last executing test programs: 6.370550921s ago: executing program 1 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r3) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x17, 0x4) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000003, 0xd}, {0xb, 0xfffffffffffffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in=@multicast2, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x7, 0x4000000}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffc}, 0x1c) r7 = socket(0x15, 0x2, 0x2) syz_usb_connect(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000240)={0x0, 0x20}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000300000020050b3917400001020301090269000301302081080b02020102200209040000000101200009240105000c090007090401000001022000090401010101022000140501090004ff0907082501013307800009040200000102200009040201010102200009058209ff03072401082501023c01640d"], &(0x7f0000000800)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0xff, 0x7, 0x5, 0xff, 0x6}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r4, r11, r12) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) 5.439353405s ago: executing program 3 (id=212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) getcwd(&(0x7f0000000900)=""/4096, 0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001002dbd70000000000000000000000000000000000000000000ac1e010100000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000190000000000000000000000fffffffc32000000fe80000000000000000000000000002c000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 5.433491505s ago: executing program 3 (id=213): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x30}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$KVM_RUN(r0, 0xae80, 0x0) 5.391829987s ago: executing program 3 (id=214): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20012900000005"], 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000040)=0x20, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.603571344s ago: executing program 1 (id=218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/53, 0x35}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) 3.642438049s ago: executing program 1 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0xec80, 0x9, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xeb}, {0x7, 0x0, 0xfd, '\x00', 0x5b}, {0x2, 0x4, 0xc, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0x3, 0x2, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x2, 0x3, 0xf, '\x00', 0xfe}, {0x76, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0xf5}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x6, 0x4, 0x7, '\x00', 0x6}, {0x81, 0x6, 0x4, '\x00', 0x48}, {0x2, 0x3, 0x0, '\x00', 0x7f}, {0x7d, 0x0, 0xa3, '\x00', 0x2}, {0x7, 0x1, 0x6, '\x00', 0x6}, {0x62, 0x4, 0x6, '\x00', 0x6}, {0x8, 0x80, 0x7c, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0x5}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x3, 0x0, 0xb, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a0400"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x1fc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) write$binfmt_format(r3, &(0x7f0000000040)='0\x00', 0x2) r6 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f00000000c0), 0x5e, &(0x7f0000000300)=[{&(0x7f0000000000)=""/188}, {&(0x7f00000000c0)=""/124}, {&(0x7f0000000140)=""/98}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/41}, {&(0x7f0000000240)=""/166}], 0x100000000000035c, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002700)=[{&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/12, 0xc}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x7, &(0x7f0000002780)=""/227, 0xe3}, 0x0) statx(r5, &(0x7f00000028c0)='./sys\x00', 0x6000, 0x1, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@sr0, r7, &(0x7f0000002a00)='./sys/class/net/bridge0/bridge/multicast_snooping\x00') 3.269572447s ago: executing program 1 (id=228): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007ac0)={&(0x7f0000007900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x180062) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000280)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x16, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc14ad3300", [0x62f, 0x6]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) syz_ublk_setup_io_uring(0x4ea5, &(0x7f0000000080)={0x0, 0x6850, 0x800, 0x0, 0x236, 0x0, r7}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000002c0)) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x836, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r5, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 2.99547729s ago: executing program 1 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="251c6a8be137243ac81533a27a762e23fd18cde1f99426704d49cf51aadc78f3f50ee9b8a35a3a4cbd51f6f7e3e759ed8979247f7ff97f81a8941020f04b780d15c6b67c7f7de975aec232c95b6743692e3a9be35cefe4982761c0c8b5b65889cf73b3ed197dacdf005fedb1e73358944c85decf65104ea618bf274bb56b9a8dcfd31ddd446a99890abdf065577a12947084de3f86892443e7c47e9cdc60f9649f0093798ae560a6278651e5953abfe17b794bd7ce96cf611432dc49e301280862aac3a783064e78390d3edd62b8fce8c1f7ca6988ac", 0xd6, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x80000001, @local, 0x200}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x3800, 0x9cdeff16}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000004c0)={0x2, 0x0, [{0xc0000001, 0x4, 0x3, 0x6, 0x1, 0x6}, {0x0, 0x1000, 0x4, 0xb, 0x4212, 0x200, 0x8}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.911578824s ago: executing program 1 (id=230): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d836addcb2376b6822582e5df03"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000013, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) r2 = request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x400000, 0x3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) recvmmsg(r1, &(0x7f00000000c0), 0x1, 0x40002142, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r7, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x7ffd, 0x1a, "b0bfac0000000003000018bfff4000"}) r8 = dup3(0xffffffffffffffff, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x80080}}, {{&(0x7f0000001140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000011c0)="62308999aa11", 0x6}, {&(0x7f0000001200)="b6ba38e3502c31bd2bbc60278e0fcb9edd4a8dc5aa39ba0a8654780e60bd207aceb8d93b9f5ed4ffce05c936212975340dbc3b11c92f6395904c4d678e564af0909753a965c7f1b245de2ad966a4e71a2db7b2b9d7b50d231c77256ed6b3981d9cbb603caaf72218d3a0245028e5df873ffc7a5f9156da1c977349b00c29c84e47b2a60fd20f877e921feacbad4d6fd914705460e65c9821cb5aac774a00ab8ca17d2e917bab17caf1ad86bcf71dce8e788aebbe75e4c1a527f81b997813ee95ff44be5f3186825b796a878329c0f9d634ea2f8821ac900c93475dd7668ae06c2c4bf578945dff", 0xe7}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="46345398fc83", @ANYRESHEX, @ANYRES32=r5, @ANYRES32=r1, @ANYRES8=r2, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES16=r4, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r9], 0x0, 0x4044815}}, {{&(0x7f0000001400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000400)="2dc2d580ea5bbf5f12298a2d3e395793d64681c89703db040d41689ec8af41accbc1c7e118f68df9eca5846e0e90caa614ec574c97893ef7f7bf87811804b0807f51dca993459dd72da07a204907821aedc30b1d35b0d31d874e330178b54de6783998b66844fd5f24cd318fc70fe42776d3579e2c3280733615e2ad0193425d918bab6223cde5ba918f6ae203dd8a42b09dcf496dc5353e4ad60c8a454b4d54e4bf2ced11ccccd06244bf9ba93a3db5ce8015c55089eae814b2479d35af58fa236924810d0482e6246b7c43e755695b4faa30154a48b7ecab771490803444dfdbf373fe71f565de61a9ba48ce4ffa576e495c76f3b5", 0xf6}, {&(0x7f0000000500)="3d72d0e98e5872268fc1789d881d92ecf1854e52882d1d12060abf933663775feba9a8a4cdcf793ef850fe013c2792d34e8a6356f4b362812fab6a8b6dd50c7787fd4c1ad01723ba3ac68d535ff9a88be9fb7b5808e351a7650e5f2fab173cdf7b9b57675b2e960a24b3f82442ab5f3b3a32a80a80b9ec1905512a2de27fccdc464caea313acb15c99a9f633b66412736000f01da173de2d823f94effdcc2c30a969339c48b1bdc5e7876c7097435dc6710e74b86b0dc4ef2d752bfdc5b5da79b8c7dcbd47ccf05545aa15bcab82675474d60a8a47915b2fb68318209441785482ae7c51416a31a45ad23b54ae3a61005653332d3743026d37de5909af", 0xfd}, {&(0x7f0000000600)="502e6391b85973ee0ccc1834fd5cab400768eb", 0x13}], 0x3, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000806}}], 0x3, 0x2000c801) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f00000001c0)={0x80}) close(r9) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000003c0)=0xb) 2.738719592s ago: executing program 3 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) getcwd(&(0x7f0000000900)=""/4096, 0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001002dbd70000000000000000000000000000000000000000000ac1e010100000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000000000000fffffffc32000000fe80000000000000000000000000002c000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 2.727662652s ago: executing program 3 (id=232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x40, 0x80) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xff0, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000000)=0x40) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x10000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x1000, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200408d4, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0, 0x2) setxattr$incfs_metadata(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000140), &(0x7f0000000180)="10db2f74499e0712925365a98379743a5dc8fbc82db2b10344e0c220dc32e5c101fc9b93d89982daac5046c7430b17b1ba87b8103cf8a9f12082effd6c1029b64e6dda0ce7c13ca1e315b00a15129df05172406015bde3bc482ea81300b45539c626d84b7382ffe7df4d8a9b45c31ae6ae065bc345d963e40886eb66da6b7e14119eef83b0b76e37b39751368d59007b35ec7ea390287a536c00ebdf78885037d68213a8d09782b8ff9f26d1dcbfb18f09de0abdcad6befb059ae3d7b782de09d83e08886b8672edf959118256aaafa71aec3ed322d551", 0xd7, 0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300)=0x8000, 0x9) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x58c3, &(0x7f0000000040)={0x0, 0x30b8, 0x2, 0x2, 0x158}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000140)) 2.424361907s ago: executing program 3 (id=233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000140)=0x5, 0x4) futex(&(0x7f000000cffc)=0x4, 0x6, 0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="8c5c1e929dd73398cd1c8a2bf9ef76da340a474714b2eca757ffc9c3da17c7d8cfe8741cd13cc4a67392cebd6471ea0c13da88f10547c52dc927dc41175bfed5c1b58698634471e88ff72b11f9c4cf5578f775a218347057c52db72bf9bf9669acc9d80598e212ddfa6e87b0c469444430dce30579e47bdbe20efd792a65e393071e929d9274f7a4cfcbbe911319e447bb527005a5ffab86e1a67424ef9fdff073874d5f9384c2172c4ebbd5805e206c3c242fa4c5deba1c1e52836e2e7542286fc9c15b60eec2db"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "6aa181"}, 0x0}) 635.756891ms ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1, 0x5, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = inotify_init1(0x800) sync_file_range(r4, 0x31d6afbf, 0x400010004, 0x5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x50, r1, 0x98e8d000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x8000, 0x20, 0x10}, 0x18) move_mount(r5, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="65042d938db9e97e1c8faef03aff402453edcfd6788912a16176c00752bc45ea9a49c7fd71fc6a52c934e822dd9db86407bcb3f9371bbb09a6f7f2b82f2ea1366ef6731faf91da49a96dcc2a2d9e7265440c73ee87c9034602487c8a24b87350fb41f50d8f34debe93e1b4ea10b0e379f30305bfdfa03d42ba1fac8bfaf13afdaf95560601121a6cf4b75f42f1a3262fc97cfe6c4e82b73f3908358615746c62142455378f245cf4e8a6ab619489b78772559f8dc08d8eb3b5968ca669a9ec533ec628224a9ebbbac95a711a3286c5c1fdf37399d6076ffec6f55d5621c5567135fd940fe39bfe57788b21446dda18748a9e82397c5eda09", @ANYBLOB="a577d3aca08e752b8f0aae32ffe58e7f9ebc8e8e4f8049fd0540435f4816d0ad13a0983863a78b1442fc43a328859536dd386aa78d6b45b029d7a83a204d2dd46f294ab0053c0e80f6434758fa0463ba8d28ce929523cb7fb3c085b291b738ab6bd5a1e42f3c862d6bfccb984e4b2ac12b5b3a24373169a1e35cf2a267b6599973fc8f15ddbf57a85a2b6b5ab0e532eb09cfcefcf9ff7b8fb994f366e71b91142cd6f2d6d42c2db4d979d6b4419fa37bf4167bff461600099b01d2d0", @ANYRESHEX=r3], 0x14) 533.117505ms ago: executing program 2 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x240}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0xff, 0x40240) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) 466.064008ms ago: executing program 0 (id=251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) getcwd(&(0x7f0000000900)=""/4096, 0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001002dbd70000000000000000000000000000000000000000000ac1e010100000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001900000000000000000000fffffffc32000000fe80000000000000000000000000002c000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 425.13032ms ago: executing program 0 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="dd7200000000000000a8266a", 0xc) 307.129426ms ago: executing program 2 (id=253): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0xffffff94, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x80) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000140)) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x1df) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}}) pipe2(0x0, 0x0) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @rand_addr=0x64010100}, 0xc) sendmmsg$inet(r0, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000001040)="a632d1428982a252324f258392e316f18cf86b2e26ac0af8c71b95c35316f3831129f3e611dc5fa965da5032081ce03b9792739343bf80dbc4659935a61e2b9a7fe3a4a89869f95f15cd0fe0cbc18f6a6d873a310a108980d9011aad98d0e0dddb70480bd18486191b33112719854b86cb73be4fcff420a4caa64c932b46ba10031706e2fa27537ff5b9ee7f54d19f8a6d5dcc1711be704ea7424b04854aa7ea52a67f412b25168797edb27644d2b8356bedb99f1fbe00567f2438cb4f205ad8c0c91d75385b90c102000000000000002c8bcbe34f9411542cc837ee91388dc51b9c9e60a52da69045f95ade368dc4d145513ea2260dc86d637b44376576648e7adca3e283860d34b8bcb6d16aa39d00000000", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0) 307.004836ms ago: executing program 0 (id=254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf2500000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000bf0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000400000800600000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000400000000804000020000000000000802"], 0xb8}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001c005f031400ff01000000f8070300000000000000c2c5a8c2cfee3af2425890", 0x24) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000010000000000000000000000000000000000000007f00000100000000000000000000000000000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000d0000000000000001000000000000000000000000000000ffffffffffffff2c530000000000000000000000000000000000000000000000000a000000000000fcffffffff7f4000000200000000000000000000f5ffffffffffffff00000000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 306.601166ms ago: executing program 0 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) write$FUSE_DIRENT(r3, &(0x7f0000000280)={0x1010}, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x8, 0x4) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f43000) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266afe2e239000f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d90f20d835080000000f22d8", 0x49}], 0xaaaaaaaaaaaaa5c, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 194.627061ms ago: executing