last executing test programs: 35.312326744s ago: executing program 3 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 34.34963885s ago: executing program 3 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, &(0x7f0000000000)=[@cr4={0x1, 0x408e2}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000880)="400f23280f019c990e000000b91a00000f32c344240000600000c744240200800000c7442406000000000f011c246566262e440f23b126673e660f382943b0c4c3914984fb499e00007fc744240000000000c744240278581767c7442406000000000f011c2467440fc7580066b804008ee8", 0x72}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 33.782954276s ago: executing program 3 (id=39): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffdf9]}, 0x0, 0x0, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001d002100000000000000000007"], 0x34}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) socket(0x1, 0x4, 0x6) (async) write(r2, &(0x7f0000000040)="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", 0xfdaa) 33.782629547s ago: executing program 3 (id=40): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r2 = syz_usb_connect$uac2(0x0, 0xd3, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x1, 0xd0, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xa, 0x23, 0x7f}, [@sample_rate={0xd, 0x24, 0xd, 0x3, 0x2, 0x3, [0x3, 0x0, 0x0]}, @extension_unit={0xd, 0x24, 0x9, 0x5, 0x7, 0x4, "759b6f211471"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0x0, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xef, 0x81, 0x9, {0x8, 0x25, 0x1, 0x1, 0xc, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}, @as_header={0x10, 0x24, 0x1, 0xa, 0x7f, 0x1, 0x1, 0x10, 0x8000, 0x37}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1000, 0x9, 0xa}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x4, 0x3, 0x4, "de285162c1909a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xec, 0x3, 0x7, {0x8, 0x25, 0x1, 0x81, 0x3f, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x5, 0xa, 0x5, 0x10, 0x4}, 0xc, &(0x7f0000000340)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x2, 0x2}]}, 0xa, [{0xf5, &(0x7f0000000d40)=ANY=[@ANYBLOB="f5035f5c8893d0528a6a837a2b82d90210f0205816642e29ff2377d321b1e99e40523a9456ed94a0a125275934993e7123424f12483c389e96a64c42dc997608b453c5a420087a48e8a6a1f6f8a1464cdcde7058a018db8f8d285a91023f48dea6966d4b958fbdffce10d0d202f30a27649d2200731ec70d7b0b917e224bb565f480427de5bdfb9980a4a66d51e358b19ee0e45d4140a640f232895ba83d8d840ccb80baf69502922a81d9b52e6cb39063aa040f92243986c9013cddd79ab1f2910ed0ecacc45386186f60aaab7c397029cfff2637ac5a24413887a299dd070faec981bc327e34026f00"/247]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x6d, &(0x7f00000004c0)=@string={0x6d, 0x3, "e2a88e1581a429627824efa92562c01b134a08d4dbca6392a706e2f4bb214701255ab8868c90792bd6bbcbc936b8ff2b30e1b2bd44e9edf8ec5354c2f849b354780dc2d8df0072df1fb1102f39b1acd43b85ff48cd59f4e770c308890449f3fd0928e60190bd2f5f3d4e6f"}}, {0x97, &(0x7f0000000540)=@string={0x97, 0x3, "885e06b8665e5d0f7b8c62781232b6b23cfe6bf60888e0bc0351a66012a81d53ea889290403d5db8f3a4d0595f231461b7586c5476e13bfdb2e116483b88fd5ad9ee1241bce8b58b7b690195af2d44de36820b7ac23d1bfe5daba55252b90a6a9fe3ad2ec0715c18520d2a59029a782771beea7e412ffa01c6f24889d4ce9c31ba6adcc38da155a6a35634e8ecf14948ae937c699e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x404}}, {0x3e, &(0x7f0000000680)=@string={0x3e, 0x3, "e0dcf1c05414437d808913cac848ef80fec2b8b35b239b3a37100eb42837987f618160010de0ff3d791d5a76fc77ec8bd5ebc7bfbb08e7940b0c0bae"}}, {0xa0, &(0x7f00000006c0)=@string={0xa0, 0x3, "a2f8a1171ad7d686c49667271875ecceb75ea556edc43afa2d8c0430cccdff1918075aa7215d883d72e67d05fb0c269e59f2fbb44ba31c2d87a06b674ff1ad21ad461ad11cf5a2e84cac5584b7c9f23ce655e45d65323b8d77fb551cb6a703344ac4cf8154d9416e3fa2cd8a3ca2b795a8af077e44487a381166822f37e95de7a99dc2b039c66b26b1e3d1dc561f04d756372cca04028af80f036d0ef86a"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_control_io$uac2(r2, &(0x7f0000000a40)={0x14, &(0x7f00000008c0)={0x20, 0xc, 0x8a, {0x8a, 0x4, "70fd14c86889116c31da999b07bb25b762521a32a8a21a1962bac291f21a17317ba5d998359b445249d022bbce46b771803784285ed02cbca6a13a9583991b812c08407d331e0a0aed37c8a6ad3c4d9c59faa6d92b52d6249cca7a93fcc62fe9f927432cc0f4a3932908e894ca1cefe9ad4c31f128b8a0a597d4d3f7195407a89e7c302ceed95c9e"}}, &(0x7f0000000980)={0x0, 0x3, 0x97, @string={0x97, 0x3, "71f07fe91fbcc8ff6ffa8d478db03ba6b217855e0159f34ef284b3afd944d5f644167c454919bfcfea36db81fee09227b01823edf0129ba970fc070d16fad0abf34a431c356c365454ef317d7fb48a6ccb39590124c7deb295179395e5bda8d2e3573317cec551d6421989b5d8627fbe7b7fb4dfdf456b285968051e590ff23194ae9fba4e3497d4e34c4e88303844415a0edfc2cd"}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x60, 0xf, 0x3b, "850db2f1ee05215dcd124c4590ca6c850cca74b6d3f99dbdba21af89555eb00e3d0c8792b6d00b2fc8e5f1dfbd107d5043b4c17032adbfb75c4684"}, &(0x7f0000000b00)={0x0, 0xa, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x81, 0x3, "a6a5b5"}, &(0x7f0000000bc0)={0x20, 0x82, 0x3, "611f9b"}, &(0x7f0000000c00)={0x20, 0x83, 0x2, "c424"}, &(0x7f0000000c40)={0x20, 0x84, 0x1, "cc"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "e0a27f"}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x6, 0x3, 0x0, 0x0, 0x0, 0x4, [0xffffffff, 0xb, 0x4, 0x0, 0x0, 0x2009, 0x40000c], [0x3f]}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x2, 0xd, 0x1}) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 32.106011105s ago: executing program 3 (id=48): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_channels={0x1, 0x1, 0x0, 0xffffffff, 0x0, 0xffffdffc, 0x3, 0xfffffffc, 0x7}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x7, r2, 0x80000001, 0x1000) linkat(r1, &(0x7f00000000c0)='sys\x00', r1, &(0x7f0000000140)='sys\x00', 0x0) unlinkat(r1, &(0x7f0000000180)='sys\x00', 0x0) 32.042999668s ago: executing program 3 (id=49): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) clock_gettime(0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1088, 0x2, 0x9f}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x26000, 0x209000}) 16.562417304s ago: executing program 32 (id=49): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) clock_gettime(0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1088, 0x2, 0x9f}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x26000, 0x209000}) 10.438796161s ago: executing program 4 (id=141): r0 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) read(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000100)="a1010000000000") syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000180)={0x40, 0xf, 0xa, "9196b395b98da81a7442"}, 0x0, 0x0}) 7.410287023s ago: executing program 4 (id=157): r0 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000100)="a1010000000000") syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5.080470492s ago: executing program 0 (id=163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$nbd(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="67446698010000000300030002000000ad6865472a8a898588941776d374ebe23545e16c85cb5c26103dde5e1102d101a1d4ec154795511947223980ddfc70b9fb2ee4aa96933c628c7a10e7d2694edea0d322883f5ddbf621b6175de3b9641984acd1755cd992219b20d0d5a9dbc3e26e47ca6739e1dc99aebe17c34c4ee103265bb470704db28ee965d9004c8e1245611e3cce8888e1d378245819a8"], 0x66) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0) dup3(r8, r1, 0x80000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e01, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x844, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6}]}) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000080)={0xe000202b}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd14, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 