last executing test programs: 2m59.078163292s ago: executing program 2 (id=152): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0x4f000, &(0x7f0000000000)) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x9, 0x290, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0xfffffffc, 0x3, 0x0, 0xb7, 0x0, 0x7, 0x20000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'nr0\x00', {0x2, 0x0, @multicast1}}) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000140)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000080)={'vxcan1\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x7, 0x8000, 0x8, 0x6, 0x410001, 0x4, 0x3, 0x100007}}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @local, 0x2}, 0x1c) read$FUSE(r8, &(0x7f0000003240)={0x2020}, 0x2020) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x7, 0xb, 0x52, @local, @empty, 0x8000, 0x10, 0xb4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r10, 0x2f, 0x6f, 0xf0, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x7800, 0x7, 0x2, 0x1}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2m59.049648483s ago: executing program 2 (id=153): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x20000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1], 0x1}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x143040, 0x58) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) unshare(0x20000000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1], 0x1}, 0x58) (async) openat(0xffffffffffffff9c, 0x0, 0x143040, 0x58) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) wait4(0x0, 0x0, 0x40000000, 0x0) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) 2m58.856214577s ago: executing program 2 (id=159): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000182000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x78, 0x18, &(0x7f00000004c0)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x24}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m58.75426442s ago: executing program 2 (id=160): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1204, 0x1, 0x1f4, 0x0, r3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x2df}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m58.73707918s ago: executing program 2 (id=161): r0 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0xb522f000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x200000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r3, &(0x7f0000000300)='l', 0x1) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x800080, &(0x7f0000000240)="f9552511800d741bbf9f6d969ba4c2f7fa7ae11db00f941674e05703714b5c162d38a99789d961383d8c6a88893f6747f998f9dbfe4070c13cc77b4972767cfa46b58dbb9ec37fbacd70769e8814c42bdd93ff02c7688a7f220334c8e982e5ef7280bf07da77a771e2bd7c3b9a30c83e8d44db", 0x73, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d"], 0xd0060) close_range(r0, r0, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000001e0500"/16, @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}}, 0x2000c808) close(r0) 2m58.710055341s ago: executing program 2 (id=162): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/16, 0x10}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000500)=""/159, 0x9f}], 0x1}, 0x1}], 0x2, 0xc00, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2m43.61700761s ago: executing program 32 (id=162): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/16, 0x10}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000500)=""/159, 0x9f}], 0x1}, 0x1}], 0x2, 0xc00, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2m17.379800105s ago: executing program 3 (id=327): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "6351f36b675d953ebe73ce168e84d5135a5ba63762fcb5da76813382a701d83ed8eddbadab1845a09539233c294dda5568f4f3675066bfaa2140cfb4c024fe77", 0x2c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x34, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x36, 0x7dc121b97e4cf16f, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x38, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x35, 0x30, 0x30, 0x0, 0x30, 0x63, 0x66, 0x50, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x446f9958c1a2aa84, 0x30, 0x30, 0x30, 0x2f, 0x36, 0x64, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 2m17.379510015s ago: executing program 3 (id=328): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x18) shutdown(r1, 0x0) 2m17.230100409s ago: executing program 3 (id=329): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x2, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x7f924cda415610b9, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000010000000000fedbdf2508000000", @ANYRES32=r1, @ANYBLOB='\x00\x00', @ANYRES32], 0x38}], 0x1}, 0x4000010) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000060000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x6, "792c88266eec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.980955555s ago: executing program 0 (id=330): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0x8000007, 0x7f, 0xd0, 0xfffd, 0x5, 0x1000, 0x800, 0x9, 0x9, 0x5}}, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m15.88473565s ago: executing program 3 (id=331): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x4004743c, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42a002, 0x100) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='ocfs2\x00', 0x0, &(0x7f0000000240)='/dev/ppp\x00') sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x800) 2m15.814398821s ago: executing program 3 (id=332): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x6, "792c88266eec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0xc, 0x39, {0x39, 0x7, "09952f78aaf45f9bc8825a4d59cd555f9a14a6365700d46989be5a2aa58da3e5723939da61fa52d4797fa1bada89a4be5ab60a0cdeee38"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0xe, 0xb6, "1ef4f323157d19807b8c5979cf8ed46c0e6dabab8781a5adbaa580fecc94f0205bcca172ff8f6e80f6ea17ff731dcc092d2b5e683f3dd8d1332aa6d6e0896fefed91e144259f0bb866579cd8283a2e85ccbb7dd5ca611029f02a19a8cf5d7dc5a4e9c963cc7b8423998a3555ccc5d47dcb59f3a88ff8fdeb29a1f74d4b23b5ee395ab820250a82334eadc45e1611484d97ed64165eea7056fc4a82ccf2d7ea5c50a4a4bc24acb271d6c19a50eb0d8d95c95a15aa8ad3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0xc0, 0x5, 0x3, "2f5187"}, &(0x7f00000004c0)={0x40, 0x5, 0x2, "7f2a"}}) syz_usb_control_io$uac2(r1, 0x0, 0x0) 2m14.906867493s ago: executing program 0 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x2020) 2m14.887096893s ago: executing program 0 (id=337): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "6351f36b675d953ebe73ce168e84d5135a5ba63762fcb5da76813382a701d83ed8eddbadab1845a09539233c294dda5568f4f3675066bfaa2140cfb4c024fe77", 0x2c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x34, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x36, 0x7dc121b97e4cf16f, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x38, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x35, 0x30, 0x30, 0x0, 0x30, 0x63, 0x66, 0x50, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x446f9958c1a2aa84, 0x30, 0x30, 0x30, 0x2f, 0x36, 0x64, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, 0x0, 0x0, r0) 2m14.886663973s ago: executing program 0 (id=338): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000006c0)="1200", 0x2, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x65, 0x39, 0x39, 0x61, 0x66, 0x37, 0x35, 0x37, 0x0, 0x38, 0x36, 0x36, 0x32, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "001122334455852d78297773930aeeff00112233445566778899aabbcc0b000000000000005566778899aabbccddeeff5566778899aabbccddeeff00", 0x38}, 0x48, r3) (async, rerun: 64) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r3) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x0, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x35, 0x30, 0x30, 0x34, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r3) (async, rerun: 32) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "001122334400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff000000000000000000004a", 0x37}, 0x48, r3) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async, rerun: 32) keyctl$unlink(0x9, r4, r3) (rerun: 32) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x17fc) 2m14.823519655s ago: executing program 0 (id=339): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b26e53fef010000002a900683749e821dab8b9236592b00040000839b9043d6"], 0x0}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x20, 0x4, 0x0, 0xee01}, {0xfffffffe, 0x2, 0x0, 0x1, 0xfffffffffffffffb, 0x3, 0x8, 0x4}, {0x4, 0xffffffdffffffffe, 0x4, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x210000, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x3, 0x6, 0x0, 0xfffffffb}}, 0xe8) mremap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4080) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xd) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) read(r1, &(0x7f00000001c0)=""/175, 0x72) 2m13.239675371s ago: executing program 0 (id=341): clock_getres(0x7, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x109000, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) sendfile(r1, r0, 0x0, 0xd6) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0xa0c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x141004) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) exit(0x3) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) unshare(0x20000400) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = dup(r7) write$FUSE_DIRENT(r8, &(0x7f0000000080)={0x30, 0xfffffffffffffffe, 0x0, [{0x0, 0x1, 0x5, 0x1, '::-::'}]}, 0x30) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0603d0f, &(0x7f0000000040)) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$BLKRRPART(r5, 0x125f, 0x0) read$FUSE(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r10, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {0x0, 0x8000, 0x800, 0x9}, 0xf, [0x0, 0x10, 0x8000, 0x3ff, 0x7, 0x100, 0xb, 0x10, 0x7fff, 0xfa, 0x9, 0x3ff, 0x3, 0x40, 0x800, 0x3, 0xffffff7f, 0xec9dce67, 0x6, 0xfffffffa, 0x10000, 0xfffffffa, 0xfff, 0x6, 0x674, 0xa, 0xffff, 0x80000001, 0x1, 0xd6a2, 0x6, 0x1, 0x59, 0x80, 0x8, 0x8001, 0xa, 0x9d, 0x80000000, 0x7fffffff, 0x1, 0x4d, 0x7, 0xffffffff, 0xd6, 0x3, 0x40, 0x3c, 0x2, 0x3, 0x200, 0x9, 0x6, 0x2, 0x0, 0x200, 0x10001, 0x1000, 0xfffffffd, 0x3, 0xce35, 0x3, 0x7, 0x1ff], [0xdd, 0x90f8, 0x1, 0xa, 0x6, 0x7, 0xd54, 0x7, 0x0, 0xe3, 0x1, 0x7fffffff, 0x0, 0x5, 0x9, 0x1fe, 0x9, 0x7fffffff, 0x40, 0x9038, 0xffff, 0xfffffffc, 0xfffffff8, 0x8, 0x6c15, 0x0, 0x8, 0x9c4, 0x9, 0x1, 0x2, 0x45, 0xcf7, 0x7f, 0x0, 0x7, 0xffff8d86, 0xd0e, 0x6e9694c2, 0x7, 0xe28, 0x1, 0xfffff000, 0xc0, 0x1, 0x0, 0x0, 0x5, 0x7, 0x4, 0xb33d, 0x2, 0x49a, 0xb7b4, 0xc6, 0xff, 0x4e, 0x2, 0x0, 0xffffffff, 0x2, 0xff, 0xd638, 0x3], [0x9, 0x3ff, 0x5, 0x4, 0xaec9, 0x676, 0x2, 0x7, 0x3, 0x67e, 0x1000, 0x8000, 0xf4, 0x2, 0x6, 0x5, 0x3, 0xffffffff, 0x2, 0x18ad, 0x5, 0x8, 0xf3aa, 0x1, 0x5, 0x8, 0x9, 0x66a1, 0x7, 0x6, 0x8, 0x7, 0x8, 0x8, 0x6, 0x87d, 0x6, 0x2, 0xffff, 0x6, 0xaa9, 0x6, 0x3ff, 0x4, 0xfffffffb, 0x4, 0x400, 0x1, 0x8, 0xd6d7, 0x1, 0x6, 0x0, 0x2, 0x2, 0x8, 0x6, 0xe000, 0x8, 0xfffff55f, 0x8, 0x0, 0x8, 0xf], [0x8, 0x0, 0x8, 0x4058, 0x5fc7, 0x1, 0x5, 0x9, 0x3b, 0x3, 0x4, 0xfffffffe, 0x8001, 0x13de, 0x6, 0xffff0000, 0x0, 0xc, 0x4, 0x7, 0x10000, 0xceb, 0x0, 0x6, 0x1, 0x2, 0x4, 0x1000, 0x8001, 0xfffffffa, 0x5, 0x9, 0x1, 0x5, 0x6, 0xfffffff9, 0x0, 0x8000, 0x8, 0x0, 0x1, 0x640, 0x8, 0x6, 0x381f, 0x3, 0x4, 0x2, 0x3ff, 0x2, 0xfffffff7, 0x7fffffff, 0xc, 0x5, 0x7, 0x4, 0x1, 0x2eb, 0x1000, 0x2, 0x80000001, 0x800, 0x8, 0x2]}, 0x45c) ioctl$BTRFS_IOC_INO_PATHS(r2, 0x4004743c, 0x0) 2m12.84118157s ago: executing program 3 (id=343): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0fae080f20d835200000000f22d80f01ba338100001d6b0000000fb399f03831003e0f01c50f01efc4e1d45da4a2ef5300009a006000003801b805000000b95dc500000f01c1", 0x46}], 0xaaaaaaaaaaaad23, 0x16, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)="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", 0xfff}, {&(0x7f0000001200)="a74f", 0x2}], 0x2}}], 0x1, 0x4001c00) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m57.390161247s ago: executing program 33 (id=341): clock_getres(0x7, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x109000, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) sendfile(r1, r0, 0x0, 0xd6) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0xa0c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x141004) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) exit(0x3) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) unshare(0x20000400) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = dup(r7) write$FUSE_DIRENT(r8, &(0x7f0000000080)={0x30, 0xfffffffffffffffe, 0x0, [{0x0, 0x1, 0x5, 0x1, '::-::'}]}, 0x30) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0603d0f, &(0x7f0000000040)) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$BLKRRPART(r5, 0x125f, 0x0) read$FUSE(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r10, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {0x0, 0x8000, 0x800, 0x9}, 0xf, [0x0, 0x10, 0x8000, 0x3ff, 0x7, 0x100, 0xb, 0x10, 0x7fff, 0xfa, 0x9, 0x3ff, 0x3, 0x40, 0x800, 0x3, 0xffffff7f, 0xec9dce67, 0x6, 0xfffffffa, 0x10000, 0xfffffffa, 0xfff, 0x6, 0x674, 0xa, 0xffff, 0x80000001, 0x1, 0xd6a2, 0x6, 0x1, 0x59, 0x80, 0x8, 0x8001, 0xa, 0x9d, 0x80000000, 0x7fffffff, 0x1, 0x4d, 0x7, 0xffffffff, 0xd6, 0x3, 0x40, 0x3c, 0x2, 0x3, 0x200, 0x9, 0x6, 0x2, 0x0, 0x200, 0x10001, 0x1000, 0xfffffffd, 0x3, 0xce35, 0x3, 0x7, 0x1ff], [0xdd, 0x90f8, 0x1, 0xa, 0x6, 0x7, 0xd54, 0x7, 0x0, 0xe3, 0x1, 0x7fffffff, 0x0, 0x5, 0x9, 0x1fe, 0x9, 0x7fffffff, 0x40, 0x9038, 0xffff, 0xfffffffc, 0xfffffff8, 0x8, 0x6c15, 0x0, 0x8, 0x9c4, 0x9, 0x1, 0x2, 0x45, 0xcf7, 0x7f, 0x0, 0x7, 0xffff8d86, 0xd0e, 0x6e9694c2, 0x7, 0xe28, 0x1, 0xfffff000, 0xc0, 0x1, 0x0, 0x0, 0x5, 0x7, 0x4, 0xb33d, 0x2, 0x49a, 0xb7b4, 0xc6, 0xff, 0x4e, 0x2, 0x0, 0xffffffff, 0x2, 0xff, 0xd638, 0x3], [0x9, 0x3ff, 0x5, 0x4, 0xaec9, 0x676, 0x2, 0x7, 0x3, 0x67e, 0x1000, 0x8000, 0xf4, 0x2, 0x6, 0x5, 0x3, 0xffffffff, 0x2, 0x18ad, 0x5, 0x8, 0xf3aa, 0x1, 0x5, 0x8, 0x9, 0x66a1, 0x7, 0x6, 0x8, 0x7, 0x8, 0x8, 0x6, 0x87d, 0x6, 0x2, 0xffff, 0x6, 0xaa9, 0x6, 0x3ff, 0x4, 0xfffffffb, 0x4, 0x400, 0x1, 0x8, 0xd6d7, 0x1, 0x6, 0x0, 0x2, 0x2, 0x8, 0x6, 0xe000, 0x8, 0xfffff55f, 0x8, 0x0, 0x8, 0xf], [0x8, 0x0, 0x8, 0x4058, 0x5fc7, 0x1, 0x5, 0x9, 0x3b, 0x3, 0x4, 0xfffffffe, 0x8001, 0x13de, 0x6, 0xffff0000, 0x0, 0xc, 0x4, 0x7, 0x10000, 0xceb, 0x0, 0x6, 0x1, 0x2, 0x4, 0x1000, 0x8001, 0xfffffffa, 0x5, 0x9, 0x1, 0x5, 0x6, 0xfffffff9, 0x0, 0x8000, 0x8, 0x0, 0x1, 0x640, 0x8, 0x6, 0x381f, 0x3, 0x4, 0x2, 0x3ff, 0x2, 0xfffffff7, 0x7fffffff, 0xc, 0x5, 0x7, 0x4, 0x1, 0x2eb, 0x1000, 0x2, 0x80000001, 0x800, 0x8, 0x2]}, 0x45c) ioctl$BTRFS_IOC_INO_PATHS(r2, 0x4004743c, 0x0) 1m57.339127649s ago: executing program 34 (id=343): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0fae080f20d835200000000f22d80f01ba338100001d6b0000000fb399f03831003e0f01c50f01efc4e1d45da4a2ef5300009a006000003801b805000000b95dc500000f01c1", 0x46}], 0xaaaaaaaaaaaad23, 0x16, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)="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", 0xfff}, {&(0x7f0000001200)="a74f", 0x2}], 0x2}}], 0x1, 0x4001c00) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.108925419s ago: executing program 1 (id=962): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0060000180c2000002ffffffffffff86dd694fd2cd002a3afffe80000000000000000000000000002dff01"], 0x64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) (async) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000000)="26f43e3e9c36660f01da0f38f045000fb244dfb866008ec00f013966b9800000c00f326635004000000f30bad10466b88c00c0fe66ef0f07", 0x38}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@rnullb, 0x0, 0x0) (async) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@rnullb, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3000, 0xffffffff, 0x6, 0x0, 0x80, "7f58d6b86847e78c7608d7f99f75deba4353ad", 0x5, 0x1}) 8.814288016s ago: executing program 1 (id=963): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x6, "792c88266eec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) 5.652660379s ago: executing program 1 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000280)="0430000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e70") 5.6186716s ago: executing program 1 (id=989): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_adjtime(0x7, &(0x7f0000000200)={0xeffd, 0x4, 0x8, 0x8, 0x7, 0xe, 0x7, 0x2000000000002, 0x8000009654, 0x8001, 0x8, 0x0, 0xa, 0x4000007, 0xffff, 0x200cbf, 0x1, 0x5, 0x5, 0x4, 0x0, 0x807, 0x0, 0x5, 0x2, 0x9}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7f35d6f6815e937f, 0xf}, {0xd, 0xc}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40000040) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84}, {0xfffffffffffffffc, 0x0, 0xfffffffffffffffa, 0x0, 0x81, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x9, @in=@private=0xa010101, 0x3501, 0x0, 0x0, 0xb7, 0x2, 0x0, 0x8}}, 0xe8) r3 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xfd2d6bf17446f130, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x2}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x5) mmap(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x300000b, 0x11, 0xffffffffffffffff, 0x192be000) madvise(&(0x7f0000305000/0x4000)=nil, 0x4000, 0x9) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0xffffffffffffff81, 0x20400}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xe5, 0x12) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000001040)=ANY=[@ANYBLOB="201002000000216b307eedbd99aaf901bf376527b295008812ea5e2d4796d32f82e5e7d031d8d960a5af4b80207e8d2a9eaf1c8895b889c76819e121cf917f91d7b5ef5b980aa51b5ab770b57c30e759e3a541cd04f86a6254bd0d618d4f61d0cf99e9c58d47e241eddd711707965052f1828e57e5ef3b86e1a334ec9f5052c183ee4006d09a4f0dcd9f290181c0c2a79bb3c221443f94546890e5635730fe24f2aaba25360e3a19a60f3cf64f1e61b557cde4d258f3b8440251073ea85841aa54684a7671f6b3bcbc51f8dc12b24b09a7d7479bc04c0aa5262bb15761e11af49217bce4cab72d9048e48f6f67c53f64f9656d5ebf32589e2a265b7f19ada34d02aac710db4b8d60d475f44d345b2ce1604891875089c64c48ef7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x17, 0x5, "a4ee1721cb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) timer_create(0x8, 0x0, &(0x7f0000000000)) 4.351798809s ago: executing program 4 (id=1002): r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x100, 0x9fd4, {{0x9, 0x4, 0x3, 0x4, 0x24, 0x66, 0x0, 0x5, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0xf, 0x97, [@multicast1, @private=0xa010102, @rand_addr=0x64010100]}]}}}}}) syz_open_dev$mouse(&(0x7f0000000040), 0x3ff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r4, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = socket$inet6(0xa, 0x80001, 0x0) sendmmsg(r7, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) pread64(r0, &(0x7f0000000480)=""/115, 0x73, 0x4) 4.31724898s ago: executing program 4 (id=1003): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r2, 0x80407000) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)={[{@subsystem='blkio'}]}) write$FUSE_INIT(r1, &(0x7f0000002800)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xf, 0x402b0004, 0xcf, 0x4, 0x3, 0x2e, 0x0, 0x0, 0x80, 0x8001}}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) 4.305122351s ago: executing program 4 (id=1004): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 3.795105272s ago: executing program 4 (id=1006): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000280)="0400400000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e70") 3.774609313s ago: executing program 4 (id=1007): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x6, "792c88266eec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) 