last executing test programs: 15.800410282s ago: executing program 1 (id=87): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r2 = dup3(r1, r0, 0x80000) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x3, 0xe4, 0x959, 0xf, 0x15, "506e8c53bbd55cf44307249e90a658a780640c"}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080), 0x4) 15.758905853s ago: executing program 1 (id=88): mlockall(0x1) (fail_nth: 6) 15.167072818s ago: executing program 1 (id=92): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0xc8, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "0400a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96c401000000000000000000007efff100", "280800dbe108598948224ad54afab31d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) 15.11662909s ago: executing program 1 (id=95): pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x1000000) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) write(r0, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a1008025191657cbd7000fcdbdf25"], 0x10}}, 0x40014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) 15.10189413s ago: executing program 1 (id=99): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000065b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000267000/0x3000)=nil) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000018f000/0x400000)=nil) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r3, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000f00)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000fc0)={'ip6_vti0\x00', &(0x7f0000000f40)={'syztnl0\x00', 0x0, 0x6, 0x9, 0x1, 0x1, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7, 0x2, 0x5}}) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="19ab66a3e8", 0x5}, {&(0x7f0000000080)="7a219d016292da6cd962176343e16bf7ed07c2951fabec44d339f64a758ad61cf6ad5e593916da3164e716884b6f53b0b08e6855589521f9cd66c950bdaa93182b0a44014925e744d5d05d4031368af96cdb6514050ed36bc020a282bf52e31cdb3416b9b75f6c12e0baa51452935dd56c778b574c879123da4bd2a7404af4a4ef86a771bd69ff33106f77797735be1f40", 0x91}, {&(0x7f0000000340)="e861233d9fd5276343aa31c1fadcf3973ba87dabd621deb8eb0e399a0fefbde583c1383a20d940aa32867b1dc3d37659bea8a773bc562b90527840753b8fc9c3661451c8f0dc93d49da3a901ca805836fe9dcf4231b9b5dbe94c94f9f310f5f214ca9148b491f3f4a1725f052a6cec8d8da98c312748bac7c63faa9bf5844b1406c6fbd3c4806d4972abb660819aa9024826039890e5deeb2c87416e087f2999b40a35d1c59383128d4eaceacc3d75b84238168b9f3b6f59eef23cb8950ff441da16ff8b29efadd6a7b80dc015c59ab4a76eab831fbe59aea5a0d20274a5ca57c863a58431bc4a9c4ab3e8", 0xeb}, {&(0x7f0000000440)="e9eb0082b3a9dd337350c2ba244dda8187221f607d8dacbe041e78d5b9ac16a32a1009d85dc1dc0c6d56d34c89a3bc4730d48b59502b95e62cc4f7bca33a79b8c74ce9c45973a8528a57064a03dc5ee7f63e67af5d6c46877c8f52ab626c06543a91a0fd457ef13454cd6e7df28ecdffb4aa5aa7a046764b7769be707e7368079369d7b412804a75859a3a3afe4f9e022f193c469c94c1eb1d65280f79639e5059", 0xa1}, {&(0x7f0000000540)="5fdb8208b6dfa0c3280b1e439060ef7e8b0827d176aad7559c4be2da4d4b72aeb0e38e93d1d2dc2abf63be031e555b083e2f3605df578bbb83b7d9321157d3b482d9ed4052f0b713b0fbc7d85bb96093b37fbd1508ce397cbcc8b0d2fe046ea394096c4845960b9e63995540f7428021", 0x70}, {&(0x7f00000005c0)="a78330fb56d24f571f82d14706a5525d", 0x10}, {&(0x7f0000000600)="5502cf26887cb7301fdd441de27f8e2da8b76864d8d201e734f76b30e53bfa7f5754910fb1050f14d37ae733bf7bf9cba1fbeef262", 0x35}, {&(0x7f0000000640)="a867e26ddbbe01f3c411cba3ade34023f3c33ae553199897779f3eec6ac196f053d753776754046378f70b8e6225ed162a10ef335a8a20b821b658c123155beec2e3ba59ebed7c6fdd6884b5f26813c0b258384fb816dd54834ac4f28b767a8ffdbfc1bcc1ddac5ff76c4e905bd7cd611603f76574828772453b30e9cfaa90abffe83a6578f1cca5973557793b2447171dcf8746595b89c59b6e74329571dba4df632b44659b0135567aebc547d96cb30ea375", 0xb3}], 0x8, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xce}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x68}}, {{&(0x7f0000000800)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000840)="7acd88f81afbc09b3bea051caaed1593e01af66ee2a94b497aadd7b5c7f414707305fc7c3f45de4aeb08b374964a5e518755b4b8022b456074be40108976676c936b1a37d5e20cefc39302133351227e2d339fdcc90361faa05d9459fa9b46cadc2efc9ecd56b8a7294bddaa7c9f14b83c8b585ae25a1e9c19ba4ced185948ba477be89d0318e479f912dd9dc26d7a4fda4fbdd6541653ac829f46bc5bb72d1736dbf6b0fd98a15ba23cb42ebb6d9a634fed99fccdacfb8a3bf46be9478e1e58624c72a205", 0xc5}, {&(0x7f0000000940)="6fca21fef0271f292fbac5f35dd0", 0xe}, {&(0x7f0000000980)="ce2fa3ecd9bb4fb06c2eaaddeb0ef187e86b5de3e10b011df231ae9f7302092eba3dee655a63af755d1b4693c95d6a3f032056c7f679e30b3cafc0b643258a72006477487724d1852d910eb4d6a04f85284a3d12d29b622a7d8cf0a37aee09ea5424a47f44f5ea4a94381c4f9abfd8e1d4700aee38e0e146ef1872065c66a1fbef271bcde8feb25c514b2a8bdd35d00d2f35ca61e13dcd0d9052d23354b8c685c601061345c30a0e0b", 0xa9}], 0x3, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "e0520763dbdb1935cafa"}]}, @end, @noop, @lsrr={0x83, 0x13, 0xee, [@empty, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}]}, @noop]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @end, @generic={0xcc, 0xc, "0a261ed571077727a3a8"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @dev={0xac, 0x14, 0x14, 0x24}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x88, [@empty, @empty, @loopback, @empty]}]}}}], 0xe0}}, {{&(0x7f0000000b80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="399bef40b172d9998e47b2cee8b22763c841bda476c1903df64cf602b7b27b7cbbcb30935152d77084543a7fbec6d4d19b8040332d3919525e65b8a83b04b8bddb0c5e5d4a32540b132846bd6236af2bc48d1e88899602a6d25b0d7abf08b6c2507ccded968b141727c37764588f93261044388267ac86007ff3885b94e8363d594f1692489c64e2b52ee22a3794d5c5ac65e9ec4bb04aa5b4765205bf80ba778a5f51763ba2c38cff885083df255197f323", 0xb2}], 0x1}}, {{&(0x7f0000000cc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d00)="2b26874a9613d0fd01a0f4eeef8a8ee0314f074ab37e7cf068b729a76b6fca3ad3b049e7602c3d60f69b971e0349f4d0921bed8d3b4e0eedbbce2462255631b08da035a494483cdf007d0d94b442a68f5c3966d2470d6f89c49c7ecb8cc2eeb644291206f0f2667ee6b1865af5b2e935ca1a60f7b0cc76227eb464755380db4f071cb03131a3c3cd2d0392a8aa89b5a2e23bba7949f1211804f814d09c76957aca39b39f4fbfb73fe0648f5e", 0xac}, {&(0x7f0000000dc0)="901e015f21cfa553d1ead92acb0598a7ee739344b285a769c3fa5883899e5990e61100425898de72f56d939581daec8cb777863c532170ec", 0x38}, {&(0x7f0000000e00)="e860fa9a9ea947004956c9d1a67f17cdef15a0c3e836605e88da71fca2ecfc828e9dead8a930b5e7e25f46bb", 0x2c}], 0x3}}, {{&(0x7f0000000e80)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000ec0), 0x0, &(0x7f0000001000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x5, [{@broadcast, 0x80000000}, {@private=0xa010102, 0xfff}, {@private=0xa010100, 0x80}, {@multicast2, 0x1}]}, @generic={0x88, 0x6, "77ff92ce"}, @generic={0x88, 0xb, "c5f95a377c7228da59"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @local}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}, @timestamp={0x44, 0x20, 0xc8, 0x0, 0x1, [0x80000000, 0x8, 0x1, 0x5, 0xa3d, 0x8, 0x2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbd}}], 0x120}}], 0x5, 0x8110) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15.005055982s ago: executing program 1 (id=101): r0 = socket(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_int(r0, 0x0, 0x10, &(0x7f0000000040)=0x7171, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="70000000150001002dbd7000ffdbdf2500000000000000000000000000000000ffffffff0000000000000000000000004e2300074e2100050201a0a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0008000800080001044cfd08001f00030000000c0015005907350001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000052) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x34540, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000440)={0x2, 'vlan1\x00', {0x7f}, 0x11}) r7 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 6.508686926s ago: executing program 3 (id=171): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x301002) mmap$usbmon(&(0x7f00002cb000/0x2000)=nil, 0x2000, 0x85470c304e6c2d68, 0x4010, r1, 0x800) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x189, 0x4}}, @set_irq_handler={0xc8, 0x20, {0xe, 0x1}}, @in_dx={0x69, 0x20, {0x3db3, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x54, {"66ba4300ec66baf80cb8a2b24a8eef66bafc0c66edb9ad030000b8904228aabac4708d770f30420f2087c463617f01940f23b366b8ad008ee80f20d40f01c32e460f07"}}, @in_dx={0x69, 0x20, {0x19ff, 0x4}}, @cpuid={0x64, 0x18, {0x101, 0x3}}, @nested_vmlaunch={0x12f, 0x18}, @in_dx={0x69, 0x20, {0x1dd1, 0x1}}, @wr_drn={0x68, 0x20, {0x3, 0xe}}, @code={0xa, 0x6b, {"0f09460f01c3c74424005e000000c74424020d000000c7442406000000000f011c24c402ad9ff866b884008ec8660f3a16743b250cb92e0b0000b8acf1630eba95932f660f300f20c035000000400f22c0c4617877c482219ece"}}, @rdmsr={0x66, 0x18, {0x981}}, @nested_vmresume={0x130, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x7ff078ee715272b2}}, @out_dx={0x6a, 0x28, {0x3598, 0x6, 0x9}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0x8, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x9e, 0x0, 0x80000000}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0xadbe}}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x6}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x377}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f00000001c0)=@other={'lock', ' ', 'mem'}, 0x9) open(0x0, 0x143bc2, 0x1c0) close(0x3) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe0904"], 0xfffffffffffffffe) 3.473136073s ago: executing program 3 (id=202): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) (async, rerun: 32) write$ppp(r4, &(0x7f0000000040)="9b7a", 0x2) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0xa, 0x0, 0x100}, 0x20) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) (async) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) (async, rerun: 32) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRESDEC=r1, @ANYBLOB="0000000001"], 0x48}}, 0x48000) (async, rerun: 32) read(r5, &(0x7f0000000f00)=""/4098, 0x106) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) (async, rerun: 64) r6 = socket(0xa, 0x2, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000204e0000", 0x58}], 0x1) readahead(r0, 0xfffffffffffff552, 0x8001) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="c6af100100000020ac054e024000010203010902240001018040f5d909010301029b0921f9ff010122c605090581030002ffaf00"], 0x0) 3.333540656s ago: executing program 3 (id=205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 3.1762836s ago: executing program 3 (id=207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x16}, 0x1c) poll(&(0x7f0000000180)=[{r1, 0xa070e55f4233de9c}, {r0, 0x2184}, {r1, 0x201}, {0xffffffffffffffff, 0x2420}, {0xffffffffffffffff, 0x8045}, {r3, 0xa102}, {0xffffffffffffffff, 0x111a}], 0x7, 0x4) 3.085636152s ago: executing program 3 (id=208): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x3c, 0x3e9, 0x2, 0x70bd29, 0x25dfdbfe, {0x62, 0x0, 0x2, 0x0, 0x54d5d9e2, 0x80, 0x6, 0xde, 0x0, 0x2, 0x60000}}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000040) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x20, 0x70bd29, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x40004) 3.085425072s ago: executing program 3 (id=210): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20601, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x1}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x5, 0x1028, 0x800, 0x5, 0x3, 0x4, 0xffff, 0x8, 0x2, 0xd80, 0x105f, 0x1}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) 2.39515352s ago: executing program 0 (id=221): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000080)={0x0, 0x403, 0x8, 0xffff, 0x0, 0xfffffffd}) (async) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x7, 0x201}, {0x1, 0x100}]}, 0x14, 0x3) (async) socket$inet(0x2, 0x3, 0x1) r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x3220, 