4.407103934s ago: executing program 1 (id=164): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.391022815s ago: executing program 4 (id=165): r0 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) read(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000100)="a1010000000000") syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000180)={0x40, 0xf, 0xa, "9196b395b98da81a7442"}, 0x0, 0x0}) 4.228809232s ago: executing program 0 (id=166): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'io'}, 0xb) (fail_nth: 2) 4.114865528s ago: executing program 2 (id=167): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.905559388s ago: executing program 0 (id=168): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x70, &(0x7f0000000280)=ANY=[@ANYBLOB="6900004ee0a07d805d6fca44bd5e45ddd9de2ef5380afd4d71f69160049106dd16e1d1b82be9e940420b0946a52b0c409bf1954c2c8b1b5c43c4c6b4151bd2a3781294c8cbe6114ec7b22553275fe3ec0ecb65a0abb4a84dcec78687ef7c8a20b4ef5ca5934c4c9c97db7469d10000005a4147b256f29b0495d7d39d60c9d62cfb6e126363d16b5a0037b5177ae4635df4483cb14f192b234b71ce45d3b7e92555704eb2f5cbac4d1fab758081cec389e616b5da955bae76d0ec3617fc12e201cd"]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) fsync(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mount$incfs(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000200)='./file3\x00', &(0x7f0000000400), 0x2000, &(0x7f0000000500)={[{@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x4}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x1}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x36b}}, {@readahead={'readahead', 0x3d, 0x9}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_role={'obj_role', 0x3d, '-:\xee-#!}^]$(){\\'}}, {@obj_role={'obj_role', 0x3d, '.$+$*/'}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '.\''}}]}) inotify_add_watch(r3, &(0x7f0000000440)='./file4\x00', 0x40000060) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1b6) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4002) pwrite64(r4, &(0x7f0000100000), 0x120000, 0x0) 3.802577722s ago: executing program 2 (id=169): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r0, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat(r1, &(0x7f00000001c0)='./proc_mnt\x00', 0x80b9969fcb4ebcaf) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded", 0x2f, 0x10000485, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mount(&(0x7f0000000200)=@filename='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f0000000280)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f00000002c0)='cpuset\x00', 0x202004, 0x0) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) unshare(0x26020600) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="a7", 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r5, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001080006040001"], 0x32) r7 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x200) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r7) r8 = syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040710408060000000000010902200001010080fa0904000002ffffff0007058102000200"], 0x0) syz_usb_ep_write(r8, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r7, 0x4004550d, 0x0) 2.600748999s ago: executing program 1 (id=170): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2181) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000100)) (fail_nth: 2) 2.282923953s ago: executing program 1 (id=171): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.14255366s ago: executing program 1 (id=172): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="010028bd70000000000003000000100001800b0001000d92c3"], 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.899006412s ago: executing program 0 (id=173): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="010028bd70000000000003000000100001800b0001000d92c3"], 0x24}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x154, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@loopback, 0x0, 0x4000, 0x4e24, 0x6000, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x4000, 0xfffffffffffffffe}, {}, {0x0, 0xfffff000}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000240)={0x80}) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="b95b0800000f32c7442400e137ad5ec7442402c9801557c7442406000000000f011c240f01c966ba4000b8e1e89520ef0fc7396467f30fc731260ff7d266ba400066b8448366ef0ffca600800000670f01d1", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.28770853s ago: executing program 4 (id=174): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000002880)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x40000009, 0x5) setresgid(0x0, 0x0, 0xee01) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x7fff, 0x3, 0x8, 0x4, 0xf1, 0x9f, 0x2c, 0x8, 0x1, 0xd9, 0x3, 0x4, 0xfffffffffffffffe}, {0x6, 0x1, 0x5, 0x8, 0x40, 0xa, 0x9, 0x1, 0x9f, 0xa, 0x0, 0x7, 0x8}, {0xfffffffb, 0x2, 0x0, 0x1, 0x0, 0x6, 0xc1, 0x1, 0xa, 0x7, 0x7, 0x2, 0x2}], 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 1.260820581s ago: executing program 4 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="2dcd590d948a4486", 0x8) close(r0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') (fail_nth: 2) 1.129925298s ago: executing program 1 (id=176): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x491}]}) 1.022967163s ago: executing program 4 (id=177): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 993.121214ms ago: executing program 33 (id=177): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 990.898324ms ago: executing program 1 (id=179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 937.218447ms ago: executing program 0 (id=180): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 705.582687ms ago: executing program 0 (id=181): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x70, &(0x7f0000000280)=ANY=[@ANYBLOB="6900004ee0a07d805d6fca44bd5e45ddd9de2ef5380afd4d71f69160049106dd16e1d1b82be9e940420b0946a52b0c409bf1954c2c8b1b5c43c4c6b4151bd2a3781294c8cbe6114ec7b22553275fe3ec0ecb65a0abb4a84dcec78687ef7c8a20b4ef5ca5934c4c9c97db7469d10000005a4147b256f29b0495d7d39d60c9d62cfb6e126363d16b5a0037b5177ae4635df4483cb14f192b234b71ce45d3b7e92555704eb2f5cbac4d1fab758081cec389e616b5da955bae76d0ec3617fc12e201cd"]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) fsync(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mount$incfs(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000200)='./file3\x00', &(0x7f0000000400), 0x2000, &(0x7f0000000500)={[{@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x4}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x1}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x36b}}, {@readahead={'readahead', 0x3d, 0x9}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_role={'obj_role', 0x3d, '-:\xee-#!}^]$(){\\'}}, {@obj_role={'obj_role', 0x3d, '.$+$*/'}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '.\''}}]}) inotify_add_watch(r3, &(0x7f0000000440)='./file4\x00', 0x40000060) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1b6) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4002) pwrite64(r4, &(0x7f0000100000), 0x120000, 0x0) 641.73693ms ago: executing program 2 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='online_movable', 0xe) 641.01845ms ago: executing program 2 (id=183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write(r3, &(0x7f00000003c0)='au', 0x2) (async) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x1, 0x7, 0x7fff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000500)=@vmx={0x103, 0x0, 0x466, {0x10000, 0xdddd1000, {}, 0x1, 0x20000009af}, {"d07ee511f368b2a747251cf1a94a5870db8535a3258ed7ba4130c84d13bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3fb7f4578b61af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df62b6b7187cc43faeeed57a95f17a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674ae9d23da53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a33a5264657ccf35ccd4507b8f0d879db556faf8278371ab25ac2c35d7d77fbe00dfdffeb722a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d87830517f5c06959ed3d9402664cf167998b3cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0a516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f28eddf3261856c2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518e83014403a74af69ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba64f575a1d66f002c49f18f7b35428f1bac27f758872c5624caa0ed3b76ca43a5907153dc0305c608f1498eff49fcae7b775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b89be82a2db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c3343b6d39b1cf318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a285a57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e23270f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a7c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc850194010b804f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e47860d59811af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a121375c89c782cbdb9b92ae006db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847ceb5ee150eddc6c7e823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db57539d10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90a732f6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74ba94ef0da27cbf2fbdc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395b9ac182475ec6b2c4ccddec16d8fce4252352bcb9dfdcef2ab1770f8f6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb80d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abd70d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074220bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a368829d250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae5bb8f9cf26966264243909a8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f140d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3463402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6a99fe0ae8c84b9b6e260cf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79edc8b8c60ffa738718765fd0b65859e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97f468b51dc7817a1f3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632563a0d86d02d0e47546123d1e6b1dbeb8d1a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b2b448f6c7d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70cb391d400a1406b02d612918a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c77f9d519b0d0af0900000000000000b9b8d130339193893c4937cab0b3619f775ff538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10f8962ca094d898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c4e547908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894661648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1949e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae3909ed5d5fc56980436dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba10000bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "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"}}) 385.308883ms ago: executing program 5 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030303430bb60061eb30a19b85f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff900ce5c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f000000a8c0)='./file0\x00', 0x0, 0x800) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000140)={'system_u:object_r:systemd_logind_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x4f) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f000000adc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a6c0)={0x78, 0x0, 0x7e72, {0x0, 0xb, 0x0, {0x2, 0x5, 0x1ff, 0x9, 0x9, 0xfff, 0x0, 0x7, 0x401, 0x6000, 0x5, r2, r3, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 302.168046ms ago: executing program 5 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xb}, 0x5}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x6, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902120001000000000904000000f7045c"], 0x0) syz_usb_connect(0x2, 0x48, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc2, 0x44, 0x8b, 0x8, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x2b, 0x11, 0x3, 0x39, 0xee, 0xa0, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x0, 0x9, 0x37, 0x6c, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) write(r3, &(0x7f0000000400)='online_movable', 0xe) 20.6885ms ago: executing program 2 (id=185): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=186): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12100) kernel console output (not intermixed with test programs): T381] ? kstrtouint+0x78/0xf0 [ 25.761391][ T381] ? ioctl_has_perm+0x1bc/0x500 [ 25.761405][ T381] ? __asan_memcpy+0x5a/0x80 [ 25.761417][ T381] ? ioctl_has_perm+0x408/0x500 [ 25.761430][ T381] ? has_cap_mac_admin+0xd0/0xd0 [ 25.761443][ T381] ? __kasan_check_write+0x18/0x20 [ 25.761455][ T381] ? mutex_lock_killable+0x97/0x1d0 [ 25.761470][ T381] ? __cfi_mutex_lock_killable+0x10/0x10 [ 25.761485][ T381] ? proc_fail_nth_write+0x184/0x220 [ 25.761509][ T381] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 25.761527][ T381] kvm_vcpu_ioctl+0xa43/0x1000 [ 25.761544][ T381] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.761556][ T381] ? __cfi_vfs_write+0x10/0x10 [ 25.761570][ T381] ? __kasan_check_write+0x18/0x20 [ 25.761582][ T381] ? mutex_unlock+0x90/0x240 [ 25.761596][ T381] ? __cfi_mutex_unlock+0x10/0x10 [ 25.761611][ T381] ? __fget_files+0x2bc/0x330 [ 25.761626][ T381] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.761642][ T381] ? security_file_ioctl+0x3e/0x110 [ 25.761655][ T381] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.761666][ T381] __se_sys_ioctl+0x123/0x1b0 [ 25.761682][ T381] __x64_sys_ioctl+0x7f/0xa0 [ 25.761696][ T381] x64_sys_call+0x1878/0x2ee0 [ 25.761708][ T381] do_syscall_64+0x57/0xf0 [ 25.761721][ T381] ? clear_bhb_loop+0x50/0xa0 [ 25.761735][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.761750][ T381] RIP: 0033:0x7fc6e139e159 [ 25.761763][ T381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.761773][ T381] RSP: 002b:00007fc6e21cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.761789][ T381] RAX: ffffffffffffffda RBX: 00007fc6e1625fa0 RCX: 00007fc6e139e159 [ 25.761798][ T381] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 25.761807][ T381] RBP: 00007fc6e21cc090 R08: 0000000000000000 R09: 0000000000000000 [ 25.761815][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.761823][ T381] R13: 00007fc6e1626038 R14: 00007fc6e1625fa0 R15: 00007ffed9981368 [ 25.761833][ T381] [ 25.769795][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.278463][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.400191][ T389] SELinux: ebitmap start bit (15) is not a multiple of the map unit size (64) [ 26.410405][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.417240][ T389] SELinux: failed to load policy [ 26.439756][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 26.446347][ T311] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 