program 2 (id=256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x8993, &(0x7f0000000440)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff64010100}, 0x80, r8}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', r8, 0x7, 0x10, 0x4f7, 0xda, {{0x35, 0x4, 0x0, 0x1, 0xd4, 0x67, 0x0, 0xa, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0xcc, 0x3, 0x7, [{@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010102, 0x101}, {@private=0xa010102, 0x7f0}, {@private=0xa010102, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5a58}, {@rand_addr=0x64010102, 0x5}]}, @noop, @rr={0x7, 0x17, 0x49, [@multicast1, @remote, @remote, @rand_addr=0x64010101, @remote]}, @cipso={0x86, 0x53, 0x0, [{0x5, 0x9, "8cabdf815a800a"}, {0x6, 0x4, "187f"}, {0x6, 0xb, "8a15d85400d211cbcf"}, {0x6, 0x6, "9e7f7b92"}, {0x2, 0x2}, {0x7, 0xf, "483adbb8e7b20e511a1cd8f37a"}, {0x5, 0x5, "d1e62e"}, {0x0, 0xc, "f85c08e8646213cca083"}, {0x7, 0xd, "4fe965510c7052509d7436"}]}, @generic={0x88, 0xe, "5c2e3ba7fdf956946f0e2a60"}, @ssrr={0x89, 0x13, 0xb3, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @local]}]}}}}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @val={0x2, 0x80, 0x5, 0x10c, 0x2, 0x5}, @x25={0x1, 0x1, 0xb, "9d30d75d7245ae019555014b393f764bfceb6cfc20e20042847ca0d21a550eda5370200513ce681895ed288e0c87afa72004ba"}}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x107fd) sendfile(r0, r9, 0x0, 0x7ffff004) 191.660321ms ago: executing program 2 (id=257): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007ac0)={&(0x7f0000007900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x180062) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x16, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc14ad3300", [0x62f, 0x6]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) syz_ublk_setup_io_uring(0x4ea5, &(0x7f0000000080)={0x0, 0x6850, 0x800, 0x0, 0x236, 0x0, r6}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000002c0)) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x836, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 125.444874ms ago: executing program 0 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/file0\x00', 0x1ff) r0 = eventfd2(0x3, 0x1) write$eventfd(r0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x3) ioctl$EVIOCGREP(r1, 0x80084503, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)="306663353a313232373a620afaf6379a248d63651c810a36c7e26230871d681c4d03d67af7bcb309fdb14c2ae5bce8074c9af795b2eaa17bb738e496d87579de446dc160b65606c9b15e92b32a27e3e33d6769", 0x53) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) 85.389987ms ago: executing program 0 (id=259): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) shutdown(r1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x8) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0), 0x4) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge0\x00', 0x0}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x20000000) r4 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f0000000400)='{\x00') r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r11, r10, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18a7, 0x0, 0x2, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x1, 0x20a}}], 0x4, &(0x7f0000000400)={0x2e, 0x1a, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r9, '\x00', {0x0, 0xe50, 0x0, 0x0}}, 0x0) 0s ago: executing program 2 (id=260): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000580), 0x9, 0x2000) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000002d00)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xe, @loopback, 0x1ff}, {0xa, 0x4e22, 0x4, @loopback, 0xdf}, 0x1, {[0x2, 0x33a0, 0x7fff, 0x4, 0x3, 0x62, 0x5, 0x647]}}, 0x5c) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x6, 0xb23533b, 0x1, 0x5, 0x4002001, 0x0, 0x0, 0x0, 0x8, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffe1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xb85, 0x0, 0x0, 0x1000, 0x80000000, 0x0, 0x0, 0x82}}}, &(0x7f0000000240)) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x4c) write(r3, &(0x7f0000000100)="9185", 0x2) socket(0xf, 0x803, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000500)={0x0, 0xd0e1, 0x80, 0x2, 0x12d}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8, 0x0, 0x174}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x968, 0x80, 0x3, 0x380}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3247, 0x800, 0x1, 0x109}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcfa8, 0x80, 0x3, 0x73}}], 0x4, &(0x7f0000001900)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc14f}, 0x0, 0x0, '\x00', {0x2, 0x933, 0x0, &(0x7f0000000900)=@buf_512="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"}}, &(0x7f0000001980)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, 0x0, 0x410) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000090020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000f7"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) openat$cgroup_ro(r7, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 22.701791][ T36] audit: type=1400 audit(1789805339.909:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.703411][ T286] cgroup: Unknown subsys name 'net' [ 22.724467][ T36] audit: type=1400 audit(1789805339.909:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.751932][ T36] audit: type=1400 audit(1789805339.949:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.752071][ T286] cgroup: Unknown subsys name 'devices' [ 22.874390][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.880024][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.978963][ T36] audit: type=1400 audit(1789805340.189:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.996993][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.002148][ T36] audit: type=1400 audit(1789805340.189:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.035475][ T36] audit: type=1400 audit(1789805340.189:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.040697][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.058814][ T36] audit: type=1400 audit(1789805340.229:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.092784][ T36] audit: type=1400 audit(1789805340.229:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.118569][ T36] audit: type=1400 audit(1789805340.249:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.144528][ T36] audit: type=1400 audit(1789805340.249:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.136735][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.143839][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.150933][ T296] bridge_slave_0: entered allmulticast mode [ 24.157377][ T296] bridge_slave_0: entered promiscuous mode [ 24.174554][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.181598][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.188692][ T296] bridge_slave_1: entered allmulticast mode [ 24.194951][ T296] bridge_slave_1: entered promiscuous mode [ 24.241202][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.248403][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.255530][ T294] bridge_slave_0: entered allmulticast mode [ 24.261735][ T294] bridge_slave_0: entered promiscuous mode [ 24.268072][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.275116][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.282149][ T295] bridge_slave_0: entered allmulticast mode [ 24.288473][ T295] bridge_slave_0: entered promiscuous mode [ 24.298641][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.305853][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.312984][ T295] bridge_slave_1: entered allmulticast mode [ 24.319187][ T295] bridge_slave_1: entered promiscuous mode [ 24.333140][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.340189][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.347298][ T294] bridge_slave_1: entered allmulticast mode [ 24.353715][ T294] bridge_slave_1: entered promiscuous mode [ 24.363701][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.370753][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.377870][ T293] bridge_slave_0: entered allmulticast mode [ 24.384109][ T293] bridge_slave_0: entered promiscuous mode [ 24.408920][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.416045][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.423156][ T293] bridge_slave_1: entered allmulticast mode [ 24.429482][ T293] bridge_slave_1: entered promiscuous mode [ 24.555373][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.562456][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.569811][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.576950][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.627967][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.635038][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.642337][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.649476][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.660741][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.668258][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.675842][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.683334][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.697793][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.704886][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.712791][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.719818][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.794849][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.801967][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.811884][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.819148][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.854345][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.861466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.871574][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.878694][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.909527][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.916788][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.943082][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.950220][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.971792][ T296] veth0_vlan: entered promiscuous mode [ 25.036903][ T296] veth1_macvtap: entered promiscuous mode [ 25.074664][ T293] veth0_vlan: entered promiscuous mode [ 25.110075][ T295] veth0_vlan: entered promiscuous mode [ 25.135029][ T294] veth0_vlan: entered promiscuous mode [ 25.168194][ T293] veth1_macvtap: entered promiscuous mode [ 25.176280][ T295] veth1_macvtap: entered promiscuous mode [ 25.188966][ T294] veth1_macvtap: entered promiscuous mode [ 25.204173][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.309742][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.310850][ T311] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.347065][ T319] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5'. [ 25.360592][ T311] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 25.375156][ T326] ======================================================= [ 25.375156][ T326] WARNING: The mand mount option has been deprecated and [ 25.375156][ T326] and is ignored by this kernel. Remove the mand [ 25.375156][ T326] option from the mount to silence this warning. [ 25.375156][ T326] ======================================================= [ 25.380925][ T321] loop9: detected capacity change from 0 to 7 [ 25.410720][ T326] binder: Unknown parameter 'context' [ 25.500445][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.510233][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.519402][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.527731][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.536930][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.545521][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.554738][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.563953][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.573180][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.581889][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.591054][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.599357][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.608551][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.616696][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.616765][ T321] loop9: unable to read partition table [ 25.625880][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.640152][ T321] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 25.665416][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.674617][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.686409][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.695625][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 25.704669][ T329] loop9: unable to read partition table [ 25.710396][ T329] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 25.791579][ T345] FAULT_INJECTION: forcing a failure. [ 25.791579][ T345] name failslab, interval 1, probability 0, space 0, times 1 [ 25.805076][ T345] CPU: 1 UID: 0 PID: 345 Comm: syz.3.10 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 25.805109][ T345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.805128][ T345] Call Trace: [ 25.805135][ T345] [ 25.805142][ T345] __dump_stack+0x21/0x30 [ 25.805173][ T345] dump_stack_lvl+0x140/0x1c0 [ 25.805194][ T345] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.805219][ T345] dump_stack+0x19/0x20 [ 25.805241][ T345] should_fail_ex+0x3c2/0x510 [ 25.805265][ T345] should_failslab+0xac/0x100 [ 25.805289][ T345] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 25.805309][ T345] ? proc_alloc_inode+0x48/0x150 [ 25.805328][ T345] proc_alloc_inode+0x48/0x150 [ 25.805342][ T345] ? __cfi_proc_alloc_inode+0x10/0x10 [ 25.805356][ T345] alloc_inode+0x7a/0x270 [ 25.805373][ T345] ? __cfi_d_alloc_name+0x10/0x10 [ 25.805387][ T345] new_inode+0x25/0x1e0 [ 25.805404][ T345] ? __d_instantiate+0x43f/0x790 [ 25.805419][ T345] proc_setup_self+0xe0/0x280 [ 25.805439][ T345] proc_fill_super+0x539/0x850 [ 25.805455][ T345] get_tree_nodev+0xce/0x170 [ 25.805468][ T345] ? __cfi_proc_fill_super+0x10/0x10 [ 25.805486][ T345] proc_get_tree+0x20/0x30 [ 25.805501][ T345] vfs_get_tree+0xa1/0x290 [ 25.805516][ T345] do_new_mount+0x251/0xb40 [ 25.805530][ T345] ? security_capable+0x44/0x130 [ 25.805548][ T345] path_mount+0x66a/0xff0 [ 25.805561][ T345] ? putname+0x113/0x150 [ 25.805578][ T345] __se_sys_mount+0x2bf/0x480 [ 25.805604][ T345] ? __x64_sys_mount+0xf0/0xf0 [ 25.805621][ T345] ? __kasan_check_write+0x18/0x20 [ 25.805637][ T345] ? fpregs_restore_userregs+0x11c/0x260 [ 25.805657][ T345] __x64_sys_mount+0xc3/0xf0 [ 25.805673][ T345] x64_sys_call+0x2021/0x2ee0 [ 25.805687][ T345] do_syscall_64+0x57/0xf0 [ 25.805702][ T345] ? clear_bhb_loop+0x50/0xa0 [ 25.805727][ T345] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.805746][ T345] RIP: 0033:0x7f9bd959e159 [ 25.805765][ T345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.805778][ T345] RSP: 002b:00007f9bda3cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.805801][ T345] RAX: ffffffffffffffda RBX: 00007f9bd9825fa0 RCX: 00007f9bd959e159 [ 25.805814][ T345] RDX: 0000200000000100 RSI: 0000200000000200 RDI: 0000000000000000 [ 25.805824][ T345] RBP: 00007f9bd963506b R08: 0000000000000000 R09: 0000000000000000 [ 25.805834][ T345] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 25.805844][ T345] R13: 00007f9bd9826038 