0xfffffffb) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) (async) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) (async) r3 = epoll_create(0x3) epoll_pwait2(r3, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000002a40)={0x30000011}) (async) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x800) dup3(r1, r2, 0x80000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200050b03000000000000000700000008000700010000000c00008008001d0098"], 0x28}}, 0x0) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x303800, 0x0) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x3, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) (async) ioctl$KVM_CREATE_VM(r5, 0x5380, 0x0) socket$inet6(0xa, 0x802, 0x0) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r7, 0x0, 0x0) 2.37819473s ago: executing program 2 (id=222): socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01df"], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, 0x0, &(0x7f0000000480)) 2.348156801s ago: executing program 2 (id=223): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x1200000000000000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 2.229519084s ago: executing program 2 (id=224): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="f327000000000000000007000000c40002"], 0xd8}, 0x1, 0x0, 0x0, 0x6}, 0x4020) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x10}], 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000)=0x200ce, 0xfffffffffffffe26) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)) 2.224421384s ago: executing program 0 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7, 0x7, 0x6, 0x0, 0x2, 0x3, 0x10000, 0x371, 0x40, 0x332, 0x1, 0x5, 0x38, 0x4, 0x0, 0x6, 0x4}, [{0x60000000, 0x9d, 0x2, 0x3ff, 0xffffffffffffffff, 0x3, 0x4, 0x9}, {0x6474e554, 0x7, 0x7ff, 0x2, 0xffff, 0x3, 0x2f86, 0x4}, {0x7, 0x9, 0x9d, 0x7, 0x100, 0x652, 0x5, 0x1ff}, {0x1, 0x200, 0x6, 0x5, 0x5, 0xff, 0xff, 0x1}], "ee3b0f32c8014d407f1490148728d114e86222983590699106efdc5769515189a1314b9b00bd01daa25d76be66557c48c45d1e4ff1c255c09c9bc7145c00690d688b914b39204a8a53f2c336ed4fd1f41177d2e37e3666623d37896c5f76a29cfd6d08913b6e2002a7698a91903c6aed9ff8404ad29b7e", ['\x00', '\x00']}, 0x397) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10002, 0x0, &(0x7f00002cf000/0x1000)=nil}) write(r0, &(0x7f0000000080)='4', 0x1) 1.269857988s ago: executing program 2 (id=226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x16}, 0x1c) poll(&(0x7f0000000180)=[{r1, 0xa070e55f4233de9c}, {r0, 0x2184}, {r1, 0x201}, {0xffffffffffffffff, 0x2420}, {0xffffffffffffffff, 0x8045}, {r2, 0xa102}, {0xffffffffffffffff, 0x111a}], 0x7, 0x4) 1.18550184s ago: executing program 2 (id=227): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000440)={0x2a, 0x17, 0x13, 0x6, 0x0, 0x80, 0x1, 0xef, 0xfffffffffffffffe}) 1.18500871s ago: executing program 2 (id=228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c0251}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0x40000101, &(0x7f0000000140)="5f27ebdcb1d8f321b8e5e1e34b33f856f0999e788aa57c09508db778e6774e6d5a97ffed2d22a2cca0416b3f61e571815e1c273c2587a31aadc987c26b6ff8db7dc3cf9f69aa36dbd839dfe7607ac115904f1ad651df409f038daef12734c08c31a4b05c2e3c", &(0x7f00000004c0)="f67315965c25f1707481bbd961c4b4a72dd27c7565a7dfcad8f769bc711ec1cf1d913a6803a5beac2fdd49160e617596207bfb09aa87f2fe842b0d13ba004ba40fca59cbcda8f56380d508db99c4e3ec58f19bd1c6ae0d4a0b5b1eba6c060df7bd2e2e4a9201ff3e2e4a29b93018d5b4d42439be2e46d71126389f16ea4447f198b2001269e36158609ddef3b9086576cc5ab6250fa51d2961bf28c5286f944d71b7811c0d8b91", 0x66, 0xa7}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r7, 0x82569000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.117571642s ago: executing program 0 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd^', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) (async) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffffd081edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) write$FUSE_ATTR(r3, &(0x7f0000000480)={0x78, 0xfffffffffffffffe, r7, {0x7d, 0xfffffffb, 0x0, {0x3, 0x7, 0x5, 0x80, 0x8, 0x8, 0xc, 0x6, 0x7, 0x8000, 0x1, r8, 0xffffffffffffffff, 0xfffff801, 0x4}}}, 0x78) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.040172004s ago: executing program 0 (id=230): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)="75a8ccf79c5bee843a7d88e298d1341bd209a21b6f50fe88cd6a6a000063ab59578db363f48925590534d43697c73e19417e39a06607de99de69db13fd737428808940bcd0840dc930c81a8bd8b665cd233c5831977dd63ce2c88d43b17700f4ff9400000000", 0x66}, {&(0x7f0000000380)="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", 0x236}, {&(0x7f00000005c0)="1b3b4cb82b2f1bc29fc0144b7cd8a483d6dbc75ded5829acefe763e19496e9ba57a70000704857247b7a2200000000c97b183e9500a52f3d4433127df4", 0x3d}], 0x3}, 0x40) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socketpair(0x10, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x8, 0x9c, 0x1, 0xffff, 0x1, r5}) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e80)={0x1c, 0x12, 0x200, 0x70bd26, 0x4, {0xa, 0x0, 0x300}, [@typed={0x8, 0x61, 0x0, 0x0, @pid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000040) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040)) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000440)={0x4002a, 0x17, 0x13, 0x20, 0x5, 0x80, 0x1, 0xef, 0xfffffffffffffffe}) 971.903305ms ago: executing program 0 (id=231): socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01df"], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, 0x0, &(0x7f0000000480)) 936.954626ms ago: executing program 0 (id=232): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000002c0)={'veth0_to_hsr\x00', @multicast}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4008af00, &(0x7f0000000000)=0x1) 0s ago: executing program 32 (id=101): r0 = socket(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_int(r0, 0x0, 0x10, &(0x7f0000000040)=0x7171, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="70000000150001002dbd7000ffdbdf2500000000000000000000000000000000ffffffff0000000000000000000000004e2300074e2100050201a0a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0008000800080001044cfd08001f00030000000c0015005907350001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000052) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x34540, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000440)={0x2, 'vlan1\x00', {0x7f}, 0x11}) r7 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) kernel console output (not intermixed with test programs): cess permissive=1 [ 21.989968][ T36] audit: type=1400 audit(1786104501.050:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 33.229231][ T36] audit: type=1400 audit(1786104512.300:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.232681][ T286] cgroup: Unknown subsys name 'net' [ 33.251920][ T36] audit: type=1400 audit(1786104512.300:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.279561][ T36] audit: type=1400 audit(1786104512.330:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.279903][ T286] cgroup: Unknown subsys name 'devices' [ 33.401409][ T286] cgroup: Unknown subsys name 'hugetlb' [ 33.407054][ T286] cgroup: Unknown subsys name 'rlimit' [ 33.502454][ T36] audit: type=1400 audit(1786104512.570:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.525750][ T36] audit: type=1400 audit(1786104512.570:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.550666][ T36] audit: type=1400 audit(1786104512.570:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.571885][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.582878][ T36] audit: type=1400 audit(1786104512.650:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.608327][ T36] audit: type=1400 audit(1786104512.650:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.641437][ T36] audit: type=1400 audit(1786104512.710:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.642772][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.666969][ T36] audit: type=1400 audit(1786104512.710:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.408590][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.427184][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.434621][ T293] bridge_slave_0: entered allmulticast mode [ 34.441264][ T293] bridge_slave_0: entered promiscuous mode [ 34.447946][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.455056][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.462237][ T293] bridge_slave_1: entered allmulticast mode [ 34.468479][ T293] bridge_slave_1: entered promiscuous mode [ 34.587651][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.594989][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.602213][ T297] bridge_slave_0: entered allmulticast mode [ 34.608522][ T297] bridge_slave_0: entered promiscuous mode [ 34.622447][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.629649][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.636733][ T297] bridge_slave_1: entered allmulticast mode [ 34.643248][ T297] bridge_slave_1: entered promiscuous mode [ 34.671174][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.678259][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.685415][ T299] bridge_slave_0: entered allmulticast mode [ 34.691899][ T299] bridge_slave_0: entered promiscuous mode [ 34.699961][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.707032][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.714217][ T299] bridge_slave_1: entered allmulticast mode [ 34.720590][ T299] bridge_slave_1: entered promiscuous mode [ 34.782863][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.790256][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.797340][ T298] bridge_slave_0: entered allmulticast mode [ 34.803784][ T298] bridge_slave_0: entered promiscuous mode [ 34.813815][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.820923][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.828056][ T298] bridge_slave_1: entered allmulticast mode [ 34.834540][ T298] bridge_slave_1: entered promiscuous mode [ 34.883240][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.890347][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.897670][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.904753][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.967818][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.974928][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.982290][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.989356][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.031890][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.038995][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.046306][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.053384][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.064992][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.072457][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.080039][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.087263][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.129585][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.136942][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.152784][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.159894][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.175612][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.182705][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.198430][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.205530][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.236380][ T293] veth0_vlan: entered promiscuous mode [ 35.261371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.268485][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.288264][ T299] veth0_vlan: entered promiscuous mode [ 35.296742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.303816][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.314106][ T293] veth1_macvtap: entered promiscuous mode [ 35.341289][ T299] veth1_macvtap: entered promiscuous mode [ 35.373141][ T298] veth0_vlan: entered promiscuous mode [ 35.386587][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.400247][ T298] veth1_macvtap: entered promiscuous mode [ 35.408326][ T297] veth0_vlan: entered promiscuous mode [ 35.458612][ T297] veth1_macvtap: entered promiscuous mode [ 35.511868][ T61] device offline error, dev sda, sector 274742 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 35.525977][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2019 starting block 34342) [ 35.537718][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2019, error -5) [ 35.537720][ T61] device offline error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 8 prio class 2 [ 35.537785][ T61] device offline error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 8 prio class 2 [ 35.572366][ T61] device offline error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 57 prio class 2 [ 35.583386][ T61] device offline error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 35.586795][ T13] Buffer I/O error on device sda1, logical block 34304 [ 35.594759][ T61] device offline error, dev sda, sector 280878 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 35.612025][ T61] device offline error, dev sda, sector 281384 op 0x1:(WRITE) flags 0x0 phys_seg 60 prio class 2 [ 35.623147][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35173) [ 35.633634][ T320] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 35.635324][ T61] device offline error, dev sda, sector 281862 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 35.652053][ T12] device offline error, dev sda, sector 282368 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 35.671586][ T12] device offline error, dev sda, sector 282878 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 35.689382][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35486) [ 35.701856][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35742) [ 35.713815][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35935) [ 35.726526][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139302) [ 35.726540][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 35.726567][ T310] Buffer I/O error on device sda1, logical block 35706 [ 35.739005][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139306) [ 35.771186][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139342) [ 35.783090][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139346) [ 35.785689][ T310] Buffer I/O error on device sda1, logical block 35707 [ 35.794883][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139352) [ 35.821110][ T324] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4'. [ 35.837877][ T310] Buffer I/O error on device sda1, logical block 35708 [ 35.847240][ T310] Buffer I/O error on device sda1, logical block 35709 [ 35.854215][ T310] Buffer I/O error on device sda1, logical block 35710 [ 35.858953][ T311] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 35.862720][ T310] Buffer I/O error on device sda1, logical block 35711 [ 35.877738][ T310] Buffer I/O error on device sda1, logical block 35712 [ 35.886361][ T310] Buffer I/O error on device sda1, logical block 35713 [ 35.893687][ T310] Buffer I/O error on device sda1, logical block 35714 [ 35.904157][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 35.917131][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 35.930686][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 35.943700][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 35.956628][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 35.970089][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.977750][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 35.986251][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 35.992628][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.007052][ T331] Invalid logical block size (200) [ 36.012376][ T310] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.031429][ T316] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 36.042008][ T73] Aborting journal on device sda1-8. [ 36.047366][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 36.050998][ T286] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 36.063320][ T316] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 36.075698][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 36.083484][ T316] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 36.089500][ T286] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 36.093134][ T316] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 36.108993][ T316] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 36.117707][ T316] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 36.126364][ T66] usb 2-1: device descriptor read/64, error -71 [ 36.133225][ T316] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 36.141874][ T316] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 36.212690][ T316] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 36.368685][ T66] usb 2-1: device descriptor read/64, error -71 [ 36.395597][ T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 36.442470][ T342] syzkaller1: entered promiscuous mode [ 36.448006][ T342] syzkaller1: entered allmulticast mode [ 36.608692][ T66] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.705744][ T364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 36.725344][ T364] Invalid logical block size (200) [ 36.758920][ T66] usb 2-1: device descriptor read/64, error -71 [ 36.817058][ T372] netlink: 200 bytes leftover after parsing attributes in process `syz.2.18'. [ 36.999248][ T66] usb 2-1: device descriptor read/64, error -71 [ 37.018908][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.108999][ T66] usb usb2-port1: attempt power cycle [ 37.168688][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.428767][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.468747][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.511613][ T66] usb 2-1: device descriptor read/8, error -71 [ 37.650359][ T66] usb 2-1: device descriptor read/8, error -71 [ 37.662636][ T311] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 37.678814][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.736711][ T398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 37.746700][ T398] Invalid logical block size (200) [ 37.770403][ T400] x_tables: unsorted underflow at hook 1 [ 37.821744][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.830462][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 37.838683][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.839341][ T311] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 37.853775][ T311] usb 1-1: config 129 has no interface number 0 [ 37.860276][ T311] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 37.873864][ T311] usb 1-1: config 129 interface 80 has no altsetting 0 [ 37.882751][ T311] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 37.892199][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.900531][ T311] usb 1-1: Product: syz [ 37.904892][ T311] usb 1-1: Manufacturer: syz [ 37.908852][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.910362][ T311] usb 1-1: SerialNumber: syz [ 37.929707][ T66] usb 2-1: device descriptor read/8, error -71 [ 38.059774][ T66] usb 2-1: device descriptor read/8, error -71 [ 38.078692][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.178720][ T66] usb usb2-port1: unable to enumerate USB device [ 38.188751][ T9] usb usb4-port1: attempt power cycle [ 38.548752][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.579533][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.675684][ T403] FAULT_INJECTION: forcing a failure. [ 38.675684][ T403] name failslab, interval 1, probability 0, space 0, times 1 [ 38.688562][ T403] CPU: 1 UID: 0 PID: 403 Comm: syz.1.29 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 38.688601][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.688630][ T403] Call Trace: [ 38.688638][ T403] [ 38.688647][ T403] __dump_stack+0x21/0x30 [ 38.688689][ T403] dump_stack_lvl+0x140/0x1c0 [ 38.688726][ T403] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.688766][ T403] dump_stack+0x19/0x20 [ 38.688802][ T403] should_fail_ex+0x3c2/0x510 [ 38.688835][ T403] should_failslab+0xac/0x100 [ 38.688873][ T403] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 38.688905][ T403] ? xas_split_alloc+0x15a/0x510 [ 38.688942][ T403] xas_split_alloc+0x15a/0x510 [ 38.688982][ T403] split_huge_page_to_list_to_order+0x9a1/0x1480 [ 38.689016][ T403] ? __cfi_split_huge_page_to_list_to_order+0x10/0x10 [ 38.689049][ T403] ? __kasan_check_write+0x18/0x20 [ 38.689078][ T403] ? up_read+0x26/0x1c0 [ 38.689116][ T403] shmem_writepage+0x4b0/0x12d0 [ 38.689155][ T403] ? __cfi_shmem_writepage+0x10/0x10 [ 38.689190][ T403] ? __cfi_try_to_unmap_one+0x10/0x10 [ 38.689220][ T403] ? __cfi_folio_not_mapped+0x10/0x10 [ 38.689256][ T403] ? __cfi_folio_clear_dirty_for_io+0x10/0x10 [ 38.689308][ T403] shrink_folio_list+0x2a5e/0x4d50 [ 38.689354][ T403] ? reclaim_clean_pages_from_list+0x750/0x750 [ 38.689400][ T403] ? __cfi___set_page_owner+0x10/0x10 [ 38.689443][ T403] ? cgroup_rstat_updated+0x144/0x800 [ 38.689480][ T403] ? __cfi___kasan_check_read+0x10/0x10 [ 38.689506][ T403] ? zone_page_state_add+0x43/0x90 [ 38.689540][ T403] ? __mod_zone_page_state+0x93/0xc0 [ 38.689572][ T403] __reclaim_pages+0x38f/0x710 [ 38.689610][ T403] ? __cfi___reclaim_pages+0x10/0x10 [ 38.689646][ T403] ? folio_isolate_lru+0xb0/0x640 [ 38.689683][ T403] ? __cfi_folio_isolate_lru+0x10/0x10 [ 38.689721][ T403] ? __kasan_check_read+0x15/0x20 [ 38.689749][ T403] madvise_cold_or_pageout_pte_range+0x1261/0x1980 [ 38.689780][ T403] ? kernel_text_address+0xa9/0xe0 [ 38.689819][ T403] ? unwind_get_return_address+0x51/0x90 [ 38.689854][ T403] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 38.689892][ T403] ? __cfi_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 38.689925][ T403] ? stack_trace_save+0xaa/0x100 [ 38.689956][ T403] ? stack_depot_save_flags+0x38/0x800 [ 38.689992][ T403] walk_pgd_range+0xcf3/0x1c20 [ 38.690028][ T403] ? kasan_save_track+0x4f/0x80 [ 38.690064][ T403] ? do_syscall_64+0x57/0xf0 [ 38.690099][ T403] ? walk_page_range_novma+0x2a0/0x2a0 [ 38.690138][ T403] ? find_vma+0xd3/0x120 [ 38.690168][ T403] ? __cfi_find_vma+0x10/0x10 [ 38.690194][ T403] ? avc_has_perm_noaudit+0x289/0x360 [ 38.690231][ T403] walk_page_range_mm+0x5fa/0x830 [ 38.690273][ T403] ? __cfi_walk_page_range_mm+0x10/0x10 [ 38.690322][ T403] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 38.690355][ T403] ? selinux_file_open+0x46c/0x630 [ 38.690387][ T403] walk_page_range+0x76/0x90 [ 38.690423][ T403] madvise_vma_behavior+0x21b7/0x2df0 [ 38.690454][ T403] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 38.690484][ T403] ? is_bpf_text_address+0x17b/0x1a0 [ 38.690524][ T403] ? kernel_text_address+0xa9/0xe0 [ 38.690562][ T403] ? __kernel_text_address+0x11/0x40 [ 38.690600][ T403] ? unwind_get_return_address+0x51/0x90 [ 38.690634][ T403] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 38.690670][ T403] ? arch_stack_walk+0x10a/0x170 [ 38.690697][ T403] ? _parse_integer_limit+0x195/0x1e0 [ 38.690735][ T403] ? mas_prev+0x5f/0xa0 [ 38.690776][ T403] ? find_vma_prev+0x12a/0x1b0 [ 38.690803][ T403] ? __cfi_find_vma_prev+0x10/0x10 [ 38.690833][ T403] ? __kasan_check_write+0x18/0x20 [ 38.690860][ T403] ? rwsem_read_trylock+0x275/0x5a0 [ 38.690903][ T403] ? downgrade_write+0x470/0x470 [ 38.690943][ T403] ? bpf_lsm_file_permission+0xd/0x20 [ 38.690978][ T403] madvise_walk_vmas+0x3ee/0x700 [ 38.691008][ T403] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 38.691033][ T403] ? down_read+0x7f/0xe0 [ 38.691073][ T403] ? madvise_set_anon_name+0x650/0x650 [ 38.691097][ T403] ? __asan_memset+0x39/0x50 [ 38.691126][ T403] ? blk_start_plug+0x71/0x1c0 [ 38.691156][ T403] do_madvise+0x5e8/0xbb0 [ 38.691184][ T403] ? __cfi_do_madvise+0x10/0x10 [ 38.691209][ T403] ? ksys_write+0x1f3/0x260 [ 38.691240][ T403] ? __cfi_ksys_write+0x10/0x10 [ 38.691272][ T403] __x64_sys_madvise+0xad/0xc0 [ 38.691306][ T403] x64_sys_call+0x20c3/0x2ee0 [ 38.691332][ T403] do_syscall_64+0x57/0xf0 [ 38.691380][ T403] ? clear_bhb_loop+0x50/0xa0 [ 38.691418][ T403] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.691453][ T403] RIP: 0033:0x7fcbe759e0d9 [ 38.691479][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.691500][ T403] RSP: 002b:00007fcbe84fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 38.691539][ T403] RAX: ffffffffffffffda RBX: 00007fcbe7825fa0 RCX: 00007fcbe759e0d9 [ 38.691559][ T403] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 38.691576][ T403] RBP: 00007fcbe84fc090 R08: 0000000000000000 R09: 0000000000000000 [ 38.691597][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.691615][ T403] R13: 00007fcbe7826038 R14: 00007fcbe7825fa0 R15: 00007fff81dc2288 [ 38.691642][ T403] [ 38.710381][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.291426][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 39.291483][ T36] audit: type=1400 audit(1786104518.360:155): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.448717][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.469699][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.599736][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.628708][ T374] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 39.718697][ T9] usb usb4-port1: unable to enumerate USB device [ 39.779775][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.807321][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.817576][ T374] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.842731][ T374] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.861393][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.873341][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 39.883231][ T374] usb 3-1: config 0 descriptor?? [ 39.889117][ T433] Invalid logical block size (200) [ 39.912956][ T110] udevd[110]: worker [319] terminated by signal 7 (Bus error) [ 39.926375][ T110] udevd[110]: worker [319] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 39.947782][ T110] udevd[110]: worker [312] terminated by signal 7 (Bus error) [ 39.955650][ T110] udevd[110]: worker [312] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0' [ 40.187882][ T36] audit: type=1400 audit(1786104519.250:156): avc: denied { append } for pid=446 comm="syz.1.41" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.268709][ T390] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.300549][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.308203][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.323031][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.331253][ T311] usb 1-1: USB disconnect, device number 2 [ 40.347094][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.356492][ T110] udevd[110]: worker [371] terminated by signal 7 (Bus error) [ 40.369164][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.376585][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.384102][ T110] udevd[110]: worker [371] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 40.395325][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 40.402851][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 40.408815][ T390] usb 4-1: device descriptor read/64, error -71 [ 40.410783][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 40.424176][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 40.431987][ T110] udevd[110]: worker [440] terminated by signal 7 (Bus error) [ 40.440610][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 40.448096][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 40.455770][ T110] udevd[110]: worker [440] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.80' [ 40.466989][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x6 [ 40.474977][ T451] Write-error on swap-device (8:0:808382) [ 40.481151][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.493526][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.505127][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.517550][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.518735][ T36] audit: type=1400 audit(1786104519.580:157): avc: denied { read } for pid=449 comm="syz.1.42" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.528056][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.551660][ T418] Write-error on swap-device (8:0:808262) [ 40.557647][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 Aug 7 12:08:39 [ 40.570403][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 40.576014][ T418] Write-error on swap-device (8:0:808270) lert kernel: [ [ 40.588184][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 40.474977][ T4[ 40.588585][ T429] netlink: 277 bytes leftover after parsing attributes in process `syz.2.34'. 51] Write-error [ 40.600556][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 on swap-device ([ 40.615718][ T36] audit: type=1400 audit(1786104519.580:158): avc: denied { open } for pid=449 comm="syz.1.42" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 8:0:808382) Aug[ 40.621785][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 7 12:08:39 syz[ 40.644148][ T418] Write-error on swap-device (8:0:808278) kaller kern.aler[ 40.657884][ T36] audit: type=1400 audit(1786104519.580:159): avc: denied { ioctl } for pid=449 comm="syz.1.42" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 t kernel: [ 40[ 40.658350][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 .551660][ T418][ 40.686224][ T418] Write-error on swap-device (8:0:808286) Write-error on [ 40.701191][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 swap-device (8:0[ 40.701279][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 :808262) Aug 7[ 40.701397][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 12:08:39 syzkal[ 40.701437][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 ler kern.alert k[ 40.701490][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 ernel: [ 40.57[ 40.710433][ T390] usb 4-1: device descriptor read/64, error -71 6014][ T418] Wr[ 40.720333][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 ite-error on swa[ 40.751200][ T36] audit: type=1400 audit(1786104519.580:160): avc: denied { bind } for pid=449 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 p-device (8:0:80[ 40.767875][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 8270) [ 40.789018][ T418] Write-error on swap-device (8:0:808294) [ 40.795020][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.801948][ T418] Write-error on swap-device (8:0:808302) [ 40.805133][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 Aug 7 12:08:39 [ 40.818923][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 40.828030][ T418] Write-error on swap-device (8:0:808310) lert kernel: [ [ 40.830277][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 40.644148][ T4[ 40.837452][ T418] Write-error on swap-device (8:0:808318) 18] Write-error [ 40.846099][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 on swap-device ([ 40.862130][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 8:0:808278) Aug 7 12:08:39 syzkaller kern.alert kernel: [ 40[ 40.876420][ T463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. .686224][ T418][ 40.879846][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 Write-error on [ 40.885992][ T418] Write-error on swap-device (8:0:808326) swap-device (8:0[ 40.895143][ T374] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 :808286) [ 40.910487][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Aug 7 12:08:39 syzkaller kern.alert kernel: [ [ 40.923586][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 40.789018][ T418] Write-error on swap-device (8:0:808294) Aug 7 12:08:39 syzkaller kern.aler[ 40.940633][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 t kernel: [ 40[ 40.950804][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 .801948][ T418][ 40.960925][ T374] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving Write-error on [ 40.968832][ T390] usb 4-1: new high-speed USB device number 7 using dummy_hcd swap-device (8:0:808302) Aug 7 12:08:39 syzkaller kern.alert kernel: [ 40.828030][ T418] Write-error on swap-device (8:0:808310) Aug 7 12:08:39 syzkaller kern.alert kern[ 40.993260][ T374] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 el: [ 40.837452][ T418] Write[ 41.008361][ T466] udevd[466]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error -error on swap-device (8:0:808318) Aug 7 12:08:39 syzkaller kern.alert kernel: [ 40.885992][ T418] Write-error on swap-device (8:0:808326) [ 41.037271][ T110] udevd[110]: worker [441] terminated by signal 7 (Bus error) [ 41.047387][ T374] usb 3-1: USB disconnect, device number 2 [ 41.118735][ T390] usb 4-1: device descriptor read/64, error -71 [ 41.220457][ T36] audit: type=1400 audit(1786104520.290:161): avc: denied { create } for pid=472 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.222131][ T473] netlink: 'syz.1.48': attribute type 46 has an invalid length. [ 41.305609][ T475] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 41.313317][ T475] netlink: 'syz.1.49': attribute type 21 has an invalid length. [ 41.321466][ T475] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.49'. [ 41.331032][ T475] netlink: 64 bytes leftover after parsing attributes in process `syz.1.49'. [ 41.341710][ T36] audit: type=1400 audit(1786104520.410:162): avc: denied { create } for pid=474 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.361941][ T36] audit: type=1400 audit(1786104520.410:163): avc: denied { ioctl } for pid=474 comm="syz.1.49" path="socket:[5430]" dev="sockfs" ino=5430 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.388737][ T390] usb 4-1: device descriptor read/64, error -71 [ 41.508788][ T390] usb usb4-port1: attempt power cycle [ 41.750085][ T487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 41.848691][ T390] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.869840][ T390] usb 4-1: device descriptor read/8, error -71 [ 41.891861][ T36] audit: type=1400 audit(1786104520.960:164): avc: denied { connect } for pid=494 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.010769][ T390] usb 4-1: device descriptor read/8, error -71 [ 42.268690][ T390] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.309836][ T390] usb 4-1: device descriptor read/8, error -71 [ 42.449887][ T390] usb 4-1: device descriptor read/8, error -71 [ 42.558845][ T390] usb usb4-port1: unable to enumerate USB device [ 42.922699][ T505] FAULT_INJECTION: forcing a failure. [ 42.922699][ T505] name failslab, interval 1, probability 0, space 0, times 0 [ 42.935582][ T505] CPU: 0 UID: 0 PID: 505 Comm: syz.0.60 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 42.935615][ T505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.935632][ T505] Call Trace: [ 42.935638][ T505] [ 42.935644][ T505] __dump_stack+0x21/0x30 [ 42.935670][ T505] dump_stack_lvl+0x140/0x1c0 [ 42.935691][ T505] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.935714][ T505] dump_stack+0x19/0x20 [ 42.935740][ T505] should_fail_ex+0x3c2/0x510 [ 42.935758][ T505] should_failslab+0xac/0x100 [ 42.935777][ T505] __kmalloc_cache_noprof+0x41/0x470 [ 42.935793][ T505] ? alloc_fs_context+0x6f/0x800 [ 42.935813][ T505] ? __asan_memcpy+0x5a/0x80 [ 42.935828][ T505] alloc_fs_context+0x6f/0x800 [ 42.935847][ T505] ? __kasan_check_write+0x18/0x20 [ 42.935862][ T505] fs_context_for_mount+0x26/0x40 [ 42.935881][ T505] do_new_mount+0x116/0xb40 [ 42.935896][ T505] ? security_capable+0x44/0x130 [ 42.935919][ T505] path_mount+0x66a/0xff0 [ 42.935933][ T505] ? putname+0x113/0x150 [ 42.935953][ T505] __se_sys_mount+0x2bf/0x480 [ 42.935968][ T505] ? ksys_write+0x1f3/0x260 [ 42.935984][ T505] ? __x64_sys_mount+0xf0/0xf0 [ 42.936000][ T505] __x64_sys_mount+0xc3/0xf0 [ 42.936016][ T505] x64_sys_call+0x2021/0x2ee0 [ 42.936029][ T505] do_syscall_64+0x57/0xf0 [ 42.936046][ T505] ? clear_bhb_loop+0x50/0xa0 [ 42.936067][ T505] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.936087][ T505] RIP: 0033:0x7f17f5f9e0d9 [ 42.936100][ T505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.936112][ T505] RSP: 002b:00007f17f49f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.936128][ T505] RAX: ffffffffffffffda RBX: 00007f17f6225fa0 RCX: 00007f17f5f9e0d9 [ 42.936140][ T505] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000200000000000 [ 42.936151][ T505] RBP: 00007f17f49f7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.936161][ T505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.936170][ T505] R13: 00007f17f6226038 R14: 00007f17f6225fa0 R15: 00007ffc22ded688 [ 42.936183][ T505] [ 43.199402][ T511] process 'syz.3.64' launched './file0' with NULL argv: empty string added [ 43.213951][ T516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 43.277708][ T524] syzkaller1: entered promiscuous mode [ 43.283327][ T524] syzkaller1: entered allmulticast mode [ 43.548731][ T390] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.698696][ T390] usb 2-1: Using ep0 maxpacket: 8 [ 43.704896][ T390] usb 2-1: config 0 interface 0 has no altsetting 0 [ 43.711754][ T390] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 43.721780][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.730634][ T390] usb 2-1: config 0 descriptor?? [ 43.878711][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.878748][ T493] Bluetooth: hci0: command 0x1003 tx timeout [ 44.097854][ T542] Invalid logical block size (200) [ 44.138004][ T390] hid (null): invalid report_count 2060869942 [ 44.145992][ T390] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x4 [ 44.154193][ T390] logitech-djreceiver 0003:046D:C534.0002: unexpected long global item [ 44.162613][ T390] logitech-djreceiver 0003:046D:C534.0002: logi_dj_probe: parse failed [ 44.171189][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 44.178742][ T390] logitech-djreceiver 0003:046D:C534.0002: probe with driver logitech-djreceiver failed with error -22 [ 44.201164][ T549] FAULT_INJECTION: forcing a failure. [ 44.201164][ T549] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.214421][ T549] CPU: 0 UID: 0 PID: 549 Comm: syz.3.77 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 44.214456][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.214470][ T549] Call Trace: [ 44.214478][ T549] [ 44.214486][ T549] __dump_stack+0x21/0x30 [ 44.214523][ T549] dump_stack_lvl+0x140/0x1c0 [ 44.214555][ T549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.214586][ T549] ? is_bpf_text_address+0x17b/0x1a0 [ 44.214621][ T549] ? check_stack_object+0x10f/0x150 [ 44.214647][ T549] dump_stack+0x19/0x20 [ 44.214677][ T549] should_fail_ex+0x3c2/0x510 [ 44.214703][ T549] should_fail+0xf/0x20 [ 44.214726][ T549] should_fail_usercopy+0x1e/0x30 [ 44.214754][ T549] _copy_from_user+0x20/0xa0 [ 44.214784][ T549] ____sys_sendmsg+0x314/0xa00 [ 44.214810][ T549] ? __sys_sendmsg_sock+0x50/0x50 [ 44.214834][ T549] ? import_iovec+0x80/0xb0 [ 44.214867][ T549] ___sys_sendmsg+0x2a6/0x370 [ 44.214900][ T549] ? __sys_sendmsg+0x2a0/0x2a0 [ 44.214923][ T549] ? proc_fail_nth_write+0x184/0x220 [ 44.214956][ T549] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.214995][ T549] ? __fget_files+0x2bc/0x330 [ 44.215024][ T549] __x64_sys_sendmsg+0x206/0x2e0 [ 44.215046][ T549] ? fput+0x1a4/0x230 [ 44.215074][ T549] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 44.215097][ T549] ? ksys_write+0x1f3/0x260 [ 44.215120][ T549] ? __kasan_check_read+0x15/0x20 [ 44.215143][ T549] x64_sys_call+0x2a4c/0x2ee0 [ 44.215163][ T549] do_syscall_64+0x57/0xf0 [ 44.215189][ T549] ? clear_bhb_loop+0x50/0xa0 [ 44.215218][ T549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.215247][ T549] RIP: 0033:0x7fac3b19e0d9 [ 44.215265][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.215283][ T549] RSP: 002b:00007fac3c122028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.215306][ T549] RAX: ffffffffffffffda RBX: 00007fac3b425fa0 RCX: 00007fac3b19e0d9 [ 44.215322][ T549] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 44.215337][ T549] RBP: 00007fac3c122090 R08: 0000000000000000 R09: 0000000000000000 [ 44.215352][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.215365][ T549] R13: 00007fac3b426038 R14: 00007fac3b425fa0 R15: 00007ffc7be08158 [ 44.215384][ T549] [ 44.221594][ T547] memory length for this resource is wrong [ 44.343204][ T10] usb 2-1: USB disconnect, device number 6 [ 44.366171][ T547] isp1760 0000:00:03.0: probe with driver isp1760 failed with error -12 [ 44.488704][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 44.488710][ T374] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.502737][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.511220][ T31] usb 3-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 44.521557][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.535889][ T31] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 44.544969][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.553028][ T31] usb 3-1: Product: syz [ 44.557222][ T31] usb 3-1: Manufacturer: syz [ 44.561881][ T31] usb 3-1: SerialNumber: syz [ 44.648688][ T374] usb 1-1: Using ep0 maxpacket: 32 [ 44.655100][ T374] usb 1-1: config index 0 descriptor too short (expected 548, got 36) [ 44.663341][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.674463][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.684265][ T374] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.697111][ T374] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 44.706226][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.715131][ T374] usb 1-1: config 0 descriptor?? [ 44.769062][ T539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.777872][ T539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.791313][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 44.805579][ T31] usb 3-1: USB disconnect, device number 3 [ 44.894162][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 44.894181][ T36] audit: type=1400 audit(1786104523.960:178): avc: denied { mount } for pid=560 comm="syz.1.78" name="/" dev="ramfs" ino=5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.927519][ T110] udevd[110]: worker [558] terminated by signal 7 (Bus error) [ 44.935156][ T110] udevd[110]: worker [558] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 45.048673][ T36] audit: type=1400 audit(1786104524.110:179): avc: denied { create } for pid=562 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.073069][ T36] audit: type=1400 audit(1786104524.110:180): avc: denied { setopt } for pid=562 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.092856][ T36] audit: type=1400 audit(1786104524.120:181): avc: denied { read } for pid=562 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.112337][ T36] audit: type=1400 audit(1786104524.170:182): avc: denied { write } for pid=562 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.142801][ T36] audit: type=1400 audit(1786104524.210:183): avc: denied { bind } for pid=562 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.162018][ T36] audit: type=1400 audit(1786104524.220:184): avc: denied { shutdown } for pid=562 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.192094][ T36] audit: type=1400 audit(1786104524.260:185): avc: denied { write } for pid=567 comm="syz.3.80" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.194408][ T568] input: syz1 as /devices/virtual/input/input5 [ 45.305201][ T574] Invalid logical block size (200) [ 45.647075][ T36] audit: type=1400 audit(1786104524.710:186): avc: denied { read write } for pid=584 comm="syz.1.87" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.670315][ T36] audit: type=1400 audit(1786104524.710:187): avc: denied { open } for pid=584 comm="syz.1.87" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.706047][ T587] FAULT_INJECTION: forcing a failure. [ 45.706047][ T587] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 45.719470][ T587] CPU: 0 UID: 0 PID: 587 Comm: syz.1.88 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 45.719503][ T587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.719516][ T587] Call Trace: [ 45.719522][ T587] [ 45.719533][ T587] __dump_stack+0x21/0x30 [ 45.719565][ T587] dump_stack_lvl+0x140/0x1c0 [ 45.719594][ T587] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.719635][ T587] ? xas_find+0x6f0/0x820 [ 45.719663][ T587] dump_stack+0x19/0x20 [ 45.719690][ T587] should_fail_ex+0x3c2/0x510 [ 45.719714][ T587] should_fail_alloc_page+0xec/0x110 [ 45.719740][ T587] __alloc_pages_noprof+0x1c0/0x7e0 [ 45.719769][ T587] ? filemap_map_pages+0x17c0/0x1b80 [ 45.719794][ T587] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 45.719825][ T587] pte_alloc_one+0x92/0x530 [ 45.719846][ T587] ? __cfi_filemap_map_pages+0x10/0x10 [ 45.719871][ T587] ? __cfi_pte_alloc_one+0x10/0x10 [ 45.719892][ T587] ? __alloc_pages_noprof+0x35a/0x7e0 [ 45.719920][ T587] ? vma_data_pages+0x105/0x140 [ 45.719938][ T587] do_pte_missing+0x22a6/0x4440 [ 45.719966][ T587] ? pte_marker_clear+0x1b0/0x1b0 [ 45.719989][ T587] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 45.720017][ T587] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 45.720041][ T587] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 45.720070][ T587] handle_mm_fault+0x1189/0x1ba0 [ 45.720095][ T587] ? __cfi_handle_mm_fault+0x10/0x10 [ 45.720119][ T587] ? follow_page_pte+0x8fb/0xba0 [ 45.720147][ T587] ? gup_must_unshare+0x1e0/0x1e0 [ 45.720174][ T587] ? __get_user_pages+0x1b5c/0x22d0 [ 45.720200][ T587] __get_user_pages+0x114b/0x22d0 [ 45.720229][ T587] ? populate_vma_page_range+0x220/0x220 [ 45.720254][ T587] ? down_read+0x7f/0xe0 [ 45.720281][ T587] ? __cfi_down_read+0x10/0x10 [ 45.720310][ T587] __mm_populate+0x300/0x440 [ 45.720336][ T587] __se_sys_mlockall+0x483/0x510 [ 45.720364][ T587] __x64_sys_mlockall+0x3c/0x60 [ 45.720391][ T587] x64_sys_call+0x1bcf/0x2ee0 [ 45.720409][ T587] do_syscall_64+0x57/0xf0 [ 45.720430][ T587] ? clear_bhb_loop+0x50/0xa0 [ 45.720457][ T587] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.720484][ T587] RIP: 0033:0x7fcbe759e0d9 [ 45.720504][ T587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.720520][ T587] RSP: 002b:00007fcbe84fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 45.720540][ T587] RAX: ffffffffffffffda RBX: 00007fcbe7825fa0 RCX: 00007fcbe759e0d9 [ 45.720555][ T587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 45.720567][ T587] RBP: 00007fcbe84fc090 R08: 0000000000000000 R09: 0000000000000000 [ 45.720580][ T587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.720591][ T587] R13: 00007fcbe7826038 R14: 00007fcbe7825fa0 R15: 00007fff81dc2288 [ 45.720614][ T587] [ 46.320466][ T604] netlink: 'syz.1.95': attribute type 3 has an invalid length. [ 46.638691][ T390] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.789912][ T390] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 46.799778][ T390] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 46.812866][ T390] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 46.822237][ T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.830454][ T390] usb 4-1: Product: syz [ 46.834759][ T390] usb 4-1: Manufacturer: syz [ 46.840523][ T390] usb 4-1: SerialNumber: syz [ 47.051954][ T390] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 47.081696][ T110] udevd[110]: worker [565] terminated by signal 7 (Bus error) [ 47.089420][ T110] udevd[110]: worker [565] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 47.145634][ T374] usbhid 1-1:0.0: can't add hid device: -71 [ 47.151674][ T374] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 47.169806][ T374] usb 1-1: USB disconnect, device number 3 [ 47.180747][ T110] udevd[110]: worker [556] terminated by signal 7 (Bus error) [ 47.195697][ T110] udevd[110]: worker [556] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 47.207106][ T110] udevd[110]: worker [616] terminated by signal 7 (Bus error) [ 47.214783][ T110] udevd[110]: worker [616] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 47.240180][ T620] 9pnet_fd: p9_fd_create_unix (620): problem connecting socket: ./cgroup/file0: -2 [ 47.252524][ T390] usb 4-1: USB disconnect, device number 10 [ 47.269667][ T390] usblp0: removed [ 47.299660][ T110] udevd[110]: worker [563] terminated by signal 7 (Bus error) [ 47.307212][ T110] udevd[110]: worker [563] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 47.401133][ T635] incfs: Options parsing error. -22 [ 47.406411][ T635] incfs: mount failed -22 [ 47.649577][ T46] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 47.810155][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 47.818844][ T46] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 47.832041][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.841174][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.855811][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.865127][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.873368][ T46] usb 1-1: Product: Ќ [ 47.877550][ T46] usb 1-1: Manufacturer: 霹媔⎗䵯ŠⲔ氀Ҥ׶䈷顤륳푕䗒ባ첕뾬ꝍ홦Ꞛꢞ路 [ 47.888896][ T46] usb 1-1: SerialNumber: 욀쏖閌쓙㏄臩ŻⳲ᭘瀊뭞搷쑼﹙垍詍扵폑㖍獂䡮꒠⮡㦎䯐俎準 [ 48.111080][ T46] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 48.124251][ T46] cdc_ncm 1-1:1.0: bind() failure [ 48.135633][ T46] usb 1-1: USB disconnect, device number 4 [ 48.683154][ T653] GUP no longer grows the stack in syz.3.117 (653): 200000004000-20000000a000 (200000002000) [ 48.704378][ T653] CPU: 1 UID: 0 PID: 653 Comm: syz.3.117 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 48.704415][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.704428][ T653] Call Trace: [ 48.704435][ T653] [ 48.704444][ T653] __dump_stack+0x21/0x30 [ 48.704480][ T653] dump_stack_lvl+0x140/0x1c0 [ 48.704511][ T653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.704547][ T653] ? find_vma+0xd3/0x120 [ 48.704570][ T653] ? vma_is_secretmem+0x11/0x50 [ 48.704603][ T653] dump_stack+0x19/0x20 [ 48.704631][ T653] __get_user_pages+0x1e20/0x22d0 [ 48.704665][ T653] ? populate_vma_page_range+0x220/0x220 [ 48.704696][ T653] get_user_pages_remote+0x377/0xb80 [ 48.704725][ T653] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 48.704749][ T653] ? __cfi_get_user_pages_remote+0x10/0x10 [ 48.704780][ T653] __access_remote_vm+0x1de/0x630 [ 48.704808][ T653] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 48.704841][ T653] ? access_remote_vm+0x60/0x60 [ 48.704867][ T653] ? _raw_spin_lock+0x92/0x120 [ 48.704892][ T653] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.704927][ T653] access_remote_vm+0x39/0x60 [ 48.704955][ T653] proc_pid_cmdline_read+0x4c2/0xbf0 [ 48.704986][ T653] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 48.705018][ T653] ? bpf_lsm_file_permission+0xd/0x20 [ 48.705048][ T653] vfs_readv+0x5e7/0xa00 [ 48.705077][ T653] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 48.705109][ T653] ? do_readv+0x2e0/0x2e0 [ 48.705139][ T653] ? __cfi_mutex_unlock+0x10/0x10 [ 48.705175][ T653] __x64_sys_preadv+0x19f/0x2c0 [ 48.705201][ T653] ? __cfi___x64_sys_preadv+0x10/0x10 [ 48.705227][ T653] ? __kasan_check_read+0x15/0x20 [ 48.705251][ T653] x64_sys_call+0x1ee9/0x2ee0 [ 48.705271][ T653] do_syscall_64+0x57/0xf0 [ 48.705297][ T653] ? clear_bhb_loop+0x50/0xa0 [ 48.705328][ T653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.705358][ T653] RIP: 0033:0x7fac3b19e0d9 [ 48.705377][ T653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.705396][ T653] RSP: 002b:00007fac3c122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 48.705421][ T653] RAX: ffffffffffffffda RBX: 00007fac3b425fa0 RCX: 00007fac3b19e0d9 [ 48.705438][ T653] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 48.705453][ T653] RBP: 00007fac3c122090 R08: 00000000fffffff9 R09: 0000000000000000 [ 48.705468][ T653] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 48.705483][ T653] R13: 00007fac3b426038 R14: 00007fac3b425fa0 R15: 00007ffc7be08158 [ 48.705502][ T653] [ 48.969851][ T653] FAULT_INJECTION: forcing a failure. [ 48.969851][ T653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.983224][ T653] CPU: 1 UID: 0 PID: 653 Comm: syz.3.117 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 48.983259][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.983272][ T653] Call Trace: [ 48.983279][ T653] [ 48.983287][ T653] __dump_stack+0x21/0x30 [ 48.983330][ T653] dump_stack_lvl+0x140/0x1c0 [ 48.983360][ T653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.983391][ T653] ? do_pte_missing+0x28e9/0x4440 [ 48.983421][ T653] dump_stack+0x19/0x20 [ 48.983450][ T653] should_fail_ex+0x3c2/0x510 [ 48.983482][ T653] should_fail_alloc_page+0xec/0x110 [ 48.983511][ T653] __alloc_pages_noprof+0x1c0/0x7e0 [ 48.983545][ T653] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 48.983578][ T653] ? mas_destroy+0x2768/0x3050 [ 48.983611][ T653] ? __count_memcg_events+0xdf/0x3a0 [ 48.983642][ T653] __folio_alloc_noprof+0x14/0x80 [ 48.983676][ T653] folio_prealloc+0x46/0x220 [ 48.983704][ T653] do_wp_page+0x187e/0x2e80 [ 48.983734][ T653] ? folio_put+0x90/0x90 [ 48.983759][ T653] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.983785][ T653] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 48.983822][ T653] handle_mm_fault+0x1017/0x1ba0 [ 48.983853][ T653] ? __cfi_handle_mm_fault+0x10/0x10 [ 48.983879][ T653] ? __kasan_check_write+0x18/0x20 [ 48.983904][ T653] ? mtree_load+0x49d/0x6d0 [ 48.983925][ T653] ? lock_mm_and_find_vma+0xb8/0x390 [ 48.983953][ T653] do_user_addr_fault+0x4ee/0x1230 [ 48.983991][ T653] ? __kasan_check_write+0x18/0x20 [ 48.984015][ T653] exc_page_fault+0x58/0xc0 [ 48.984049][ T653] asm_exc_page_fault+0x2b/0x30 [ 48.984078][ T653] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 48.984115][ T653] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 48.984134][ T653] RSP: 0018:ffffc9000df87b00 EFLAGS: 00050206 [ 48.984155][ T653] RAX: ffffffff82aedd01 RBX: 0000000000001000 RCX: 0000000000000180 [ 48.984172][ T653] RDX: 0000000000000000 RSI: ffff888114917e80 RDI: 0000200000002000 [ 48.984188][ T653] RBP: ffffc9000df87b30 R08: ffff888114917fff R09: 1ffff11022922fff [ 48.984206][ T653] R10: dffffc0000000000 R11: ffffed1022923000 R12: 0000200000002180 [ 48.984223][ T653] R13: 00007ffffffff000 R14: 0000200000001180 R15: ffff888114917000 [ 48.984248][ T653] ? _copy_to_user+0x31/0xa0 [ 48.984280][ T653] ? _copy_to_user+0x7d/0xa0 [ 48.984311][ T653] proc_pid_cmdline_read+0x4fb/0xbf0 [ 48.984354][ T653] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 48.984386][ T653] ? bpf_lsm_file_permission+0xd/0x20 [ 48.984418][ T653] vfs_readv+0x5e7/0xa00 [ 48.984447][ T653] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 48.984479][ T653] ? do_readv+0x2e0/0x2e0 [ 48.984509][ T653] ? __cfi_mutex_unlock+0x10/0x10 [ 48.984545][ T653] __x64_sys_preadv+0x19f/0x2c0 [ 48.984572][ T653] ? __cfi___x64_sys_preadv+0x10/0x10 [ 48.984598][ T653] ? __kasan_check_read+0x15/0x20 [ 48.984622][ T653] x64_sys_call+0x1ee9/0x2ee0 [ 48.984643][ T653] do_syscall_64+0x57/0xf0 [ 48.984668][ T653] ? clear_bhb_loop+0x50/0xa0 [ 48.984699][ T653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.984729][ T653] RIP: 0033:0x7fac3b19e0d9 [ 48.984747][ T653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.984765][ T653] RSP: 002b:00007fac3c122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 48.984788][ T653] RAX: ffffffffffffffda RBX: 00007fac3b425fa0 RCX: 00007fac3b19e0d9 [ 48.984805][ T653] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 48.984820][ T653] RBP: 00007fac3c122090 R08: 00000000fffffff9 R09: 0000000000000000 [ 48.984835][ T653] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 48.984849][ T653] R13: 00007fac3b426038 R14: 00007fac3b425fa0 R15: 00007ffc7be08158 [ 48.984869][ T653] [ 49.118840][ T374] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 49.549837][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 49.562658][ T374] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 49.575658][ T374] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 49.584856][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.598772][ T374] usb 3-1: config 0 descriptor?? [ 49.604189][ T650] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.013532][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.028721][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.035570][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.042459][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.049461][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.056290][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.063223][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.070227][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.077045][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.083897][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.090847][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.097673][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.104536][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.111502][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.118314][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.125181][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.132095][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.139092][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.145949][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.152984][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.159943][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.166755][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.176838][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.183871][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.190880][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.197709][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.206064][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.213158][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.220349][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.227175][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.234236][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.241266][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.248104][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.255200][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.262239][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.269375][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.276194][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.283320][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.290324][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.297148][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.304261][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.312261][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.319365][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.326185][ T374] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 50.334181][ T374] kone 0003:1E7D:2CED.0003: hidraw0: USB HID v80.