26.455735][ T311] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 26.464454][ T311] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 26.474246][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.484142][ T311] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.494105][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.507639][ T311] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 26.516915][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.526011][ T390] FAULT_INJECTION: forcing a failure. [ 26.526011][ T390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 26.543378][ T311] usb 4-1: config 0 descriptor?? [ 26.559738][ T390] CPU: 0 UID: 0 PID: 390 Comm: syz.1.22 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 26.559782][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.559794][ T390] Call Trace: [ 26.559801][ T390] [ 26.559808][ T390] __dump_stack+0x21/0x30 [ 26.559839][ T390] dump_stack_lvl+0x140/0x1c0 [ 26.559863][ T390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.559889][ T390] dump_stack+0x19/0x20 [ 26.559922][ T390] should_fail_ex+0x3c2/0x510 [ 26.559944][ T390] should_fail_alloc_page+0xec/0x110 [ 26.559965][ T390] __alloc_pages_noprof+0x1c0/0x7e0 [ 26.559990][ T390] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 26.560016][ T390] ? __kasan_check_write+0x18/0x20 [ 26.560035][ T390] __folio_alloc_noprof+0x14/0x80 [ 26.560061][ T390] folio_prealloc+0x46/0x220 [ 26.560085][ T390] do_pte_missing+0x16af/0x4440 [ 26.560109][ T390] ? __kasan_check_write+0x18/0x20 [ 26.560126][ T390] ? _raw_spin_lock+0x92/0x120 [ 26.560144][ T390] ? pte_marker_clear+0x1b0/0x1b0 [ 26.560165][ T390] ? __pmd_alloc+0x5a6/0x9a0 [ 26.560188][ T390] ? kasan_save_track+0x4f/0x80 [ 26.560206][ T390] ? kasan_save_track+0x3e/0x80 [ 26.560225][ T390] ? mas_preallocate+0x79b/0xc90 [ 26.560245][ T390] ? vma_link+0x12b/0x6c0 [ 26.560263][ T390] ? insert_vm_struct+0x2d5/0x3b0 [ 26.560282][ T390] ? do_execveat_common+0x199/0xae0 [ 26.560298][ T390] ? x64_sys_call+0x12c4/0x2ee0 [ 26.560317][ T390] ? mas_destroy+0x2768/0x3050 [ 26.560341][ T390] handle_mm_fault+0x1189/0x1ba0 [ 26.560364][ T390] ? __cfi_handle_mm_fault+0x10/0x10 [ 26.560386][ T390] ? unwind_get_return_address+0x51/0x90 [ 26.560410][ T390] ? __cfi_find_vma+0x10/0x10 [ 26.560427][ T390] ? vma_is_secretmem+0x11/0x50 [ 26.560453][ T390] ? check_vma_flags+0x2a5/0x3a0 [ 26.560477][ T390] __get_user_pages+0x114b/0x22d0 [ 26.560501][ T390] ? populate_vma_page_range+0x220/0x220 [ 26.560525][ T390] ? rwsem_read_trylock+0x275/0x5a0 [ 26.560551][ T390] get_user_pages_remote+0x377/0xb80 [ 26.560574][ T390] ? down_read+0x7f/0xe0 [ 26.560597][ T390] ? __cfi_get_user_pages_remote+0x10/0x10 [ 26.560619][ T390] ? __kasan_check_read+0x15/0x20 [ 26.560636][ T390] ? __vm_enough_memory+0x11e/0x380 [ 26.560655][ T390] ? security_vm_enough_memory_mm+0x257/0x270 [ 26.560676][ T390] get_arg_page+0x24c/0x520 [ 26.560700][ T390] ? copy_string_kernel+0x2e0/0x2e0 [ 26.560725][ T390] ? __kasan_check_write+0x18/0x20 [ 26.560742][ T390] ? up_write+0x66/0x280 [ 26.560765][ T390] ? copy_string_kernel+0x20/0x2e0 [ 26.560789][ T390] copy_string_kernel+0x17a/0x2e0 [ 26.560819][ T390] do_execveat_common+0x7de/0xae0 [ 26.560835][ T390] ? __kasan_check_write+0x18/0x20 [ 26.560853][ T390] ? getname_flags+0x203/0x6b0 [ 26.560874][ T390] __x64_sys_execve+0x96/0xb0 [ 26.560889][ T390] x64_sys_call+0x12c4/0x2ee0 [ 26.560911][ T390] do_syscall_64+0x57/0xf0 [ 26.560927][ T390] ? clear_bhb_loop+0x50/0xa0 [ 26.560948][ T390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.560968][ T390] RIP: 0033:0x7fe78a19e159 [ 26.560984][ T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.561000][ T390] RSP: 002b:00007fe78b052028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 26.561026][ T390] RAX: ffffffffffffffda RBX: 00007fe78a426090 RCX: 00007fe78a19e159 [ 26.561039][ T390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 26.561050][ T390] RBP: 00007fe78a23506b R08: 0000000000000000 R09: 0000000000000000 [ 26.561061][ T390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.561072][ T390] R13: 00007fe78a426128 R14: 00007fe78a426090 R15: 00007ffe42be8838 [ 26.561086][ T390] [ 26.770166][ T311] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 26.948866][ T45] usb 3-1: device descriptor read/64, error -71 [ 27.103819][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 27.103840][ T36] audit: type=1400 audit(1790041941.730:130): avc: denied { read write } for pid=367 comm="syz.3.18" name="lp0" dev="devtmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 27.159757][ T36] audit: type=1400 audit(1790041941.730:131): avc: denied { open } for pid=367 comm="syz.3.18" path="/dev/usb/lp0" dev="devtmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 27.188113][ T391] loop0: detected capacity change from 0 to 65536 [ 27.189795][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.234237][ T36] audit: type=1400 audit(1790041941.860:132): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.248512][ T393] fuse: Bad value for 'fd' [ 27.254739][ T36] audit: type=1400 audit(1790041941.860:133): avc: denied { read write } for pid=392 comm="syz.1.23" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.282780][ T36] audit: type=1400 audit(1790041941.860:134): avc: denied { open } for pid=392 comm="syz.1.23" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.313242][ T36] audit: type=1400 audit(1790041941.860:135): avc: denied { mounton } for pid=392 comm="syz.1.23" path="/6/file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 27.339907][ T45] usb 3-1: device descriptor read/64, error -71 [ 27.579826][ T45] usb 3-1: device descriptor read/64, error -71 [ 27.639809][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.689883][ T45] usb usb3-port1: attempt power cycle [ 27.789761][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 27.796336][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.807575][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.820829][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.827438][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 27.836843][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.845486][ T9] usb 1-1: config 0 descriptor?? [ 27.872575][ T311] usb 4-1: USB disconnect, device number 2 [ 27.887979][ T311] usblp0: removed [ 28.029834][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.051447][ T45] usb 3-1: device descriptor read/8, error -71 [ 28.170582][ T36] audit: type=1400 audit(1790041942.800:136): avc: denied { getattr } for pid=408 comm="syz.1.28" path="/" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.205963][ T45] usb 3-1: device descriptor read/8, error -71 [ 28.262757][ T9] input: HID 046d:c215 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C215.0001/input/input4 [ 28.289665][ T9] logitech 0003:046D:C215.