2.558225411s ago: executing program 1 (id=1012): socket$nl_xfrm(0x10, 0x3, 0x6) symlink(0x0, &(0x7f0000000000)='./file0\x00') r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000012c0)={0x0, &(0x7f0000001300)=[@nested_load_syzos={0x136, 0x50, {0x2, 0x401, [@enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x101}}]}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x84, {0x1, "0f01caf2ab663e67676766470f3881298f897c8044694d66baf80cb8605fde8aef66bafc0cb80050fe89ef26430fc7ad4400000048b800000100000000000f23d00f21f8350000000e0f23f866b88d008ec0f3410fc735fe00000066baf80cb8cb360582ef66bafc0cb023ee"}}, @code={0xa, 0x51, {"0f01cf2e0f552966420fc734d983ba09ce000074b9800000c00f3235000400000f30b805000000b9010000000f01c1447c0866ba410066ed0f2c6e0f650f22a7"}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xc0010114}}, @out_dx={0x6a, 0x28, {0x9804, 0x3, 0x5}}, @nested_vmresume={0x130, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x5, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x5, 0x6, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x37, 0x3, 0x135, 0x3}}, @cpuid={0x64, 0x18, {0x7, 0x3}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x2c06, 0xd, 0x1ad3}}, @wrmsr={0x65, 0x20, {0x2fa, 0xf}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xbe7d}}, @nested_load_syzos={0x136, 0xe8, {0x1, 0x3, [@enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x3, 0x7f}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x2ae}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x1}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x7dbd47af3489a824}}]}}, @nested_load_code={0x12e, 0x56, {0x2, "362e0fc71d7c2a0000430f01caf3410f09460f38028809000000f20f22dd43dbd766baf80cb8f8b44c88ef66bafc0c66ed66430f38807a040f01c80f01cb"}}, @wr_drn={0x68, 0x20, {0x1, 0x10001}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x49e, 0x5, 0xfffffffffffff001, 0x9}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xfd35}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0x1, 0x1}}, @wr_crn={0x67, 0x20, {0x2, 0x3}}, @set_irq_handler={0xc8, 0x20, {0x1}}, @out_dx={0x6a, 0x28, {0x0, 0x4, 0x7fffffff}}, @out_dx={0x6a, 0x28, {0xfc38, 0x0, 0x4c3}}], 0x5b3}) ioctl$KVM_RUN(r0, 0xae80, 0x0) io_setup(0x2007, &(0x7f0000000980)) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000540)=@nullb, r2, &(0x7f0000000640)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) listxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=""/249, 0xf9) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) truncate(&(0x7f00000006c0)='./file0\x00', 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac010000170001"], 0x1ac}}, 0x40) r8 = dup(r6) syz_io_uring_setup(0x14a6, &(0x7f0000000080)={0x0, 0x5aca, 0x10, 0x3, 0x18a, 0x0, r8}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 1.993710524s ago: executing program 1 (id=1016): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x6, "792c88266eec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.078247935s ago: executing program 6 (id=1019): r0 = syz_clone(0x6d131400, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup(r2) write$binfmt_format(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) setreuid(0xee00, 0x0) ioprio_get$uid(0x3, 0xee00) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x5177, 0x40000000000180, 0x2, 0x7, 0xf5, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff9, 0x9, 0x4ee], 0x25000, 0x10106}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x11, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fgetxattr(r2, &(0x7f0000000340)=@random={'user.', '/\x00'}, &(0x7f0000000380)=""/86, 0x56) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)={0x0, 0x1}) keyctl$setperm(0x5, 0x0, 0xe202800) lsm_set_self_attr(0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="6d00000000000000050000000000000020000000000000"], 0x20, 0x0) r5 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r5, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) lsm_get_self_attr(0x69, &(0x7f0000000240)={0x0, 0x0, 0x91, 0x71, ""/113}, &(0x7f0000000300)=0x91, 0x0) getpriority(0x2, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYRES16=r6, @ANYRES64=r4], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.078066175s ago: executing program 6 (id=1020): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x80, 0xe1, 0x4, 0x5, 0x1ff, 0x8}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback, 0x1}, 0x1c) epoll_create1(0x80000) 865.93982ms ago: executing program 4 (id=1021): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) r1 = syz_clone(0x20000091, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x2104024, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='attr/exec\x00') write$binfmt_misc(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="2010025959a7eedc118efcff6b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x17, 0x5, "a4ee1721cb"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x4e1e, @remote}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) 595.120316ms ago: executing program 6 (id=1022): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) rt_tgsigqueueinfo(r1, r1, 0x9, &(0x7f0000000600)={0x31, 0x3, 0x80000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "39b138d4300bc48f", "ccf149b57883a43d088357d86882e1e4", "f30add4d", "c3d07f5fede7b038"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r5, 0x4000000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "ca54618d0d1a9e0a", "cf3442c1a9e85a93becf3fcf1bdf39df66bf5c89554fcbc3285c3666563e976e", "868f992b", "6752f4a39bf5312e"}, 0x38) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x16, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) recvfrom(r5, &(0x7f00000009c0)=""/4074, 0xfea, 0x17, 0x0, 0x0) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000680)="e36e06876045ef667df482b6941ace065ccc45fdca6ac1c080ac034ea1f8009adfb919bf67eba5261a477aaad3c012f2fe26059815d1c1140e83547d18219079d4992920db85bc2321231ce34b71a0c5929310366e540134d0dcaba14ab7caea2c5b3a771894f35e850d650cfc9f5924a8177d7267c32b0d8f7bbc1141b8cb685904f84fec3ad14083b53a8266229e8a4f30eba69360f159f7139c8811b43e73f68ebeee81a8f5e9c4f9f750cb7286540ccfd6021c469d0dde217c493fb6cc32447b5ab5942b662fcb5c138e6e835138f2a4ab3063c3910ba6026f7e26b57df54819ab97c9e645eb01598d30a0284570", 0xf0}, {&(0x7f00000019c0)="2355e5b99938f5bfb5e4dc4b5e6e7dec6b5548c332d120299ef7300d31027c08f67a01c894dcb9e51f73c1d387b1636b93ed0165cf1ec13cf3e27efb7d7234263e5c59268447681041fa8f13d16c52709cc6b3df75ec168e4e497af7e3e150f50fd073ce6de52ecedd1f93fe2c3b757e4117c81551aeca2dd7debc3b4d9c94848fae8d740a519f46fa0be18b18d74c89b33e4aa3977924149b7f9278a966063cecb0b7a863ae7ab728070cda8c275dfa8ed33d2300e2761f48229ecb513625743144f474a47313276f19420c1c35b5475039e4", 0xd3}, {&(0x7f0000000880)="6600d965e7c4f61ee4447306c81a6ada59bbf16649d78b78d9871d6542588e378ab5124b75beb7d06a26c6352299baffee8b892a0feddb23b2eff2e43d72a3cb3283a4aebe7cb926827f", 0x4a}, {&(0x7f0000000900)="120f1253000b995c1181ac3e8232299dd487a1be6d62049b3915f6a4e6891ed8b47b9cd459ab688a894dc2b4e46b3cad5a304a58465efe79f8da943fbb2299de", 0x40}], 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000240)={0xd, 0x0, 0x33}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000080)={0x1500000000000000, 0x3000, 0x4, 0x0, 0x19}) 531.584198ms ago: executing program 6 (id=1023): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="9a007800005d009db8008000000f23d00f21f8351000000f0f23f8c4e2c907eb3ef20f32660faef6c4e1c016db0f22270f795ba30f01cb", 0x37}], 0x1, 0x6, &(0x7f0000000380)=[@dstype3={0x7, 0x5}], 0x1) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4605069e0d000000000000000003000300d9000000ca020000380000005e02000004040000000020000301"], 0x98) (async) close(r3) (async, rerun: 64) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x80000001, 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x10001, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffc) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000000, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) write$input_event(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 474.269809ms ago: executing program 6 (id=1024): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x8) syz_usb_connect(0x1, 0x51, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYRES8=r0, @ANYRES64=r0], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x100c}}, {0x56, &(0x7f0000000140)=@string={0x56, 0x3, "d59f36aec618e03af33b4bb1839744822ea7567f308563aeb6f47c985bf4e512353bf77b393e8379bc5b4d323bcfc379121ebba415799faabaa5a85a2febbf9f10187a6ad93706719b8ffd1daf978b214b4ddc43"}}, {0x8b, &(0x7f00000002c0)=@string={0x8b, 0x3, "e981afb37ccc2b676ac04422e8fb472297226ab0c57c1063c1b777677b0350106e47fb6e186b96555f9d28cda0fb2776fc43aeab5f6fef76fc5c4ddbd21bea429478c7b851732f20212dc2ec00f3436babfd2c95a8b7a1e5fb2b7a5863aab51450060337d8fa3ad3615ecf61ef00da75a83ef9a0311b94f5cab5b0553f1a8753f193250f968baa47d6"}}]}) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x1081410, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1020021, 0x0) 386.215291ms ago: executing program 5 (id=1025): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@x86={0x9, 0x0, 0x8, 0x0, 0x4, 0x3, 0xc, 0x3, 0x4b, 0x7, 0xa2, 0x8, 0x0, 0xb, 0x2, 0x0, 0x81, 0xf9, 0x80, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x40000) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0x1c42, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="78000000070a0102000000008fcc0000050000060900010073797a31000000005800048054000180090001006d65746100000000440002800800034000f3ff0a080001400000001008000140000000100800014000000009080001400000000b080002400000000a0800014000000000000001400000000f1ed9c07ad16b71d806270a3e6d0682883acf8204538d7f1c70e3ced45919e9a538d215e8bccdb5a2906d366ba2e2fe4a9943855a2e747625be722a2d8653067eccca3de078106118"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',asi~e.t,\x00\x00\x00\x00\x00\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/Loopback.0\x00') r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 301.926793ms ago: executing program 5 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000280)="0400000030000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e70") 246.313394ms ago: executing program 5 (id=1027): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, &(0x7f0000000480)="532e2eac770767f7429748", 0xb) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x20) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r2 = open_tree(r1, &(0x7f0000000000)='./dev\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000180)='./dev\x00', 0x100) close_range(r0, r3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x200000, 0x130) ioctl(r1, 0xc138fd03, &(0x7f0000000280)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e70") 246.191244ms ago: executing program 5 (id=1028): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x5}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000004c) symlink(&(0x7f0000000000)='.\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000000)=0x7) 245.596344ms ago: executing program 5 (id=1029): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500030000", 0x39}], 0x1) 232.968305ms ago: executing program 5 (id=1030): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x17, 0x5, "a4ee1721cb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x98, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000040)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 6 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) write(r0, &(0x7f0000000140)='common_pid > 0|', 0xf) kernel console output (not intermixed with test programs): scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.751507][ T339] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 165.903534][ T339] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 165.912720][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 165.920894][ T339] usb 5-1: Product: syz [ 165.925492][ T339] usb 5-1: Manufacturer: syz [ 166.061505][ T311] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 166.132281][ T3107] tipc: Enabling of bearer rejected, failed to enable media [ 166.145390][ T339] usb 5-1: USB disconnect, device number 56 [ 166.211495][ T311] usb 6-1: Using ep0 maxpacket: 32 [ 166.217665][ T311] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 166.225876][ T311] usb 6-1: config 0 has no interface number 0 [ 166.231988][ T311] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 166.243392][ T311] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 166.252510][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.260487][ T311] usb 6-1: Product: syz [ 166.264682][ T311] usb 6-1: Manufacturer: syz [ 166.269270][ T311] usb 6-1: SerialNumber: syz [ 166.274388][ T311] usb 6-1: config 0 descriptor?? [ 166.279646][ T3117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 166.485547][ T339] usb 2-1: USB disconnect, device number 74 [ 166.495669][ T3117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 166.501449][ T36] audit: type=1400 audit(1788961412.941:379): avc: denied { mount } for pid=3125 comm="syz.1.624" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 166.525800][ T36] audit: type=1400 audit(1788961412.941:380): avc: denied { watch watch_reads } for pid=3125 comm="syz.1.624" path="/172/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 166.548900][ T36] audit: type=1400 audit(1788961412.971:381): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 166.851533][ T339] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 166.891495][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 167.002511][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.012666][ T339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.021631][ T339] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.036065][ T339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.045144][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.053211][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 167.058351][ T339] usb 2-1: Product: syz [ 167.062584][ T339] usb 2-1: Manufacturer: syz [ 167.067291][ T339] usb 2-1: SerialNumber: syz [ 167.072594][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.083768][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.093558][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.106820][ T339] cdc_mbim 2-1:1.0: skipping garbage [ 167.112163][ T339] cdc_mbim 2-1:1.0: skipping garbage [ 167.117461][ T339] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 167.124352][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 167.133436][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.141474][ T339] cdc_mbim 2-1:1.0: bind() failure [ 167.148300][ T10] usb 5-1: config 0 descriptor?? [ 167.396819][ T3139] FAULT_INJECTION: forcing a failure. [ 167.396819][ T3139] name fail_futex, interval 1, probability 0, space 0, times 0 [ 167.409705][ T3139] CPU: 1 UID: 0 PID: 3139 Comm: syz.6.629 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 167.409739][ T3139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.409753][ T3139] Call Trace: [ 167.409762][ T3139] [ 167.409774][ T3139] __dump_stack+0x21/0x30 [ 167.409807][ T3139] dump_stack_lvl+0x140/0x1c0 [ 167.409835][ T3139] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.409865][ T3139] dump_stack+0x19/0x20 [ 167.409886][ T3139] should_fail_ex+0x3c2/0x510 [ 167.409900][ T3139] should_fail+0xf/0x20 [ 167.409911][ T3139] get_futex_key+0x178/0x940 [ 167.409925][ T3139] ? __cfi___futex_wait+0x10/0x10 [ 167.409935][ T3139] ? __cfi_get_futex_key+0x10/0x10 [ 167.409955][ T3139] ? __cfi_futex_wake_mark+0x10/0x10 [ 167.409975][ T3139] futex_wake+0x150/0x950 [ 167.409994][ T3139] ? futex_wait+0x2b8/0x7c0 [ 167.410012][ T3139] ? __cfi_futex_wake+0x10/0x10 [ 167.410027][ T3139] ? vfs_write+0xbcf/0xfd0 [ 167.410039][ T3139] do_futex+0x37d/0x510 [ 167.410053][ T3139] ? __cfi_do_futex+0x10/0x10 [ 167.410065][ T3139] ? mutex_unlock+0x90/0x240 [ 167.410078][ T3139] __se_sys_futex+0x13c/0x320 [ 167.410100][ T3139] ? __x64_sys_futex+0x110/0x110 [ 167.410125][ T3139] ? __cfi_ksys_write+0x10/0x10 [ 167.410147][ T3139] __x64_sys_futex+0xe9/0x110 [ 167.410170][ T3139] x64_sys_call+0x227f/0x2ee0 [ 167.410180][ T3139] do_syscall_64+0x57/0xf0 [ 167.410190][ T3139] ? clear_bhb_loop+0x50/0xa0 [ 167.410202][ T3139] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 167.410214][ T3139] RIP: 0033:0x7f3fee99e159 [ 167.410225][ T3139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.410241][ T3139] RSP: 002b:00007f3fef84f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 167.410263][ T3139] RAX: ffffffffffffffda RBX: 00007f3feec26098 RCX: 00007f3fee99e159 [ 167.410279][ T3139] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3feec2609c [ 167.410293][ T3139] RBP: 00007f3feec26090 R08: 4000000000000000 R09: 0000000000000000 [ 167.410308][ T3139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.410316][ T3139] R13: 00007f3feec26128 R14: 00007ffc50eb59d0 R15: 00007ffc50eb5ab8 [ 167.410325][ T3139] [ 167.634578][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 167.640544][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 167.649753][ T10] usb 5-1: USB disconnect, device number 57 [ 169.181518][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 169.242433][ T311] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 169.252815][ T311] asix 6-1:0.188: probe with driver asix failed with error -71 [ 169.261364][ T311] usb 6-1: USB disconnect, device number 28 [ 169.332535][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.343564][ T31] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.356395][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 169.363045][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 169.372091][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.380600][ T31] usb 5-1: config 0 descriptor?? [ 169.549480][ T311] usb 2-1: USB disconnect, device number 75 [ 169.756908][ T3162] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 169.881515][ T311] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 170.011512][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 170.029973][ T36] audit: type=1400 audit(1788961416.471:382): avc: denied { create } for pid=3173 comm="syz.6.641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.031492][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 170.057048][ T311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.067188][ T311] usb 2-1: config 0 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.080351][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.087014][ T311] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 170.096074][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.104753][ T311] usb 2-1: config 0 descriptor?? [ 170.110586][ T311] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 170.161478][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 170.168058][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 170.176586][ T10] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 170.186754][ T10] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 170.198474][ T10] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 170.207602][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.215686][ T10] usb 6-1: Product: syz [ 170.219853][ T10] usb 6-1: Manufacturer: syz [ 170.224458][ T10] usb 6-1: SerialNumber: syz [ 170.252644][ T31] sony 0003:054C:0268.0024: can't set operational mode: step 1 [ 170.260329][ T31] sony 0003:054C:0268.0024: Failed to set controller into operational mode [ 170.270294][ T31] sony 0003:054C:0268.0024: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 170.282483][ T31] sony 0003:054C:0268.0024: failed to claim input [ 170.292281][ T31] usb 5-1: USB disconnect, device