descriptor read/64, error -71 [ 143.164733][ T378] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.175121][ T378] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.184410][ T378] usb 4-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.197796][ T378] usb 4-1: config 1 interface 0 has no altsetting 0 [ 143.207069][ T378] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.216407][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.224568][ T378] usb 4-1: Product: syz [ 143.228870][ T378] usb 4-1: Manufacturer: syz [ 143.233587][ T378] usb 4-1: SerialNumber: syz [ 143.263087][ T10] usb 3-1: device descriptor read/64, error -71 [ 143.441051][ T36] audit: type=1400 audit(1786173619.680:749): avc: denied { execute } for pid=2472 comm="syz.3.748" path="/file1" dev="ramfs" ino=19690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 143.513655][ T378] usb 4-1: USB disconnect, device number 46 [ 143.523231][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 143.663094][ T10] usb 3-1: device descriptor read/64, error -71 [ 143.824591][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.834559][ T66] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 143.842183][ T66] usb 2-1: can't read configurations, error -71 [ 143.913138][ T10] usb 3-1: device descriptor read/64, error -71 [ 144.023307][ T10] usb usb3-port1: attempt power cycle [ 144.293090][ T378] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 144.373451][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 144.381467][ T2480] overlayfs: missing 'lowerdir' [ 144.394360][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.463048][ T378] usb 4-1: Using ep0 maxpacket: 16 [ 144.469970][ T378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.481183][ T378] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 144.494529][ T378] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.503761][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.515358][ T2483] kvm: pic: level sensitive irq not supported [ 144.515672][ T2483] kvm: pic: level sensitive irq not supported [ 144.523424][ T378] usb 4-1: config 0 descriptor?? [ 144.536260][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.617384][ T36] audit: type=1400 audit(1786173620.860:750): avc: denied { create } for pid=2485 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.679330][ T2490] loop5: detected capacity change from 0 to 8388607 [ 144.692099][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 144.759836][ T345] usb 1-1: USB disconnect, device number 44 [ 144.773244][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 144.793550][ T2499] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 144.804902][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.809420][ T2476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 144.820110][ T2476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 144.885586][ T378] usb 4-1: string descriptor 0 read error: -71 [ 144.892592][ T378] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 144.901432][ T378] usb 4-1: USB disconnect, device number 47 [ 144.944526][ T10] usb 3-1: device descriptor read/8, error -71 [ 145.033080][ T66] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 145.053261][ T10] usb usb3-port1: unable to enumerate USB device [ 145.184536][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.194805][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.203811][ T66] usb 2-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.216865][ T66] usb 2-1: config 1 interface 0 has no altsetting 0 [ 145.225228][ T66] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.234450][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.242472][ T66] usb 2-1: Product: syz [ 145.246709][ T66] usb 2-1: Manufacturer: syz [ 145.251345][ T66] usb 2-1: SerialNumber: syz [ 145.283205][ T345] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 145.408986][ T2503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2503 comm=syz.3.759 [ 145.437068][ T345] usb 1-1: Using ep0 maxpacket: 32 [ 145.444356][ T345] usb 1-1: config 0 has no interfaces? [ 145.453499][ T345] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 145.467526][ T345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.485853][ T345] usb 1-1: Product: syz [ 145.490079][ T345] usb 1-1: Manufacturer: syz [ 145.503013][ T345] usb 1-1: SerialNumber: syz [ 145.513387][ T345] usb 1-1: config 0 descriptor?? [ 145.544929][ T2507] kvm: pic: level sensitive irq not supported [ 145.545266][ T2507] kvm: pic: level sensitive irq not supported [ 145.554337][ T2507] kvm: pic: level sensitive irq not supported [ 145.560714][ T2507] kvm: pic: level sensitive irq not supported [ 145.573917][ T345] usb 2-1: USB disconnect, device number 58 [ 145.646180][ T36] audit: type=1400 