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.0-1/input0 [ 28.459798][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.469249][ T310] usb 1-1: USB disconnect, device number 2 [ 28.483964][ T45] usb 3-1: device descriptor read/8, error -71 [ 28.530077][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.620397][ T45] usb 3-1: device descriptor read/8, error -71 [ 28.651547][ T416] Invalid argument reading file caps for ./file0 [ 28.658014][ T36] audit: type=1400 audit(1790041943.280:137): avc: denied { read } for pid=415 comm="syz.2.30" dev="nsfs" ino=4026532309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.694839][ T36] audit: type=1400 audit(1790041943.280:138): avc: denied { open } for pid=415 comm="syz.2.30" path="net:[4026532309]" dev="nsfs" ino=4026532309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.721199][ T36] audit: type=1400 audit(1790041943.280:139): avc: denied { create } for pid=415 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.749897][ T45] usb usb3-port1: unable to enumerate USB device [ 28.757422][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.771870][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 28.782733][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.798114][ T311] usb 2-1: Product: syz [ 28.802441][ T311] usb 2-1: Manufacturer: syz [ 28.807347][ T311] usb 2-1: SerialNumber: syz [ 28.813420][ T418] FAULT_INJECTION: forcing a failure. [ 28.813420][ T418] name failslab, interval 1, probability 0, space 0, times 1 [ 28.817527][ T311] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 28.832216][ T311] cdc_wdm 2-1:1.0: Unknown control protocol [ 28.838371][ T418] CPU: 0 UID: 0 PID: 418 Comm: syz.2.31 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 28.838402][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.838414][ T418] Call Trace: [ 28.838420][ T418] [ 28.838428][ T418] __dump_stack+0x21/0x30 [ 28.838459][ T418] dump_stack_lvl+0x140/0x1c0 [ 28.838485][ T418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.838514][ T418] dump_stack+0x19/0x20 [ 28.838546][ T418] should_fail_ex+0x3c2/0x510 [ 28.838570][ T418] should_failslab+0xac/0x100 [ 28.838595][ T418] kmem_cache_alloc_node_noprof+0x45/0x420 [ 28.838618][ T418] ? dup_task_struct+0xc1/0xd80 [ 28.838643][ T418] ? kasan_save_alloc_info+0x3a/0x50 [ 28.838661][ T418] ? __kasan_kmalloc+0x96/0xb0 [ 28.838685][ T418] ? __kmalloc_cache_noprof+0x23c/0x470 [ 28.838705][ T418] dup_task_struct+0xc1/0xd80 [ 28.838729][ T418] ? __kasan_check_write+0x18/0x20 [ 28.838750][ T418] ? _raw_spin_lock_irq+0x93/0x120 [ 28.838770][ T418] ? copy_process+0x3350/0x3350 [ 28.838795][ T418] ? __kasan_check_write+0x18/0x20 [ 28.838818][ T418] copy_process+0x57c/0x3350 [ 28.838846][ T418] ? kasan_save_alloc_info+0x3a/0x50 [ 28.838864][ T418] ? __cfi_copy_process+0x10/0x10 [ 28.838889][ T418] ? __kmalloc_cache_noprof+0x23c/0x470 [ 28.838911][ T418] ? __kasan_check_write+0x18/0x20 [ 28.838932][ T418] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 28.838964][ T418] vhost_task_create+0x1f7/0x3f0 [ 28.838988][ T418] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 28.839012][ T418] ? __cfi_vhost_task_create+0x10/0x10 [ 28.839035][ T418] ? __cfi_vhost_task_fn+0x10/0x10 [ 28.839056][ T418] ? __kasan_check_write+0x18/0x20 [ 28.839075][ T418] ? mutex_lock+0x97/0x1d0 [ 28.839099][ T418] ? __cfi_mutex_lock+0x10/0x10 [ 28.839121][ T418] ? kernel_text_address+0xa9/0xe0 [ 28.839149][ T418] kvm_mmu_post_init_vm+0x161/0x300 [ 28.839179][ T418] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 28.839206][ T418] ? _parse_integer_limit+0x195/0x1e0 [ 28.839231][ T418] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 28.839259][ T418] ? kstrtoull+0x13b/0x1e0 [ 28.839281][ T418] ? kstrtouint+0x78/0xf0 [ 28.839303][ T418] ? ioctl_has_perm+0x1bc/0x500 [ 28.839325][ T418] ? __asan_memcpy+0x5a/0x80 [ 28.839347][ T418] ? ioctl_has_perm+0x408/0x500 [ 28.839368][ T418] ? has_cap_mac_admin+0xd0/0xd0 [ 28.839389][ T418] ? __kasan_check_write+0x18/0x20 [ 28.839406][ T418] ? mutex_lock_killable+0x97/0x1d0 [ 28.839428][ T418] ? __cfi_mutex_lock_killable+0x10/0x10 [ 28.839450][ T418] ? proc_fail_nth_write+0x184/0x220 [ 28.839479][ T418] kvm_vcpu_ioctl+0xa43/0x1000 [ 28.839498][ T418] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 28.839516][ T418] ? __cfi_vfs_write+0x10/0x10 [ 28.839536][ T418] ? __kasan_check_write+0x18/0x20 [ 28.839554][ T418] ? mutex_unlock+0x90/0x240 [ 28.839574][ T418] ? __cfi_mutex_unlock+0x10/0x10 [ 28.839597][ T418] ? __fget_files+0x2bc/0x330 [ 28.839620][ T418] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.839644][ T418] ? security_file_ioctl+0x3e/0x110 [ 28.839662][ T418] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 28.839679][ T418] __se_sys_ioctl+0x123/0x1b0 [ 28.839708][ T418] __x64_sys_ioctl+0x7f/0xa0 [ 28.839730][ T418] x64_sys_call+0x1878/0x2ee0 [ 28.839748][ T418] do_syscall_64+0x57/0xf0 [ 28.839766][ T418] ? clear_bhb_loop+0x50/0xa0 [ 28.839789][ T418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.839811][ T418] RIP: 0033:0x7ff5bc79e159 [ 28.839829][ T418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.839846][ T418] RSP: 002b:00007ff5bd680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.839868][ T418] RAX: ffffffffffffffda RBX: 00007ff5bca25fa0 RCX: 00007ff5bc79e159 [ 28.839883][ T418] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 28.839896][ T418] RBP: 00007ff5bd680090 R08: 0000000000000000 R09: 0000000000000000 [ 28.839909][ T418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.839921][ T418] R13: 00007ff5bca26038 R14: 00007ff5bca25fa0 R15: 00007ffd2d9542c8 [ 28.839939][ T418] [ 29.969741][ T350] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.120851][ T350] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 30.149785][ T350] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 30.169085][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.278506][ T441] FAULT_INJECTION: forcing a failure. [ 30.278506][ T441] name failslab, interval 1, probability 0, space 0, times 0 [ 30.291438][ T441] CPU: 1 UID: 0 PID: 441 Comm: syz.3.37 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 30.291482][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.291495][ T441] Call Trace: [ 30.291501][ T441] [ 30.291509][ T441] __dump_stack+0x21/0x30 [ 30.291543][ T441] dump_stack_lvl+0x140/0x1c0 [ 30.291571][ T441] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.291609][ T441] dump_stack+0x19/0x20 [ 30.291635][ T441] should_fail_ex+0x3c2/0x510 [ 30.291660][ T441] should_failslab+0xac/0x100 [ 30.291685][ T441] kmem_cache_alloc_node_noprof+0x45/0x420 [ 30.291708][ T441] ? dup_task_struct+0xc1/0xd80 [ 30.291732][ T441] ? kasan_save_alloc_info+0x3a/0x50 [ 30.291752][ T441] ? __kasan_kmalloc+0x96/0xb0 [ 30.291776][ T441] ? __kmalloc_cache_noprof+0x23c/0x470 [ 30.291798][ T441] dup_task_struct+0xc1/0xd80 [ 30.291823][ T441] ? __kasan_check_write+0x18/0x20 [ 30.291842][ T441] ? _raw_spin_lock_irq+0x93/0x120 [ 30.291862][ T441] ? copy_process+0x3350/0x3350 [ 30.291887][ T441] ? __kasan_check_write+0x18/0x20 [ 30.291916][ T441] copy_process+0x57c/0x3350 [ 30.291944][ T441] ? kasan_save_alloc_info+0x3a/0x50 [ 30.291963][ T441] ? __cfi_copy_process+0x10/0x10 [ 30.291987][ T441] ? __kmalloc_cache_noprof+0x23c/0x470 [ 30.292009][ T441] ? __kasan_check_write+0x18/0x20 [ 30.292029][ T441] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 30.292054][ T441] vhost_task_create+0x1f7/0x3f0 [ 30.292075][ T441] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 30.292100][ T441] ? __cfi_vhost_task_create+0x10/0x10 [ 30.292120][ T441] ? __cfi_vhost_task_fn+0x10/0x10 [ 30.292140][ T441] ? __kasan_check_write+0x18/0x20 [ 30.292157][ T441] ? mutex_lock+0x97/0x1d0 [ 30.292176][ T441] ? __cfi_mutex_lock+0x10/0x10 [ 30.292195][ T441] ? kernel_text_address+0xa9/0xe0 [ 30.292219][ T441] kvm_mmu_post_init_vm+0x161/0x300 [ 30.292244][ T441] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 30.292270][ T441] ? _parse_integer_limit+0x195/0x1e0 [ 30.292290][ T441] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 30.292313][ T441] ? kstrtoull+0x13b/0x1e0 [ 30.292330][ T441] ? kstrtouint+0x78/0xf0 [ 30.292348][ T441] ? ioctl_has_perm+0x1bc/0x500 [ 30.292366][ T441] ? __asan_memcpy+0x5a/0x80 [ 30.292383][ T441] ? ioctl_has_perm+0x408/0x500 [ 30.292402][ T441] ? has_cap_mac_admin+0xd0/0xd0 [ 30.292427][ T441] ? __kasan_check_write+0x18/0x20 [ 30.292443][ T441] ? mutex_lock_killable+0x97/0x1d0 [ 30.292463][ T441] ? __cfi_mutex_lock_killable+0x10/0x10 [ 30.292484][ T441] ? proc_fail_nth_write+0x184/0x220 [ 30.292510][ T441] kvm_vcpu_ioctl+0xa43/0x1000 [ 30.292527][ T441] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.292546][ T441] ? __cfi_vfs_write+0x10/0x10 [ 30.292564][ T441] ? __kasan_check_write+0x18/0x20 [ 30.292581][ T441] ? mutex_unlock+0x90/0x240 [ 30.292600][ T441] ? __cfi_mutex_unlock+0x10/0x10 [ 30.292621][ T441] ? __fget_files+0x2bc/0x330 [ 30.292642][ T441] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.292664][ T441] ? security_file_ioctl+0x3e/0x110 [ 30.292683][ T441] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.292699][ T441] __se_sys_ioctl+0x123/0x1b0 [ 30.292720][ T441] __x64_sys_ioctl+0x7f/0xa0 [ 30.292740][ T441] x64_sys_call+0x1878/0x2ee0 [ 30.292756][ T441] do_syscall_64+0x57/0xf0 [ 30.292771][ T441] ? clear_bhb_loop+0x50/0xa0 [ 30.292792][ T441] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.292815][ T441] RIP: 0033:0x7ff36759e159 [ 30.292830][ T441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.292845][ T441] RSP: 002b:00007ff3684dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.292865][ T441] RAX: ffffffffffffffda RBX: 00007ff367825fa0 RCX: 00007ff36759e159 [ 30.292878][ T441] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 30.292889][ T441] RBP: 00007ff3684dd090 R08: 0000000000000000 R09: 0000000000000000 [ 30.292907][ T441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.292918][ T441] R13: 00007ff367826038 R14: 00007ff367825fa0 R15: 00007ffe5fb394c8 [ 30.292932][ T441] [ 30.912668][ T350] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 30.989950][ T350] lg-g15 0003:046D:C222.0002: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 31.035630][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.112248][ T311] usb 3-1: USB disconnect, device number 6 [ 31.199749][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 31.206031][ T64] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.229765][ T64] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.242769][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.249499][ T64] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 31.258965][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.269951][ T64] usb 4-1: config 0 descriptor?? [ 31.290215][ T311] usb 2-1: USB disconnect, device number 2 [ 31.679722][ T64] input: HID 046d:c215 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C215.0003/input/input6 [ 31.679847][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.713119][ T466] FAULT_INJECTION: forcing a failure. [ 31.713119][ T466] name failslab, interval 1, probability 0, space 0, times 0 [ 31.726460][ T466] CPU: 0 UID: 0 PID: 466 Comm: syz.2.45 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 31.726493][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.726504][ T466] Call Trace: [ 31.726510][ T466] [ 31.726518][ T466] __dump_stack+0x21/0x30 [ 31.726551][ T466] dump_stack_lvl+0x140/0x1c0 [ 31.726579][ T466] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.726607][ T466] dump_stack+0x19/0x20 [ 31.726636][ T466] should_fail_ex+0x3c2/0x510 [ 31.726662][ T466] should_failslab+0xac/0x100 [ 31.726688][ T466] kmem_cache_alloc_node_noprof+0x45/0x420 [ 31.726713][ T466] ? dup_task_struct+0xc1/0xd80 [ 31.726739][ T466] ? kasan_save_alloc_info+0x3a/0x50 [ 31.726758][ T466] ? __kasan_kmalloc+0x96/0xb0 [ 31.726784][ T466] ? __kmalloc_cache_noprof+0x23c/0x470 [ 31.726808][ T466] dup_task_struct+0xc1/0xd80 [ 31.726833][ T466] ? __kasan_check_write+0x18/0x20 [ 31.726853][ T466] ? _raw_spin_lock_irq+0x93/0x120 [ 31.726876][ T466] ? copy_process+0x3350/0x3350 [ 31.726901][ T466] ? __kasan_check_write+0x18/0x20 [ 31.726921][ T466] copy_process+0x57c/0x3350 [ 31.726947][ T466] ? kasan_save_alloc_info+0x3a/0x50 [ 31.726967][ T466] ? __cfi_copy_process+0x10/0x10 [ 31.726995][ T466] ? __kmalloc_cache_noprof+0x23c/0x470 [ 31.727017][ T466] ? __kasan_check_write+0x18/0x20 [ 31.727037][ T466] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 31.727065][ T466] vhost_task_create+0x1f7/0x3f0 [ 31.727087][ T466] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 31.727110][ T466] ? __cfi_vhost_task_create+0x10/0x10 [ 31.727135][ T466] ? __cfi_vhost_task_fn+0x10/0x10 [ 31.727157][ T466] ? __kasan_check_write+0x18/0x20 [ 31.727177][ T466] ? mutex_lock+0x97/0x1d0 [ 31.727199][ T466] ? __cfi_mutex_lock+0x10/0x10 [ 31.727225][ T466] ? kernel_text_address+0xa9/0xe0 [ 31.727253][ T466] kvm_mmu_post_init_vm+0x161/0x300 [ 31.727282][ T466] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 31.727312][ T466] ? _parse_integer_limit+0x195/0x1e0 [ 31.727336][ T466] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 31.727363][ T466] ? kstrtoull+0x13b/0x1e0 [ 31.727388][ T466] ? kstrtouint+0x78/0xf0 [ 31.727419][ T466] ? ioctl_has_perm+0x1bc/0x500 [ 31.727440][ T466] ? __asan_memcpy+0x5a/0x80 [ 31.727463][ T466] ? ioctl_has_perm+0x408/0x500 [ 31.727485][ T466] ? has_cap_mac_admin+0xd0/0xd0 [ 31.727511][ T466] ? __kasan_check_write+0x18/0x20 [ 31.727533][ T466] ? mutex_lock_killable+0x97/0x1d0 [ 31.727559][ T466] ? __cfi_mutex_lock_killable+0x10/0x10 [ 31.727583][ T466] ? proc_fail_nth_write+0x184/0x220 [ 31.727614][ T466] kvm_vcpu_ioctl+0xa43/0x1000 [ 31.727638][ T466] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 31.727658][ T466] ? __cfi_vfs_write+0x10/0x10 [ 31.727679][ T466] ? __kasan_check_write+0x18/0x20 [ 31.727702][ T466] ? mutex_unlock+0x90/0x240 [ 31.727725][ T466] ? __cfi_mutex_unlock+0x10/0x10 [ 31.727750][ T466] ? __fget_files+0x2bc/0x330 [ 31.727774][ T466] ? bpf_lsm_file_ioctl+0xd/0x20 [ 31.727804][ T466] ? security_file_ioctl+0x3e/0x110 [ 31.727824][ T466] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 31.727843][ T466] __se_sys_ioctl+0x123/0x1b0 [ 31.727872][ T466] __x64_sys_ioctl+0x7f/0xa0 [ 31.727896][ T466] x64_sys_call+0x1878/0x2ee0 [ 31.727916][ T466] do_syscall_64+0x57/0xf0 [ 31.727935][ T466] ? clear_bhb_loop+0x50/0xa0 [ 31.727964][ T466] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.727988][ T466] RIP: 0033:0x7ff5bc79e159 [ 31.728006][ T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.728023][ T466] RSP: 002b:00007ff5bd680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.728049][ T466] RAX: ffffffffffffffda RBX: 00007ff5bca25fa0 RCX: 00007ff5bc79e159 [ 31.728065][ T466] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 31.728079][ T466] RBP: 00007ff5bd680090 R08: 0000000000000000 R09: 0000000000000000 [ 31.728092][ T466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.728105][ T466] R13: 00007ff5bca26038 R14: 00007ff5bca25fa0 R15: 00007ffd2d9542c8 [ 31.728125][ T466] [ 31.728336][ T64] logitech 0003:046D:C215.