number 58 [ 170.430412][ T3165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.439384][ T3165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.447498][ T3165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.456050][ T3165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.464217][ T3165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.472785][ T3165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.480905][ T3165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.489438][ T3165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.497608][ T3165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.506121][ T3165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.520024][ T10] usb 6-1: USB disconnect, device number 29 [ 170.549787][ T36] audit: type=1400 audit(1788961416.991:383): avc: denied { setattr } for pid=3176 comm="syz.6.642" name="NETLINK" dev="sockfs" ino=19308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.668820][ T3189] netlink: 165 bytes leftover after parsing attributes in process `syz.1.637'. [ 171.021499][ T31] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 171.041268][ T36] audit: type=1400 audit(1788961417.481:384): avc: denied { create } for pid=3159 comm="syz.1.637" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.062422][ T36] audit: type=1400 audit(1788961417.481:385): avc: denied { read } for pid=3159 comm="syz.1.637" name="file2" dev="tmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.084999][ T36] audit: type=1400 audit(1788961417.481:386): avc: denied { open } for pid=3159 comm="syz.1.637" path="/174/file2" dev="tmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.107978][ T36] audit: type=1400 audit(1788961417.481:387): avc: denied { ioctl } for pid=3159 comm="syz.1.637" path="/174/file2" dev="tmpfs" ino=986 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.181491][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 171.187819][ T31] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 171.196389][ T31] usb 5-1: config 0 has no interface number 0 [ 171.202670][ T31] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 171.214552][ T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 171.223863][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.232054][ T31] usb 5-1: Product: syz [ 171.236339][ T31] usb 5-1: Manufacturer: syz [ 171.240972][ T31] usb 5-1: SerialNumber: syz [ 171.246815][ T31] usb 5-1: config 0 descriptor?? [ 171.254002][ T3197] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 171.271509][ T311] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 171.432628][ T311] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 171.440973][ T311] usb 6-1: config 0 has no interface number 0 [ 171.447336][ T311] usb 6-1: config 0 interface 41 has no altsetting 0 [ 171.455986][ T311] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 171.465465][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.471536][ T3197] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 171.473779][ T311] usb 6-1: Product: syz [ 171.485654][ T311] usb 6-1: Manufacturer: syz [ 171.490350][ T311] usb 6-1: SerialNumber: syz [ 171.496540][ T311] usb 6-1: config 0 descriptor?? [ 171.702978][ T311] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 171.718654][ T311] usb 6-1: USB disconnect, device number 30 [ 172.154300][ T3215] IPv6: Can't replace route, no match found [ 172.181895][ T311] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 172.332278][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 172.342518][ T311] usb 6-1: Using ep0 maxpacket: 16 [ 172.353513][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 172.372422][ T311] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.387112][ T311] usb 6-1: config 0 has no interface number 0 [ 172.394710][ T31] asix 5-1:0.188: probe with driver asix failed with error -32 [ 172.406873][ T311] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 172.423591][ T311] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.433864][ T311] usb 6-1: config 0 interface 41 has no altsetting 0 [ 172.443051][ T311] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 172.452562][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.460780][ T311] usb 6-1: Product: syz [ 172.465105][ T311] usb 6-1: Manufacturer: syz [ 172.471399][ T311] usb 6-1: SerialNumber: syz [ 172.480584][ T311] usb 6-1: config 0 descriptor?? [ 172.487255][ T3200] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 172.494509][ T3200] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 172.593497][ T339] usb 2-1: USB disconnect, device number 76 [ 172.599692][ T36] audit: type=1400 audit(1788961419.041:388): avc: denied { unlink } for pid=293 comm="syz-executor" name="file2" dev="tmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.622423][ T3229] new mount options do not match the existing superblock, will be ignored [ 172.702444][ T3200] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 172.709640][ T3200] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 173.100237][ T3235] overlayfs: failed to resolve './cgroup': -2 [ 173.318246][ T311] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 173.331014][ T311] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 173.340394][ T311] usb 6-1: USB disconnect, device number 31 [ 173.491521][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 173.641476][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 173.647742][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 173.656233][ T9] usb 2-1: config 0 has no interface number 0 [ 173.662481][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 173.672555][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 173.683895][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 173.693657][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.701688][ T9] usb 2-1: Product: syz [ 173.705838][ T9] usb 2-1: Manufacturer: syz [ 173.710404][ T9] usb 2-1: SerialNumber: syz [ 173.715545][ T9] usb 2-1: config 0 descriptor?? [ 173.720811][ T3244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.728062][ T3244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.840506][ T311] usb 5-1: USB disconnect, device number 59 [ 173.935962][ T3244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.943204][ T3244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.121481][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 174.150876][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 174.271491][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 174.278042][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.288206][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.298635][ T10] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 174.307735][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.315864][ T10] usb 6-1: Product: syz [ 174.320147][ T10] usb 6-1: Manufacturer: syz [ 174.324791][ T10] usb 6-1: SerialNumber: syz [ 174.532358][ T36] audit: type=1400 audit(1788961420.981:389): avc: denied { nlmsg_read } for pid=3263 comm="syz.5.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 175.040782][ T10] usb 6-1: unit 4 not found! [ 175.055364][ T10] usb 6-1: USB disconnect, device number 32 [ 175.371478][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 175.522416][ T10] usb 6-1: config index 0 descriptor too short (expected 69, got 51) [ 175.530618][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.540966][ T10] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.555514][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 175.564716][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.572767][ T10] usb 6-1: Product: syz [ 175.576971][ T10] usb 6-1: Manufacturer: syz [ 175.581605][ T10] usb 6-1: SerialNumber: syz [ 175.681516][ T311] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 175.831485][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 175.837844][ T311] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 175.846253][ T311] usb 5-1: config 0 has no interface number 0 [ 175.852628][ T311] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 175.865320][ T311] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 175.874428][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.882493][ T311] usb 5-1: Product: syz [ 175.887805][ T311] usb 5-1: Manufacturer: syz [ 175.892481][ T311] usb 5-1: SerialNumber: syz [ 175.901663][ T311] usb 5-1: config 0 descriptor?? [ 175.906957][ T3284] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 175.961514][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 175.971957][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 175.983325][ T9] usb 2-1: USB disconnect, device number 77 [ 175.989718][ T3280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.998302][ T3280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.006977][ T10] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 176.022329][ T10] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 176.031393][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 176.041780][ T10] usb 6-1: USB disconnect, device number 33 [ 176.049954][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.115873][ T3284] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 176.524382][ T311] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 176.536736][ T3325] netlink: 'syz.1.690': attribute type 27 has an invalid length. [ 176.547242][ T311] asix 5-1:0.188: probe with driver asix failed with error -61 [ 176.575278][ T36] audit: type=1400 audit(1788961423.021:390): avc: denied { sqpoll } for pid=3335 comm="syz.5.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.703216][ T3340] fuse: Bad value for 'fd' [ 176.719900][ T3342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.695'. [ 176.729723][ T3342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.695'. [ 177.160435][ T36] audit: type=1400 audit(1788961423.601:391): avc: denied { getopt } for pid=3355 comm="syz.5.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.536371][ T3384] netlink: 'syz.1.706': attribute type 4 has an invalid length. [ 177.544102][ T3384] netlink: 17 bytes leftover after parsing attributes in process `syz.1.706'. [ 177.631488][ T311] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 177.783130][ T311] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 177.791281][ T311] usb 6-1: config 0 has no interface number 0 [ 177.797808][ T311] usb 6-1: config 0 interface 41 has no altsetting 0 [ 177.806480][ T311] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 177.815900][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.824143][ T311] usb 6-1: Product: syz [ 177.828548][ T311] usb 6-1: Manufacturer: syz [ 177.833478][ T311] usb 6-1: SerialNumber: syz [ 177.841731][ T311] usb 6-1: config 0 descriptor?? [ 178.048067][ T311] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 178.061507][ T311] usb 6-1: USB disconnect, device number 34 [ 178.121553][ T3390] overlayfs: workdir and upperdir must be separate subtrees [ 178.414442][ T36] audit: type=1400 audit(1788961424.861:392): avc: denied { listen } for pid=3394 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.442898][ T9] usb 5-1: USB disconnect, device number 60 [ 178.461729][ T3399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.712'. [ 178.472986][ T3399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.712'. [ 178.491487][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 178.523000][ T36] audit: type=1400 audit(1788961424.971:393): avc: denied { remount } for pid=3410 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.523011][ T3411] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 178.523359][ T3411] FAULT_INJECTION: forcing a failure. [ 178.523359][ T3411] name failslab, interval 1, probability 0, space 0, times 0 [ 178.564691][ T3411] CPU: 1 UID: 0 PID: 3411 Comm: syz.4.716 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 178.564713][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.564721][ T3411] Call Trace: [ 178.564726][ T3411] [ 178.564731][ T3411] __dump_stack+0x21/0x30 [ 178.564751][ T3411] dump_stack_lvl+0x140/0x1c0 [ 178.564765][ T3411] ? __cfi_dump_stack_lvl+0x10/0x10 [ 178.564780][ T3411] dump_stack+0x19/0x20 [ 178.564794][ T3411] should_fail_ex+0x3c2/0x510 [ 178.564808][ T3411] should_failslab+0xac/0x100 [ 178.564821][ T3411] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 178.564834][ T3411] ? avc_has_perm_noaudit+0x289/0x360 [ 178.564847][ T3411] ? __d_alloc+0x42/0x8c0 [ 178.564859][ T3411] __d_alloc+0x42/0x8c0 [ 178.564869][ T3411] d_alloc_parallel+0xe4/0x1370 [ 178.564880][ T3411] ? avc_has_perm_noaudit+0x26b/0x360 [ 178.564892][ T3411] ? __asan_memcpy+0x5a/0x80 [ 178.564904][ T3411] ? selinux_inode_permission+0x3f2/0x5d0 [ 178.564914][ T3411] ? __cfi_d_alloc_parallel+0x10/0x10 [ 178.564925][ T3411] ? __cfi_selinux_inode_permission+0x10/0x10 [ 178.564935][ T3411] ? generic_permission+0x1e2/0x590 [ 178.564948][ T3411] __lookup_slow+0x150/0x420 [ 178.564960][ T3411] ? __d_lookup+0x4e8/0x550 [ 178.564971][ T3411] ? lookup_one_len+0x300/0x300 [ 178.564983][ T3411] ? lookup_one_common+0x320/0x470 [ 178.564996][ T3411] lookup_one_len+0x1a1/0x300 [ 178.565008][ T3411] ? __kasan_check_write+0x18/0x20 [ 178.565019][ T3411] ? __cfi_lookup_one_len+0x10/0x10 [ 178.565031][ T3411] ? vfs_mkdir+0x70f/0x810 [ 178.565045][ T3411] incfs_lookup_dentry+0x64/0xc0 [ 178.565059][ T3411] open_or_create_special_dir+0x4c/0x200 [ 178.565071][ T3411] incfs_mount_fs+0x4ad/0x970 [ 178.565082][ T3411] ? __cfi_incfs_mount_fs+0x10/0x10 [ 178.565093][ T3411] ? vfs_parse_fs_string+0x10f/0x180 [ 178.565107][ T3411] ? selinux_capable+0x38/0x50 [ 178.565121][ T3411] legacy_get_tree+0x106/0x1b0 [ 178.565134][ T3411] ? __cfi_incfs_mount_fs+0x10/0x10 [ 178.565145][ T3411] vfs_get_tree+0x9e/0x290 [ 178.565156][ T3411] do_new_mount+0x251/0xb40 [ 178.565166][ T3411] ? security_capable+0x44/0x130 [ 178.565179][ T3411] path_mount+0x66a/0xff0 [ 178.565189][ T3411] ? putname+0x113/0x150 [ 178.565200][ T3411] __se_sys_mount+0x2bf/0x480 [ 178.565212][ T3411] ? __x64_sys_mount+0xf0/0xf0 [ 178.565222][ T3411] ? __kasan_check_write+0x18/0x20 [ 178.565233][ T3411] ? fpregs_restore_userregs+0x11c/0x260 [ 178.565246][ T3411] __x64_sys_mount+0xc3/0xf0 [ 178.565257][ T3411] x64_sys_call+0x2021/0x2ee0 [ 178.565267][ T3411] do_syscall_64+0x57/0xf0 [ 178.565277][ T3411] ? clear_bhb_loop+0x50/0xa0 [ 178.565289][ T3411] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 178.565301][ T3411] RIP: 0033:0x7f0ee8d9e159 [ 178.565312][ T3411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.565321][ T3411] RSP: 002b:00007f0ee9b9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.565334][ T3411] RAX: ffffffffffffffda RBX: 00007f0ee9025fa0 RCX: 00007f0ee8d9e159 [ 178.565343][ T3411] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000200000000080 [ 178.565351][ T3411] RBP: 00007f0ee8e3503b R08: 0000000000000000 R09: 0000000000000000 [ 178.565358][ T3411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.565365][ T3411] R13: 00007f0ee9026038 R14: 00007f0ee9025fa0 R15: 00007ffcea4ef388 [ 178.565374][ T3411] [ 178.565380][ T3411] incfs_lookup_dentry err:-12 [ 178.652178][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 178.663864][ T3411] incfs: Can't find or create .incomplete dir in ./file0 [ 178.668416][ T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 178.672874][ T3411] incfs: mount failed -12 [ 178.678268][ T10] usb 6-1: config 0 has no interface number 0 [ 178.791482][ T311] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 178.794363][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 178.956443][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 178.962873][ T311] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.966415][ T10] usb 6-1: config 0 interface 41 has no altsetting 0 [ 178.976854][ T311] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.992360][ T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 179.000037][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.006542][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.012592][ T311] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 179.019656][ T10] usb 6-1: Product: syz [ 179.029091][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.032843][ T10] usb 6-1: Manufacturer: syz [ 179.044486][ T311] usb 2-1: config 0 descriptor?? [ 179.045408][ T10] usb 6-1: SerialNumber: syz [ 179.056982][ T10] usb 6-1: config 0 descriptor?? [ 179.063795][ T3368] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.070992][ T3368] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.278866][ T3368] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.286153][ T3368] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.453265][ T3405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.461849][ T3405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.470401][ T3405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.479154][ T3405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.488369][ T311] belkin 0003:1020:0006.0025: unknown main item tag 0x0 [ 179.495460][ T311] belkin 0003:1020:0006.0025: collection stack underflow [ 179.502544][ T311] belkin 0003:1020:0006.0025: item 0 0 0 12 parsing failed [ 179.509894][ T311] belkin 0003:1020:0006.0025: parse failed [ 179.515745][ T311] belkin 0003:1020:0006.0025: probe with driver belkin failed with error -22 [ 179.698445][ T311] usb 2-1: USB disconnect, device number 78 [ 179.711833][ T3428] netlink: 'syz.6.721': attribute type 4 has an invalid length. [ 179.719499][ T3428] netlink: 'syz.6.721': attribute type 32 has an invalid length. [ 179.727401][ T36] audit: type=1400 audit(1788961426.161:394): avc: denied { ioctl } for pid=3429 comm="syz.4.722" path="socket:[20259]" dev="sockfs" ino=20259 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.759296][ T36] audit: type=1400 audit(1788961426.201:395): avc: denied { write } for pid=3429 comm="syz.4.