audit(1786173621.890:751): avc: denied { write } for pid=2513 comm="syz.2.763" name="/" dev="incremental-fs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.671858][ T36] audit: type=1400 audit(1786173621.890:752): avc: denied { add_name } for pid=2513 comm="syz.2.763" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.699662][ T36] audit: type=1400 audit(1786173621.890:753): avc: denied { create } for pid=2513 comm="syz.2.763" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.725378][ T2499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.737138][ T36] audit: type=1400 audit(1786173621.890:754): avc: denied { associate } for pid=2513 comm="syz.2.763" name=".log" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 145.754535][ T2516] loop5: detected capacity change from 0 to 8388607 [ 145.760255][ T2499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.779263][ T310] usb 1-1: USB disconnect, device number 45 [ 145.808190][ T36] audit: type=1400 audit(1786173621.890:755): avc: denied { read append } for pid=2513 comm="syz.2.763" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.073050][ T345] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 146.225004][ T345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.234148][ T345] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.245109][ T345] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.258759][ T345] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 146.268526][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.277603][ T345] usb 3-1: Product: syz [ 146.282225][ T345] usb 3-1: Manufacturer: syz [ 146.287254][ T345] usb 3-1: SerialNumber: syz [ 146.423084][ T310] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 146.514348][ T345] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.526319][ T345] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 146.534871][ T345] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 146.557435][ T345] usb 3-1: USB disconnect, device number 50 [ 146.563253][ T378] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 146.591556][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.618766][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 146.635137][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.657700][ T310] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 146.672368][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 146.685036][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.697433][ T310] usb 2-1: SerialNumber: syz [ 146.733090][ T378] usb 1-1: Using ep0 maxpacket: 8 [ 146.741825][ T378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.750594][ T378] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 146.762577][ T378] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.772019][ T378] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.788930][ T378] usb 1-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 146.798827][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.806960][ T378] usb 1-1: Product: syz [ 146.811354][ T378] usb 1-1: Manufacturer: syz [ 146.816468][ T378] usb 1-1: SerialNumber: syz [ 146.844404][ T2525] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 146.856239][ T2525] kvm: pic: non byte read [ 146.861347][ T2525] kvm: pic: level sensitive irq not supported [ 146.861500][ T2525] kvm: pic: non byte read [ 146.874904][ T2525] kvm: pic: level sensitive irq not supported [ 146.875064][ T2525] kvm: pic: non byte read [ 146.886936][ T2525] kvm: pic: level sensitive irq not supported [ 146.887102][ T2525] kvm: pic: non byte read [ 146.899074][ T2525] kvm: pic: level sensitive irq not supported [ 146.899242][ T2525] kvm: pic: non byte read [ 147.046243][ T378] usb 1-1: USB disconnect, device number 46 [ 147.071611][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.183092][ T66] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 147.334813][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.346869][ T66] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.353319][ T345] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 147.357954][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.374303][ T66] usb 4-1: config 0 descriptor?? [ 147.513020][ T345] usb 3-1: Using ep0 maxpacket: 8 [ 147.519799][ T345] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.530961][ T345] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 147.557800][ T345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 147.567973][ T345] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.583305][ T345] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 147.592753][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.602201][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 147.608512][ T345] usb 3-1: Product: syz [ 147.613501][ T345] usb 3-1: Manufacturer: syz [ 147.618267][ T345] usb 3-1: SerialNumber: syz [ 147.619030][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 147.639836][ T345] usb 3-1: config 0 descriptor?? [ 147.645474][ T66] usb 4-1: USB disconnect, device number 48 [ 147.679026][ T2535] kvm: pic: level sensitive irq not supported [ 147.680014][ T2535] pic_ioport_write: 130 callbacks suppressed [ 147.680038][ T2535] kvm: pic: single mode not supported [ 147.693043][ T2535] kvm: pic: level sensitive irq not supported [ 147.699739][ T2535] kvm: pic: level sensitive irq not supported [ 147.706713][ T2535] kvm: pic: single mode not supported [ 147.713285][ T2535] kvm: pic: level sensitive irq not supported [ 147.719726][ T2535] kvm: pic: single mode not supported [ 147.726309][ T2535] kvm: pic: level sensitive irq not supported [ 147.733097][ T2535] kvm: pic: single mode not supported [ 147.740039][ T2535] kvm: pic: single mode not supported [ 147.746074][ T2535] kvm: pic: single mode not supported [ 147.751517][ T2535] kvm: pic: level sensitive irq not supported [ 147.757817][ T2535] kvm: pic: single mode not supported [ 147.764302][ T2535] kvm: pic: single mode not supported [ 147.771160][ T2535] kvm: pic: single mode not supported [ 147.776985][ T2535] kvm: pic: single mode not supported [ 147.860023][ T10] usb 3-1: USB disconnect, device number 51 [ 148.103202][ T66] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 148.269321][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.281264][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 148.291511][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.305469][ T66] usb 4-1: config 0 descriptor?? [ 148.633060][ T345] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 148.784463][ T345] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.794789][ T345] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.803770][ T345] usb 3-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.817094][ T345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 148.825597][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.834884][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.842993][ T345] usb 3-1: Product: syz [ 148.847474][ T345] usb 3-1: Manufacturer: syz [ 148.852105][ T345] usb 3-1: SerialNumber: syz [ 148.924733][ T2525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.934153][ T2525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.111775][ T2543] FAULT_INJECTION: forcing a failure. [ 149.111775][ T2543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.125105][ T2543] CPU: 1 UID: 0 PID: 2543 Comm: syz.2.774 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 149.125146][ T2543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.125164][ T2543] Call Trace: [ 149.125176][ T2543] [ 149.125190][ T2543] __dump_stack+0x21/0x30 [ 149.125232][ T2543] dump_stack_lvl+0x140/0x1c0 [ 149.125267][ T2543] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.125303][ T2543] ? rb_commit+0x753/0x7b0 [ 149.125335][ T2543] dump_stack+0x19/0x20 [ 149.125359][ T2543] should_fail_ex+0x3c2/0x510 [ 149.125414][ T2543] should_fail_alloc_page+0xec/0x110 [ 149.125449][ T2543] __alloc_pages_noprof+0x1c0/0x7e0 [ 149.125485][ T2543] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 149.125528][ T2543] ? trace_event_buffer_commit+0x256/0x8f0 [ 149.125553][ T2543] __folio_alloc_noprof+0x14/0x80 [ 149.125600][ T2543] folio_prealloc+0x46/0x220 [ 149.125633][ T2543] do_pte_missing+0x16af/0x4440 [ 149.125668][ T2543] ? trace_event_buffer_commit+0x256/0x8f0 [ 149.125697][ T2543] ? pte_marker_clear+0x1b0/0x1b0 [ 149.125732][ T2543] ? cgroup_rstat_updated+0x144/0x800 [ 149.125754][ T2543] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 149.125806][ T2543] handle_mm_fault+0x1189/0x1ba0 [ 149.125837][ T2543] ? __kasan_check_write+0x18/0x20 [ 149.125867][ T2543] ? __cfi_handle_mm_fault+0x10/0x10 [ 149.125897][ T2543] ? follow_page_pte+0x4b2/0xba0 [ 149.125936][ T2543] ? gup_must_unshare+0x1e0/0x1e0 [ 149.125960][ T2543] ? vma_is_secretmem+0x11/0x50 [ 149.126009][ T2543] ? check_vma_flags+0x36d/0x3a0 [ 149.126045][ T2543] __get_user_pages+0x114b/0x22d0 [ 149.126083][ T2543] ? populate_vma_page_range+0x220/0x220 [ 149.126133][ T2543] ? down_read+0x7f/0xe0 [ 149.126169][ T2543] ? __cfi_down_read+0x10/0x10 [ 149.126209][ T2543] __mm_populate+0x300/0x440 [ 149.126244][ T2543] do_mlock+0x7f3/0xa10 [ 149.126279][ T2543] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 149.126311][ T2543] ? lru_gen_add_folio+0x880/0x880 [ 149.126349][ T2543] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 149.126389][ T2543] __x64_sys_mlock+0x64/0x80 [ 149.126432][ T2543] x64_sys_call+0x670/0x2ee0 [ 149.126457][ T2543] do_syscall_64+0x57/0xf0 [ 149.126485][ T2543] ? clear_bhb_loop+0x50/0xa0 [ 149.126519][ T2543] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.126541][ T2543] RIP: 0033:0x7feb51b9e0d9 [ 149.126558][ T2543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.126594][ T2543] RSP: 002b:00007feb52a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 149.126626][ T2543] RAX: ffffffffffffffda RBX: 00007feb51e25fa0 RCX: 00007feb51b9e0d9 [ 149.126648][ T2543] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 149.126667][ T2543] RBP: 00007feb52a78090 R08: 0000000000000000 R09: 0000000000000000 [ 149.126685][ T2543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.126701][ T2543] R13: 00007feb51e26038 R14: 00007feb51e25fa0 R15: 00007fff8831efd8 [ 149.126725][ T2543] [ 149.135259][ T66] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 149.175701][ T345] usb 3-1: USB disconnect, device number 52 [ 149.200086][ T66] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 149.528066][ T66] usb 2-1: USB disconnect, device number 59 [ 149.578369][ T2551] loop5: detected capacity change from 0 to 8388607 [ 149.697323][ T36] audit: type=1400 audit(1786173625.940:756): avc: denied { sqpoll } for pid=2554 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 149.779683][ T66] usb 4-1: USB disconnect, device number 49 [ 149.779873][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 149.843418][ T2562] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 149.852498][ T2562] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 149.903824][ T2565] netlink: 'syz.1.782': attribute type 4 has an invalid length. [ 149.918162][ T2566] netlink: 'syz.1.782': attribute type 4 has an invalid length. [ 150.083162][ T36] audit: type=1400 audit(1786173626.320:757): avc: denied { bind } for pid=2567 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.133454][ T2569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.142088][ T2569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.353065][ T345] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 150.360942][ T46] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 150.381889][ T2577] loop5: detected capacity change from 0 to 8388607 [ 150.487644][ T2588] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.496576][ T345] usb 2-1: device descriptor read/64, error -71 [ 150.496722][ T2588] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.523038][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 150.533954][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.553017][ T46] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 150.571087][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 150.581721][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.592027][ T46] usb 3-1: SerialNumber: syz [ 150.598612][ T36] audit: type=1400 audit(1786173626.840:758): avc: denied { create } for pid=2591 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.743065][ T345] usb 2-1: device descriptor read/64, error -71 [ 150.845596][ T2603] overlayfs: failed to resolve './bus': -2 [ 150.891623][ T46] logitech-hidpp-device 0005:046D:B012.0049: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 150.956760][ T2607] fido_id[2607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.984643][ T345] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 151.084038][ T2612] loop5: detected capacity change from 0 to 8388607 [ 151.108561][ T383] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 151.133063][ T345] usb 2-1: device descriptor read/64, error -71 [ 151.321950][ T2617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 151.341984][ T2617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.406200][ T36] audit: type=1400 audit(1786173627.650:759): avc: denied { getopt } for pid=2620 comm="syz.3.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.426046][ T345] usb 2-1: device descriptor read/64, error -71 [ 151.533263][ T345] usb usb2-port1: attempt power cycle [ 151.590891][ T337] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 151.605301][ T337] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 151.622082][ T337] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 151.682603][ T2638] fido_id[2638]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.873081][ T345] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 151.914654][ T345] usb 2-1: device descriptor read/8, error -71 [ 152.044781][ T345] usb 2-1: device descriptor read/8, error -71 [ 152.152603][ T36] audit: type=1400 audit(1786173628.390:760): avc: denied { append } for pid=2651 comm="syz.3.808" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 152.164633][ T2652] 9pnet_fd: Insufficient options for proto=fd [ 152.207056][ T36] audit: type=1400 audit(1786173628.450:761): avc: denied { load_policy } for pid=2651 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 152.214082][ T2652] ------------[ cut