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 50.351917][ T670] udevd[670]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 50.393870][ T672] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 50.405103][ T672] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 50.415275][ T672] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 50.425606][ T672] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 50.434913][ T672] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 50.514762][ T679] syzkaller1: entered promiscuous mode [ 50.520605][ T679] syzkaller1: entered allmulticast mode [ 50.602928][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 50.602946][ T36] audit: type=1400 audit(1786104529.670:201): avc: denied { create } for pid=683 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.629224][ T36] audit: type=1400 audit(1786104529.700:202): avc: denied { getopt } for pid=683 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.675415][ T36] audit: type=1400 audit(1786104529.740:203): avc: denied { read write } for pid=685 comm="syz.0.130" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.703502][ T36] audit: type=1400 audit(1786104529.740:204): avc: denied { open } for pid=685 comm="syz.0.130" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.728687][ T36] audit: type=1400 audit(1786104529.770:205): avc: denied { bind } for pid=685 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.805405][ T36] audit: type=1400 audit(1786104529.870:206): avc: denied { ioctl } for pid=685 comm="syz.0.130" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.657088][ T390] usb 3-1: USB disconnect, device number 4 [ 51.999684][ T36] audit: type=1400 audit(1786104531.070:207): avc: denied { unlink } for pid=722 comm="syz.2.142" name="#1" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.018831][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 52.047455][ T36] audit: type=1400 audit(1786104531.090:208): avc: denied { mount } for pid=722 comm="syz.2.142" name="/" dev="overlay" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.069454][ T36] audit: type=1400 audit(1786104531.100:209): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.090536][ T726] Zero length message leads to an empty skb [ 52.158794][ T9] usb 4-1: device descriptor read/64, error -71 [ 52.408699][ T9] usb 4-1: device descriptor read/64, error -71 [ 52.571396][ T36] audit: type=1400 audit(1786104531.640:210): avc: denied { write } for pid=736 comm="syz.0.147" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.648698][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 52.753237][ T750] FAULT_INJECTION: forcing a failure. [ 52.753237][ T750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.766461][ T750] CPU: 1 UID: 0 PID: 750 Comm: syz.0.151 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 52.766494][ T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.766509][ T750] Call Trace: [ 52.766517][ T750] [ 52.766526][ T750] __dump_stack+0x21/0x30 [ 52.766563][ T750] dump_stack_lvl+0x140/0x1c0 [ 52.766595][ T750] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.766628][ T750] ? vsnprintf+0x7b4/0x1ad0 [ 52.766652][ T750] ? check_stack_object+0x10f/0x150 [ 52.766678][ T750] dump_stack+0x19/0x20 [ 52.766709][ T750] should_fail_ex+0x3c2/0x510 [ 52.766736][ T750] should_fail+0xf/0x20 [ 52.766760][ T750] should_fail_usercopy+0x1e/0x30 [ 52.766788][ T750] _copy_from_user+0x20/0xa0 [ 52.766820][ T750] kstrtouint_from_user+0xde/0x170 [ 52.766845][ T750] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 52.766870][ T750] ? selinux_file_permission+0x318/0xb60 [ 52.766895][ T750] ? __cfi_selinux_file_permission+0x10/0x10 [ 52.766918][ T750] proc_fail_nth_write+0x8f/0x220 [ 52.766951][ T750] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.766985][ T750] ? bpf_lsm_file_permission+0xd/0x20 [ 52.767016][ T750] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.767049][ T750] vfs_write+0x3c1/0xfd0 [ 52.767082][ T750] ? __cfi_vfs_write+0x10/0x10 [ 52.767106][ T750] ? __kasan_check_write+0x18/0x20 [ 52.767129][ T750] ? mutex_lock+0x97/0x1d0 [ 52.767160][ T750] ? __cfi_mutex_lock+0x10/0x10 [ 52.767194][ T750] ksys_write+0x145/0x260 [ 52.767219][ T750] ? __cfi_ksys_write+0x10/0x10 [ 52.767242][ T750] ? __kasan_check_write+0x18/0x20 [ 52.767265][ T750] ? fput+0x1a4/0x230 [ 52.767293][ T750] ? __kasan_check_read+0x15/0x20 [ 52.767316][ T750] __x64_sys_write+0x7f/0x90 [ 52.767340][ T750] x64_sys_call+0x271c/0x2ee0 [ 52.767361][ T750] do_syscall_64+0x57/0xf0 [ 52.767387][ T750] ? clear_bhb_loop+0x50/0xa0 [ 52.767419][ T750] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.767449][ T750] RIP: 0033:0x7f17f5f5e90e [ 52.767469][ T750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.767494][ T750] RSP: 002b:00007f17f49f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.767518][ T750] RAX: ffffffffffffffda RBX: 00007f17f49f76c0 RCX: 00007f17f5f5e90e [ 52.767536][ T750] RDX: 0000000000000001 RSI: 00007f17f49f70a0 RDI: 0000000000000003 [ 52.767552][ T750] RBP: 00007f17f49f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.767566][ T750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.767580][ T750] R13: 00007f17f6226038 R14: 00007f17f6225fa0 R15: 00007ffc22ded688 [ 52.767601][ T750] [ 52.798917][ T9] usb 4-1: device descriptor read/64, error -71 [ 53.148266][ T766] tmpfs: Unknown parameter '' [ 53.191035][ T766] fuse: Bad value for 'fd' [ 53.254548][ T770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=770 comm=syz.0.159 [ 53.292363][ T9] usb 4-1: device descriptor read/64, error -71 [ 53.418794][ T9] usb usb4-port1: attempt power cycle [ 53.768722][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 53.809772][ T9] usb 4-1: device descriptor read/8, error -71 [ 53.939760][ T9] usb 4-1: device descriptor read/8, error -71 [ 54.079990][ T777] devpts: called with bogus options [ 54.188723][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 54.210256][ T9] usb 4-1: device descriptor read/8, error -71 [ 54.261560][ T787] tipc: Can't bind to reserved service type 2 [ 54.270779][ T785] FAULT_INJECTION: forcing a failure. [ 54.270779][ T785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.285769][ T785] CPU: 1 UID: 0 PID: 785 Comm: syz.2.166 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 54.285803][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.285818][ T785] Call Trace: [ 54.285825][ T785] [ 54.285834][ T785] __dump_stack+0x21/0x30 [ 54.285871][ T785] dump_stack_lvl+0x140/0x1c0 [ 54.285903][ T785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.285936][ T785] ? __kasan_check_write+0x18/0x20 [ 54.285958][ T785] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 54.285982][ T785] dump_stack+0x19/0x20 [ 54.286012][ T785] should_fail_ex+0x3c2/0x510 [ 54.286040][ T785] should_fail+0xf/0x20 [ 54.286064][ T785] should_fail_usercopy+0x1e/0x30 [ 54.286092][ T785] _copy_from_user+0x20/0xa0 [ 54.286142][ T785] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 54.286166][ T785] ? avc_has_perm+0x155/0x240 [ 54.286193][ T785] ? __cfi_avc_has_perm+0x10/0x10 [ 54.286219][ T785] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 54.286245][ T785] ? selinux_file_open+0x46c/0x630 [ 54.286268][ T785] ? __cfi_selinux_file_open+0x10/0x10 [ 54.286296][ T785] ? is_bpf_text_address+0x17b/0x1a0 [ 54.286330][ T785] ? kernel_text_address+0xa9/0xe0 [ 54.286362][ T785] ? __kernel_text_address+0x11/0x40 [ 54.286393][ T785] ? __asan_set_shadow_00+0x12/0x20 [ 54.286439][ T785] ? do_vfs_ioctl+0x182d/0x2010 [ 54.286468][ T785] ? arch_stack_walk+0x10a/0x170 [ 54.286491][ T785] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 54.286521][ T785] ? _parse_integer_limit+0x195/0x1e0 [ 54.286546][ T785] ? _parse_integer+0x2e/0x40 [ 54.286568][ T785] ? kstrtoull+0x13b/0x1e0 [ 54.286591][ T785] ? kstrtouint+0x78/0xf0 [ 54.286614][ T785] ? ioctl_has_perm+0x1bc/0x500 [ 54.286635][ T785] ? __asan_memcpy+0x5a/0x80 [ 54.286658][ T785] ? ioctl_has_perm+0x408/0x500 [ 54.286680][ T785] ? has_cap_mac_admin+0xd0/0xd0 [ 54.286703][ T785] ? __kasan_check_write+0x18/0x20 [ 54.286725][ T785] ? mutex_lock_killable+0x97/0x1d0 [ 54.286759][ T785] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.286792][ T785] ? proc_fail_nth_write+0x184/0x220 [ 54.286826][ T785] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 54.286862][ T785] kvm_vcpu_ioctl+0x7da/0x1000 [ 54.286885][ T785] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.286915][ T785] ? __cfi_vfs_write+0x10/0x10 [ 54.286939][ T785] ? __kasan_check_write+0x18/0x20 [ 54.286962][ T785] ? mutex_unlock+0x90/0x240 [ 54.286991][ T785] ? __cfi_mutex_unlock+0x10/0x10 [ 54.287027][ T785] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.287056][ T785] ? security_file_ioctl+0x3e/0x110 [ 54.287092][ T785] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.287114][ T785] __se_sys_ioctl+0x135/0x1b0 [ 54.287142][ T785] __x64_sys_ioctl+0x7f/0xa0 [ 54.287170][ T785] x64_sys_call+0x1878/0x2ee0 [ 54.287191][ T785] do_syscall_64+0x57/0xf0 [ 54.287217][ T785] ? clear_bhb_loop+0x50/0xa0 [ 54.287249][ T785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.287279][ T785] RIP: 0033:0x7f1d39b9e0d9 [ 54.287297][ T785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.287316][ T785] RSP: 002b:00007f1d3aa4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.287340][ T785] RAX: ffffffffffffffda RBX: 00007f1d39e25fa0 RCX: 00007f1d39b9e0d9 [ 54.287358][ T785] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000006 [ 54.287374][ T785] RBP: 00007f1d3aa4f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.287389][ T785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.287403][ T785] R13: 00007f1d39e26038 R14: 00007f1d39e25fa0 R15: 00007ffc8c4c1d88 [ 54.287431][ T785] [ 54.718872][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.777219][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 54.784379][ T9] usb 4-1: device descriptor read/8, error -32 [ 54.898804][ T9] usb usb4-port1: unable to enumerate USB device [ 55.268696][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 55.398689][ T9] usb 4-1: device descriptor read/64, error -71 [ 55.638678][ T9] usb 4-1: device descriptor read/64, error -71 [ 55.830146][ T804] netlink: 'syz.2.173': attribute type 27 has an invalid length. [ 55.878709][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 56.018711][ T9] usb 4-1: device descriptor read/64, error -71 [ 56.258704][ T9] usb 4-1: device descriptor read/64, error -71 [ 56.388856][ T9] usb usb4-port1: attempt power cycle [ 56.678687][ T493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.738711][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 56.769764][ T9] usb 4-1: device descriptor read/8, error -71 [ 56.909737][ T9] usb 4-1: device descriptor read/8, error -71 [ 56.978705][ T836] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 56.992620][ T836] sock: sock_timestamping_bind_phc: sock not bind to device [ 57.000534][ T836] syzkaller1: entered promiscuous mode [ 57.006091][ T836] syzkaller1: entered allmulticast mode [ 57.097962][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 57.097981][ T36] audit: type=1400 audit(1786104536.160:225): avc: denied { write } for pid=837 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.130468][ T36] audit: type=1400 audit(1786104536.200:226): avc: denied { getopt } for pid=837 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.148813][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 57.169736][ T9] usb 4-1: device descriptor read/8, error -71 [ 57.275151][ T36] audit: type=1400 audit(1786104536.340:227): avc: denied { mount } for pid=846 comm="syz.2.190" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.302767][ T36] audit: type=1400 audit(1786104536.340:228): avc: denied { search } for pid=846 comm="syz.2.190" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.324811][ T36] audit: type=1400 audit(1786104536.340:229): avc: denied { read write } for pid=846 