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.767411][ T3434] fuse: Unknown parameter 'groupWid' [ 179.897638][ T10] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 179.910183][ T10] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 179.921029][ T10] usb 6-1: USB disconnect, device number 35 [ 180.363124][ T36] audit: type=1400 audit(1788961426.811:396): avc: denied { ioctl } for pid=3445 comm="syz.4.727" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 180.387754][ T36] audit: type=1400 audit(1788961426.811:397): avc: denied { mounton } for pid=3445 comm="syz.4.727" path="/103/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 180.443360][ T3458] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=262 sclass=netlink_xfrm_socket pid=3458 comm=syz.5.730 [ 180.996075][ T3463] fuse: Unknown parameter '0xffffffffffffffff' [ 181.171938][ T36] audit: type=1400 audit(1788961427.621:398): avc: denied { listen } for pid=3462 comm="syz.5.732" path=2F36332FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 181.180892][ T3471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.733'. [ 181.252606][ T3479] kvm: Disabled LAPIC found during irq injection [ 181.378210][ T3481] kvm: kvm [3480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 181.387160][ T3481] kvm: kvm [3480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 181.481569][ T31] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 181.489210][ T311] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 181.501209][ T36] audit: type=1400 audit(1788961427.941:399): avc: denied { write } for pid=3484 comm="syz.5.738" name="idVendor" dev="configfs" ino=21287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 181.641508][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 181.646828][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 181.653017][ T31] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 181.661242][ T31] usb 5-1: config 0 has no interface number 0 [ 181.667413][ T31] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 181.677660][ T311] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 181.685908][ T311] usb 2-1: config 0 has no interface number 0 [ 181.692092][ T311] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 181.702982][ T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 181.712213][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.720321][ T31] usb 5-1: Product: syz [ 181.724707][ T311] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 181.733946][ T31] usb 5-1: Manufacturer: syz [ 181.738611][ T31] usb 5-1: SerialNumber: syz [ 181.743235][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.751390][ T311] usb 2-1: Product: syz [ 181.755918][ T311] usb 2-1: Manufacturer: syz [ 181.760712][ T31] usb 5-1: config 0 descriptor?? [ 181.765751][ T311] usb 2-1: SerialNumber: syz [ 181.770440][ T3478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.775308][ T311] usb 2-1: config 0 descriptor?? [ 181.778447][ T9] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 181.783650][ T3477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.932571][ T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 181.940738][ T9] usb 6-1: config 0 has no interface number 0 [ 181.946889][ T9] usb 6-1: config 0 interface 41 has no altsetting 0 [ 181.955005][ T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 181.964180][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.972187][ T9] usb 6-1: Product: syz [ 181.976353][ T9] usb 6-1: Manufacturer: syz [ 181.980943][ T9] usb 6-1: SerialNumber: syz [ 181.985021][ T3478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.989620][ T9] usb 6-1: config 0 descriptor?? [ 182.001116][ T3477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.194253][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 182.198926][ T9] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 182.204527][ T31] asix 5-1:0.188: probe with driver asix failed with error -61 [ 182.218893][ T9] usb 6-1: USB disconnect, device number 36 [ 182.661482][ T1394] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 182.811506][ T1394] usb 6-1: Using ep0 maxpacket: 16 [ 182.817758][ T1394] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 182.826087][ T1394] usb 6-1: config 0 has no interface number 0 [ 182.832344][ T1394] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 182.842283][ T1394] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 182.852241][ T1394] usb 6-1: config 0 interface 41 has no altsetting 0 [ 182.860293][ T1394] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 182.869373][ T1394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.877385][ T1394] usb 6-1: Product: syz [ 182.881567][ T1394] usb 6-1: Manufacturer: syz [ 182.886168][ T1394] usb 6-1: SerialNumber: syz [ 182.891289][ T1394] usb 6-1: config 0 descriptor?? [ 182.896599][ T3487] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 182.903845][ T3487] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 183.112126][ T3487] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 183.119328][ T3487] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 183.728197][ T1394] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 183.740635][ T1394] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 183.750111][ T1394] usb 6-1: USB disconnect, device number 37 [ 183.867790][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 183.867807][ T36] audit: type=1400 audit(1788961430.311:402): avc: denied { mounton } for pid=3504 comm="syz.6.746" path="/170/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 184.228253][ T311] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 184.238563][ T311] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 184.257876][ T1394] usb 5-1: USB disconnect, device number 61 [ 184.263916][ T311] asix 2-1:0.188: probe with driver asix failed with error -71 [ 184.274058][ T311] usb 2-1: USB disconnect, device number 79 [ 184.571507][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 184.667139][ T3518] FAULT_INJECTION: forcing a failure. [ 184.667139][ T3518] name fail_futex, interval 1, probability 0, space 0, times 0 [ 184.680045][ T3518] CPU: 0 UID: 0 PID: 3518 Comm: syz.6.752 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 184.680079][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.680093][ T3518] Call Trace: [ 184.680101][ T3518] [ 184.680111][ T3518] __dump_stack+0x21/0x30 [ 184.680139][ T3518] dump_stack_lvl+0x140/0x1c0 [ 184.680154][ T3518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.680170][ T3518] dump_stack+0x19/0x20 [ 184.680185][ T3518] should_fail_ex+0x3c2/0x510 [ 184.680199][ T3518] should_fail+0xf/0x20 [ 184.680210][ T3518] get_futex_key+0x178/0x940 [ 184.680224][ T3518] ? __cfi___futex_wait+0x10/0x10 [ 184.680235][ T3518] ? __cfi_get_futex_key+0x10/0x10 [ 184.680248][ T3518] ? __cfi_futex_wake_mark+0x10/0x10 [ 184.680259][ T3518] futex_wake+0x150/0x950 [ 184.680269][ T3518] ? futex_wait+0x2b8/0x7c0 [ 184.680279][ T3518] ? __cfi_futex_wake+0x10/0x10 [ 184.680292][ T3518] ? vfs_write+0xbcf/0xfd0 [ 184.680305][ T3518] do_futex+0x37d/0x510 [ 184.680318][ T3518] ? __cfi_do_futex+0x10/0x10 [ 184.680331][ T3518] ? mutex_unlock+0x90/0x240 [ 184.680344][ T3518] __se_sys_futex+0x13c/0x320 [ 184.680358][ T3518] ? fput+0x1a4/0x230 [ 184.680371][ T3518] ? __x64_sys_futex+0x110/0x110 [ 184.680384][ T3518] ? fdget+0x188/0x1e0 [ 184.680397][ T3518] __x64_sys_futex+0xe9/0x110 [ 184.680410][ T3518] x64_sys_call+0x227f/0x2ee0 [ 184.680421][ T3518] do_syscall_64+0x57/0xf0 [ 184.680430][ T3518] ? clear_bhb_loop+0x50/0xa0 [ 184.680443][ T3518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.680455][ T3518] RIP: 0033:0x7f3fee99e159 [ 184.680466][ T3518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.680475][ T3518] RSP: 002b:00007f3fef8700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 184.680488][ T3518] RAX: ffffffffffffffda RBX: 00007f3feec25fa8 RCX: 00007f3fee99e159 [ 184.680497][ T3518] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3feec25fac [ 184.680504][ T3518] RBP: 00007f3feec25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 184.680512][ T3518] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 184.680520][ T3518] R13: 00007f3feec26038 R14: 00007ffc50eb59d0 R15: 00007ffc50eb5ab8 [ 184.680529][ T3518] [ 184.913200][ T3520] FAULT_INJECTION: forcing a failure. [ 184.913200][ T3520] name failslab, interval 1, probability 0, space 0, times 0 [ 184.925890][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 184.931082][ T3520] CPU: 0 UID: 0 PID: 3520 Comm: syz.1.753 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 184.931116][ T3520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.931128][ T3520] Call Trace: [ 184.931143][ T3520] [ 184.931151][ T3520] __dump_stack+0x21/0x30 [ 184.931189][ T3520] dump_stack_lvl+0x140/0x1c0 [ 184.931217][ T3520] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.931243][ T3520] ? futex_wait+0x2b8/0x7c0 [ 184.931263][ T3520] ? __cfi_futex_wait+0x10/0x10 [ 184.931283][ T3520] dump_stack+0x19/0x20 [ 184.931310][ T3520] should_fail_ex+0x3c2/0x510 [ 184.931336][ T3520] should_failslab+0xac/0x100 [ 184.931361][ T3520] kmem_cache_alloc_noprof+0x42/0x410 [ 184.931383][ T3520] ? do_futex+0x32a/0x510 [ 184.931416][ T3520] ? getname_flags+0xcc/0x6b0 [ 184.931439][ T3520] getname_flags+0xcc/0x6b0 [ 184.931461][ T3520] getname+0x1b/0x30 [ 184.931482][ T3520] do_sys_openat2+0xda/0x1d0 [ 184.931511][ T3520] ? fput+0x1a4/0x230 [ 184.931535][ T3520] ? do_sys_open+0x100/0x100 [ 184.931563][ T3520] __x64_sys_openat+0x13a/0x170 [ 184.931591][ T3520] x64_sys_call+0xe69/0x2ee0 [ 184.931609][ T3520] do_syscall_64+0x57/0xf0 [ 184.931627][ T3520] ? clear_bhb_loop+0x50/0xa0 [ 184.931653][ T3520] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.931676][ T3520] RIP: 0033:0x7f1f9875e98e [ 184.931694][ T3520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.931713][ T3520] RSP: 002b:00007f1f9970cf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.931735][ T3520] RAX: ffffffffffffffda RBX: 00007f1f9970d6c0 RCX: 00007f1f9875e98e [ 184.931752][ T3520] RDX: 0000000000000000 RSI: 00007f1f98834776 RDI: ffffffffffffff9c [ 184.931768][ T3520] RBP: 00007f1f9883503b R08: 0000000000000000 R09: 0000000000000000 [ 184.931782][ T3520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.931795][ T3520] R13: 00007f1f98a26038 R14: 00007f1f98a25fa0 R15: 00007ffd5e697368 [ 184.931813][ T3520] [ 185.133111][ T10] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 185.141220][ T10] usb 6-1: config 0 has no interface number 0 [ 185.147743][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 185.157945][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 185.170833][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 185.171507][ T36] audit: type=1400 audit(1788961431.611:403): avc: denied { getattr } for pid=3524 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 185.179930][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.207290][ T36] audit: type=1400 audit(1788961431.641:404): avc: denied { mounton } for pid=3524 comm="syz.4.756" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.208812][ T10] usb 6-1: Product: syz [ 185.236078][ T10] usb 6-1: Manufacturer: syz [ 185.240684][ T10] usb 6-1: SerialNumber: syz [ 185.246127][ T10] usb 6-1: config 0 descriptor?? [ 185.252972][ T3514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.260150][ T3514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.468579][ T3514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.475812][ T311] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 185.476080][ T3514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.531481][ T339] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 185.622886][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.631275][ T311] usb 2-1: config 3 has an invalid interface number: 207 but max is 0 [ 185.639570][ T311] usb 2-1: config 3 has no interface number 0 [ 185.645704][ T311] usb 2-1: config 3 interface 207 has no altsetting 0 [ 185.653936][ T311] usb 2-1: New USB device found, idVendor=0586, idProduct=3418, bcdDevice=5f.f6 [ 185.663033][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.671053][ T311] usb 2-1: Product: syz [ 185.675269][ T311] usb 2-1: Manufacturer: syz [ 185.679875][ T311] usb 2-1: SerialNumber: syz [ 185.693715][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 185.703492][ T339] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 185.711678][ T339] usb 5-1: config 0 has no interface number 0 [ 185.717773][ T339] usb 5-1: config 0 interface 41 has no altsetting 0 [ 185.725871][ T339] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 185.734953][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.742968][ T339] usb 5-1: Product: syz [ 185.747152][ T339] usb 5-1: Manufacturer: syz [ 185.751776][ T339] usb 5-1: SerialNumber: syz [ 185.757075][ T339] usb 5-1: config 0 descriptor?? [ 185.965028][ T339] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 185.974728][ T339] usb 5-1: USB disconnect, device number 62 [ 186.388310][ T311] cdc_ether 2-1:3.207: More than one union descriptor, skipping ... [ 186.397066][ T311] usb 2-1: bad CDC descriptors [ 186.403862][ T339] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 186.404686][ T311] usb 2-1: USB disconnect, device number 80 [ 186.464266][ T36] audit: type=1400 audit(1788961432.911:405): avc: denied { execmem } for pid=3537 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 186.486811][ T36] audit: type=1400 audit(1788961432.911:406): avc: denied { create } for pid=3537 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.561523][ T339] usb 5-1: Using ep0 maxpacket: 16 [ 186.567681][ T339] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 186.575831][ T339] usb 5-1: config 0 has no interface number 0 [ 186.581966][ T339] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 186.591821][ T339] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.601755][ T339] usb 5-1: config 0 interface 41 has no altsetting 0 [ 186.609959][ T339] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 186.619051][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.627059][ T339] usb 5-1: Product: syz [ 186.631216][ T339] usb 5-1: Manufacturer: syz [ 186.635827][ T339] usb 5-1: SerialNumber: syz [ 186.640975][ T339] usb 5-1: config 0 descriptor?? [ 186.646242][ T3529] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.653472][ T3529] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.801476][ T311] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 186.861546][ T3529] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.869005][ T3529] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.941478][ T311] usb 2-1: device descriptor read/64, error -71 [ 186.952246][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 186.962417][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 186.973448][ T10] asix 6-1:0.34: probe with driver asix failed with error -71 [ 186.983454][ T10] usb 6-1: USB disconnect, device number 38 [ 187.181537][ T311] usb 2-1: device descriptor read/64, error -71 [ 187.421477][ T311] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 187.477460][ T339] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 187.489901][ T339] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 187.499401][ T339] usb 5-1: USB disconnect, device number 63 [ 187.551519][ T311] usb 2-1: device descriptor read/64, error -71 [ 187.791562][ T311] usb 2-1: device descriptor read/64, error -71 [ 187.901605][ T311] usb usb2-port1: attempt power cycle [ 188.010202][ T3561] binder: Bad value for 'max' [ 188.010202][ T3560] binder: Bad value for 'max' [ 188.231494][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 188.241604][ T311] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 188.261520][ T1394] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 188.270016][ T311] usb 2-1: device descriptor read/8, error -71 [ 188.381486][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 188.387604][ T10] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 188.395830][ T10] usb 6-1: config 0 has no interface number 0 [ 188.401938][ T10] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 188.412609][ T311] usb 2-1: device descriptor read/8, error -71 [ 188.413998][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 188.422631][ T1394] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.427929][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.436256][ T1394] usb 5-1: config 0 has no interface number 0 [ 188.443940][ T10] usb 6-1: Product: syz [ 188.450301][ T1394] usb 5-1: config 0 interface 41 has no altsetting 0 [ 188.454152][ T10] usb 6-1: Manufacturer: syz [ 188.462563][ T1394] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.465406][ T10] usb 6-1: SerialNumber: syz [ 188.474699][ T1394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.479677][ T10] usb 6-1: config 0 descriptor?? [ 188.487261][ T1394] usb 5-1: Product: syz [ 188.493670][ T3558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 188.496479][ T1394] usb 5-1: Manufacturer: syz [ 188.508070][ T1394] usb 5-1: SerialNumber: syz [ 188.513317][ T1394] usb 5-1: config 0 descriptor?? [ 188.651489][ T311] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 188.672393][ T311] usb 2-1: device descriptor read/8, error -71 [ 188.705990][ T3558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 188.720261][ T1394] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 188.731515][ T1394] usb 5-1: USB disconnect, device number 64 [ 188.802482][ T311] usb 2-1: device descriptor read/8, error -71 [ 188.828731][ T36] audit: type=1400 audit(1788961435.271:407): avc: denied { write } for pid=3568 comm="syz.6.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.911605][ T311] usb usb2-port1: unable to enumerate USB device [ 189.161483][ T311] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 189.311465][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 189.317692][ T311] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 189.319028][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 189.326048][ T311] usb 5-1: config 0 has no interface number 0 [ 189.341722][ T311] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 189.351584][ T311] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.361621][ T311] usb 5-1: config 0 interface 41 has no altsetting 0 [ 189.369623][ T311] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 189.378707][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.386820][ T311] usb 5-1: Product: syz [ 189.390989][ T311] usb 5-1: Manufacturer: syz [ 189.395604][ T311] usb 5-1: SerialNumber: syz [ 189.400804][ T311] usb 5-1: config 0 descriptor?? [ 189.406074][ T3563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 189.413342][ T3563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 189.477978][ T36] audit: type=1400 audit(1788961435.921:408): avc: denied { mounton } for pid=3571 comm="syz.1.774" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 189.535981][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 189.546150][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 189.556583][ T10] asix 6-1:0.188: probe with driver asix failed with error -61 [ 189.621143][ T3563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 189.628419][ T3563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 189.671491][ T3576] tipc: Started in network mode [ 189.676402][ T3576] tipc: Node identity ac14140f, cluster identity 4711 [ 189.683386][ T3576] tipc: New replicast peer: 255.255.255.255 [ 189.689662][ T3576] tipc: Enabled bearer , priority 10 [ 189.697627][ T3576] FAULT_INJECTION: forcing a failure. [ 189.697627][ T3576] name failslab, interval 1, probability 0, space 0, times 0 [ 189.710425][ T3576] CPU: 1 UID: 0 PID: 3576 Comm: syz.6.776 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 189.710460][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.710474][ T3576] Call Trace: [ 189.710481][ T3576] [ 189.710490][ T3576] __dump_stack+0x21/0x30 [ 189.710527][ T3576] dump_stack_lvl+0x140/0x1c0 [ 189.710554][ T3576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.710583][ T3576] dump_stack+0x19/0x20 [ 189.710607][ T3576] should_fail_ex+0x3c2/0x510 [ 189.710632][ T3576] should_failslab+0xac/0x100 [ 189.710657][ T3576] kmem_cache_alloc_noprof+0x42/0x410 [ 189.710679][ T3576] ? sk_prot_alloc+0x69/0x3a0 [ 189.710704][ T3576] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 189.710725][ T3576] sk_prot_alloc+0x69/0x3a0 [ 189.710749][ T3576] ? bpf_lsm_inode_alloc_security+0xd/0x20 [ 189.710772][ T3576] sk_alloc+0x40/0x590 [ 189.710793][ T3576] ? inode_init_always_gfp+0x76e/0x9e0 [ 189.710816][ T3576] inet6_create+0x5a8/0x11c0 [ 189.710835][ T3576] __sock_create+0x3a2/0x810 [ 189.710857][ T3576] __sys_socket+0xe1/0x1c0 [ 189.710876][ T3576] __x64_sys_socket+0x7e/0x90 [ 189.710905][ T3576] x64_sys_call+0x2608/0x2ee0 [ 189.710924][ T3576] do_syscall_64+0x57/0xf0 [ 189.710941][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 189.710963][ T3576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.710983][ T3576] RIP: 0033:0x7f3fee99e159 [ 189.710999][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.711015][ T3576] RSP: 002b:00007f3fef870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 189.711035][ T3576] RAX: ffffffffffffffda RBX: 00007f3feec25fa0 RCX: 00007f3fee99e159 [ 189.711051][ T3576] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 080000000000000a [ 189.711063][ T3576] RBP: 00007f3feea3503b R08: 0000000000000000 R09: 0000000000000000 [ 189.711077][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.711089][ T3576] R13: 00007f3feec26038 R14: 00007f3feec25fa0 R15: 00007ffc50eb5ab8 [ 189.711106][ T3576] [ 190.115780][ T311] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 190.391542][ T311] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 190.542525][ T311] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 190.550648][ T311] usb 2-1: config 0 has no interface number 0 [ 190.556818][ T311] usb 2-1: config 0 interface 41 has no altsetting 0 [ 190.564971][ T311] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 190.574164][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.582524][ T311] usb 2-1: Product: syz [ 190.586700][ T311] usb 2-1: Manufacturer: syz [ 190.591276][ T311] usb 2-1: SerialNumber: syz [ 190.596482][ T311] usb 2-1: config 0 descriptor?? [ 190.802434][ T311] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 190.811927][ T311] usb 2-1: USB disconnect, device number 85 [ 190.813500][ T339] tipc: Node number set to 2886997007 [ 190.949215][ T3592] FAULT_INJECTION: forcing a failure. [ 190.949215][ T3592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.962561][ T3592] CPU: 1 UID: 0 PID: 3592 Comm: syz.6.781 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 190.962597][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.962610][ T3592] Call Trace: [ 190.962617][ T3592] [ 190.962626][ T3592] __dump_stack+0x21/0x30 [ 190.962658][ T3592] dump_stack_lvl+0x140/0x1c0 [ 190.962682][ T3592] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.962708][ T3592] ? next_uptodate_folio+0xaca/0xb70 [ 190.962733][ T3592] ? __cfi_folio_unlock+0x10/0x10 [ 190.962755][ T3592] ? set_pte_range+0x42a/0x640 [ 190.962777][ T3592] dump_stack+0x19/0x20 [ 190.962801][ T3592] should_fail_ex+0x3c2/0x510 [ 190.962825][ T3592] should_fail_alloc_page+0xec/0x110 [ 190.962850][ T3592] __alloc_pages_noprof+0x1c0/0x7e0 [ 190.962877][ T3592] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 190.962904][ T3592] ? __cfi_filemap_map_pages+0x10/0x10 [ 190.962925][ T3592] __folio_alloc_noprof+0x14/0x80 [ 190.962950][ T3592] folio_prealloc+0x46/0x220 [ 190.962973][ T3592] do_pte_missing+0x16af/0x4440 [ 190.962997][ T3592] ? schedule+0xc5/0x240 [ 190.963018][ T3592] ? __futex_wait+0x330/0x3d0 [ 190.963037][ T3592] ? pte_marker_clear+0x1b0/0x1b0 [ 190.963061][ T3592] ? cgroup_rstat_updated+0x144/0x800 [ 190.963083][ T3592] ? futex_wake+0x666/0x950 [ 190.963100][ T3592] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 190.963120][ T3592] handle_mm_fault+0x1189/0x1ba0 [ 190.963145][ T3592] ? __cfi_handle_mm_fault+0x10/0x10 [ 190.963175][ T3592] ? lock_vma_under_rcu+0x4cf/0x590 [ 190.963200][ T3592] ? __se_sys_futex+0x13c/0x320 [ 190.963226][ T3592] do_user_addr_fault+0x951/0x1230 [ 190.963255][ T3592] ? __kasan_check_read+0x15/0x20 [ 190.963275][ T3592] exc_page_fault+0x58/0xc0 [ 190.963298][ T3592] asm_exc_page_fault+0x2b/0x30 [ 190.963319][ T3592] RIP: 0033:0x7f3fee85f6cb [ 190.963338][ T3592] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 190.963355][ T3592] RSP: 002b:00007f3fef84dfa0 EFLAGS: 00010206 [ 190.963374][ T3592] RAX: 0000000000000000 RBX: 00007f3feec26090 RCX: 0000000000000000 [ 190.963388][ T3592] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 190.963402][ T3592] RBP: 00007f3feea3503b R08: 0000000000000000 R09: 0000000000000000 [ 190.963415][ T3592] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000000 [ 190.963427][ T3592] R13: 00007f3feec26128 R14: 00007f3feec26090 R15: 00007ffc50eb5ab8 [ 190.963445][ T3592] [ 190.963458][ T3592] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 190.979408][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.768'. [ 191.321477][ T311] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 191.344358][ T10] usb 5-1: USB disconnect, device number 65 [ 191.481462][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 191.487804][ T311] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 191.502262][ T311] usb 2-1: config 0 has no interface number 0 [ 191.508716][ T311] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 191.518953][ T311] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.529231][ T311] usb 2-1: config 0 interface 41 has no altsetting 0 [ 191.537525][ T311] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 191.547009][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.555247][ T311] usb 2-1: Product: syz [ 191.559655][ T311] usb 2-1: Manufacturer: syz [ 191.564572][ T311] usb 2-1: SerialNumber: syz [ 191.570191][ T311] usb 2-1: config 0 descriptor?? [ 191.575750][ T3582] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.583267][ T3582] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.791577][ T3582] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.804710][ T3582] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.420157][ T311] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 192.432564][ T311] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 192.442020][ T311] usb 2-1: USB disconnect, device number 86 [ 192.530958][ T1394] usb 6-1: USB disconnect, device number 39 [ 192.544936][ T3635] ./dev/sda1: Can't lookup blockdev [ 192.647387][ T3639] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 192.881524][ T1394] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 192.901551][ T31] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 192.932424][ T3643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=3643 comm=syz.1.791 [ 192.955728][ T3645] 9pnet_fd: Insufficient options for proto=fd [ 193.031507][ T1394] usb 6-1: Using ep0 maxpacket: 32 [ 193.037924][ T1394] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 193.046181][ T1394] usb 6-1: config 0 has no interface number 0 [ 193.052388][ T1394] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 193.063365][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 193.071604][ T31] usb 5-1: config 0 has no interface number 0 [ 193.077719][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 193.084885][ T1394] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 193.093988][ T1394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.102092][ T1394] usb 6-1: Product: syz [ 193.106284][ T1394] usb 6-1: Manufacturer: syz [ 193.110979][ T1394] usb 6-1: SerialNumber: syz [ 193.115936][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.125094][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.133350][ T1394] usb 6-1: config 0 descriptor?? [ 193.138362][ T31] usb 5-1: Product: syz [ 193.142622][ T31] usb 5-1: Manufacturer: syz [ 193.142730][ T3637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 193.147241][ T31] usb 5-1: SerialNumber: syz [ 193.160030][ T31] usb 5-1: config 0 descriptor?? [ 193.342723][ T36] audit: type=1400 audit(1788961439.791:409): avc: denied { getopt } for pid=3650 comm="syz.6.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.365389][ T3637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 193.376635][ T31] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 193.394734][ T31] usb 5-1: USB disconnect, device number 66 [ 193.798701][ T3663] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 193.871521][ T31] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 194.021470][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 194.027586][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 194.035736][ T31] usb 5-1: config 0 has no interface number 0 [ 194.041863][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 194.051728][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.061674][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 194.069692][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 194.078777][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.086813][ T31] usb 5-1: Product: syz [ 194.090972][ T31] usb 5-1: Manufacturer: syz [ 194.095588][ T31] usb 5-1: SerialNumber: syz [ 194.100762][ T31] usb 5-1: config 0 descriptor?? [ 194.106084][ T3641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.113419][ T3641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.271515][ T339] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 194.321256][ T3641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.328500][ T3641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.401473][ T339] usb 2-1: device descriptor read/64, error -71 [ 194.641480][ T339] usb 2-1: device descriptor read/64, error -71 [ 194.737081][ T31] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 194.881473][ T339] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 195.011773][ T339] usb 2-1: device descriptor read/64, error -71 [ 195.136950][ T36] audit: type=1400 audit(1788961441.581:410): avc: denied { setattr } for pid=3676 comm="syz.6.805" name="[io_uring]" dev="anon_inodefs" ino=23000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.160503][ T36] audit: type=1400 audit(1788961441.591:411): avc: denied { create } for pid=3676 comm="syz.6.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.182432][ T3682] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 195.200428][ T3684] fuse: Bad value for 'user_id' [ 195.205544][ T3684] fuse: Bad value for 'user_id' [ 195.261515][ T339] usb 2-1: device descriptor read/64, error -71 [ 195.371615][ T339] usb usb2-port1: attempt power cycle [ 195.711501][ T339] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 195.732449][ T339] usb 2-1: device descriptor read/8, error -71 [ 195.782252][ T1394] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 195.792644][ T1394] asix 6-1:0.188: probe with driver asix failed with error -71 [ 195.801112][ T1394] usb 6-1: USB disconnect, device number 40 [ 195.862597][ T339] usb 2-1: device descriptor read/8, error -71 [ 195.943161][ T467] usb 5-1: USB disconnect, device number 67 [ 196.111498][ T339] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 196.132484][ T339] usb 2-1: device descriptor read/8, error -71 [ 196.237707][ T3693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3693 comm=syz.6.812 [ 196.250072][ T467] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 196.262512][ T339] usb 2-1: device descriptor read/8, error -71 [ 196.263671][ T3697] FAULT_INJECTION: forcing a failure. [ 196.263671][ T3697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.281770][ T3697] CPU: 1 UID: 0 PID: 3697 Comm: syz.6.813 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 196.281798][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.281805][ T3697] Call Trace: [ 196.281810][ T3697] [ 196.281814][ T3697] __dump_stack+0x21/0x30 [ 196.281834][ T3697] dump_stack_lvl+0x140/0x1c0 [ 196.281849][ T3697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 196.281864][ T3697] dump_stack+0x19/0x20 [ 196.281878][ T3697] should_fail_ex+0x3c2/0x510 [ 196.281892][ T3697] should_fail+0xf/0x20 [ 196.281904][ T3697] should_fail_usercopy+0x1e/0x30 [ 196.281917][ T3697] _copy_from_user+0x20/0xa0 [ 196.281933][ T3697] __se_sys_futex_waitv+0x265/0x720 [ 196.281950][ T3697] ? __x64_sys_futex_waitv+0xf0/0xf0 [ 196.281965][ T3697] ? __se_sys_futex+0x13c/0x320 [ 196.281979][ T3697] ? fput+0x1a4/0x230 [ 196.281993][ T3697] ? __kasan_check_write+0x18/0x20 [ 196.282005][ T3697] ? fpregs_restore_userregs+0x11c/0x260 [ 196.282019][ T3697] __x64_sys_futex_waitv+0xc3/0xf0 [ 196.282034][ T3697] x64_sys_call+0x2dc4/0x2ee0 [ 196.282044][ T3697] do_syscall_64+0x57/0xf0 [ 196.282054][ T3697] ? clear_bhb_loop+0x50/0xa0 [ 196.282068][ T3697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 196.282080][ T3697] RIP: 0033:0x7f3fee99e159 [ 196.282090][ T3697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.282100][ T3697] RSP: 002b:00007f3fef870028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 196.282112][ T3697] RAX: ffffffffffffffda RBX: 00007f3feec25fa0 RCX: 00007f3fee99e159 [ 196.282121][ T3697] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000e80 [ 196.282129][ T3697] RBP: 00007f3feea3503b R08: 0000000000000000 R09: 0000000000000000 [ 196.282136][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.282143][ T3697] R13: 00007f3feec26038 R14: 00007f3feec25fa0 R15: 00007ffc50eb5ab8 [ 196.282158][ T3697] [ 196.391607][ T339] usb usb2-port1: unable to enumerate USB device [ 196.514465][ T467] usb 5-1: config 127 has an invalid interface number: 24 but max is 0 [ 196.522821][ T467] usb 5-1: config 127 has no interface number 0 [ 196.530420][ T467] usb 5-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c [ 196.539610][ T467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.547790][ T467] usb 5-1: Product: syz [ 196.552054][ T467] usb 5-1: Manufacturer: syz [ 196.554899][ T3717] device-mapper: ioctl: name not supplied when creating device [ 196.556740][ T467] usb 5-1: SerialNumber: syz [ 196.572093][ T467] usb-storage 5-1:127.24: USB Mass Storage device detected [ 196.776475][ T36] audit: type=1400 audit(1788961443.221:412): avc: denied { bind } for pid=3690 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.813506][ T467] usb 5-1: USB disconnect, device number 68 [ 197.106981][ T36] audit: type=1400 audit(1788961443.551:413): avc: denied { write } for pid=3730 comm="syz.6.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.146806][ T3734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.822'. [ 197.146806][ T36] audit: type=1400 audit(1788961443.591:414): avc: denied { nlmsg_write } for pid=3733 comm="syz.6.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.191635][ T10] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 197.261485][ T339] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 197.345865][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.371094][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.382535][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 197.393783][ T339] usb 2-1: device descriptor read/64, error -71 [ 197.400191][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 197.411616][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.429358][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.438677][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.446925][ T10] usb 6-1: Product: syz [ 197.451178][ T10] usb 6-1: Manufacturer: syz [ 197.456106][ T10] usb 6-1: SerialNumber: syz [ 197.465253][ T3729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 197.473207][ T10] cdc_mbim 6-1:1.0: skipping garbage [ 197.508053][ T3741] device-mapper: ioctl: name not supplied when creating device [ 197.631466][ T339] usb 2-1: device descriptor read/64, error -71 [ 197.682452][ T3729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 197.871461][ T339] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 197.981489][ T62] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 198.001490][ T339] usb 2-1: device descriptor read/64, error -71 [ 198.111530][ T62] usb 5-1: device descriptor read/64, error -71 [ 198.241465][ T339] usb 2-1: device descriptor read/64, error -71 [ 198.290796][ T3729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 198.351478][ T62] usb 5-1: device descriptor read/64, error -71 [ 198.357928][ T339] usb usb2-port1: attempt power cycle [ 198.498801][ T10] cdc_mbim 6-1:1.0: bind() failure [ 198.504923][ T10] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 198.513140][ T10] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 198.522499][ T10] usb 6-1: USB disconnect, device number 41 [ 198.591523][ T62] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 198.711884][ T339] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 198.712542][ T3752] netlink: 44 bytes leftover after parsing attributes in process `syz.6.830'. [ 198.728508][ T3752] netlink: 59 bytes leftover after parsing attributes in process `syz.6.830'. [ 198.737454][ T3752] netlink: 59 bytes leftover after parsing attributes in process `syz.6.830'. [ 198.737602][ T62] usb 5-1: device descriptor read/64, error -71 [ 198.753547][ T339] usb 2-1: device descriptor read/8, error -71 [ 198.882576][ T339] usb 2-1: device descriptor read/8, error -71 [ 198.991599][ T62] usb 5-1: device descriptor read/64, error -71 [ 199.011931][ T3762] device-mapper: ioctl: name not supplied when creating device [ 199.101827][ T62] usb usb5-port1: attempt power cycle [ 199.121497][ T339] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 199.142507][ T339] usb 2-1: device descriptor read/8, error -71 [ 199.261491][ T1394] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 199.272603][ T339] usb 2-1: device descriptor read/8, error -71 [ 199.381631][ T339] usb usb2-port1: unable to enumerate USB device [ 199.412583][ T1394] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.420611][ T1394] usb 6-1: config 0 has no interface number 0 [ 199.426742][ T1394] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.437632][ T1394] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.447385][ T1394] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.451473][ T62] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 199.460188][ T1394] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 199.476803][ T1394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.485380][ T1394] usb 6-1: config 0 descriptor?? [ 199.492617][ T62] usb 5-1: device descriptor read/8, error -71 [ 199.622504][ T62] usb 5-1: device descriptor read/8, error -71 [ 199.861728][ T62] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 199.882491][ T62] usb 5-1: device descriptor read/8, error -71 [ 200.012511][ T62] usb 5-1: device descriptor read/8, error -71 [ 200.094064][ T1394] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0026/input/input39 [ 200.107043][ T1394] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0026/input/input40 [ 200.120840][ T1394] uclogic 0003:28BD:0042.0026: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 200.126305][ T62] usb usb5-port1: unable to enumerate USB device [ 200.261480][ T339] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 200.296956][ T36] audit: type=1400 audit(1788961446.741:415): avc: denied { read write } for pid=3763 comm="syz.5.836" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 200.297852][ T62] usb 6-1: USB disconnect, device number 42 [ 200.320305][ T36] audit: type=1400 audit(1788961446.741:416): avc: denied { open } for pid=3763 comm="syz.5.836" path="/78/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 200.431472][ T339] usb 2-1: Using ep0 maxpacket: 32 [ 200.437681][ T339] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.445945][ T339] usb 2-1: config 0 has no interface number 0 [ 200.452061][ T339] usb 2-1: config 0 interface 184 has no altsetting 0 [ 200.460274][ T339] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 200.469363][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.477436][ T339] usb 2-1: Product: syz [ 200.481616][ T339] usb 2-1: Manufacturer: syz [ 200.486205][ T339] usb 2-1: SerialNumber: syz [ 200.491323][ T339] usb 2-1: config 0 descriptor?? [ 200.497060][ T339] smsc75xx v1.0.0 [ 200.699262][ T339] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 200.702594][ T3792] device-mapper: ioctl: name not supplied when creating device [ 200.710207][ T339] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.941552][ T62] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 200.949419][ T339] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 200.960269][ T339] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 200.970000][ T339] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 200.980041][ T339] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 201.081521][ T467] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 201.112529][ T62] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.122725][ T62] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.134052][ T62] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 201.144913][ T62] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 201.150094][ T31] usb 2-1: USB disconnect, device number 95 [ 201.156709][ T62] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.175964][ T62] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.185035][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.193037][ T62] usb 5-1: Product: syz [ 201.197181][ T62] usb 5-1: Manufacturer: syz [ 201.201779][ T62] usb 5-1: SerialNumber: syz [ 201.207227][ T3787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.215021][ T62] cdc_mbim 5-1:1.0: skipping garbage [ 201.221478][ T467] usb 6-1: device descriptor read/64, error -71 [ 201.320116][ T3798] cgroup: fork rejected by pids controller in /syz6 [ 201.415947][ T3787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.461529][ T467] usb 6-1: device descriptor read/64, error -71 [ 201.701489][ T467] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 201.831492][ T467] usb 6-1: device descriptor read/64, error -71 [ 201.901477][ T31] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 202.024135][ T3787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 202.051490][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 202.057771][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.068694][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 202.079530][ T467] usb 6-1: device descriptor read/64, error -71 [ 202.085822][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 202.098788][ T31] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 202.107945][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.116601][ T31] usb 2-1: config 0 descriptor?? [ 202.201577][ T467] usb usb6-port1: attempt power cycle [ 202.232101][ T62] cdc_mbim 5-1:1.0: bind() failure [ 202.238288][ T62] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 202.246673][ T62] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 202.256384][ T62] usb 5-1: USB disconnect, device number 73 [ 202.310365][ T3846] device-mapper: ioctl: name not supplied when creating device [ 202.527222][ T31] nintendo 0003:057E:2019.0027: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 202.551489][ T467] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 202.572429][ T467] usb 6-1: device descriptor read/8, error -71 [ 202.702404][ T467] usb 6-1: device descriptor read/8, error -71 [ 202.761084][ T3867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.858'. [ 202.926037][ T3874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.926605][ T31] nintendo 0003:057E:2019.0027: Failed to set baudrate (ret=-71), continuing anyway [ 202.942722][ T467] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 202.950654][ T31] nintendo 0003:057E:2019.0027: Failed handshake; ret=-71 [ 202.959038][ T31] nintendo 0003:057E:2019.0027: Failed to initialize controller; ret=-71 [ 202.968158][ T31] nintendo 0003:057E:2019.0027: probe - fail = -71 [ 202.974748][ T31] nintendo 0003:057E:2019.0027: probe with driver nintendo failed with error -71 [ 202.985593][ T467] usb 6-1: device descriptor read/8, error -71 [ 202.992377][ T31] usb 2-1: USB disconnect, device number 96 [ 203.041063][ T3883] device-mapper: ioctl: name not supplied when creating device [ 203.122575][ T467] usb 6-1: device descriptor read/8, error -71 [ 203.201492][ T62] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 203.231593][ T467] usb usb6-port1: unable to enumerate USB device [ 203.331481][ T62] usb 5-1: device descriptor read/64, error -71 [ 203.571518][ T62] usb 5-1: device descriptor read/64, error -71 [ 203.731542][ T339] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 203.811506][ T62] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 203.881513][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 203.888465][ T339] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 203.896686][ T339] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 203.905391][ T339] usb 2-1: config 4 has no interface number 0 [ 203.911530][ T339] usb 2-1: config 4 interface 228 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 203.922416][ T339] usb 2-1: config 4 interface 228 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 203.933304][ T339] usb 2-1: config 4 interface 228 has no altsetting 0 [ 203.941494][ T62] usb 5-1: device descriptor read/64, error -71 [ 203.947784][ T339] usb 2-1: New USB device found, idVendor=07d1, idProduct=3c0f, bcdDevice= c.b3 [ 203.956860][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.964863][ T339] usb 2-1: Product: syz [ 203.969006][ T339] usb 2-1: Manufacturer: Д [ 203.973518][ T339] usb 2-1: SerialNumber: syz [ 204.181479][ T62] usb 5-1: device descriptor read/64, error -71 [ 204.241536][ T31] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 204.291575][ T62] usb usb5-port1: attempt power cycle [ 204.392724][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.400714][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 204.410700][ T31] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 204.419809][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.427853][ T31] usb 6-1: Product: syz [ 204.432082][ T31] usb 6-1: Manufacturer: syz [ 204.436672][ T31] usb 6-1: SerialNumber: syz [ 204.631476][ T62] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 204.662265][ T62] usb 5-1: device descriptor read/8, error -71 [ 204.707195][ T3904] device-mapper: ioctl: name not supplied when creating device [ 204.734270][ T36] audit: type=1400 audit(1788961451.181:417): avc: denied { setopt } for pid=3907 comm="syz.6.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.792750][ T62] usb 5-1: device descriptor read/8, error -71 [ 204.810909][ T3910] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 204.934763][ T36] audit: type=1400 audit(1788961451.381:418): avc: granted { setsecparam } for pid=3891 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 205.031509][ T62] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 205.052546][ T62] usb 5-1: device descriptor read/8, error -71 [ 205.164804][ T31] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 205.177947][ T31] usb 6-1: USB disconnect, device number 47 [ 205.192517][ T62] usb 5-1: device descriptor read/8, error -71 [ 205.301562][ T62] usb usb5-port1: unable to enumerate USB device [ 205.491476][ T31] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 205.651478][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 205.657808][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.668045][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.677013][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.686108][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.694595][ T31] usb 6-1: config 0 descriptor?? [ 205.978755][ T3924] device-mapper: ioctl: name not supplied when creating device [ 206.010615][ T36] audit: type=1400 audit(1788961452.451:419): avc: denied { execute_no_trans } for pid=3928 comm="syz.4.883" path=2F6D656D66643A21BA29EECD8B8C87981C4FB1FBBAAA4E8AA077EC98DE1362FC7AF7A0AC5E3297FD0D924124B2E255B5CC4F6B0873F3D34418D5AE0D6F734628F38CB9B856B2DB3FBB2FAFB76983EABC51A348E55789E997FA25CBE6E5031BD2E33D4E2686F964A65D1ABF7F96A20A8B270B1522ACE4ADF6FDADE5CD3F101574960D13267E2382F7202864656C6574656429 dev="tmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.095268][ T36] audit: type=1326 audit(1788961452.541:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.6.885" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fee99e159 code=0x0 [ 206.198023][ T36] audit: type=1400 audit(1788961452.641:421): avc: denied { cmd } for pid=3936 comm="iou-wrk-3940" path="socket:[23923]" dev="sockfs" ino=23923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 206.371482][ T31] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 206.495077][ T62] usb 2-1: USB disconnect, device number 97 [ 206.522495][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.533538][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 206.544368][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 206.555306][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.566271][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.575327][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.583340][ T31] usb 5-1: Product: syz [ 206.587510][ T31] usb 5-1: Manufacturer: syz [ 206.592236][ T31] usb 5-1: SerialNumber: syz [ 206.597673][ T3939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.605482][ T31] cdc_mbim 5-1:1.0: skipping garbage [ 206.806110][ T3939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.831481][ T62] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 206.962166][ T62] usb 2-1: device descriptor read/64, error -71 [ 207.111003][ T3961] device-mapper: ioctl: name not supplied when creating device [ 207.212183][ T62] usb 2-1: device descriptor read/64, error -71 [ 207.418948][ T3939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.451475][ T62] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 207.581476][ T62] usb 2-1: device descriptor read/64, error -71 [ 207.627006][ T31] cdc_mbim 5-1:1.0: bind() failure [ 207.632950][ T31] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 207.641081][ T31] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 207.650425][ T31] usb 5-1: USB disconnect, device number 78 [ 207.821486][ T62] usb 2-1: device descriptor read/64, error -71 [ 207.910504][ T36] audit: type=1400 audit(1788961454.351:422): avc: denied { write } for pid=3972 comm="syz.6.896" name="instances" dev="tracefs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 207.933016][ T36] audit: type=1400 audit(1788961454.351:423): avc: denied { add_name } for pid=3972 comm="syz.6.896" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 207.953351][ T62] usb usb2-port1: attempt power cycle [ 207.953555][ T36] audit: type=1400 audit(1788961454.351:424): avc: denied { create } for pid=3972 comm="syz.6.896" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 207.978452][ T36] audit: type=1400 audit(1788961454.381:425): avc: denied { remove_name } for pid=3972 comm="syz.6.896" name="foo" dev="tracefs" ino=24632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 208.001190][ T36] audit: type=1400 audit(1788961454.381:426): avc: denied { rmdir } for pid=3972 comm="syz.6.896" name="foo" dev="tracefs" ino=24632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 208.188251][ T31] usb 6-1: USB disconnect, device number 48 [ 208.200474][ T3996] netlink: 'syz.5.905': attribute type 4 has an invalid length. [ 208.208224][ T3996] netlink: 17 bytes leftover after parsing attributes in process `syz.5.905'. [ 208.249336][ T4003] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 208.301463][ T62] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 208.322515][ T62] usb 2-1: device descriptor read/8, error -71 [ 208.452695][ T62] usb 2-1: device descriptor read/8, error -71 [ 208.691522][ T62] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 208.712520][ T62] usb 2-1: device descriptor read/8, error -71 [ 208.842861][ T62] usb 2-1: device descriptor read/8, error -71 [ 208.951560][ T62] usb usb2-port1: unable to enumerate USB device [ 209.281476][ T31] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 209.432570][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.443667][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 209.454623][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 209.465576][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.476595][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.485813][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.493830][ T31] usb 6-1: Product: syz [ 209.498032][ T31] usb 6-1: Manufacturer: syz [ 209.502660][ T31] usb 6-1: SerialNumber: syz [ 209.508454][ T4019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 209.516225][ T31] cdc_mbim 6-1:1.0: skipping garbage [ 209.717292][ T4019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 209.729663][ T36] audit: type=1400 audit(1788961456.171:427): avc: denied { map } for pid=4027 comm="syz.1.915" path="socket:[26301]" dev="sockfs" ino=26301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.752788][ T36] audit: type=1400 audit(1788961456.171:428): avc: denied { read } for pid=4027 comm="syz.1.915" path="socket:[26301]" dev="sockfs" ino=26301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 210.094788][ T62] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 210.251506][ T62] usb 2-1: Using ep0 maxpacket: 16 [ 210.259092][ T62] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 210.268207][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.276226][ T62] usb 2-1: Product: syz [ 210.280397][ T62] usb 2-1: Manufacturer: syz [ 210.285005][ T62] usb 2-1: SerialNumber: syz [ 210.326385][ T4019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 210.492345][ T62] usb 2-1: selecting invalid altsetting 1 [ 210.498384][ T62] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.507959][ T62] usb 2-1: selecting invalid altsetting 1 [ 210.514011][ T62] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 210.523586][ T62] usb 2-1: selecting invalid altsetting 1 [ 210.530926][ T62] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 210.541376][ T62] usb 2-1: USB disconnect, device number 102 [ 210.542290][ T31] cdc_mbim 6-1:1.0: bind() failure [ 210.555691][ T31] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 210.556012][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 210.564402][ T31] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 210.590195][ T31] usb 6-1: USB disconnect, device number 49 [ 211.052282][ T4044] veth1_to_bond: entered allmulticast mode [ 211.078932][ T4050] netlink: 'syz.5.921': attribute type 21 has an invalid length. [ 211.215430][ T4048] veth1_to_bond: left allmulticast mode [ 211.421507][ T31] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 211.591464][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 211.597701][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.608028][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.617035][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.626192][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.636741][ T31] usb 6-1: config 0 descriptor?? [ 212.330392][ T4073] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 212.400887][ T4081] FAULT_INJECTION: forcing a failure. [ 212.400887][ T4081] name failslab, interval 1, probability 0, space 0, times 0 [ 212.413679][ T4081] CPU: 1 UID: 0 PID: 4081 Comm: syz.6.933 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 212.413715][ T4081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.413729][ T4081] Call Trace: [ 212.413737][ T4081] [ 212.413745][ T4081] __dump_stack+0x21/0x30 [ 212.413779][ T4081] dump_stack_lvl+0x140/0x1c0 [ 212.413806][ T4081] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.413834][ T4081] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 212.413864][ T4081] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 212.413895][ T4081] dump_stack+0x19/0x20 [ 212.413921][ T4081] should_fail_ex+0x3c2/0x510 [ 212.413946][ T4081] should_failslab+0xac/0x100 [ 212.413972][ T4081] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 212.413994][ T4081] ? __d_alloc+0x42/0x8c0 [ 212.414014][ T4081] ? expand_files+0xda/0x6f0 [ 212.414039][ T4081] __d_alloc+0x42/0x8c0 [ 212.414059][ T4081] d_alloc_pseudo+0x23/0xc0 [ 212.414079][ T4081] alloc_file_pseudo+0xde/0x1f0 [ 212.414107][ T4081] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 212.414135][ T4081] ? _raw_spin_unlock+0x45/0x60 [ 212.414154][ T4081] sock_alloc_file+0xbe/0x2b0 [ 212.414177][ T4081] __sys_socket+0x14c/0x1c0 [ 212.414199][ T4081] __x64_sys_socket+0x7e/0x90 [ 212.414221][ T4081] x64_sys_call+0x2608/0x2ee0 [ 212.414240][ T4081] do_syscall_64+0x57/0xf0 [ 212.414259][ T4081] ? clear_bhb_loop+0x50/0xa0 [ 212.414291][ T4081] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.414316][ T4081] RIP: 0033:0x7f3fee99e159 [ 212.414335][ T4081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.414354][ T4081] RSP: 002b:00007f3fef870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 212.414378][ T4081] RAX: ffffffffffffffda RBX: 00007f3feec25fa0 RCX: 00007f3fee99e159 [ 212.414395][ T4081] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 212.414408][ T4081] RBP: 00007f3feea3503b R08: 0000000000000000 R09: 0000000000000000 [ 212.414423][ T4081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.414437][ T4081] R13: 00007f3feec26038 R14: 00007f3feec25fa0 R15: 00007ffc50eb5ab8 [ 212.414456][ T4081] [ 212.643462][ T36] audit: type=1400 audit(1788961459.091:429): avc: denied { getopt } for pid=4077 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.706576][ T4094] x_tables: duplicate entry at hook 1 [ 212.931465][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 213.081477][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 213.087610][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.097785][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.108112][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 213.117317][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.125357][ T9] usb 5-1: Product: syz [ 213.129536][ T9] usb 5-1: Manufacturer: syz [ 213.134174][ T9] usb 5-1: SerialNumber: syz [ 213.476002][ T9] usb 5-1: 0:1 : does not exist [ 213.482909][ T9] usb 5-1: unit 1 not found! [ 213.487589][ T9] usb 5-1: unit 9 not found! [ 213.495208][ T9] usb 5-1: unit 0 not found! [ 213.505160][ T9] usb 5-1: USB disconnect, device number 79 [ 213.881527][ T339] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 214.011520][ T339] usb 2-1: device descriptor read/64, error -71 [ 214.059455][ T36] audit: type=1326 audit(1788961460.501:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.4.946" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ee8d9e159 code=0x0 [ 214.198764][ T9] usb 6-1: USB disconnect, device number 50 [ 214.251553][ T339] usb 2-1: device descriptor read/64, error -71 [ 214.491528][ T339] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 214.541482][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 214.621477][ T339] usb 2-1: device descriptor read/64, error -71 [ 214.691493][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 214.697741][ T9] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 214.705967][ T9] usb 6-1: config 0 has no interface number 0 [ 214.712066][ T9] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 214.723500][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 214.732879][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.740966][ T9] usb 6-1: Product: syz [ 214.745230][ T9] usb 6-1: Manufacturer: syz [ 214.749898][ T9] usb 6-1: SerialNumber: syz [ 214.755170][ T9] usb 6-1: config 0 descriptor?? [ 214.760399][ T4128] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 214.891459][ T339] usb 2-1: device descriptor read/64, error -71 [ 214.969036][ T4128] netlink: 'syz.5.949': attribute type 7 has an invalid length. [ 214.976805][ T4128] netlink: 'syz.5.949': attribute type 5 has an invalid length. [ 214.984541][ T4128] netlink: 17 bytes leftover after parsing attributes in process `syz.5.949'. [ 214.994068][ T4128] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 215.011568][ T339] usb usb2-port1: attempt power cycle [ 215.121468][ T45] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 215.202084][ T9] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 215.212663][ T9] asix 6-1:0.188: probe with driver asix