R14: 00007f9bd9825fa0 R15: 00007ffe39f8be08 [ 25.805857][ T345] [ 25.805931][ T345] proc_fill_super: can't allocate /proc/self [ 25.939681][ T347] netlink: 'syz.0.11': attribute type 4 has an invalid length. [ 25.943751][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.075980][ T349] input: syz1 as /devices/virtual/input/input4 [ 26.105229][ T348] netlink: 'syz.0.11': attribute type 4 has an invalid length. [ 26.232529][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 26.251083][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 26.274610][ T9] usb 3-1: string descriptor 0 read error: -22 [ 26.280885][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 26.302478][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.315847][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 26.325640][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 26.344818][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 26.349758][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.502517][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.524987][ T333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.537201][ T333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.655206][ T311] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 26.664661][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.673304][ T311] usb 1-1: Product: syz [ 26.677649][ T311] usb 1-1: Manufacturer: syz [ 26.682316][ T311] usb 1-1: SerialNumber: syz [ 26.914569][ T311] rtl8150 1-1:1.0: couldn't reset the device [ 26.920806][ T311] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 26.935242][ T311] usb 1-1: USB disconnect, device number 2 [ 27.035509][ T371] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17'. [ 27.139740][ T31] usb 3-1: USB disconnect, device number 2 [ 27.197091][ T381] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 27.242274][ T386] netlink: 'syz.2.24': attribute type 27 has an invalid length. [ 27.261398][ T386] FAULT_INJECTION: forcing a failure. [ 27.261398][ T386] name failslab, interval 1, probability 0, space 0, times 0 [ 27.274257][ T386] CPU: 0 UID: 0 PID: 386 Comm: syz.2.24 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 27.274289][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.274301][ T386] Call Trace: [ 27.274306][ T386] [ 27.274313][ T386] __dump_stack+0x21/0x30 [ 27.274345][ T386] dump_stack_lvl+0x140/0x1c0 [ 27.274369][ T386] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.274395][ T386] dump_stack+0x19/0x20 [ 27.274418][ T386] should_fail_ex+0x3c2/0x510 [ 27.274441][ T386] ? alloc_pipe_info+0x214/0x5f0 [ 27.274460][ T386] should_failslab+0xac/0x100 [ 27.274482][ T386] __kmalloc_noprof+0x69/0x510 [ 27.274502][ T386] ? alloc_pipe_info+0x214/0x5f0 [ 27.274519][ T386] alloc_pipe_info+0x214/0x5f0 [ 27.274537][ T386] create_pipe_files+0x8f/0x6c0 [ 27.274555][ T386] __do_pipe_flags+0x50/0x2f0 [ 27.274573][ T386] do_pipe2+0xab/0x190 [ 27.274590][ T386] ? xfd_validate_state+0x68/0x140 [ 27.274615][ T386] ? pipe_fcntl+0x520/0x520 [ 27.274637][ T386] __x64_sys_pipe+0x3e/0x50 [ 27.274655][ T386] x64_sys_call+0xd3/0x2ee0 [ 27.274673][ T386] do_syscall_64+0x57/0xf0 [ 27.274690][ T386] ? clear_bhb_loop+0x50/0xa0 [ 27.274713][ T386] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.274733][ T386] RIP: 0033:0x7ff9edf9e159 [ 27.274748][ T386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.274764][ T386] RSP: 002b:00007ff9eee43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 27.274784][ T386] RAX: ffffffffffffffda RBX: 00007ff9ee225fa0 RCX: 00007ff9edf9e159 [ 27.274799][ T386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.274810][ T386] RBP: 00007ff9ee03506b R08: 0000000000000000 R09: 0000000000000000 [ 27.274822][ T386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.274834][ T386] R13: 00007ff9ee226038 R14: 00007ff9ee225fa0 R15: 00007ffd90c52c18 [ 27.274850][ T386] [ 27.439627][ T391] netlink: 76 bytes leftover after parsing attributes in process `syz.1.26'. [ 27.446302][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.577753][ T405] process 'syz.2.29' launched './file0/file1' with NULL argv: empty string added [ 27.653181][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 27.659770][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 27.672216][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 27.682354][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.690506][ T9] usb 4-1: Product: syz [ 27.694867][ T9] usb 4-1: Manufacturer: syz [ 27.699507][ T9] usb 4-1: SerialNumber: syz [ 27.705581][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 27.757802][ T412] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.771313][ T412] cgroup: Unknown subsys name 'measure' [ 27.873570][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.885752][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.911163][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 27.911179][ T36] audit: type=1400 audit(1789805345.119:182): avc: denied { bind } for pid=367 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.926891][ T369] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3206951851 (6413903702 ns) > initial count (411158038 ns). Using initial count to start timer. [ 27.940136][ T36] audit: type=1400 audit(1789805345.119:183): avc: denied { read } for pid=367 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.972838][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 27.981923][ T36] audit: type=1400 audit(1789805345.189:184): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.001491][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.009700][ T31] usb 2-1: SerialNumber: syz [ 28.023199][ T31] usb 2-1: 0:2 : does not exist [ 28.043224][ T36] audit: type=1400 audit(1789805345.259:185): avc: denied { create } for pid=418 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 28.062509][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.084228][ T419] FAULT_INJECTION: forcing a failure. [ 28.084228][ T419] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 28.100019][ T419] CPU: 0 UID: 0 PID: 419 Comm: syz.2.32 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 28.100040][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.100047][ T419] Call Trace: [ 28.100051][ T419] [ 28.100057][ T419] __dump_stack+0x21/0x30 [ 28.100077][ T419] dump_stack_lvl+0x140/0x1c0 [ 28.100092][ T419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.100107][ T419] ? __kasan_check_write+0x18/0x20 [ 28.100119][ T419] ? mutex_unlock+0x90/0x240 [ 28.100131][ T419] dump_stack+0x19/0x20 [ 28.100143][ T419] should_fail_ex+0x3c2/0x510 [ 28.100155][ T419] should_fail_alloc_page+0xec/0x110 [ 28.100167][ T419] __alloc_pages_noprof+0x1c0/0x7e0 [ 28.100181][ T419] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 28.100198][ T419] ? __kasan_check_read+0x15/0x20 [ 28.100216][ T419] ? __kasan_check_write+0x18/0x20 [ 28.100234][ T419] kvm_coalesced_mmio_init+0x3e/0x190 [ 28.100256][ T419] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 28.100268][ T419] kvm_dev_ioctl+0xb39/0x14c0 [ 28.100278][ T419] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 28.100287][ T419] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.100299][ T419] ? security_file_ioctl+0x3e/0x110 [ 28.100312][ T419] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 28.100327][ T419] __se_sys_ioctl+0x123/0x1b0 [ 28.100348][ T419] __x64_sys_ioctl+0x7f/0xa0 [ 28.100367][ T419] x64_sys_call+0x1878/0x2ee0 [ 28.100383][ T419] do_syscall_64+0x57/0xf0 [ 28.100398][ T419] ? clear_bhb_loop+0x50/0xa0 [ 28.100420][ T419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.100432][ T419] RIP: 0033:0x7ff9edf9e159 [ 28.100443][ T419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.100452][ T419] RSP: 002b:00007ff9eee43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.100465][ T419] RAX: ffffffffffffffda RBX: 00007ff9ee225fa0 RCX: 00007ff9edf9e159 [ 28.100475][ T419] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 28.100482][ T419] RBP: 00007ff9ee03506b R08: 0000000000000000 R09: 0000000000000000 [ 28.100489][ T419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.100495][ T419] R13: 00007ff9ee226038 R14: 00007ff9ee225fa0 R15: 00007ffd90c52c18 [ 28.100505][ T419] [ 28.212649][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 28.334350][ T10] usb 2-1: USB disconnect, device number 2 [ 28.362796][ T311] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 28.373315][ T311] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.383729][ T311] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 28.392982][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.400953][ T311] usb 1-1: Product: syz [ 28.405131][ T311] usb 1-1: Manufacturer: syz [ 28.409722][ T311] usb 1-1: SerialNumber: syz [ 28.482530][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.626199][ T311] usb 1-1: USB disconnect, device number 3 [ 28.642540][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 28.648704][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.649357][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.672929][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 28.685913][ T31] usb 3-1: string descriptor 0 read error: -22 [ 28.692174][ T31] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 28.701276][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.711475][ T31] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 28.723981][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.726415][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.873117][ T36] audit: type=1400 audit(1789805346.089:186): avc: denied { write } for pid=423 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.904374][ T426] netlink: 76 bytes leftover after parsing attributes in process `syz.1.35'. [ 28.934708][ T36] audit: type=1400 audit(1789805346.149:187): avc: denied { write } for pid=427 comm="syz.1.36" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.958062][ T36] audit: type=1400 audit(1789805346.149:188): avc: denied { open } for pid=427 comm="syz.1.36" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.095258][ T36] audit: type=1400 audit(1789805346.309:189): avc: denied { getopt } for pid=431 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.294881][ T36] audit: type=1400 audit(1789805346.509:190): avc: denied { ioctl } for pid=440 comm="syz.0.39" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4680 ioctlcmd=0x456f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.411795][ T36] audit: type=1400 audit(1789805346.619:191): avc: denied { read } for pid=443 comm="syz.0.40" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.437081][ T311] usb 3-1: USB disconnect, device number 3 [ 30.002854][ T369] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3206951851 (6413903702 ns) > initial count (411158038 ns). Using initial count to start timer. [ 30.034854][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 30.054340][ T460] netlink: 76 bytes leftover after parsing attributes in process `syz.1.45'. [ 30.056060][ T9] usb 4-1: USB disconnect, device number 2 [ 30.115528][ T472] input: syz0 as /devices/virtual/input/input7 [ 30.309597][ T489] FAULT_INJECTION: forcing a failure. [ 30.309597][ T489] name fail_futex, interval 1, probability 0, space 0, times 1 [ 30.322742][ T489] CPU: 0 UID: 0 PID: 489 Comm: syz.3.53 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 30.322774][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.322787][ T489] Call Trace: [ 30.322792][ T489] [ 30.322800][ T489] __dump_stack+0x21/0x30 [ 30.322831][ T489] dump_stack_lvl+0x140/0x1c0 [ 30.322856][ T489] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.322881][ T489] ? kasan_save_track+0x4f/0x80 [ 30.322900][ T489] ? kfree+0x158/0x440 [ 30.322916][ T489] ? kvfree+0x2a/0x50 [ 30.322931][ T489] ? kvm_arch_free_vm+0x19/0x30 [ 30.322955][ T489] ? kvm_dev_ioctl+0xd5f/0x14c0 [ 30.322972][ T489] ? __x64_sys_ioctl+0x7f/0xa0 [ 30.322995][ T489] dump_stack+0x19/0x20 [ 30.323017][ T489] should_fail_ex+0x3c2/0x510 [ 30.323040][ T489] should_fail+0xf/0x20 [ 30.323061][ T489] get_futex_key+0x178/0x940 [ 30.323085][ T489] ? __cfi_get_futex_key+0x10/0x10 [ 30.323109][ T489] futex_wake+0x150/0x950 [ 30.323127][ T489] ? __cfi_futex_wake+0x10/0x10 [ 30.323144][ T489] ? vfree+0x4e6/0x5b0 [ 30.323170][ T489] ? vfree+0x4e6/0x5b0 [ 30.323194][ T489] do_futex+0x37d/0x510 [ 30.323218][ T489] ? __cfi_do_futex+0x10/0x10 [ 30.323241][ T489] ? put_unused_fd+0x145/0x190 [ 30.323264][ T489] __se_sys_futex+0x13c/0x320 [ 30.323288][ T489] ? __x64_sys_futex+0x110/0x110 [ 30.323312][ T489] ? __kasan_check_write+0x18/0x20 [ 30.323332][ T489] __x64_sys_futex+0xe9/0x110 [ 30.323357][ T489] x64_sys_call+0x227f/0x2ee0 [ 30.323375][ T489] do_syscall_64+0x57/0xf0 [ 30.323393][ T489] ? clear_bhb_loop+0x50/0xa0 [ 30.323416][ T489] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.323438][ T489] RIP: 0033:0x7f9bd959e159 [ 30.323455][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.323471][ T489] RSP: 002b:00007f9bda3cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.323493][ T489] RAX: ffffffffffffffda RBX: 00007f9bd9825fa8 RCX: 00007f9bd959e159 [ 30.323517][ T489] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9bd9825fac [ 30.323541][ T489] RBP: 00007f9bd9825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 30.323555][ T489] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 30.323568][ T489] R13: 00007f9bd9826038 R14: 00007ffe39f8bd20 R15: 00007ffe39f8be08 [ 30.323585][ T489] [ 30.422503][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.436681][ T491] netlink: 76 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.599720][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.610670][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.618710][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.628847][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.642283][ T311] usb 2-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 30.652714][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.663773][ T311] usb 2-1: config 0 descriptor?? [ 30.783520][ T503] SELinux: failed to load policy [ 30.789096][ T503] capability: warning: `syz.2.57' uses 32-bit capabilities (legacy support in use) [ 30.802468][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 30.809090][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.817567][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 30.834190][ T31] usb 4-1: string descriptor 0 read error: -22 [ 30.842200][ T31] usb 4-1: New USB device found, idVendor=0b05, idProduct=17b9, bcdDevice= 0.40 [ 30.851327][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.862925][ T31] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 30.874192][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 30.880152][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.889065][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 30.892888][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.899708][ T311] usb 2-1: USB disconnect, device number 3 [ 31.017541][ T518] Bluetooth: ISO socket layer initialized [ 31.088658][ T489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.098211][ T489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.413165][ T527] netlink: 76 bytes leftover after parsing attributes in process `syz.1.63'. [ 31.649164][ T392] usb 4-1: USB disconnect, device number 3 [ 31.898022][ T590] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 31.951654][ T599] netlink: 76 bytes leftover after parsing attributes in process `syz.2.72'. [ 31.961699][ T600] tipc: Can't bind to reserved service type 0 [ 32.023396][ T604] FAULT_INJECTION: forcing a failure. [ 32.023396][ T604] name failslab, interval 1, probability 0, space 0, times 0 [ 32.039519][ T604] CPU: 0 UID: 0 PID: 604 Comm: syz.2.74 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 32.039552][ T604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.039563][ T604] Call Trace: [ 32.039568][ T604] [ 32.039577][ T604] __dump_stack+0x21/0x30 [ 32.039610][ T604] dump_stack_lvl+0x140/0x1c0 [ 32.039637][ T604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.039662][ T604] dump_stack+0x19/0x20 [ 32.039682][ T604] should_fail_ex+0x3c2/0x510 [ 32.039703][ T604] should_failslab+0xac/0x100 [ 32.039726][ T604] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 32.039745][ T604] ? kasan_unpoison+0x4a/0x70 [ 32.039763][ T604] ? __d_alloc+0x42/0x8c0 [ 32.039794][ T604] __d_alloc+0x42/0x8c0 [ 32.039811][ T604] d_alloc_parallel+0xe4/0x1370 [ 32.039830][ T604] ? avc_has_perm_noaudit+0x26b/0x360 [ 32.039855][ T604] ? __asan_memcpy+0x5a/0x80 [ 32.039873][ T604] ? selinux_inode_permission+0x3f2/0x5d0 [ 32.039890][ T604] ? __cfi_d_alloc_parallel+0x10/0x10 [ 32.039910][ T604] ? __kasan_check_write+0x18/0x20 [ 32.039928][ T604] ? rwsem_read_trylock+0x275/0x5a0 [ 32.039955][ T604] ? make_vfsuid+0x4d/0xa0 [ 32.039972][ T604] ? downgrade_write+0x470/0x470 [ 32.039996][ T604] ? generic_permission+0x1ec/0x590 [ 32.040018][ T604] __lookup_slow+0x150/0x420 [ 32.040040][ T604] ? __d_lookup+0x4e8/0x550 [ 32.040058][ T604] ? lookup_one_len+0x300/0x300 [ 32.040078][ T604] ? down_read+0x7f/0xe0 [ 32.040098][ T604] ? lookup_one_common+0x320/0x470 [ 32.040120][ T604] lookup_one_unlocked+0x188/0x2d0 [ 32.040141][ T604] ? __cfi_lookup_one_unlocked+0x10/0x10 [ 32.040162][ T604] ? mutex_lock+0x97/0x1d0 [ 32.040182][ T604] ? __cfi_mutex_lock+0x10/0x10 [ 32.040201][ T604] lookup_positive_unlocked+0x2e/0xc0 [ 32.040224][ T604] debugfs_lookup+0xa0/0xc0 [ 32.040243][ T604] kvm_create_vm_debugfs+0x14f/0xb50 [ 32.040261][ T604] ? kvm_enable_virtualization+0x150/0x150 [ 32.040279][ T604] ? __kasan_check_write+0x18/0x20 [ 32.040299][ T604] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 32.040318][ T604] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 32.040334][ T604] kvm_dev_ioctl+0xb57/0x14c0 [ 32.040349][ T604] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 32.040366][ T604] ? bpf_lsm_file_ioctl+0xd/0x20 [ 32.040387][ T604] ? security_file_ioctl+0x3e/0x110 [ 32.040405][ T604] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 32.040421][ T604] __se_sys_ioctl+0x123/0x1b0 [ 32.040444][ T604] __x64_sys_ioctl+0x7f/0xa0 [ 32.040465][ T604] x64_sys_call+0x1878/0x2ee0 [ 32.040482][ T604] do_syscall_64+0x57/0xf0 [ 32.040499][ T604] ? clear_bhb_loop+0x50/0xa0 [ 32.040523][ T604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.040544][ T604] RIP: 0033:0x7ff9edf9e159 [ 32.040560][ T604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.040576][ T604] RSP: 002b:00007ff9eee43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.040598][ T604] RAX: ffffffffffffffda RBX: 00007ff9ee225fa0 RCX: 00007ff9edf9e159 [ 32.040613][ T604] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 32.040624][ T604] RBP: 00007ff9ee03506b R08: 0000000000000000 R09: 0000000000000000 [ 32.040637][ T604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.040648][ T604] R13: 00007ff9ee226038 R14: 00007ff9ee225fa0 R15: 00007ffd90c52c18 [ 32.040664][ T604] [ 32.356739][ T311] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 32.538297][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 32.614697][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.643065][ T31] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 32.662128][ T311] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 32.757998][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 32.764221][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 32.773138][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.776838][ T31] usb 4-1: device descriptor read/64, error -71 [ 32.781260][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 32.795174][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.803207][ T10] usb 1-1: Product: syz [ 32.807437][ T10] usb 1-1: Manufacturer: syz [ 32.812023][ T10] usb 1-1: SerialNumber: syz [ 32.815594][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 32.817575][ T10] usb 1-1: config 0 descriptor?? [ 32.825520][ T311] usb usb3-port1: attempt power cycle [ 32.828321][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 32.840144][ T10] usb 1-1: Detected FT232R [ 33.012320][ T31] usb 4-1: device descriptor read/64, error -71 [ 33.025075][ T613] Unsupported ieee802154 address type: 0 [ 33.025075][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 33.025090][ T36] audit: type=1400 audit(1789805350.230:235): avc: denied { bind } for pid=612 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.031237][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 33.071332][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 33.078402][ T10] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 33.086349][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 33.110903][ T10] usb 1-1: USB disconnect, device number 4 [ 33.111853][ T36] audit: type=1400 audit(1789805350.321:236): avc: denied { read } for pid=618 comm="syz.1.80" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.139989][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 33.139996][ T36] audit: type=1400 audit(1789805350.321:237): avc: denied { open } for pid=618 comm="syz.1.80" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.140023][ T36] audit: type=1400 audit(1789805350.352:238): avc: denied { ioctl } for pid=618 comm="syz.1.80" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.152734][ T10] ftdi_sio 1-1:0.0: device disconnected [ 33.181830][ T311] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 33.200084][ T619] FAULT_INJECTION: forcing a failure. [ 33.200084][ T619] name failslab, interval 1, probability 0, space 0, times 0 [ 33.219243][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 33.227169][ T619] CPU: 0 UID: 0 PID: 619 Comm: syz.1.80 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 33.227206][ T619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.227217][ T619] Call Trace: [ 33.227223][ T619] [ 33.227230][ T619] __dump_stack+0x21/0x30 [ 33.227258][ T619] dump_stack_lvl+0x140/0x1c0 [ 33.227280][ T619] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.227304][ T619] dump_stack+0x19/0x20 [ 33.227326][ T619] should_fail_ex+0x3c2/0x510 [ 33.227346][ T619] ? io_alloc_async_data+0x93/0x1b0 [ 33.227369][ T619] should_failslab+0xac/0x100 [ 33.227390][ T619] __kmalloc_noprof+0x69/0x510 [ 33.227408][ T619] ? io_alloc_async_data+0x93/0x1b0 [ 33.227430][ T619] ? _raw_spin_unlock+0x45/0x60 [ 33.227448][ T619] io_alloc_async_data+0x93/0x1b0 [ 33.227470][ T619] ? io_uring_cmd_prep+0x3fe/0x6f0 [ 33.227488][ T619] io_uring_cmd_prep+0x417/0x6f0 [ 33.227506][ T619] io_submit_sqes+0x9da/0x1b70 [ 33.227533][ T619] __se_sys_io_uring_enter+0x302/0x25c0 [ 33.227557][ T619] ? task_work_run+0x213/0x260 [ 33.227580][ T619] ? __cfi_task_work_run+0x10/0x10 [ 33.227600][ T619] ? _raw_spin_unlock+0x45/0x60 [ 33.227617][ T619] ? __kasan_check_read+0x15/0x20 [ 33.227634][ T619] ? __x64_sys_io_uring_enter+0x110/0x110 [ 33.227660][ T619] ? arch_do_signal_or_restart+0x2de/0x700 [ 33.227678][ T619] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 33.227695][ T619] ? xfd_validate_state+0x68/0x140 [ 33.227719][ T619] __x64_sys_io_uring_enter+0xe9/0x110 [ 33.227743][ T619] x64_sys_call+0x2d28/0x2ee0 [ 33.227760][ T619] do_syscall_64+0x57/0xf0 [ 33.227776][ T619] ? clear_bhb_loop+0x50/0xa0 [ 33.227797][ T619] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.227817][ T619] RIP: 0033:0x7fe92419e159 [ 33.227831][ T619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.227846][ T619] RSP: 002b:00007fe922bf6f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 33.227866][ T619] RAX: ffffffffffffffda RBX: 0000200000001540 RCX: 00007fe92419e159 [ 33.227879][ T619] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 33.227889][ T619] RBP: 00000000000007f2 R08: 0000000000000000 R09: 0000000000000008 [ 33.227900][ T619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.227911][ T619] R13: 0000000000000008 R14: 0000000000000f14 R15: 0000000000000000 [ 33.227924][ T619] [ 33.472161][ T31] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 33.487195][ T36] audit: type=1400 audit(1789805350.708:239): avc: denied { create } for pid=623 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 33.514100][ T36] audit: type=1400 audit(1789805350.718:240): avc: denied { sys_admin } for pid=623 comm="syz.1.81" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 33.541219][ T36] audit: type=1400 audit(1789805350.748:241): avc: denied { ioctl } for pid=626 comm="syz.1.82" path="socket:[9588]" dev="sockfs" ino=9588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.566440][ T36] audit: type=1400 audit(1789805350.779:242): avc: denied { ioctl } for pid=626 comm="syz.1.82" path="socket:[9592]" dev="sockfs" ino=9592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.593432][ T36] audit: type=1400 audit(1789805350.779:243): avc: denied { read } for pid=626 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.602687][ T31] usb 4-1: device descriptor read/64, error -71 [ 33.618707][ T311] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 33.629634][ T630] netlink: 76 bytes leftover after parsing attributes in process `syz.0.83'. [ 33.642197][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 33.647629][ T311] usb usb3-port1: unable to enumerate USB device [ 33.726305][ T36] audit: type=1326 audit(1789805350.941:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=633 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35ca99e159 code=0x0 [ 33.870210][ T31] usb 4-1: device descriptor read/64, error -71 [ 33.981112][ T31] usb usb4-port1: attempt power cycle [ 34.323382][ T31] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 34.344491][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.384974][ T639] loop7: detected capacity change from 0 to 7 [ 34.391443][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.400614][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.408583][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.417770][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.425660][ T639] loop7: unable to read partition table [ 34.431340][ T639] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 34.432747][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.453988][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.475250][ T640] Invalid logical block size (5) [ 34.480748][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.490404][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.496992][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.506179][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.515059][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.524239][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.532399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.541577][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.550255][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.559619][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.623240][ T650] capability: warning: `syz.0.89' uses deprecated v2 capabilities in a way that may be insecure [ 34.756394][ T31] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 34.773894][ T658] netlink: 76 bytes leftover after parsing attributes in process `syz.1.92'. [ 34.787638][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.872905][ T662] kvm: kvm [661]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 34.881427][ T662] kvm: kvm [661]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 34.927985][ T31] usb 4-1: device descriptor read/8, error -71 [ 35.043119][ T31] usb usb4-port1: unable to enumerate USB device [ 35.063717][ T671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 35.165969][ T392] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.329947][ T392] usb 1-1: Using ep0 maxpacket: 32 [ 35.336252][ T392] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 35.344518][ T392] usb 1-1: config 0 has no interface number 0 [ 35.350673][ T392] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 35.360862][ T392] usb 1-1: config 0 interface 196 has no altsetting 0 [ 35.368971][ T392] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 35.378146][ T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.386183][ T392] usb 1-1: Product: syz [ 35.390327][ T392] usb 1-1: Manufacturer: syz [ 35.394995][ T392] usb 1-1: SerialNumber: syz [ 35.400295][ T392] usb 1-1: config 0 descriptor?? [ 35.406271][ T669] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 35.433753][ T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 35.597966][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.610983][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 35.620084][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.628802][ T31] usb 3-1: config 0 descriptor?? [ 35.703232][ T684] netlink: 76 bytes leftover after parsing attributes in process `syz.1.102'. [ 35.723374][ T686] can: request_module (can-proto-0) failed. [ 35.822184][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.830093][ T392] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 35.839220][ T392] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 35.978065][ T9] usb 4-1: device descriptor read/64, error -71 [ 36.009246][ T395] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 36.039959][ T392] usb 1-1: USB disconnect, device number 5 [ 36.056096][ T31] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.0002/input/input9 [ 36.068789][ T31] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.0002/input/input10 [ 36.092018][ T31] kye 0003:0458:5005.0002: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 36.187204][ T395] usb 2-1: not running at top speed; connect to a high speed hub [ 36.195908][ T395] usb 2-1: config 5 has an invalid interface number: 114 but max is 2 [ 36.204194][ T395] usb 2-1: config 5 has an invalid interface descriptor of length 5, skipping [ 36.213223][ T395] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 36.222150][ T395] usb 2-1: config 5 has no interface number 0 [ 36.229508][ T395] usb 2-1: Dual-Role OTG device on HNP port [ 36.235584][ T395] usb 2-1: New USB device found, idVendor=07d1, idProduct=3e02, bcdDevice=f1.49 [ 36.237859][ T9] usb 4-1: device descriptor read/64, error -71 [ 36.244680][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.259622][ T395] usb 2-1: Product: syz [ 36.263815][ T395] usb 2-1: Manufacturer: syz [ 36.268734][ T395] usb 2-1: SerialNumber: syz [ 36.268825][ T392] usb 3-1: USB disconnect, device number 8 [ 36.495446][ T395] usb 2-1: USB disconnect, device number 4 [ 36.497895][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.585156][ T693] FAULT_INJECTION: forcing a failure. [ 36.585156][ T693] name failslab, interval 1, probability 0, space 0, times 0 [ 36.597938][ T693] CPU: 1 UID: 0 PID: 693 Comm: syz.0.105 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 36.597969][ T693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.597980][ T693] Call Trace: [ 36.597986][ T693] [ 36.597994][ T693] __dump_stack+0x21/0x30 [ 36.598025][ T693] dump_stack_lvl+0x140/0x1c0 [ 36.598049][ T693] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.598073][ T693] ? __kasan_check_write+0x18/0x20 [ 36.598092][ T693] ? mutex_unlock+0x90/0x240 [ 36.598114][ T693] dump_stack+0x19/0x20 [ 36.598136][ T693] should_fail_ex+0x3c2/0x510 [ 36.598159][ T693] should_failslab+0xac/0x100 [ 36.598181][ T693] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 36.598201][ T693] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 36.598220][ T693] ? kstrdup_const+0x45/0x60 [ 36.598237][ T693] kstrdup+0x4d/0x130 [ 36.598252][ T693] ? kstrdup_const+0x3a/0x60 [ 36.598267][ T693] kstrdup_const+0x45/0x60 [ 36.598283][ T693] __kernfs_new_node+0xaa/0x740 [ 36.598303][ T693] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 36.598326][ T693] ? kernfs_new_node+0x280/0x280 [ 36.598351][ T693] ? __kasan_check_write+0x18/0x20 [ 36.598370][ T693] ? down_write+0xee/0x2b0 [ 36.598393][ T693] ? rpm_resume+0xb92/0x1670 [ 36.598417][ T693] kernfs_new_node+0x154/0x280 [ 36.598440][ T693] kernfs_create_link+0xa8/0x200 [ 36.598456][ T693] sysfs_do_create_link_sd+0x8a/0x120 [ 36.598475][ T693] sysfs_create_link+0x6c/0x90 [ 36.598494][ T693] driver_sysfs_add+0x91/0x240 [ 36.598511][ T693] really_probe+0x178/0x8b0 [ 36.598528][ T693] __driver_probe_device+0x193/0x280 [ 36.598556][ T693] driver_probe_device+0x54/0x3f0 [ 36.598574][ T693] __driver_attach+0x422/0x5e0 [ 36.598592][ T693] bus_for_each_dev+0x249/0x2d0 [ 36.598614][ T693] ? __cfi___driver_attach+0x10/0x10 [ 36.598631][ T693] ? __cfi_bus_for_each_dev+0x10/0x10 [ 36.598653][ T693] ? __kasan_kmalloc+0x96/0xb0 [ 36.598676][ T693] ? _raw_spin_unlock+0x45/0x60 [ 36.598693][ T693] ? klist_add_tail+0x1dd/0x220 [ 36.598717][ T693] driver_attach+0x46/0x50 [ 36.598734][ T693] bus_add_driver+0x393/0x730 [ 36.598756][ T693] driver_register+0x2b7/0x3c0 [ 36.598774][ T693] usb_gadget_register_driver_owner+0xfc/0x270 [ 36.598796][ T693] raw_ioctl+0x144c/0x37a0 [ 36.598815][ T693] ? __cfi_raw_ioctl+0x10/0x10 [ 36.598831][ T693] ? selinux_file_ioctl+0x732/0x1480 [ 36.598850][ T693] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 36.598872][ T693] ? __fget_files+0x2bc/0x330 [ 36.598893][ T693] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.598915][ T693] ? security_file_ioctl+0x3e/0x110 [ 36.598933][ T693] ? __cfi_raw_ioctl+0x10/0x10 [ 36.598948][ T693] __se_sys_ioctl+0x123/0x1b0 [ 36.598970][ T693] __x64_sys_ioctl+0x7f/0xa0 [ 36.598991][ T693] x64_sys_call+0x1878/0x2ee0 [ 36.599006][ T693] do_syscall_64+0x57/0xf0 [ 36.599023][ T693] ? clear_bhb_loop+0x50/0xa0 [ 36.599044][ T693] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.599066][ T693] RIP: 0033:0x7f35ca99ddeb [ 36.599083][ T693] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 36.599098][ T693] RSP: 002b:00007f35cb80bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.599118][ T693] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f35ca99ddeb [ 36.599133][ T693] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000b [ 36.599145][ T693] RBP: 00007f35cb80cfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 36.599158][ T693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.599170][ T693] R13: 00002000000004c0 R14: 0000000000000005 R15: 0000000000000000 [ 36.599184][ T693] [ 36.599198][ T693] raw-gadget.0 gadget.0: really_probe: driver_sysfs_add failed [ 36.653594][ T9] usb 4-1: device descriptor read/64, error -71 [ 36.655743][ T693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.924510][ T9] usb 4-1: device descriptor read/64, error -71 [ 36.935173][ T693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.050775][ T9] usb usb4-port1: attempt power cycle [ 37.068151][ T714] netlink: 76 bytes leftover after parsing attributes in process `syz.1.111'. [ 37.075350][ T716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 37.094970][ T593] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.281508][ T392] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.418021][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.439013][ T392] usb 1-1: Using ep0 maxpacket: 16 [ 37.445160][ T9] usb 4-1: device descriptor read/8, error -71 [ 37.451525][ T392] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 37.459756][ T392] usb 1-1: config 1 has no interface number 0 [ 37.465871][ T392] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 37.475783][ T392] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 37.481019][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.485810][ T392] usb 1-1: config 1 interface 105 has no altsetting 0 [ 37.501425][ T392] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 37.510688][ T392] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 37.519002][ T392] usb 1-1: Product: syz [ 37.523256][ T392] usb 1-1: Manufacturer: syz [ 37.527850][ T392] usb 1-1: SerialNumber: syz [ 37.536895][ T693] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 37.544437][ T693] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 37.599493][ T9] usb 4-1: device descriptor read/8, error -71 [ 37.661026][ T311] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 37.670193][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.678914][ T311] usb 2-1: config 0 descriptor?? [ 37.848535][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.870541][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.007857][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.123362][ T9] usb usb4-port1: unable to enumerate USB device [ 38.292920][ T392] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 38.309474][ T392] usb 1-1: USB disconnect, device number 6 [ 38.484765][ T733] hub 1-0:1.0: USB hub found [ 38.489782][ T733] hub 1-0:1.0: 1 port detected [ 38.538458][ T737] syzkaller0: entered promiscuous mode [ 38.543950][ T737] syzkaller0: entered allmulticast mode [ 38.550184][ T738] ptp ptp0: only physical clock in use now [ 38.556207][ T737] ptp ptp0: only physical clock in use now [ 38.811202][ T9] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 38.959271][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.076383][ T392] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 39.214827][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.237143][ T392] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.248699][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 231, changing to 11 [ 39.259855][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 17968, setting to 1024 [ 39.271011][ T392] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.283949][ T392] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.293029][ T720] Bluetooth: hci0: command 0x1003 tx timeout [ 39.293041][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.299166][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.310785][ T392] usb 4-1: config 0 descriptor?? [ 39.320061][ T740] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 39.470266][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 39.542481][ T740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.551113][ T740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.619285][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.774431][ T392] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 39.783406][ T392] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 39.861886][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 39.861902][ T36] audit: type=1326 audit(1789805356.839:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 39.893118][ T36] audit: type=1326 audit(1789805356.839:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 39.896073][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.918522][ T36] audit: type=1326 audit(1789805356.839:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 39.950131][ T36] audit: type=1326 audit(1789805356.839:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 39.975252][ T36] audit: type=1326 audit(1789805356.839:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 40.000339][ T36] audit: type=1326 audit(1789805356.839:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 40.006390][ T740] FAULT_INJECTION: forcing a failure. [ 40.006390][ T740] name failslab, interval 1, probability 0, space 0, times 0 [ 40.025424][ T36] audit: type=1326 audit(1789805356.839:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 40.038501][ T9] usb usb1-port1: attempt power cycle [ 40.063114][ T36] audit: type=1326 audit(1789805356.839:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 40.071058][ T740] CPU: 0 UID: 0 PID: 740 Comm: syz.3.120 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 40.071087][ T740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.071099][ T740] Call Trace: [ 40.071105][ T740] [ 40.071112][ T740] __dump_stack+0x21/0x30 [ 40.071143][ T740] dump_stack_lvl+0x140/0x1c0 [ 40.071168][ T740] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.071194][ T740] dump_stack+0x19/0x20 [ 40.071216][ T740] should_fail_ex+0x3c2/0x510 [ 40.071240][ T740] should_failslab+0xac/0x100 [ 40.071263][ T740] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 40.071284][ T740] ? __d_alloc+0x42/0x8c0 [ 40.071302][ T740] ? kasan_save_alloc_info+0x3a/0x50 [ 40.071320][ T740] __d_alloc+0x42/0x8c0 [ 40.071347][ T740] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 40.071367][ T740] d_alloc_parallel+0xe4/0x1370 [ 40.071387][ T740] ? number+0xc9d/0xf00 [ 40.071414][ T740] ? pointer+0xe10/0xe10 [ 40.071439][ T740] ? __d_lookup+0x4e8/0x550 [ 40.071458][ T740] ? __cfi_d_alloc_parallel+0x10/0x10 [ 40.071478][ T740] ? full_name_hash+0xa1/0xf0 [ 40.071500][ T740] proc_fill_cache+0x174/0x410 [ 40.071524][ T740] ? __cfi_proc_map_files_instantiate+0x10/0x10 [ 40.071543][ T740] ? __cfi_proc_fill_cache+0x10/0x10 [ 40.071565][ T740] ? __cfi_snprintf+0x10/0x10 [ 40.071591][ T740] proc_map_files_readdir+0x7ae/0x9d0 [ 40.071612][ T740] ? __cfi_proc_map_files_readdir+0x10/0x10 [ 40.071629][ T740] ? rwsem_read_trylock+0x275/0x5a0 [ 40.071657][ T740] ? __cfi_selinux_file_permission+0x10/0x10 [ 40.071678][ T740] ? down_read_killable+0x7f/0x100 [ 40.071701][ T740] ? __cfi_down_read_killable+0x10/0x10 [ 40.071725][ T740] ? bpf_lsm_file_permission+0xd/0x20 [ 40.071751][ T740] iterate_dir+0x1fd/0x5c0 [ 40.071774][ T740] __se_sys_getdents64+0xf6/0x250 [ 40.071796][ T740] ? fput+0x1a4/0x230 [ 40.071819][ T740] ? __x64_sys_getdents64+0xa0/0xa0 [ 40.071842][ T740] ? __cfi_filldir64+0x10/0x10 [ 40.071865][ T740] ? __kasan_check_write+0x18/0x20 [ 40.071883][ T740] ? fpregs_restore_userregs+0x11c/0x260 [ 40.071906][ T740] __x64_sys_getdents64+0x7f/0xa0 [ 40.071929][ T740] x64_sys_call+0x27d0/0x2ee0 [ 40.071946][ T740] do_syscall_64+0x57/0xf0 [ 40.071964][ T740] ? clear_bhb_loop+0x50/0xa0 [ 40.071987][ T740] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.072008][ T740] RIP: 0033:0x7f9bd959e159 [ 40.072024][ T740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.072040][ T740] RSP: 002b:00007f9bda3cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 40.072061][ T740] RAX: ffffffffffffffda RBX: 00007f9bd9825fa0 RCX: 00007f9bd959e159 [ 40.072075][ T740] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000006 [ 40.072088][ T740] RBP: 00007f9bd963506b R08: 0000000000000000 R09: 0000000000000000 [ 40.072099][ T740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.072111][ T740] R13: 00007f9bd9826038 R14: 00007f9bd9825fa0 R15: 00007ffe39f8be08 [ 40.072126][ T740] [ 40.397281][ T36] audit: type=1326 audit(1789805356.839:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 40.399370][ T311] usb 2-1: Cannot read MAC address [ 40.422799][ T36] audit: type=1326 audit(1789805356.839:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9edf9e159 code=0x7ffc0000 [ 40.428195][ T311] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 40.452858][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 40.484186][ T311] usb 2-1: USB disconnect, device number 5 [ 40.497100][ T9] usb 1-1: device descriptor read/8, error -71 [ 40.521022][ T749] netlink: 76 bytes leftover after parsing attributes in process `syz.1.122'. [ 40.638175][ T9] usb 1-1: device descriptor read/8, error -71 [ 40.683218][ T765] FAULT_INJECTION: forcing a failure. [ 40.683218][ T765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 40.696524][ T765] CPU: 0 UID: 0 PID: 765 Comm: syz.2.126 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 40.696548][ T765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.696561][ T765] Call Trace: [ 40.696569][ T765] [ 40.696574][ T765] __dump_stack+0x21/0x30 [ 40.696593][ T765] dump_stack_lvl+0x140/0x1c0 [ 40.696608][ T765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.696622][ T765] ? __kasan_check_write+0x18/0x20 [ 40.696637][ T765] ? mutex_unlock+0x90/0x240 [ 40.696660][ T765] dump_stack+0x19/0x20 [ 40.696683][ T765] should_fail_ex+0x3c2/0x510 [ 40.696699][ T765] should_fail_alloc_page+0xec/0x110 [ 40.696722][ T765] __alloc_pages_noprof+0x1c0/0x7e0 [ 40.696746][ T765] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.696772][ T765] ? __kasan_check_read+0x15/0x20 [ 40.696783][ T765] ? __kasan_check_write+0x18/0x20 [ 40.696793][ T765] kvm_coalesced_mmio_init+0x3e/0x190 [ 40.696805][ T765] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 40.696814][ T765] kvm_dev_ioctl+0xb39/0x14c0 [ 40.696823][ T765] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 40.696833][ T765] ? bpf_lsm_file_ioctl+0xd/0x20 [ 40.696845][ T765] ? security_file_ioctl+0x3e/0x110 [ 40.696855][ T765] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 40.696864][ T765] __se_sys_ioctl+0x123/0x1b0 [ 40.696876][ T765] __x64_sys_ioctl+0x7f/0xa0 [ 40.696895][ T765] x64_sys_call+0x1878/0x2ee0 [ 40.696906][ T765] do_syscall_64+0x57/0xf0 [ 40.696916][ T765] ? clear_bhb_loop+0x50/0xa0 [ 40.696929][ T765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.696942][ T765] RIP: 0033:0x7ff9edf9e159 [ 40.696952][ T765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.696961][ T765] RSP: 002b:00007ff9eee43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.696975][ T765] RAX: ffffffffffffffda RBX: 00007ff9ee225fa0 RCX: 00007ff9edf9e159 [ 40.696982][ T765] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 40.696989][ T765] RBP: 00007ff9ee03506b R08: 0000000000000000 R09: 0000000000000000 [ 40.696996][ T765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.697002][ T765] R13: 00007ff9ee226038 R14: 00007ff9ee225fa0 R15: 00007ffd90c52c18 [ 40.697011][ T765] [ 40.924471][ T395] usb 4-1: USB disconnect, device number 12 [ 41.028919][ T365] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.060990][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 41.083366][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.114505][ T311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.189597][ T365] usb 3-1: Using ep0 maxpacket: 32 [ 41.196125][ T365] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.204496][ T365] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 41.217601][ T365] usb 3-1: string descriptor 0 read error: -22 [ 41.223841][ T365] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 41.232910][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.233693][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.248825][ T365] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 41.259056][ T365] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.262149][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.276826][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 41.289858][ T311] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.298153][ T311] usb 2-1: config 179 has no interface number 0 [ 41.304409][ T311] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 41.315457][ T311] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 41.326683][ T311] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.337817][ T311] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 41.349213][ T311] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.362435][ T311] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 41.371464][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.372122][ T9] usb usb1-port1: unable to enumerate USB device [ 41.386536][ T756] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 41.471646][ T765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.487270][ T765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.790524][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 41.820312][ T775] EXT4-fs: dax option not supported [ 41.843546][ T777] netlink: 76 bytes leftover after parsing attributes in process `syz.0.131'. [ 41.963012][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.974349][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.988614][ T783] FAULT_INJECTION: forcing a failure. [ 41.988614][ T783] name fail_futex, interval 1, probability 0, space 0, times 0 [ 41.990954][ T311] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 42.001610][ T783] CPU: 0 UID: 0 PID: 783 Comm: syz.0.134 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 42.001640][ T783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.001652][ T783] Call Trace: [ 42.001667][ T783] [ 42.001675][ T783] __dump_stack+0x21/0x30 [ 42.001707][ T783] dump_stack_lvl+0x140/0x1c0 [ 42.001733][ T783] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.001760][ T783] dump_stack+0x19/0x20 [ 42.001783][ T783] should_fail_ex+0x3c2/0x510 [ 42.001806][ T783] should_fail+0xf/0x20 [ 42.001825][ T783] get_futex_key+0x178/0x940 [ 42.001848][ T783] ? kasan_save_track+0x3e/0x80 [ 42.001869][ T783] ? __cfi_get_futex_key+0x10/0x10 [ 42.001890][ T783] ? do_sys_openat2+0x170/0x1d0 [ 42.001915][ T783] ? x64_sys_call+0xe69/0x2ee0 [ 42.001932][ T783] ? do_syscall_64+0x57/0xf0 [ 42.001949][ T783] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.001972][ T783] futex_wake+0x150/0x950 [ 42.001989][ T783] ? __cfi_futex_wake+0x10/0x10 [ 42.002019][ T783] do_futex+0x37d/0x510 [ 42.002044][ T783] ? __cfi_do_futex+0x10/0x10 [ 42.002068][ T783] __se_sys_futex+0x13c/0x320 [ 42.002093][ T783] ? fput+0x1a4/0x230 [ 42.002117][ T783] ? __x64_sys_futex+0x110/0x110 [ 42.002144][ T783] __x64_sys_futex+0xe9/0x110 [ 42.002168][ T783] x64_sys_call+0x227f/0x2ee0 [ 42.002183][ T783] do_syscall_64+0x57/0xf0 [ 42.002200][ T783] ? clear_bhb_loop+0x50/0xa0 [ 42.002222][ T783] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.002243][ T783] RIP: 0033:0x7f35ca99e159 [ 42.002260][ T783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.002275][ T783] RSP: 002b:00007f35cb80e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.002295][ T783] RAX: ffffffffffffffda RBX: 00007f35cac25fa8 RCX: 00007f35ca99e159 [ 42.002309][ T783] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f35cac25fac [ 42.002321][ T783] RBP: 00007f35cac25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 42.002336][ T783] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 42.002348][ T783] R13: 00007f35cac26038 R14: 00007ffe5aad51f0 R15: 00007ffe5aad52d8 [ 42.002364][ T783] [ 42.036115][ T9] usb 3-1: USB disconnect, device number 9 [ 42.038709][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.059088][ T311] usb 4-1: config 0 descriptor?? [ 42.280520][ T788] overlayfs: failed to resolve 'hash': -2 [ 42.533894][ T802] netlink: 76 bytes leftover after parsing attributes in process `syz.2.140'. [ 42.554430][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 42.875768][ T365] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.015618][ T365] usb 3-1: device descriptor read/64, error -71 [ 43.116250][ T311] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 43.134860][ T311] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized [ 43.284619][ T365] usb 3-1: device descriptor read/64, error -71 [ 43.302998][ T811] netlink: 'syz.0.143': attribute type 27 has an invalid length. [ 43.396385][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.405067][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.543233][ T365] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.575520][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 43.683281][ T365] usb 3-1: device descriptor read/64, error -71 [ 43.739352][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 43.748598][ T9] usb 1-1: New USB device strings: Mfr=8, Product=229, SerialNumber=0 [ 43.756772][ T9] usb 1-1: Product: syz [ 43.761178][ T9] usb 1-1: Manufacturer: syz [ 43.767346][ T9] usb 1-1: config 0 descriptor?? [ 43.773349][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 43.781239][ T9] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 43.862375][ T9] usb 2-1: USB disconnect, device number 6 [ 43.862418][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 43.876602][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 43.956220][ T814] kvm: pic: level sensitive irq not supported [ 43.956336][ T814] kvm: pic: single mode not supported [ 43.962412][ T814] kvm: pic: level sensitive irq not supported [ 43.963454][ T365] usb 3-1: device descriptor read/64, error -71 [ 44.030762][ T817] Zero length message leads to an empty skb [ 44.061976][ T392] usb 1-1: USB disconnect, device number 11 [ 44.071939][ T392] ftdi_sio 1-1:0.0: device disconnected [ 44.093002][ T365] usb usb3-port1: attempt power cycle [ 44.470181][ T365] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.503710][ T365] usb 3-1: device descriptor read/8, error -71 [ 44.589384][ T820] rust_binder: Write failure EFAULT in pid:136 [ 44.614724][ T824] 9pnet_fd: p9_fd_create_unix (824): problem connecting socket: ./bus: -111 [ 44.644394][ T828] netlink: 76 bytes leftover after parsing attributes in process `syz.1.150'. [ 44.654644][ T365] usb 3-1: device descriptor read/8, error -71 [ 44.666469][ T830] TCP: TCP_TX_DELAY enabled [ 44.747870][ T833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.152'. [ 44.756850][ T833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 44.773579][ T392] usb 4-1: USB disconnect, device number 13 [ 44.792450][ T835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.805091][ T835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.902028][ T395] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.923584][ T365] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.946744][ T365] usb 3-1: device descriptor read/8, error -71 [ 45.063698][ T395] usb 1-1: Using ep0 maxpacket: 32 [ 45.070386][ T395] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.078775][ T395] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 45.090989][ T365] usb 3-1: device descriptor read/8, error -71 [ 45.098205][ T395] usb 1-1: string descriptor 0 read error: -22 [ 45.104406][ T395] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 45.113493][ T395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.123833][ T395] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 45.137510][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.139992][ T395] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.162213][ T392] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 45.225637][ T365] usb usb3-port1: unable to enumerate USB device [ 45.346031][ T392] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 45.355250][ T392] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 45.363410][ T392] usb 4-1: Product: syz [ 45.375601][ T392] usb 4-1: config 0 descriptor?? [ 45.381530][ T392] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 45.389596][ T392] usb 4-1: Detected FT232H [ 45.400355][ T826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.408886][ T826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.881625][ T36] kauditd_printk_skb: 310 callbacks suppressed [ 45.881642][ T36] audit: type=1400 audit(1789805362.439:595): avc: denied { getopt } for pid=851 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.963930][ T365] usb 1-1: USB disconnect, device number 12 [ 46.009460][ T36] audit: type=1400 audit(1789805362.559:596): avc: denied { getopt } for pid=873 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.124540][ T36] audit: type=1400 audit(1789805362.671:597): avc: denied { relabelfrom } for pid=881 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.145298][ T36] audit: type=1400 audit(1789805362.671:598): avc: denied { relabelto } for pid=881 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.223338][ T36] audit: type=1400 audit(1789805362.763:599): avc: denied { search } for pid=883 comm="syz.1.161" name="/" dev="configfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.273260][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 46.317350][ T887] loop9: detected capacity change from 0 to 7 [ 46.323959][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.333145][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.341152][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.350339][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.358184][ T887] loop9: unable to read partition table [ 46.364058][ T887] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 46.365316][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.386674][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.394638][ T365] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 46.413780][ T9] usb 3-1: device descriptor read/64, error -71 [ 46.425256][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.434411][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.443288][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.452546][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.460781][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.469914][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.478063][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.487255][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.495406][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.504563][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.512550][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.521684][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.529576][ T888] loop9: unable to read partition table [ 46.535469][ T888] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 46.550647][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.559834][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.609331][ T365] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.621762][ T365] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 46.630859][ T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.639009][ T365] usb 1-1: Product: syz [ 46.643232][ T365] usb 1-1: Manufacturer: syz [ 46.647839][ T365] usb 1-1: SerialNumber: syz [ 46.655764][ T365] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 46.661732][ T365] cdc_wdm 1-1:1.0: Unknown control protocol [ 46.683935][ T9] usb 3-1: device descriptor read/64, error -71 [ 46.891416][ T890] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 46.900450][ T890] overlayfs: missing 'lowerdir' [ 46.907759][ T894] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 46.916736][ T894] overlayfs: missing 'lowerdir' [ 46.933440][ T896] netlink: 76 bytes leftover after parsing attributes in process `syz.1.164'. [ 46.943476][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 47.000350][ T36] audit: type=1400 audit(1789805363.485:600): avc: denied { search } for pid=901 comm="syz.1.167" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.001406][ T902] tc_dump_action: action bad kind [ 47.021984][ T36] audit: type=1400 audit(1789805363.485:601): avc: denied { write } for pid=901 comm="syz.1.167" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.049501][ T36] audit: type=1400 audit(1789805363.485:602): avc: denied { open } for pid=901 comm="syz.1.167" path="/58/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.083776][ T904] FAULT_INJECTION: forcing a failure. [ 47.083776][ T904] name failslab, interval 1, probability 0, space 0, times 0 [ 47.088625][ T880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.097397][ T904] CPU: 1 UID: 0 PID: 904 Comm: syz.1.168 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 47.097425][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.097438][ T904] Call Trace: [ 47.097444][ T904] [ 47.097451][ T904] __dump_stack+0x21/0x30 [ 47.097483][ T904] dump_stack_lvl+0x140/0x1c0 [ 47.097509][ T904] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.097537][ T904] dump_stack+0x19/0x20 [ 47.097560][ T904] should_fail_ex+0x3c2/0x510 [ 47.097583][ T904] should_failslab+0xac/0x100 [ 47.097607][ T904] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 47.097628][ T904] ? __d_alloc+0x42/0x8c0 [ 47.097646][ T904] ? __kasan_record_aux_stack+0xb2/0xd0 [ 47.097663][ T904] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 47.097680][ T904] ? __call_rcu_common+0xd5/0x710 [ 47.097714][ T904] __d_alloc+0x42/0x8c0 [ 47.097732][ T904] d_alloc_parallel+0xe4/0x1370 [ 47.097752][ T904] ? avc_has_perm_noaudit+0x26b/0x360 [ 47.097776][ T904] ? __asan_memcpy+0x5a/0x80 [ 47.097797][ T904] ? selinux_inode_permission+0x3f2/0x5d0 [ 47.097816][ T904] ? __cfi_d_alloc_parallel+0x10/0x10 [ 47.097836][ T904] ? __cfi_selinux_inode_permission+0x10/0x10 [ 47.097854][ T904] ? make_vfsuid+0x4d/0xa0 [ 47.097873][ T904] ? generic_permission+0x1ec/0x590 [ 47.097895][ T904] __lookup_slow+0x150/0x420 [ 47.097917][ T904] ? __d_lookup+0x4e8/0x550 [ 47.097936][ T904] ? lookup_one_len+0x300/0x300 [ 47.097959][ T904] ? lookup_one_common+0x320/0x470 [ 47.097982][ T904] lookup_one_len+0x1a1/0x300 [ 47.098004][ T904] ? __kasan_check_write+0x18/0x20 [ 47.098023][ T904] ? __cfi_lookup_one_len+0x10/0x10 [ 47.098044][ T904] ? simple_pin_fs+0x9c/0x160 [ 47.098069][ T904] start_creating+0x173/0x310 [ 47.098089][ T904] ? debugfs_create_dir+0x20/0x470 [ 47.098109][ T904] debugfs_create_dir+0x2b/0x470 [ 47.098129][ T904] kvm_create_vm_debugfs+0x20d/0xb50 [ 47.098147][ T904] ? kvm_enable_virtualization+0x150/0x150 [ 47.098166][ T904] ? __kasan_check_write+0x18/0x20 [ 47.098185][ T904] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 47.098206][ T904] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 47.098223][ T904] kvm_dev_ioctl+0xb57/0x14c0 [ 47.098239][ T904] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 47.098256][ T904] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.098278][ T904] ? security_file_ioctl+0x3e/0x110 [ 47.098296][ T904] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 47.098312][ T904] __se_sys_ioctl+0x123/0x1b0 [ 47.098334][ T904] __x64_sys_ioctl+0x7f/0xa0 [ 47.098355][ T904] x64_sys_call+0x1878/0x2ee0 [ 47.098372][ T904] do_syscall_64+0x57/0xf0 [ 47.098390][ T904] ? clear_bhb_loop+0x50/0xa0 [ 47.098412][ T904] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.098433][ T904] RIP: 0033:0x7fe92419e159 [ 47.098449][ T904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.098467][ T904] RSP: 002b:00007fe922bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.098488][ T904] RAX: ffffffffffffffda RBX: 00007fe924425fa0 RCX: 00007fe92419e159 [ 47.098503][ T904] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 47.098515][ T904] RBP: 00007fe92423506b R08: 0000000000000000 R09: 0000000000000000 [ 47.098527][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.098538][ T904] R13: 00007fe924426038 R14: 00007fe924425fa0 R15: 00007ffdcb428718 [ 47.098554][ T904] [ 47.443312][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.445539][ T880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.700315][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.711135][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.819424][ T9] usb usb3-port1: attempt power cycle [ 47.873398][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 47.879957][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 47.888466][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 47.901639][ T31] usb 2-1: string descriptor 0 read error: -22 [ 47.907971][ T31] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 47.917042][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.929326][ T31] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 47.939587][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.942018][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.030653][ T392] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 48.042413][ T392] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 48.050602][ T36] audit: type=1400 audit(1789805364.456:603): avc: denied { listen } for pid=907 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.050603][ T392] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.079747][ T392] usb 4-1: USB disconnect, device number 14 [ 48.087691][ T392] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.097681][ T392] ftdi_sio 4-1:0.0: device disconnected [ 48.151439][ T904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.159948][ T904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.197981][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 48.237807][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.345078][ T923] loop9: detected capacity change from 0 to 7 [ 48.351672][ T923] loop9: unable to read partition table [ 48.357358][ T923] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 48.382900][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.393398][ T923] loop9: unable to read partition table [ 48.399216][ T923] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 48.641542][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 48.646767][ T36] audit: type=1400 audit(1789805365.001:604): avc: denied { mounton } for pid=924 comm="syz.3.173" path="/proc/105/net/pfkey" dev="proc" ino=4026532621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.674963][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.714315][ T31] usb 2-1: USB disconnect, device number 7 [ 48.770614][ T930] netlink: 76 bytes leftover after parsing attributes in process `syz.3.175'. [ 48.816658][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.852395][ T932] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 48.935794][ T9] usb usb3-port1: unable to enumerate USB device [ 49.300898][ T31] usb 1-1: USB disconnect, device number 13 [ 49.353390][ T957] netlink: 76 bytes leftover after parsing attributes in process `syz.0.184'. [ 49.354461][ T958] loop9: detected capacity change from 0 to 7 [ 49.372656][ T958] loop9: unable to read partition table [ 49.382052][ T958] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 49.434135][ T953] loop9: unable to read partition table [ 49.439852][ T953] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 49.456939][ T964] FAULT_INJECTION: forcing a failure. [ 49.456939][ T964] name failslab, interval 1, probability 0, space 0, times 0 [ 49.475623][ T964] CPU: 1 UID: 0 PID: 964 Comm: syz.0.186 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 49.475656][ T964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.475667][ T964] Call Trace: [ 49.475674][ T964] [ 49.475681][ T964] __dump_stack+0x21/0x30 [ 49.475713][ T964] dump_stack_lvl+0x140/0x1c0 [ 49.475738][ T964] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.475764][ T964] dump_stack+0x19/0x20 [ 49.475786][ T964] should_fail_ex+0x3c2/0x510 [ 49.475808][ T964] should_failslab+0xac/0x100 [ 49.475830][ T964] kmem_cache_alloc_noprof+0x42/0x410 [ 49.475851][ T964] ? security_inode_alloc+0x51/0x230 [ 49.475876][ T964] security_inode_alloc+0x51/0x230 [ 49.475904][ T964] inode_init_always_gfp+0x756/0x9e0 [ 49.475927][ T964] alloc_inode+0xc5/0x270 [ 49.475952][ T964] new_inode+0x25/0x1e0 [ 49.475976][ T964] ? start_creating+0x1fb/0x310 [ 49.475996][ T964] ? debugfs_create_dir+0x20/0x470 [ 49.476017][ T964] debugfs_create_dir+0xfa/0x470 [ 49.476037][ T964] kvm_create_vm_debugfs+0x20d/0xb50 [ 49.476058][ T964] ? kvm_enable_virtualization+0x150/0x150 [ 49.476075][ T964] ? __kasan_check_write+0x18/0x20 [ 49.476095][ T964] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 49.476116][ T964] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 49.476130][ T964] kvm_dev_ioctl+0xb57/0x14c0 [ 49.476148][ T964] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 49.476166][ T964] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.476189][ T964] ? security_file_ioctl+0x3e/0x110 [ 49.476209][ T964] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 49.476225][ T964] __se_sys_ioctl+0x123/0x1b0 [ 49.476249][ T964] __x64_sys_ioctl+0x7f/0xa0 [ 49.476270][ T964] x64_sys_call+0x1878/0x2ee0 [ 49.476288][ T964] do_syscall_64+0x57/0xf0 [ 49.476307][ T964] ? clear_bhb_loop+0x50/0xa0 [ 49.476330][ T964] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.476352][ T964] RIP: 0033:0x7f35ca99e159 [ 49.476369][ T964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.476386][ T964] RSP: 002b:00007f35cb80e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.476408][ T964] RAX: ffffffffffffffda RBX: 00007f35cac25fa0 RCX: 00007f35ca99e159 [ 49.476424][ T964] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 49.476436][ T964] RBP: 00007f35caa3506b R08: 0000000000000000 R09: 0000000000000000 [ 49.476449][ T964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.476462][ T964] R13: 00007f35cac26038 R14: 00007f35cac25fa0 R15: 00007ffe5aad52d8 [ 49.476479][ T964] [ 49.476550][ T964] debugfs: out of free dentries, can not create directory '964-11' [ 49.814641][ T968] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 50.035425][ T982] netlink: 76 bytes leftover after parsing attributes in process `syz.3.193'. [ 50.059954][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 50.211714][ T994] loop9: detected capacity change from 0 to 7 [ 50.218675][ T994] loop9: unable to read partition table [ 50.224740][ T994] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 50.243498][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 50.250070][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.258523][ T31] usb 1-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 50.260038][ T994] loop9: unable to read partition table [ 50.269039][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.281901][ T994] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 50.283670][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 50.313230][ T31] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 50.322388][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.330438][ T31] usb 1-1: Product: syz [ 50.334605][ T31] usb 1-1: Manufacturer: syz [ 50.339191][ T31] usb 1-1: SerialNumber: syz [ 50.409138][ T545] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.449185][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 50.569405][ T31] usb 1-1: USB disconnect, device number 14 [ 50.613902][ T9] usb 2-1: config 3 has an invalid interface number: 193 but max is 0 [ 50.623053][ T9] usb 2-1: config 3 has no interface number 0 [ 50.629156][ T9] usb 2-1: config 3 interface 193 has no altsetting 0 [ 50.637513][ T9] usb 2-1: New USB device found, idVendor=045b, idProduct=0247, bcdDevice=6b.2b [ 50.646594][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.654608][ T9] usb 2-1: Product: syz [ 50.658804][ T9] usb 2-1: Manufacturer: syz [ 50.663396][ T9] usb 2-1: SerialNumber: syz [ 50.971479][ T9] cdc_acm 2-1:3.193: invalid descriptor buffer length [ 50.980554][ T9] usb 2-1: USB disconnect, device number 8 [ 51.066455][ T392] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 51.228813][ T392] usb 3-1: Using ep0 maxpacket: 32 [ 51.240920][ T392] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 163, changing to 7 [ 51.252075][ T392] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 42223, setting to 1024 [ 51.261536][ T1012] netlink: 76 bytes leftover after parsing attributes in process `syz.0.202'. [ 51.266015][ T392] usb 3-1: string descriptor 0 read error: -22 [ 51.278415][ T392] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 51.288046][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.299794][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 51.299812][ T36] audit: type=1400 audit(1789805367.449:621): avc: denied { ioctl } for pid=1013 comm="syz.0.203" path="socket:[14217]" dev="sockfs" ino=14217 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.306301][ T392] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.525894][ T36] audit: type=1400 audit(1789805367.661:622): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 51.618741][ T1030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.623163][ T1031] loop9: detected capacity change from 0 to 7 [ 51.629002][ T1030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.641384][ T1031] loop9: unable to read partition table [ 51.647186][ T1031] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 51.669146][ T392] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 51.685916][ T392] usb 3-1: USB disconnect, device number 18 [ 51.707108][ T1031] loop9: unable to read partition table [ 51.712991][ T1031] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 51.808473][ T36] audit: type=1400 audit(1789805367.920:623): avc: denied { create } for pid=1035 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.811358][ T1036] FAULT_INJECTION: forcing a failure. [ 51.811358][ T1036] name failslab, interval 1, probability 0, space 0, times 0 [ 51.840816][ T1036] CPU: 1 UID: 0 PID: 1036 Comm: syz.1.209 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 51.840860][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.840873][ T1036] Call Trace: [ 51.840880][ T1036] [ 51.840888][ T1036] __dump_stack+0x21/0x30 [ 51.840921][ T1036] dump_stack_lvl+0x140/0x1c0 [ 51.840947][ T1036] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.840974][ T1036] ? simple_lookup+0xc7/0x100 [ 51.840999][ T1036] dump_stack+0x19/0x20 [ 51.841024][ T1036] should_fail_ex+0x3c2/0x510 [ 51.841049][ T1036] should_failslab+0xac/0x100 [ 51.841074][ T1036] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 51.841096][ T1036] ? alloc_inode+0xa9/0x270 [ 51.841121][ T1036] ? __kasan_check_write+0x18/0x20 [ 51.841142][ T1036] alloc_inode+0xa9/0x270 [ 51.841167][ T1036] new_inode+0x25/0x1e0 [ 51.841190][ T1036] ? start_creating+0x1fb/0x310 [ 51.841212][ T1036] ? debugfs_create_dir+0x20/0x470 [ 51.841234][ T1036] debugfs_create_dir+0xfa/0x470 [ 51.841255][ T1036] kvm_create_vm_debugfs+0x20d/0xb50 [ 51.841276][ T1036] ? kvm_enable_virtualization+0x150/0x150 [ 51.841296][ T1036] ? __kasan_check_write+0x18/0x20 [ 51.841316][ T1036] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 51.841338][ T1036] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 51.841355][ T1036] kvm_dev_ioctl+0xb57/0x14c0 [ 51.841373][ T1036] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 51.841392][ T1036] ? bpf_lsm_file_ioctl+0xd/0x20 [ 51.841416][ T1036] ? security_file_ioctl+0x3e/0x110 [ 51.841437][ T1036] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 51.841455][ T1036] __se_sys_ioctl+0x123/0x1b0 [ 51.841479][ T1036] __x64_sys_ioctl+0x7f/0xa0 [ 51.841502][ T1036] x64_sys_call+0x1878/0x2ee0 [ 51.841521][ T1036] do_syscall_64+0x57/0xf0 [ 51.841540][ T1036] ? clear_bhb_loop+0x50/0xa0 [ 51.841564][ T1036] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.841587][ T1036] RIP: 0033:0x7fe92419e159 [ 51.841605][ T1036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.841622][ T1036] RSP: 002b:00007fe922bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.841645][ T1036] RAX: ffffffffffffffda RBX: 00007fe924425fa0 RCX: 00007fe92419e159 [ 51.841660][ T1036] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 51.841673][ T1036] RBP: 00007fe92423506b R08: 0000000000000000 R09: 0000000000000000 [ 51.841686][ T1036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.841699][ T1036] R13: 00007fe924426038 R14: 00007fe924425fa0 R15: 00007ffdcb428718 [ 51.841717][ T1036] [ 51.841725][ T1036] debugfs: out of free dentries, can not create directory '1036-11' [ 52.160239][ T392] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 52.171042][ T31] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 52.322751][ T392] usb 2-1: Using ep0 maxpacket: 32 [ 52.335346][ T392] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.335488][ T31] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.357611][ T31] usb 1-1: config 0 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.357854][ T392] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.371029][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 52.387681][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 52.396759][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.398583][ T392] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.414672][ T31] usb 1-1: config 0 descriptor?? [ 52.430985][ T392] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 52.444124][ T392] usb 2-1: string descriptor 0 read error: -22 [ 52.450567][ T392] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 52.459713][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.471060][ T392] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 52.498011][ T392] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.500489][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.642795][ T1025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.652578][ T1025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.660652][ T720] Bluetooth: hci0: command 0x1003 tx timeout [ 52.666771][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.732501][ T1047] netlink: 76 bytes leftover after parsing attributes in process `syz.3.212'. [ 52.746091][ T1036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.760395][ T1036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.782982][ T1049] bridge0: port 3(veth1_macvtap) entered blocking state [ 52.790025][ T1049] bridge0: port 3(veth1_macvtap) entered disabled state [ 52.797081][ T1049] veth1_macvtap: entered allmulticast mode [ 52.803523][ T1049] veth1_macvtap: left allmulticast mode [ 52.896906][ T31] wacom 0003:056A:0065.0005: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 52.911499][ T31] wacom 0003:056A:0065.0005: hidraw0: USB HID v0.00 Keyboard [HID 056a:0065] on usb-dummy_hcd.0-1/input0 [ 52.940750][ T31] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0065.0005/input/input13 [ 53.091777][ T395] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 53.115635][ T31] usb 1-1: USB disconnect, device number 15 [ 53.229448][ T36] audit: type=1400 audit(1789805369.231:624): avc: denied { write } for pid=1055 comm="syz.2.216" name="idVendor" dev="configfs" ino=15439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 53.252436][ T36] audit: type=1400 audit(1789805369.231:625): avc: denied { open } for pid=1055 comm="syz.2.216" path="/44/config/usb_gadget/g1/idVendor" dev="configfs" ino=15439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 53.260638][ T395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.290023][ T395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.300026][ T395] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 53.309194][ T395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.321884][ T395] usb 4-1: config 0 descriptor?? [ 53.334761][ T65] usb 2-1: USB disconnect, device number 9 [ 53.351915][ T1060] loop9: detected capacity change from 0 to 7 [ 53.360409][ C0] blk_print_req_error: 61 callbacks suppressed [ 53.360427][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.376236][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.385436][ C1] buffer_io_error: 60 callbacks suppressed [ 53.385449][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.399588][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.408864][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.443060][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.452286][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.460570][ T1060] loop9: unable to read partition table [ 53.466240][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.466271][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.483393][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.492673][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.500798][ T1060] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 53.510956][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.523666][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.532112][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.541293][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.549376][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.558544][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.566668][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.575866][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.583823][ T1061] loop9: unable to read partition table [ 53.589630][ T1061] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 53.616322][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.673203][ T1067] rust_binder: 1064:1067 error while translating object: ENOENT [ 53.688750][ T36] audit: type=1400 audit(1789805369.646:626): avc: denied { map } for pid=1064 comm="syz.2.219" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.709331][ T1067] rust_binder: Failure in copy_transaction_data: ENOENT [ 53.712416][ T1067] rust_binder: 1064:1067 transaction call to 1064:0 failed ENOENT, code 0 size 72-24 [ 53.728850][ T36] audit: type=1400 audit(1789805369.646:627): avc: denied { set_context_mgr } for pid=1064 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.770616][ T36] audit: type=1400 audit(1789805369.646:628): avc: denied { call } for pid=1064 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.803596][ T36] audit: type=1400 audit(1789805369.646:629): avc: denied { transfer } for pid=1064 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.803667][ T1073] netlink: 76 bytes leftover after parsing attributes in process `syz.2.221'. [ 53.810252][ T395] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.839309][ T36] audit: type=1400 audit(1789805369.711:630): avc: denied { getopt } for pid=1068 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.851462][ T395] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.859398][ T1074] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.891192][ T395] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.899152][ T395] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.907199][ T395] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.932545][ T395] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 54.460134][ T395] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 5: -71 [ 54.469672][ T395] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense calibration info: -71 [ 54.479355][ T395] playstation 0003:054C:0DF2.0006: Failed to get calibration data from DualSense [ 54.488532][ T395] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 54.496696][ T395] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 54.510008][ T395] usb 4-1: USB disconnect, device number 15 [ 54.551609][ T1087] FAULT_INJECTION: forcing a failure. [ 54.551609][ T1087] name failslab, interval 1, probability 0, space 0, times 0 [ 54.564263][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: syz.1.223 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 54.564296][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.564309][ T1087] Call Trace: [ 54.564315][ T1087] [ 54.564320][ T1087] __dump_stack+0x21/0x30 [ 54.564341][ T1087] dump_stack_lvl+0x140/0x1c0 [ 54.564355][ T1087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.564371][ T1087] dump_stack+0x19/0x20 [ 54.564384][ T1087] should_fail_ex+0x3c2/0x510 [ 54.564397][ T1087] should_failslab+0xac/0x100 [ 54.564410][ T1087] kmem_cache_alloc_node_noprof+0x45/0x420 [ 54.564422][ T1087] ? __alloc_skb+0x10c/0x360 [ 54.564434][ T1087] ? __kasan_check_write+0x18/0x20 [ 54.564445][ T1087] __alloc_skb+0x10c/0x360 [ 54.564457][ T1087] br_mdb_notify+0x2d8/0x970 [ 54.564470][ T1087] br_multicast_del_pg+0x4c0/0xc60 [ 54.564482][ T1087] __br_multicast_disable_port_ctx+0x265/0x610 [ 54.564498][ T1087] br_multicast_toggle+0x191/0x360 [ 54.564511][ T1087] multicast_snooping_store+0x24b/0x340 [ 54.564523][ T1087] ? __cfi_multicast_snooping_store+0x10/0x10 [ 54.564537][ T1087] ? __virt_addr_valid+0x2a1/0x370 [ 54.564550][ T1087] ? __kasan_check_write+0x18/0x20 [ 54.564560][ T1087] ? __cfi_multicast_snooping_store+0x10/0x10 [ 54.564575][ T1087] dev_attr_store+0x76/0xa0 [ 54.564587][ T1087] ? __cfi_dev_attr_store+0x10/0x10 [ 54.564598][ T1087] sysfs_kf_write+0x13e/0x160 [ 54.564608][ T1087] ? __cfi_sysfs_kf_write+0x10/0x10 [ 54.564621][ T1087] kernfs_fop_write_iter+0x316/0x510 [ 54.564636][ T1087] vfs_write+0x75f/0xfd0 [ 54.564649][ T1087] ? __cfi_vfs_write+0x10/0x10 [ 54.564660][ T1087] ? __cfi_mutex_lock+0x10/0x10 [ 54.564673][ T1087] ksys_write+0x145/0x260 [ 54.564691][ T1087] ? __cfi_ksys_write+0x10/0x10 [ 54.564705][ T1087] ? __kasan_check_write+0x18/0x20 [ 54.564715][ T1087] ? fpregs_restore_userregs+0x11c/0x260 [ 54.564728][ T1087] __x64_sys_write+0x7f/0x90 [ 54.564739][ T1087] x64_sys_call+0x271c/0x2ee0 [ 54.564748][ T1087] do_syscall_64+0x57/0xf0 [ 54.564758][ T1087] ? clear_bhb_loop+0x50/0xa0 [ 54.564770][ T1087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.564787][ T1087] RIP: 0033:0x7fe92419e159 [ 54.564802][ T1087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.564818][ T1087] RSP: 002b:00007fe922bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.564840][ T1087] RAX: ffffffffffffffda RBX: 00007fe924425fa0 RCX: 00007fe92419e159 [ 54.564854][ T1087] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000006 [ 54.564866][ T1087] RBP: 00007fe92423506b R08: 0000000000000000 R09: 0000000000000000 [ 54.564878][ T1087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.564889][ T1087] R13: 00007fe924426038 R14: 00007fe924425fa0 R15: 00007ffdcb428718 [ 54.564903][ T1087] [ 55.024277][ T1107] loop9: detected capacity change from 0 to 7 [ 55.031185][ T1107] loop9: unable to read partition table [ 55.036884][ T1107] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 55.074584][ T1107] loop9: unable to read partition table [ 55.080284][ T1107] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 55.130810][ T110] loop9: unable to read partition table [ 55.236984][ T392] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 55.399365][ T392] usb 1-1: Using ep0 maxpacket: 32 [ 55.405973][ T392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.418068][ T392] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.424387][ T1115] netlink: 76 bytes leftover after parsing attributes in process `syz.3.231'. [ 55.433214][ T392] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 55.453143][ T392] usb 1-1: string descriptor 0 read error: -22 [ 55.459603][ T392] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 55.469120][ T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.572728][ T395] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 55.703354][ T1104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.712787][ T1104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.731148][ T1104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.739650][ T395] usb 2-1: Using ep0 maxpacket: 16 [ 55.745918][ T395] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 55.754969][ T1104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.762980][ T395] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 55.770690][ T395] usb 2-1: config 0 has no interface number 0 [ 55.778713][ T395] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 55.787905][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.796180][ T395] usb 2-1: Product: syz [ 55.800535][ T395] usb 2-1: Manufacturer: syz [ 55.806372][ T395] usb 2-1: SerialNumber: syz [ 55.820871][ T395] usb 2-1: config 0 descriptor?? [ 55.828974][ T395] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 55.835699][ T395] usb 2-1: No valid video chain found. [ 55.869087][ T1121] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 55.877201][ T1121] tmpfs: Unknown parameter 'noinode32' [ 56.168669][ T392] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 56.331213][ T392] usb 4-1: Using ep0 maxpacket: 32 [ 56.337543][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.342164][ T31] usb 1-1: USB disconnect, device number 16 [ 56.348567][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.365780][ T392] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 56.374910][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.383450][ T392] usb 4-1: config 0 descriptor?? [ 56.519716][ T1137] loop9: detected capacity change from 0 to 7 [ 56.526526][ T1137] loop9: unable to read partition table [ 56.532426][ T1137] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 56.580957][ T1137] loop9: unable to read partition table [ 56.586794][ T1137] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 56.722804][ T1142] IPv4: Oversized IP packet from 127.0.0.1 [ 56.728754][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 56.832436][ T1143] kvm: pic: non byte read [ 57.099094][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 57.099111][ T36] audit: type=1400 audit(1789805372.803:639): avc: denied { read } for pid=1145 comm="syz.2.241" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.135766][ T1148] netlink: 76 bytes leftover after parsing attributes in process `syz.2.242'. [ 57.334351][ T1159] tmpfs: Unknown parameter 'subj_type' [ 57.411023][ T1162] loop9: detected capacity change from 0 to 7 [ 57.417852][ T1162] loop9: unable to read partition table [ 57.423609][ T1162] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 57.459181][ T1162] loop9: unable to read partition table [ 57.464988][ T1162] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 57.576977][ T36] audit: type=1400 audit(1789805373.246:640): avc: denied { map } for pid=1165 comm="syz.2.249" path="socket:[18507]" dev="sockfs" ino=18507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 57.750317][ T1171] netlink: 76 bytes leftover after parsing attributes in process `syz.0.251'. [ 57.862625][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 58.005641][ T1190] loop9: detected capacity change from 0 to 7 [ 58.014995][ T1190] loop9: unable to read partition table [ 58.020890][ T1190] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 58.090405][ T1190] loop9: unable to read partition table [ 58.097065][ T1190] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 58.155378][ T36] audit: type=1400 audit(1789805373.781:641): avc: denied { cmd } for pid=1195 comm="iou-wrk-1196" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 58.181382][ T36] audit: type=1400 audit(1789805373.799:642): avc: denied { map } for pid=1195 comm="syz.0.259" path="/dev/ublkc0" dev="devtmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.220643][ T867] ------------[ cut here ]------------ [ 58.226165][ T867] WARNING: CPU: 1 PID: 867 at drivers/block/ublk_drv.c:1583 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 58.236744][ T867] Modules linked in: [ 58.240662][ T867] CPU: 1 UID: 0 PID: 867 Comm: kworker/u8:60 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 58.252411][ T867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.262482][ T867] Workqueue: iou_exit io_ring_exit_work [ 58.268039][ T867] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 58.274391][ T867] Code: 5d e9 93 3c 53 02 cc e8 5d 05 33 fe 0f 0b eb e3 e8 54 05 33 fe 0f 0b eb da e8 4b 05 33 fe 0f 0b e9 4d fe ff ff e8 3f 05 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 58.294880][ T867] RSP: 0018:ffffc9000fec7990 EFLAGS: 00010293 [ 58.300982][ T867] RAX: ffffffff83547531 RBX: 1ffff11023931b95 RCX: ffff88811548cc00 [ 58.309395][ T867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000104 [ 58.317435][ T867] RBP: ffffc9000fec79e0 R08: 0000000000000003 R09: 0000000000000004 [ 58.325438][ T867] R10: 0000000000000000 R11: ffffffff83546510 R12: ffff888110eb3900 [ 58.333422][ T867] R13: ffff88811c98dc80 R14: ffff88810d3cc000 R15: ffff88810d3cc010 [ 58.341426][ T867] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.350399][ T867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.356999][ T867] CR2: 00007ffd90c53010 CR3: 0000000102bc2000 CR4: 00000000003526b0 [ 58.365013][ T867] Call Trace: [ 58.368316][ T867] [ 58.371249][ T867] ublk_ch_uring_cmd+0x6f/0xa0 [ 58.376023][ T867] io_uring_try_cancel_uring_cmd+0x196/0x280 [ 58.382064][ T867] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 58.387965][ T867] ? activate_task+0x43b/0x480 [ 58.392772][ T867] ? io_uring_cancel_generic+0x6eb/0x6eb [ 58.398409][ T867] ? __kasan_check_read+0x15/0x20 [ 58.403459][ T867] io_ring_exit_work+0x23d/0x83b [ 58.408404][ T867] ? finish_task_switch+0x139/0x770 [ 58.413656][ T867] ? __cfi_io_ring_exit_work+0x10/0x10 [ 58.419120][ T867] ? wake_up_process+0x14/0x20 [ 58.423921][ T867] ? kick_pool+0x3b7/0x540 [ 58.428351][ T867] process_scheduled_works+0x7f4/0x1060 [ 58.433936][ T867] worker_thread+0xc99/0x13f0 [ 58.438627][ T867] kthread+0x2c4/0x360 [ 58.442701][ T867] ? __cfi_worker_thread+0x10/0x10 [ 58.447854][ T867] ? __cfi_kthread+0x10/0x10 [ 58.452453][ T867] ret_from_fork+0x64/0xa0 [ 58.456913][ T867] ? __cfi_kthread+0x10/0x10 [ 58.461513][ T867] ret_from_fork_asm+0x1a/0x30 [ 58.466319][ T867] [ 58.469338][ T867] ---[ end trace 0000000000000000 ]--- [ 58.567549][ T31] usb 2-1: USB disconnect, device number 10 [ 59.178166][ T392] usbhid 4-1:0.0: can't add hid device: -71 [ 59.192060][ T392] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.214739][ T392] usb 4-1: USB disconnect, device number 16