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.3-1/input0 [ 31.869728][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 31.918719][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.922018][ T311] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 31.927153][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.943893][ T311] usb 2-1: config 1 has no interface number 0 [ 31.963873][ T64] usb 4-1: USB disconnect, device number 3 [ 31.968379][ T311] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 32.200541][ T311] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 32.210639][ T311] usb 2-1: config 1 interface 105 has no altsetting 0 [ 32.218797][ T311] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 32.228019][ T311] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 32.236255][ T311] usb 2-1: Product: syz [ 32.240490][ T311] usb 2-1: Manufacturer: syz [ 32.245114][ T311] usb 2-1: SerialNumber: syz [ 32.252572][ T460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.261925][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 32.261943][ T36] audit: type=1400 audit(1790041946.890:155): avc: denied { write } for pid=468 comm="syz.2.46" name="rt_cache" dev="proc" ino=4026532483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.298212][ T460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.305928][ T36] audit: type=1400 audit(1790041946.930:156): avc: denied { read } for pid=468 comm="syz.2.46" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.329844][ T36] audit: type=1400 audit(1790041946.930:157): avc: denied { open } for pid=468 comm="syz.2.46" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.357057][ T36] audit: type=1400 audit(1790041946.930:158): avc: denied { ioctl } for pid=468 comm="syz.2.46" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.514688][ T36] audit: type=1400 audit(1790041947.120:159): avc: denied { mount } for pid=475 comm="syz.3.48" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.559737][ T36] audit: type=1400 audit(1790041947.140:160): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.579745][ T350] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 32.736579][ T460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.745163][ T460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.755245][ T350] usb 3-1: Using ep0 maxpacket: 16 [ 32.765733][ T350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.775970][ T350] usb 3-1: too many configurations: 34, using maximum allowed: 8 [ 32.793238][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.806047][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.821869][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.839714][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.850968][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.870463][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.890435][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.901516][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.923672][ T350] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.939889][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.959494][ T350] usb 3-1: Product: syz [ 32.963929][ T350] usb 3-1: Manufacturer: syz [ 32.968624][ T350] usb 3-1: SerialNumber: syz [ 33.348608][ T479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 33.375661][ T311] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 33.386873][ T311] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 33.403828][ T311] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e2:da:27:c1:7f:3d [ 33.425134][ T311] usb 2-1: USB disconnect, device number 3 [ 33.449612][ T311] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 33.470285][ T36] audit: type=1400 audit(1790041948.100:161): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.513285][ T311] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 33.528415][ T311] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 33.538080][ T311] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 33.711019][ T350] usb 3-1: USB disconnect, device number 7 [ 33.805520][ T491] netlink: 'syz.2.55': attribute type 4 has an invalid length. [ 33.813888][ T491] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.55'. [ 33.850174][ T491] overlayfs: overlapping lowerdir path [ 34.219748][ T350] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.362242][ T504] SELinux: failed to load policy [ 34.409807][ T36] audit: type=1400 audit(1790041949.030:162): avc: denied { create } for pid=506 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.440354][ T350] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 34.449751][ T36] audit: type=1400 audit(1790041949.070:163): avc: denied { write } for pid=506 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.459773][ T350] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 34.509338][ T36] audit: type=1400 audit(1790041949.130:164): avc: denied { setopt } for pid=508 comm="syz.1.62" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.512101][ T350] usb 3-1: config 0 interface 0 has no altsetting 0 [ 34.564977][ T350] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 34.584002][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.605180][ T350] usb 3-1: config 0 descriptor?? [ 34.666501][ T45] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.693531][ T45] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.817825][ T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.827333][ T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.921136][ T512] netlink: 'syz.1.63': attribute type 30 has an invalid length. [ 35.052743][ T350] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 35.060445][ T350] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 35.067541][ T350] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 35.074873][ T350] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 35.081948][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.089635][ T350] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 35.097194][ T350] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 35.106066][ T350] wacom 0003:056A:0084.0005: hidraw0: USB HID v10.03 Device [HID 056a:0084] on usb-dummy_hcd.2-1/input0 [ 35.189762][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.249808][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 35.256296][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.279810][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.292152][ T350] usb 3-1: USB disconnect, device number 8 [ 35.299191][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 35.310754][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.320259][ T9] usb 1-1: config 0 descriptor?? [ 35.364704][ T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.375781][ T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 35.388908][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 35.395709][ T45] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 35.405033][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.417859][ T45] usb 2-1: config 0 descriptor?? [ 35.728309][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 35.734488][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.746256][ T9] usb 1-1: USB disconnect, device number 3 [ 35.826687][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 35.841630][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.857656][ T45] usb 2-1: USB disconnect, device number 4 [ 36.261097][ T534] loop0: detected capacity change from 0 to 65536 [ 36.316199][ T536] FAULT_INJECTION: forcing a failure. [ 36.316199][ T536] name failslab, interval 1, probability 0, space 0, times 0 [ 36.334414][ T536] CPU: 1 UID: 0 PID: 536 Comm: syz.0.71 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 36.334451][ T536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.334463][ T536] Call Trace: [ 36.334470][ T536] [ 36.334477][ T536] __dump_stack+0x21/0x30 [ 