failed with error -61 [ 215.272508][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.282685][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.292255][ T45] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.301365][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.309408][ T45] usb 5-1: SerialNumber: syz [ 215.351496][ T339] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 215.372553][ T339] usb 2-1: device descriptor read/8, error -71 [ 215.502475][ T339] usb 2-1: device descriptor read/8, error -71 [ 215.516744][ T36] audit: type=1400 audit(1788961461.961:431): avc: denied { write } for pid=4135 comm="syz.4.953" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.518197][ T4137] input: syz1 as /devices/virtual/input/input41 [ 215.541150][ T36] audit: type=1400 audit(1788961461.961:432): avc: denied { open } for pid=4135 comm="syz.4.953" path="/146/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.571369][ T36] audit: type=1400 audit(1788961461.961:433): avc: denied { ioctl } for pid=4135 comm="syz.4.953" path="/146/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.600598][ T45] usb 5-1: 0:2 : does not exist [ 215.608463][ T45] usb 5-1: USB disconnect, device number 80 [ 215.615209][ T323] udevd[323]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 215.741533][ T339] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 215.762462][ T339] usb 2-1: device descriptor read/8, error -71 [ 215.892544][ T339] usb 2-1: device descriptor read/8, error -71 [ 216.001559][ T339] usb usb2-port1: unable to enumerate USB device [ 216.391485][ T339] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 216.542571][ T339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.553600][ T339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 216.564415][ T339] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 216.575712][ T339] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.587358][ T339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.596436][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.604438][ T339] usb 5-1: Product: syz [ 216.608640][ T339] usb 5-1: Manufacturer: syz [ 216.613240][ T339] usb 5-1: SerialNumber: syz [ 216.618650][ T4151] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 216.626703][ T339] cdc_mbim 5-1:1.0: skipping garbage [ 216.700589][ T4160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.702802][ T4159] rust_binder: 4158:4159 no such ref 3 [ 216.718176][ T4159] can0: slcan on ttyS3. [ 216.827820][ T4151] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 216.931973][ T4158] can0 (unregistered): slcan off ttyS3. [ 217.191478][ T9] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 217.226856][ T467] usb 6-1: USB disconnect, device number 51 [ 217.239362][ T4209] FAULT_INJECTION: forcing a failure. [ 217.239362][ T4209] name failslab, interval 1, probability 0, space 0, times 0 [ 217.252228][ T4209] CPU: 0 UID: 0 PID: 4209 Comm: syz.5.964 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 217.252268][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.252281][ T4209] Call Trace: [ 217.252288][ T4209] [ 217.252298][ T4209] __dump_stack+0x21/0x30 [ 217.252330][ T4209] dump_stack_lvl+0x140/0x1c0 [ 217.252355][ T4209] ? __cfi_dump_stack_lvl+0x10/0x10 [ 217.252382][ T4209] dump_stack+0x19/0x20 [ 217.252406][ T4209] should_fail_ex+0x3c2/0x510 [ 217.252429][ T4209] should_failslab+0xac/0x100 [ 217.252450][ T4209] kmem_cache_alloc_noprof+0x42/0x410 [ 217.252470][ T4209] ? prepare_creds+0x47/0x6b0 [ 217.252489][ T4209] ? __cfi_make_kuid+0x10/0x10 [ 217.252511][ T4209] prepare_creds+0x47/0x6b0 [ 217.252530][ T4209] do_faccessat+0x315/0xd00 [ 217.252547][ T4209] ? fsnotify_parent+0x220/0x220 [ 217.252564][ T4209] ? __kasan_check_write+0x18/0x20 [ 217.252582][ T4209] ? fpregs_restore_userregs+0x11c/0x260 [ 217.252604][ T4209] __x64_sys_faccessat2+0x9e/0xb0 [ 217.252627][ T4209] x64_sys_call+0x2854/0x2ee0 [ 217.252643][ T4209] do_syscall_64+0x57/0xf0 [ 217.252660][ T4209] ? clear_bhb_loop+0x50/0xa0 [ 217.252681][ T4209] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 217.252701][ T4209] RIP: 0033:0x7f2ef359e159 [ 217.252717][ T4209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.252733][ T4209] RSP: 002b:00007f2ef453d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 217.252753][ T4209] RAX: ffffffffffffffda RBX: 00007f2ef3825fa0 RCX: 00007f2ef359e159 [ 217.252767][ T4209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 217.252780][ T4209] RBP: 00007f2ef363503b R08: 0000000000000000 R09: 0000000000000000 [ 217.252792][ T4209] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 217.252804][ T4209] R13: 00007f2ef3826038 R14: 00007f2ef3825fa0 R15: 00007ffccdf52228 [ 217.252820][ T4209] [ 217.256716][ T36] audit: type=1400 audit(1788961463.701:434): avc: denied { map } for pid=4208 comm="syz.5.964" path="/89/proc/279/task/280/fail-nth" dev="proc" ino=27295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 217.476483][ T36] audit: type=1400 audit(1788961463.701:435): avc: denied { execute } for pid=4208 comm="syz.5.964" path="/89/proc/279/task/280/fail-nth" dev="proc" ino=27295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 217.480221][ T4151] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.549198][ T4213] device-mapper: ioctl: Unable to rename non-existent device, to .2\.jDH [ 217.552951][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 217.566207][ T36] audit: type=1400 audit(1788961464.001:436): avc: denied { setopt } for pid=4212 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.566889][ T9] usb 2-1: config 0 has no interface number 0 [ 217.594435][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 217.605510][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 217.618890][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.627249][ T9] usb 2-1: Product: syz [ 217.631552][ T9] usb 2-1: Manufacturer: syz [ 217.636200][ T9] usb 2-1: SerialNumber: syz [ 217.645020][ T9] usb 2-1: config 0 descriptor?? [ 217.716534][ T339] cdc_mbim 5-1:1.0: bind() failure [ 217.722651][ T339] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 217.730788][ T339] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 217.740461][ T339] usb 5-1: USB disconnect, device number 81 [ 217.851657][ T9] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 217.862590][ T9] usb 2-1: USB disconnect, device number 107 [ 217.921500][ T467] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 218.072428][ T467] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.082595][ T467] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.092910][ T467] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 218.101990][ T467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.109996][ T467] usb 6-1: Product: syz [ 218.114178][ T467] usb 6-1: Manufacturer: syz [ 218.118774][ T467] usb 6-1: SerialNumber: syz [ 218.123954][ T467] usb 6-1: config 0 descriptor?? [ 218.321470][ T45] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 218.331465][ T467] usb 6-1: USB disconnect, device number 52 [ 218.471473][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 218.477648][ T45] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 218.485869][ T45] usb 2-1: config 0 has no interface number 0 [ 218.491985][ T45] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 218.501883][ T45] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 218.511975][ T45] usb 2-1: config 0 interface 41 has no altsetting 0 [ 218.519959][ T45] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 218.529049][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.537073][ T45] usb 2-1: Product: syz [ 218.541724][ T45] usb 2-1: Manufacturer: syz [ 218.546574][ T45] usb 2-1: SerialNumber: syz [ 218.552335][ T45] usb 2-1: config 0 descriptor?? [ 218.557645][ T4186] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 218.565113][ T4186] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 218.601502][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 218.751457][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 218.757732][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.768254][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 218.781776][ T4186] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 218.788937][ T4186] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 218.796129][ T62] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 218.803724][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.813213][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.823368][ T9] usb 5-1: config 0 descriptor?? [ 218.832034][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 218.971471][ T62] usb 6-1: Using ep0 maxpacket: 16 [ 218.977893][ T62] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.988133][ T62] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.998565][ T62] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 219.007693][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.015844][ T62] usb 6-1: Product: syz [ 219.020019][ T62] usb 6-1: Manufacturer: syz [ 219.024898][ T62] usb 6-1: SerialNumber: syz [ 219.034466][ T62] usb 6-1: config 0 descriptor?? [ 219.425702][ T45] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 219.638569][ T45] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 219.649569][ T45] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 219.659711][ T45] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 219.669500][ T45] usb 2-1: USB disconnect, device number 108 [ 220.043069][ T36] audit: type=1400 audit(1788961466.491:437): avc: denied { watch } for pid=4268 comm="syz.6.982" path="/file0" dev="ramfs" ino=27926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 220.064933][ T36] audit: type=1400 audit(1788961466.491:438): avc: denied { mounton } for pid=4268 comm="syz.6.982" path="/file0" dev="ramfs" ino=27926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 220.086879][ T36] audit: type=1400 audit(1788961466.491:439): avc: denied { execute } for pid=4268 comm="syz.6.982" name="file0" dev="ramfs" ino=27926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 220.108991][ T36] audit: type=1400 audit(1788961466.491:440): avc: denied { execute_no_trans } for pid=4268 comm="syz.6.982" path="/file0" dev="ramfs" ino=27926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 220.160085][ T4280] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(12292.0.0), cmd(3) [ 220.421636][ T311] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 220.551468][ T311] usb 2-1: device descriptor read/64, error -71 [ 220.675390][ T62] usb 6-1: USB disconnect, device number 53 [ 220.691676][ T4302] netlink: 104 bytes leftover after parsing attributes in process `syz.5.996'. [ 220.691692][ T36] audit: type=1400 audit(1788961467.141:441): avc: denied { nlmsg_read } for pid=4301 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.715619][ T4309] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(3145732.0.0), cmd(3) [ 220.791481][ T311] usb 2-1: device descriptor read/64, error -71 [ 221.041473][ T311] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 221.071479][ T62] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 221.171508][ T311] usb 2-1: device descriptor read/64, error -71 [ 221.222700][ T62] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.232462][ T62] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.243546][ T62] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 221.252692][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.260670][ T62] usb 6-1: Product: syz [ 221.264896][ T62] usb 6-1: Manufacturer: syz [ 221.269488][ T62] usb 6-1: SerialNumber: syz [ 221.276208][ T62] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 221.283788][ T62] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 221.283788][ T62] Please send a copy of this message to and [ 221.364160][ T45] usb 5-1: USB disconnect, device number 82 [ 221.389486][ T4324] IPv4: Oversized IP packet from 127.0.0.1 [ 221.395450][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 221.401982][ T4324] batadv_slave_1: entered promiscuous mode [ 221.409181][ T4324] Mass Storage Function, version: 2009/09/11 [ 221.415281][ T4324] LUN: removable file: (no medium) [ 221.420945][ T36] audit: type=1400 audit(1788961467.861:442): avc: denied { remove_name } for pid=4323 comm="syz.4.1002" name="mass_storage.0" dev="configfs" ino=27401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.422044][ T4323] batadv_slave_1: left promiscuous mode [ 221.445047][ T311] usb 2-1: device descriptor read/64, error -71 [ 221.451265][ T36] audit: type=1400 audit(1788961467.861:443): avc: denied { rmdir } for pid=4323 comm="syz.4.1002" name="mass_storage.0" dev="configfs" ino=27401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.561586][ T311] usb usb2-port1: attempt power cycle [ 221.901523][ T311] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 221.924007][ T62] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 221.924742][ T311] usb 2-1: device descriptor read/8, error -71 [ 221.935374][ T62] usb 6-1: USB disconnect, device number 54 [ 222.013690][ T4334] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4194308.0.0), cmd(3) [ 222.062508][ T311] usb 2-1: device descriptor read/8, error -71 [ 222.271470][ T45] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 222.301498][ T311] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 222.322612][ T311] usb 2-1: device descriptor read/8, error -71 [ 222.422482][ T45] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 222.430603][ T45] usb 5-1: config 0 has no interface number 0 [ 222.436769][ T45] usb 5-1: config 0 interface 41 has no altsetting 0 [ 222.444891][ T45] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 222.454026][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.462057][ T45] usb 5-1: Product: syz [ 222.466298][ T45] usb 5-1: Manufacturer: syz [ 222.470910][ T45] usb 5-1: SerialNumber: syz [ 222.475891][ T311] usb 2-1: device descriptor read/8, error -71 [ 222.482513][ T45] usb 5-1: config 0 descriptor?? [ 222.591542][ T311] usb usb2-port1: unable to enumerate USB device [ 222.641501][ T62] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 222.689081][ T45] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 222.698590][ T45] usb 5-1: USB disconnect, device number 83 [ 222.791512][ T62] usb 6-1: Using ep0 maxpacket: 16 [ 222.797691][ T62] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.807857][ T62] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 222.821179][ T62] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.830426][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.838970][ T62] usb 6-1: config 0 descriptor?? [ 222.844778][ T62] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 223.131472][ T62] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 223.207893][ T4347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1012'. [ 223.281530][ T62] usb 5-1: Using ep0 maxpacket: 16 [ 223.287731][ T62] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 223.296054][ T62] usb 5-1: config 0 has no interface number 0 [ 223.302309][ T62] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 223.312199][ T62] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 223.322296][ T62] usb 5-1: config 0 interface 41 has no altsetting 0 [ 223.330229][ T62] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 223.339292][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.347326][ T62] usb 5-1: Product: syz [ 223.351503][ T62] usb 5-1: Manufacturer: syz [ 223.356092][ T62] usb 5-1: SerialNumber: syz [ 223.361221][ T62] usb 5-1: config 0 descriptor?? [ 223.366504][ T4336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.373855][ T4336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.581695][ T4336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.588993][ T4336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.698822][ T4350] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 224.011658][ T9] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 224.162413][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.172869][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.183421][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 224.192540][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.200682][ T9] usb 2-1: Product: syz [ 224.204902][ T9] usb 2-1: Manufacturer: syz [ 224.209497][ T9] usb 2-1: SerialNumber: syz [ 224.214164][ T62] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 224.226989][ T9] usb 2-1: config 0 descriptor?? [ 224.427457][ T62] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 224.434369][ T45] usb 2-1: USB disconnect, device number 113 [ 224.438190][ T62] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 224.454232][ T62] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 224.463944][ T62] usb 5-1: USB disconnect, device number 84 [ 224.687365][ T36] audit: type=1400 audit(1788961471.131:444): avc: denied { write } for pid=4363 comm="syz.6.1019" path="socket:[27470]" dev="sockfs" ino=27470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.710613][ T36] audit: type=1400 audit(1788961471.131:445): avc: denied { name_bind } for pid=4365 comm="syz.6.1020" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 224.751862][ T36] audit: type=1400 audit(1788961471.201:446): avc: denied { ioctl } for pid=4355 comm="syz.1.1016" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.881507][ T45] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 225.031492][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 225.037704][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.047925][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.058476][ T45] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 225.067632][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.075669][ T45] usb 2-1: Product: syz [ 225.079842][ T45] usb 2-1: Manufacturer: syz [ 225.084450][ T45] usb 2-1: SerialNumber: syz [ 225.089570][ T45] usb 2-1: config 0 descriptor?? [ 225.181504][ T31] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 225.291554][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 225.291572][ T36] audit: type=1400 audit(1788961471.741:449): avc: denied { remount } for pid=4377 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.341458][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 225.347651][ T31] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 225.355882][ T31] usb 5-1: config 0 has no interface number 0 [ 225.362017][ T31] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 225.373492][ T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 225.382592][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.390574][ T31] usb 5-1: Product: syz [ 225.394767][ T31] usb 5-1: Manufacturer: syz [ 225.399370][ T31] usb 5-1: SerialNumber: syz [ 225.402205][ T62] usb 6-1: USB disconnect, device number 55 [ 225.404913][ T31] usb 5-1: config 0 descriptor?? [ 225.424211][ T4368] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 225.541301][ T4414] sit0: entered promiscuous mode [ 225.547726][ T4414] netlink: 'syz.5.1029': attribute type 1 has an invalid length. [ 225.555551][ T4414] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1029'. [ 225.633064][ T4368] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 225.871549][ T62] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 226.021462][ T62] usb 6-1: Using ep0 maxpacket: 32 [ 226.027723][ T62] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 226.035951][ T62] usb 6-1: config 0 has no interface number 0 [ 226.042077][ T62] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 226.052519][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 