here ]------------ [ 152.232672][ T2652] WARNING: CPU: 0 PID: 2652 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 152.242355][ T2652] Modules linked in: [ 152.246352][ T2652] CPU: 0 UID: 0 PID: 2652 Comm: syz.3.808 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 152.258020][ T2652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.268250][ T2652] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 152.274495][ T2652] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d4 d8 0b 06 00 0f 85 c2 00 00 00 c6 05 c7 d8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 152.294506][ T2652] RSP: 0018:ffffc9000117f520 EFLAGS: 00010246 [ 152.300646][ T2652] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 152.308845][ T2652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000117f5d8 [ 152.316968][ T2652] RBP: ffffc9000117f660 R08: ffffc9000117f5d7 R09: 0000000000000000 [ 152.323651][ T345] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 152.325583][ T2652] R10: ffffc9000117f5c0 R11: fffff5200022febb R12: ffffc9000117f560 [ 152.340739][ T2652] R13: dffffc0000000000 R14: 1ffff9200022fea8 R15: 0000000000000000 [ 152.348846][ T2652] FS: 00007f30cf1866c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 152.357870][ T345] usb 2-1: device descriptor read/8, error -71 [ 152.364251][ T2652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.370899][ T2652] CR2: 0000200000010000 CR3: 000000011e336000 CR4: 00000000003526b0 [ 152.378992][ T2652] Call Trace: [ 152.382313][ T2652] [ 152.385328][ T2652] ? vfs_write+0x3c1/0xfd0 [ 152.389804][ T2652] ? ksys_write+0x145/0x260 [ 152.394435][ T2652] ? x64_sys_call+0x271c/0x2ee0 [ 152.399343][ T2652] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 152.405240][ T2652] ? hashtab_init+0xd6/0x1f0 [ 152.409992][ T2652] ___kmalloc_large_node+0x81/0x220 [ 152.415340][ T2652] ? hashtab_init+0xd6/0x1f0 [ 152.419999][ T2652] __kmalloc_large_node_noprof+0x1e/0xd0 [ 152.425760][ T2652] ? hashtab_init+0xd6/0x1f0 [ 152.430415][ T2652] __kmalloc_noprof+0x326/0x510 [ 152.435373][ T2652] ? kasan_save_alloc_info+0x3a/0x50 [ 152.440730][ T2652] hashtab_init+0xd6/0x1f0 [ 152.445280][ T2652] ? class_read+0x17f/0x8a0 [ 152.449849][ T2652] symtab_init+0x44/0x70 [ 152.454242][ T2652] class_read+0x208/0x8a0 [ 152.458634][ T2652] ? hashtab_init+0xd6/0x1f0 [ 152.463348][ T2652] ? __cfi_class_read+0x10/0x10 [ 152.468255][ T2652] ? hashtab_init+0x100/0x1f0 [ 152.473075][ T2652] policydb_read+0xa83/0x2860 [ 152.477805][ T2652] ? __kasan_kmalloc+0x96/0xb0 [ 152.482618][ T2652] ? __cfi_policydb_read+0x10/0x10 [ 152.487428][ T345] usb 2-1: device descriptor read/8, error -71 [ 152.487901][ T2652] ? security_load_policy+0x130/0x12d0 [ 152.499480][ T2652] security_load_policy+0x16a/0x12d0 [ 152.504902][ T2652] ? irqentry_exit+0x4a/0x60 [ 152.509549][ T2652] ? __kasan_check_write+0x18/0x20 [ 152.514811][ T2652] ? mutex_lock+0x97/0x1d0 [ 152.519287][ T2652] ? __cfi_security_load_policy+0x10/0x10 [ 152.525127][ T2652] ? rep_movs_alternative+0x4a/0xa0 [ 152.530385][ T2652] sel_write_load+0x258/0x600 [ 152.535176][ T2652] ? __cfi_sel_write_load+0x10/0x10 [ 152.540430][ T2652] ? bpf_lsm_file_permission+0xd/0x20 [ 152.547387][ T2652] ? __cfi_sel_write_load+0x10/0x10 [ 152.552647][ T2652] vfs_write+0x3c1/0xfd0 [ 152.557420][ T2652] ? __cfi_vfs_write+0x10/0x10 [ 152.562233][ T2652] ? __kasan_check_write+0x18/0x20 [ 152.567473][ T2652] ? mutex_lock+0x97/0x1d0 [ 152.571949][ T2652] ? __cfi_mutex_lock+0x10/0x10 [ 152.576919][ T2652] ksys_write+0x145/0x260 [ 152.581331][ T2652] ? __cfi_ksys_write+0x10/0x10 [ 152.586556][ T2652] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 152.592871][ T2652] __x64_sys_write+0x7f/0x90 [ 152.597606][ T2652] x64_sys_call+0x271c/0x2ee0 [ 152.602338][ T2652] do_syscall_64+0x57/0xf0 [ 152.606867][ T2652] ? clear_bhb_loop+0x50/0xa0 [ 152.611597][ T2652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.615575][ T345] usb usb2-port1: unable to enumerate USB device [ 152.617604][ T2652] RIP: 0033:0x7f30ce39e0d9 [ 152.628431][ T2652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.648227][ T2652] RSP: 002b:00007f30cf186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.656762][ T2652] RAX: ffffffffffffffda RBX: 00007f30ce625fa0 RCX: 00007f30ce39e0d9 [ 152.664872][ T2652] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000006 [ 152.672901][ T2652] RBP: 00007f30ce435024 R08: 0000000000000000 R09: 0000000000000000 [ 152.680983][ T2652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.689145][ T2652] R13: 00007f30ce626038 R14: 00007f30ce625fa0 R15: 00007ffd7144b648 [ 152.697285][ T2652] [ 152.700354][ T2652] ---[ end trace 0000000000000000 ]--- [ 152.707212][ T2652] SELinux: failed to load policy [ 153.135797][ T345] usb 3-1: USB disconnect, device number 53