comm="syz.2.190" name="set_event" dev="tracefs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.348424][ T9] usb 4-1: device descriptor read/8, error -71 [ 57.365337][ T36] audit: type=1400 audit(1786104536.340:230): avc: denied { open } for pid=846 comm="syz.2.190" path="/62/trace/set_event" dev="tracefs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.389030][ T36] audit: type=1400 audit(1786104536.410:231): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.413330][ T36] audit: type=1400 audit(1786104536.440:232): avc: denied { setattr } for pid=848 comm="syz.0.191" name="softnet_stat" dev="proc" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.468859][ T9] usb usb4-port1: unable to enumerate USB device [ 57.578656][ T36] audit: type=1400 audit(1786104536.640:233): avc: denied { create } for pid=863 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 57.615221][ T36] audit: type=1400 audit(1786104536.660:234): avc: denied { sys_admin } for pid=863 comm="syz.0.197" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 57.715510][ T867] __end_swap_bio_write: 335 callbacks suppressed [ 57.715530][ T867] Write-error on swap-device (8:0:808678) [ 57.722458][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Aug 7 12:08:56 syzkaller kern.alert kernel: [ 57.715530][ T867] Write-error on swap-device (8:0:808678) [ 57.757608][ T867] Write-error on swap-device (8:0:808686) [ 57.759123][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Aug 7 12:08:56 syzkaller kern.alert kernel: [ 57.757608][ T867] Write-error [ 57.784841][ T867] Write-error on swap-device (8:0:808694) [ 57.789372][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 on swap-device (8:0:808686) [ 57.802040][ T867] Write-error on swap-device (8:0:808702) Aug 7 12:08:56 [ 57.819117][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 57.828985][ T867] Write-error on swap-device (8:0:808710) lert kernel: [ 57.784841][ T867] Write-error on swap-device ([ 57.841645][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 8:0:808694) Aug 7 12:08:56 syzkaller kern.alert kernel: [ 57.802040][ T867] Write-error on swap-device (8:0:808702) Aug 7 12:08:56 syzkaller kern.alert kernel: [ 57.828985][ T867] Wr[ 57.866913][ T867] Write-error on swap-device (8:0:808718) ite-error on swap-device (8:0:808710) [ 57.887262][ T867] Write-error on swap-device (8:0:808726) [ 57.893250][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 57.897817][ T867] Write-error on swap-device (8:0:808734) Aug 7 12:08:56 [ 57.909089][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.alert kernel: [ 57.866913][ T867] Write-error on swap-device (8:0:808718) [ 57.928807][ T867] Write-error on swap-device (8:0:808742) Aug 7 12:08:56 [ 57.935040][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.alert kernel: [ 57.887262][ T867] Write-error on swap-device (8:0:808726) [ 57.953767][ T867] Write-error on swap-device (8:0:808750) Aug 7 12:08:56 syzkaller kern.alert kernel: [ 57.897817][ T867] Write-error on swap-device (8:0:808734) [ 57.972162][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Aug 7 12:08:57 [ 57.989168][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.alert kernel: [ 57.928807][ T867] Write-error on swap-device (8:0:808742) Aug 7 12:08:57 syzkaller kern.alert kernel: [ 57.953767][ T867] Write-error on swap-device (8:0:808750) [ 58.391274][ T901] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 58.426781][ T901] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 58.588704][ T46] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 58.741304][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.759225][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 58.778852][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 58.798702][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.810024][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.819180][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.827195][ T46] usb 4-1: Product: syz [ 58.833515][ T46] usb 4-1: Manufacturer: syz [ 58.838184][ T46] usb 4-1: SerialNumber: syz [ 58.846862][ T903] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.854952][ T46] cdc_mbim 4-1:1.0: skipping garbage [ 59.061377][ T903] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.287742][ T46] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 59.293930][ T46] cdc_mbim 4-1:1.0: bind() failure [ 59.308795][ T46] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 59.315799][ T46] cdc_ncm 4-1:1.1: bind() failure [ 59.333557][ T110] udevd[110]: worker [624] terminated by signal 7 (Bus error) [ 59.341224][ T110] udevd[110]: worker [624] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 60.024838][ T110] udevd[110]: worker [651] terminated by signal 7 (Bus error) [ 60.041695][ T110] udevd[110]: worker [651] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 60.071920][ T110] udevd[110]: worker [648] terminated by signal 7 (Bus error) [ 60.105700][ T110] udevd[110]: worker [648] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1' [ 60.136734][ T110] udevd[110]: worker [947] terminated by signal 7 (Bus error) [ 60.156881][ T110] udevd[110]: worker [947] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 60.618709][ T374] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.748710][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.789808][ T374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 60.808698][ T374] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 60.829807][ T374] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 60.839152][ T374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.847220][ T374] usb 3-1: Product: syz [ 60.851489][ T374] usb 3-1: Manufacturer: syz [ 60.856152][ T374] usb 3-1: SerialNumber: syz [ 60.918704][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 60.925107][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 60.933500][ T9] usb 1-1: config 0 has no interface number 0 [ 60.939729][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 60.949905][ T9] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.960045][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.970141][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 60.978556][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 60.987769][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.995846][ T9] usb 1-1: Product: syz [ 61.000154][ T9] usb 1-1: Manufacturer: syz [ 61.004825][ T9] usb 1-1: SerialNumber: syz [ 61.011009][ T9] usb 1-1: config 0 descriptor?? [ 61.029043][ T968] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.063362][ T374] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 61.074466][ T194] EXT4-fs warning: 36 callbacks suppressed [ 61.074485][ T194] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block [ 61.101182][ T110] udevd[110]: worker [969] terminated by signal 7 (Bus error) [ 61.118683][ T110] udevd[110]: worker [969] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 61.240011][ T9] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 61.247510][ T9] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 61.266555][ T46] usb 3-1: USB disconnect, device number 5 [ 61.276454][ T9] usb 1-1: USB disconnect, device number 5 [ 61.309825][ T46] usblp0: removed SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 61.410837][ T31] usb 4-1: USB disconnect, device number 19 [ 61.478808][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.500213][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.539802][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.571472][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.580552][ T309] bridge_slave_1: left allmulticast mode [ 61.586227][ T309] bridge_slave_1: left promiscuous mode [ 61.601671][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.610839][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.618793][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.627927][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.639213][ T309] bridge_slave_0: left allmulticast mode [ 61.648660][ T309] bridge_slave_0: left promiscuous mode [ 61.654323][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.659121][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.671750][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.680790][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.690092][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.708820][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 61.812813][ T309] veth1_macvtap: left promiscuous mode [ 61.818411][ T309] veth0_vlan: left promiscuous mode [ 62.141731][ T309] bridge_slave_1: left allmulticast mode [ 62.147422][ T309] bridge_slave_1: left promiscuous mode [ 62.153117][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.160731][ T309] bridge_slave_0: left allmulticast mode [ 62.166397][ T309] bridge_slave_0: left promiscuous mode [ 62.172174][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.180047][ T309] bridge_slave_1: left allmulticast mode [ 62.185689][ T309] bridge_slave_1: left promiscuous mode [ 62.191380][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.199026][ T309] bridge_slave_0: left allmulticast mode [ 62.204929][ T309] bridge_slave_0: left promiscuous mode [ 62.210569][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.218260][ T309] bridge_slave_1: left allmulticast mode [ 62.223987][ T309] bridge_slave_1: left promiscuous mode [ 62.229616][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.237287][ T309] bridge_slave_0: left allmulticast mode [ 62.243074][ T309] bridge_slave_0: left promiscuous mode [ 62.248763][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.454243][ T309] veth1_macvtap: left promiscuous mode [ 62.459876][ T309] veth0_vlan: left promiscuous mode [ 62.465568][ T309] veth1_macvtap: left promiscuous mode [ 62.471192][ T309] veth0_vlan: left promiscuous mode [ 62.476746][ T309] veth1_macvtap: left promiscuous mode [ 62.482321][ T309] veth0_vlan: left promiscuous mode [ 62.719059][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.729084][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.738475][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.747611][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.756686][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.765643][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.774756][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.783764][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.792778][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.801756][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.810789][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.819828][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.828916][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.837860][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.846850][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.855809][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.864793][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.873754][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.882964][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.891934][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.900912][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.909888][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.918862][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.927794][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.936900][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.945835][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.954842][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.964068][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.973118][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.982151][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001