226.053558][ T62] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 226.062889][ T31] asix 5-1:0.188: probe with driver asix failed with error -61 [ 226.071794][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.087382][ T62] usb 6-1: Product: syz [ 226.091833][ T37] INFO: task syz-executor:295 blocked for more than 122 seconds. [ 226.091853][ T62] usb 6-1: Manufacturer: syz [ 226.099688][ T37] Not tainted syzkaller #0 [ 226.104214][ T62] usb 6-1: SerialNumber: syz [ 226.105705][ T62] usb 6-1: config 0 descriptor?? [ 226.109809][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.114991][ T4416] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 226.118898][ T37] task:syz-executor state:D stack:0 pid:295 tgid:295 ppid:1 flags:0x00000004 [ 226.144777][ T37] Call Trace: [ 226.148070][ T37] [ 226.151007][ T37] __schedule+0x1496/0x20b0 [ 226.155539][ T37] ? __sched_text_start+0x10/0x10 [ 226.160576][ T37] ? __kasan_check_write+0x18/0x20 [ 226.165716][ T37] ? _raw_spin_lock+0x92/0x120 [ 226.170521][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 226.175823][ T37] schedule+0xc5/0x240 [ 226.179909][ T37] schedule_preempt_disabled+0x14/0x30 [ 226.185578][ T37] __mutex_lock+0x902/0x1b90 [ 226.190201][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 226.197016][ T37] ? __kasan_check_write+0x18/0x20 [ 226.202162][ T37] ? _raw_spin_lock+0x92/0x120 [ 226.206949][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 226.212210][ T37] ? __asan_memcpy+0x5a/0x80 [ 226.216834][ T37] __mutex_lock_slowpath+0xe/0x20 [ 226.221901][ T37] mutex_lock+0x113/0x1d0 [ 226.226249][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 226.231124][ T37] ? disk_block_events+0xaf/0x120 [ 226.236207][ T37] bdev_open+0xe3/0xd30 [ 226.240375][ T37] blkdev_open+0x3d0/0x560 [ 226.244823][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 226.249778][ T37] do_dentry_open+0x97c/0x1510 [ 226.254840][ T37] vfs_open+0x86/0x240 [ 226.259056][ T37] ? __cfi_vfs_open+0x10/0x10 [ 226.263910][ T37] ? may_open+0x352/0x430 [ 226.268297][ T37] path_openat+0x2c49/0x35a0 [ 226.273028][ T37] ? kasan_save_alloc_info+0x3a/0x50 [ 226.278347][ T37] ? getname+0x1b/0x30 [ 226.282462][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 226.287296][ T37] ? do_syscall_64+0x57/0xf0 [ 226.291940][ T37] ? do_filp_open+0x440/0x440 [ 226.296634][ T37] do_filp_open+0x1f2/0x440 [ 226.301197][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 226.306278][ T37] ? alloc_fd+0x4c1/0x570 [ 226.310621][ T37] do_sys_openat2+0x134/0x1d0 [ 226.315348][ T37] ? putname+0x113/0x150 [ 226.319608][ T37] ? do_sys_open+0x100/0x100 [ 226.324243][ T37] ? do_mkdirat+0x4e0/0x530 [ 226.328772][ T37] ? __cfi_do_mkdirat+0x10/0x10 [ 226.330848][ T4416] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 226.333674][ T37] ? __kasan_check_write+0x18/0x20 [ 226.345874][ T37] __x64_sys_openat+0x13a/0x170 [ 226.350751][ T37] x64_sys_call+0xe69/0x2ee0 [ 226.355370][ T37] do_syscall_64+0x57/0xf0 [ 226.359798][ T37] ? clear_bhb_loop+0x50/0xa0 [ 226.364517][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 226.370421][ T37] RIP: 0033:0x7f71d51592d7 [ 226.374866][ T37] RSP: 002b:00007ffc706dfa60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 226.383310][ T37] RAX: ffffffffffffffda RBX: 0000555589ba6500 RCX: 00007f71d51592d7 [ 226.391289][ T37] RDX: 0000000000000002 RSI: 00007ffc706dfb90 RDI: ffffffffffffff9c [ 226.399305][ T37] RBP: 00007ffc706dfb3c R08: 0000000000000000 R09: 0000000000000000 [ 226.407328][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000005a [ 226.415353][ T37] R13: 000000000000005f R14: 000000000001658f R15: 00007ffc706dfb90 [ 226.423452][ T37] [ 226.426492][ T37] INFO: task udevd:452 blocked for more than 123 seconds. [ 226.433675][ T37] Not tainted syzkaller #0 [ 226.438618][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.447435][ T37] task:udevd state:D stack:0 pid:452 tgid:452 ppid:110 flags:0x00004000 [ 226.457722][ T37] Call Trace: [ 226.461014][ T37] [ 226.463988][ T37] __schedule+0x1496/0x20b0 [ 226.468527][ T37] ? __sched_text_start+0x10/0x10 [ 226.473603][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 226.478916][ T37] ? __kasan_check_write+0x18/0x20 [ 226.484070][ T37] ? _raw_spin_lock+0x92/0x120 [ 226.488857][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 226.494208][ T37] schedule+0xc5/0x240 [ 226.498300][ T37] schedule_preempt_disabled+0x14/0x30 [ 226.503799][ T37] __mutex_lock+0x902/0x1b90 [ 226.508407][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 226.515221][ T37] ? __switch_to+0xc6b/0x1320 [ 226.519920][ T37] ? __perf_event_task_sched_out+0x1d9/0xba0 [ 226.525950][ T37] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 226.532218][ T37] ? __kasan_check_write+0x18/0x20 [ 226.537340][ T37] ? _raw_spin_lock+0x92/0x120 [ 226.542162][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 226.547389][ T37] ? __asan_memcpy+0x5a/0x80 [ 226.552037][ T37] __mutex_lock_slowpath+0xe/0x20 [ 226.557072][ T37] mutex_lock+0x113/0x1d0 [ 226.561443][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 226.566312][ T37] ? disk_block_events+0xaf/0x120 [ 226.571339][ T37] bdev_open+0xe3/0xd30 [ 226.575555][ T37] blkdev_open+0x3d0/0x560 [ 226.579985][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 226.584977][ T37] do_dentry_open+0x97c/0x1510 [ 226.589767][ T37] vfs_open+0x86/0x240 [ 226.593892][ T37] ? __cfi_vfs_open+0x10/0x10 [ 226.598673][ T37] ? may_open+0x352/0x430 [ 226.603043][ T37] path_openat+0x2c49/0x35a0 [ 226.607654][ T37] ? kasan_save_alloc_info+0x3a/0x50 [ 226.612985][ T37] ? getname+0x1b/0x30 [ 226.617094][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 226.621909][ T37] ? do_syscall_64+0x57/0xf0 [ 226.626514][ T37] ? do_filp_open+0x440/0x440 [ 226.631243][ T37] do_filp_open+0x1f2/0x440 [ 226.635803][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 226.640850][ T37] ? alloc_fd+0x4c1/0x570 [ 226.645254][ T37] do_sys_openat2+0x134/0x1d0 [ 226.650012][ T37] ? do_sys_open+0x100/0x100 [ 226.654654][ T37] __x64_sys_openat+0x13a/0x170 [ 226.659522][ T37] x64_sys_call+0xe69/0x2ee0 [ 226.664127][ T37] do_syscall_64+0x57/0xf0 [ 226.668540][ T37] ? clear_bhb_loop+0x50/0xa0 [ 226.673326][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 226.679217][ T37] RIP: 0033:0x7fb4032a7407 [ 226.683643][ T37] RSP: 002b:00007ffd2417c3f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 226.692078][ T37] RAX: ffffffffffffffda RBX: 00007fb40396e880 RCX: 00007fb4032a7407 [ 226.700046][ T37] RDX: 00000000000a0800 RSI: 000056042e4463c0 RDI: ffffffffffffff9c [ 226.708074][ T37] RBP: 000056042e1fa2c0 R08: 0000000000000000 R09: 0000000000000000 [ 226.716058][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 000056042e43c2e0 [ 226.724048][ T37] R13: 000056042e43b0f0 R14: 0000000000000000 R15: 000056042e43c2e0 [ 226.732034][ T37] [ 226.735495][ T37] INFO: task syz.0.341:1917 blocked for more than 123 seconds. [ 226.743158][ T37] Not tainted syzkaller #0 [ 226.748085][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.756934][ T37] task:syz.0.341 state:D stack:0 pid:1917 tgid:1914 ppid:294 flags:0x00004004 [ 226.767141][ T37] Call Trace: [ 226.770441][ T37] [ 226.773404][ T37] __schedule+0x1496/0x20b0 [ 226.777931][ T37] ? __sched_text_start+0x10/0x10 [ 226.783122][ T37] ? xas_start+0x31e/0x3e0 [ 226.785105][ T9] usb 2-1: USB disconnect, device number 114 [ 226.787595][ T37] ? xas_load+0x398/0x3d0 [ 226.787623][ T37] ? __kasan_check_write+0x18/0x20 [ 226.803616][ T37] schedule+0xc5/0x240 [ 226.807905][ T37] io_schedule+0x85/0x150 [ 226.812339][ T37] ? folio_wait_bit_common+0x69f/0x940 [ 226.817829][ T37] folio_wait_bit_common+0x6a4/0x940 [ 226.823281][ T37] ? folio_wait_bit+0x50/0x50 [ 226.827979][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 226.833607][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 226.839266][ T37] do_read_cache_folio+0x150/0x960 [ 226.844421][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 226.849918][ T37] ? read_cache_folio+0x90/0x90 [ 226.854828][ T37] ? efi_partition+0x3217/0x32b0 [ 226.859795][ T37] read_cache_folio+0x54/0x90 [ 226.864532][ T37] read_part_sector+0xcc/0x250 [ 226.869330][ T37] msdos_partition+0x111/0x3000 [ 226.874317][ T37] ? __cfi_efi_partition+0x10/0x10 [ 226.879452][ T37] ? vsnprintf+0x19ef/0x1ad0 [ 226.884092][ T37] ? snprintf+0xe9/0x140 [ 226.888351][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 226.893680][ T37] ? __cfi_snprintf+0x10/0x10 [ 226.898386][ T37] ? bdev_disk_changed+0x501/0x15d0 [ 226.903627][ T37] bdev_disk_changed+0x823/0x15d0 [ 226.908667][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 226.914171][ T37] ? __kasan_check_write+0x18/0x20 [ 226.919295][ T37] ? mutex_unlock+0x90/0x240 [ 226.923934][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 226.928970][ T37] loop_reread_partitions+0x64/0x110 [ 226.934308][ T37] loop_configure+0x106f/0x13a0 [ 226.939200][ T37] ? __debugfs_create_file+0x264/0x4b0 [ 226.944699][ T37] ? __cfi_loop_configure+0x10/0x10 [ 226.949911][ T37] ? __kasan_check_write+0x18/0x20 [ 226.955078][ T37] lo_ioctl+0xa78/0x2010 [ 226.959340][ T37] ? update_load_avg+0x4f3/0x1980 [ 226.964439][ T37] ? __calc_delta+0x2b0/0x2b0 [ 226.969130][ T37] ? reweight_entity+0xf3/0xac0 [ 226.974212][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 226.978989][ T37] ? dequeue_entity+0x2ea/0x13b0 [ 226.984174][ T37] ? update_load_avg+0x4f3/0x1980 [ 226.989338][ T37] ? tg_unthrottle_up+0x9b0/0x9b0 [ 226.994482][ T37] ? update_cfs_group+0x1f3/0x250 [ 226.999542][ T37] ? dequeue_entities+0x1d2/0x1370 [ 227.004759][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 227.010848][ T37] ? update_curr+0xf1/0x9c0 [ 227.015542][ T37] ? xfd_validate_state+0x68/0x140 [ 227.020765][ T37] ? __kasan_check_read+0x15/0x20 [ 227.025963][ T37] ? __perf_event_task_sched_in+0x101a/0x11f0 [ 227.032089][ T37] ? __kasan_check_write+0x18/0x20 [ 227.037277][ T37] ? __switch_to+0xc6b/0x1320 [ 227.042011][ T37] ? __perf_event_task_sched_out+0x1d9/0xba0 [ 227.048026][ T37] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 227.054358][ T37] ? __cfi___switch_to+0x10/0x10 [ 227.059338][ T37] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 227.065767][ T37] ? _raw_spin_unlock+0x45/0x60 [ 227.070632][ T37] ? finish_task_switch+0x139/0x770 [ 227.075867][ T37] ? __schedule+0x149e/0x20b0 [ 227.080552][ T37] ? avc_has_extended_perms+0x7fb/0xe60 [ 227.086131][ T37] ? __asan_memcpy+0x5a/0x80 [ 227.090720][ T37] ? avc_has_extended_perms+0x94b/0xe60 [ 227.096292][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 227.101517][ T37] ? do_vfs_ioctl+0x1824/0x2010 [ 227.106358][ T37] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 227.112036][ T37] ? schedule+0xc5/0x240 [ 227.116291][ T37] ? futex_unqueue+0x136/0x160 [ 227.121068][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 227.126293][ T37] ? blkdev_common_ioctl+0x11e7/0x2740 [ 227.131782][ T37] ? blkdev_bszset+0x230/0x230 [ 227.136559][ T37] ? __kasan_check_read+0x15/0x20 [ 227.141618][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 227.146620][ T37] ? futex_wait+0x2b8/0x7c0 [ 227.151127][ T37] ? __cfi_do_futex+0x10/0x10 [ 227.155840][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 227.160528][ T37] blkdev_ioctl+0x54b/0x690 [ 227.165065][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 227.170090][ T37] ? xfd_validate_state+0x68/0x140 [ 227.175229][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 227.180178][ T37] ? security_file_ioctl+0x3e/0x110 [ 227.185403][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 227.190438][ T37] __se_sys_ioctl+0x126/0x1b0 [ 227.195143][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 227.199734][ T37] x64_sys_call+0x1878/0x2ee0 [ 227.204457][ T37] do_syscall_64+0x57/0xf0 [ 227.208876][ T37] ? clear_bhb_loop+0x50/0xa0 [ 227.213719][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.221003][ T37] RIP: 0033:0x7ff62b59e159 [ 227.225518][ T37] RSP: 002b:00007ff629ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.233986][ T37] RAX: ffffffffffffffda RBX: 00007ff62b826090 RCX: 00007ff62b59e159 [ 227.241981][ T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000008 [ 227.249964][ T37] RBP: 00007ff62b63503b R08: 0000000000000000 R09: 0000000000000000 [ 227.257959][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.265957][ T37] R13: 00007ff62b826128 R14: 00007ff62b826090 R15: 00007ffd48eb8f98 [ 227.273970][ T37] [ 227.276996][ T37] INFO: task syz.0.341:1919 blocked for more than 124 seconds. [ 227.284605][ T37] Not tainted syzkaller #0 [ 227.289628][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 227.298321][ T37] task:syz.0.341 state:D stack:0 pid:1919 tgid:1914 ppid:294 flags:0x00000004 [ 227.308527][ T37] Call Trace: [ 227.311872][ T37] [ 227.314820][ T37] __schedule+0x1496/0x20b0 [ 227.319336][ T37] ? __sched_text_start+0x10/0x10 [ 227.324417][ T37] ? __kasan_check_write+0x18/0x20 [ 227.329535][ T37] ? _raw_spin_lock+0x92/0x120 [ 227.334330][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 227.339541][ T37] ? __se_sys_ioctl+0x126/0x1b0 [ 227.344441][ T37] schedule+0xc5/0x240 [ 227.348518][ T37] schedule_preempt_disabled+0x14/0x30 [ 227.354015][ T37] __mutex_lock+0x902/0x1b90 [ 227.358613][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 227.365400][ T37] ? kasan_save_alloc_info+0x3a/0x50 [ 227.370695][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 227.375748][ T37] ? security_file_alloc+0x49/0x220 [ 227.380954][ T37] ? file_init_path+0x3b/0x590 [ 227.385745][ T37] ? __asan_memcpy+0x5a/0x80 [ 227.390345][ T37] __mutex_lock_slowpath+0xe/0x20 [ 227.395402][ T37] mutex_lock+0x113/0x1d0 [ 227.399738][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 227.404637][ T37] ? alloc_file_pseudo_noaccount+0x20e/0x330 [ 227.410638][ T37] ? disk_block_events+0xaf/0x120 [ 227.415691][ T37] bdev_open+0xe3/0xd30 [ 227.419859][ T37] bdev_file_open_by_dev+0x1c1/0x240 [ 227.425174][ T37] disk_scan_partitions+0x1bc/0x2d0 [ 227.430384][ T37] blkdev_common_ioctl+0x17a7/0x2740 [ 227.435706][ T37] ? blkdev_bszset+0x230/0x230 [ 227.440481][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 227.445456][ T37] ? handle_mm_fault+0x16fe/0x1ba0 [ 227.450587][ T37] ? selinux_file_ioctl+0x732/0x1480 [ 227.455915][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 227.461513][ T37] ? __kasan_check_write+0x18/0x20 [ 227.466644][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 227.471797][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 227.477359][ T37] ? __kasan_check_write+0x18/0x20 [ 227.482491][ T37] ? recalc_sigpending+0x16c/0x1d0 [ 227.487608][ T37] ? __kasan_check_write+0x18/0x20 [ 227.492770][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 227.498245][ T37] blkdev_ioctl+0x486/0x690 [ 227.502790][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 227.507816][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 227.512794][ T37] ? security_file_ioctl+0x3e/0x110 [ 227.517993][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 227.523046][ T37] __se_sys_ioctl+0x126/0x1b0 [ 227.527729][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 227.532462][ T37] x64_sys_call+0x1878/0x2ee0 [ 227.537153][ T37] do_syscall_64+0x57/0xf0 [ 227.541600][ T37] ? clear_bhb_loop+0x50/0xa0 [ 227.546292][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.552204][ T37] RIP: 0033:0x7ff62b59e159 [ 227.556618][ T37] RSP: 002b:00007ff629fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.565050][ T37] RAX: ffffffffffffffda RBX: 00007ff62b826180 RCX: 00007ff62b59e159 [ 227.573052][ T37] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000008 [ 227.581040][ T37] RBP: 00007ff62b63503b R08: 0000000000000000 R09: 0000000000000000 [ 227.589053][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.597050][ T37] R13: 00007ff62b826218 R14: 00007ff62b826180 R15: 00007ffd48eb8f98 [ 227.605062][ T37] [ 227.608151][ T37] NMI backtrace for cpu 1 [ 227.608164][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 227.608186][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.608193][ T37] Call Trace: [ 227.608197][ T37] [ 227.608202][ T37] __dump_stack+0x21/0x30 [ 227.608221][ T37] dump_stack_lvl+0x140/0x1c0 [ 227.608236][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 227.608258][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x6d6/0xa50 [ 227.608288][ T37] dump_stack+0x19/0x20 [ 227.608313][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 227.608332][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 227.608348][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 227.608363][ T37] ? sched_show_task+0x371/0x530 [ 227.608378][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 227.608400][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 227.608426][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 227.608452][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 227.608473][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 227.608487][ T37] watchdog+0xe45/0xf90 [ 227.608499][ T37] ? __kasan_check_write+0x18/0x20 [ 227.608511][ T37] ? __cfi_watchdog+0x10/0x10 [ 227.608522][ T37] ? __kasan_check_read+0x15/0x20 [ 227.608539][ T37] ? __kthread_parkme+0x12f/0x180 [ 227.608559][ T37] ? schedule+0xc5/0x240 [ 227.608579][ T37] kthread+0x2c4/0x360 [ 227.608601][ T37] ? __cfi_watchdog+0x10/0x10 [ 227.608619][ T37] ? __cfi_kthread+0x10/0x10 [ 227.608640][ T37] ret_from_fork+0x64/0xa0 [ 227.608686][ T37] ? __cfi_kthread+0x10/0x10 [ 227.608708][ T37] ret_from_fork_asm+0x1a/0x30 [ 227.608729][ T37] [ 227.608736][ T37] Sending NMI from CPU 1 to CPUs 0: [ 227.778642][ C0] NMI backtrace for cpu 0 [ 227.778661][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 854a78f96d1de0e57c2b3161b903feab84b64500 [ 227.778683][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.778694][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 227.778721][ C0] Code: cc cc cc cc cc cc cc b8 e0 cc e3 36 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 68 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 227.778735][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 227.778750][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a4f4fd [ 227.778762][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000006d77e4 [ 227.778773][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 227.778785][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 227.778796][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ecdda8 [ 227.778809][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 227.778824][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.778835][ C0] CR2: 00007ffcea4eeed0 CR3: 0000000102328000 CR4: 00000000003526b0 [ 227.778851][ C0] Call Trace: [ 227.778857][ C0] [ 227.778865][ C0] default_idle+0x17/0x30 [ 227.778886][ C0] arch_cpu_idle+0xd/0x20 [ 227.778906][ C0] default_idle_call+0x3e/0x80 [ 227.778926][ C0] do_idle+0x2fc/0x570 [ 227.778943][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 227.778963][ C0] cpu_startup_entry+0x47/0x60 [ 227.778980][ C0] rest_init+0x10b/0x130 [ 227.779000][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 227.779022][ C0] start_kernel+0x462/0x4bb [ 227.779039][ C0] x86_64_start_reservations+0x2e/0x30 [ 227.779059][ C0] x86_64_start_kernel+0x6a/0x7b [ 227.779078][ C0] common_startup_64+0x13b/0x157 [ 227.779101][ C0] [ 228.330726][ T339] usb 5-1: USB disconnect, device number 85 [ 228.972435][ T62] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 228.982754][ T62] asix 6-1:0.188: probe with driver asix failed with error -71 [ 228.994378][ T62] usb 6-1: USB disconnect, device number 56 [ 232.491538][ T110] udevd[110]: worker [452] /devices/virtual/block/loop3 is taking a long time