36.334512][ T536] dump_stack_lvl+0x140/0x1c0 [ 36.334540][ T536] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.334571][ T536] dump_stack+0x19/0x20 [ 36.334597][ T536] should_fail_ex+0x3c2/0x510 [ 36.334623][ T536] should_failslab+0xac/0x100 [ 36.334649][ T536] kmem_cache_alloc_node_noprof+0x45/0x420 [ 36.334673][ T536] ? dup_task_struct+0xc1/0xd80 [ 36.334698][ T536] ? kasan_save_alloc_info+0x3a/0x50 [ 36.334717][ T536] ? __kasan_kmalloc+0x96/0xb0 [ 36.334752][ T536] ? __kmalloc_cache_noprof+0x23c/0x470 [ 36.334775][ T536] dup_task_struct+0xc1/0xd80 [ 36.334801][ T536] ? __kasan_check_write+0x18/0x20 [ 36.334820][ T536] ? _raw_spin_lock_irq+0x93/0x120 [ 36.334841][ T536] ? copy_process+0x3350/0x3350 [ 36.334867][ T536] ? __kasan_check_write+0x18/0x20 [ 36.334888][ T536] copy_process+0x57c/0x3350 [ 36.334916][ T536] ? kasan_save_alloc_info+0x3a/0x50 [ 36.334936][ T536] ? __cfi_copy_process+0x10/0x10 [ 36.334961][ T536] ? __kmalloc_cache_noprof+0x23c/0x470 [ 36.334983][ T536] ? __kasan_check_write+0x18/0x20 [ 36.335003][ T536] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 36.335028][ T536] vhost_task_create+0x1f7/0x3f0 [ 36.335051][ T536] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 36.335076][ T536] ? __cfi_vhost_task_create+0x10/0x10 [ 36.335099][ T536] ? __cfi_vhost_task_fn+0x10/0x10 [ 36.335120][ T536] ? __kasan_check_write+0x18/0x20 [ 36.335141][ T536] ? mutex_lock+0x97/0x1d0 [ 36.335165][ T536] ? __cfi_mutex_lock+0x10/0x10 [ 36.335187][ T536] ? kernel_text_address+0xa9/0xe0 [ 36.335216][ T536] kvm_mmu_post_init_vm+0x161/0x300 [ 36.335245][ T536] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 36.335273][ T536] ? _parse_integer_limit+0x195/0x1e0 [ 36.335297][ T536] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 36.335325][ T536] ? kstrtoull+0x13b/0x1e0 [ 36.335348][ T536] ? kstrtouint+0x78/0xf0 [ 36.335371][ T536] ? ioctl_has_perm+0x1bc/0x500 [ 36.335392][ T536] ? __asan_memcpy+0x5a/0x80 [ 36.335413][ T536] ? ioctl_has_perm+0x408/0x500 [ 36.335434][ T536] ? has_cap_mac_admin+0xd0/0xd0 [ 36.335456][ T536] ? __kasan_check_write+0x18/0x20 [ 36.335476][ T536] ? mutex_lock_killable+0x97/0x1d0 [ 36.335501][ T536] ? __cfi_mutex_lock_killable+0x10/0x10 [ 36.335525][ T536] ? proc_fail_nth_write+0x184/0x220 [ 36.335557][ T536] kvm_vcpu_ioctl+0xa43/0x1000 [ 36.335579][ T536] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 36.335598][ T536] ? __cfi_vfs_write+0x10/0x10 [ 36.335620][ T536] ? __kasan_check_write+0x18/0x20 [ 36.335641][ T536] ? mutex_unlock+0x90/0x240 [ 36.335665][ T536] ? __cfi_mutex_unlock+0x10/0x10 [ 36.335690][ T536] ? __fget_files+0x2bc/0x330 [ 36.335715][ T536] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.335753][ T536] ? security_file_ioctl+0x3e/0x110 [ 36.335775][ T536] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 36.335794][ T536] __se_sys_ioctl+0x123/0x1b0 [ 36.335821][ T536] __x64_sys_ioctl+0x7f/0xa0 [ 36.335847][ T536] x64_sys_call+0x1878/0x2ee0 [ 36.335867][ T536] do_syscall_64+0x57/0xf0 [ 36.335886][ T536] ? clear_bhb_loop+0x50/0xa0 [ 36.335911][ T536] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.335936][ T536] RIP: 0033:0x7fc6e139e159 [ 36.335955][ T536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.335971][ T536] RSP: 002b:00007fc6e21cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.335994][ T536] RAX: ffffffffffffffda RBX: 00007fc6e1625fa0 RCX: 00007fc6e139e159 [ 36.336010][ T536] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 36.336023][ T536] RBP: 00007fc6e21cc090 R08: 0000000000000000 R09: 0000000000000000 [ 36.336037][ T536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.336050][ T536] R13: 00007fc6e1626038 R14: 00007fc6e1625fa0 R15: 00007ffed9981368 [ 36.336073][ T536] [ 36.879854][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 36.888768][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 37.046694][ T549] mmap: syz.1.76 (549) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.098563][ T551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.179746][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.329774][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 37.336188][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 37.344725][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 37.353523][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 37.362672][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.372409][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.382270][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.395445][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 37.406386][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.416285][ T45] usb 3-1: config 0 descriptor?? [ 37.469753][ T350] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.549811][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.629895][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.649755][ T350] usb 1-1: Using ep0 maxpacket: 16 [ 37.660568][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.675265][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.685389][ T350] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 37.694729][ T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.703924][ T350] usb 1-1: config 0 descriptor?? [ 37.725349][ T310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 37.736463][ T310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 37.746530][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 37.755790][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.987291][ T562] loop0: detected capacity change from 0 to 65536 [ 38.111913][ T350] usbhid 1-1:0.0: can't add hid device: -71 [ 38.119811][ T350] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.139847][ T350] usb 1-1: USB disconnect, device number 4 [ 38.175547][ T310] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 38.239950][ T310] lg-g15 0003:046D:C222.0006: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 38.375544][ T350] usb 2-1: USB disconnect, device number 5 [ 38.630728][ T566] input: syz1 as /devices/virtual/input/input11 [ 38.641100][ T566] FAULT_INJECTION: forcing a failure. [ 38.641100][ T566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.655834][ T566] CPU: 1 UID: 0 PID: 566 Comm: syz.0.81 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 38.655868][ T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.655879][ T566] Call Trace: [ 38.655886][ T566] [ 38.655894][ T566] __dump_stack+0x21/0x30 [ 38.655927][ T566] dump_stack_lvl+0x140/0x1c0 [ 38.655954][ T566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.655982][ T566] ? check_stack_object+0x138/0x150 [ 38.656004][ T566] dump_stack+0x19/0x20 [ 38.656029][ T566] should_fail_ex+0x3c2/0x510 [ 38.656054][ T566] should_fail+0xf/0x20 [ 38.656076][ T566] should_fail_usercopy+0x1e/0x30 [ 38.656102][ T566] _copy_to_user+0x24/0xa0 [ 38.656132][ T566] simple_read_from_buffer+0xed/0x160 [ 38.656160][ T566] proc_fail_nth_read+0x1aa/0x220 [ 38.656190][ T566] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.656220][ T566] ? bpf_lsm_file_permission+0xd/0x20 [ 38.656247][ T566] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.656276][ T566] vfs_read+0x288/0xc70 [ 38.656296][ T566] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 38.656317][ T566] ? __cfi_vfs_read+0x10/0x10 [ 38.656336][ T566] ? __kasan_check_write+0x18/0x20 [ 38.656355][ T566] ? mutex_lock+0x97/0x1d0 [ 38.656378][ T566] ? __cfi_mutex_lock+0x10/0x10 [ 38.656404][ T566] ksys_read+0x145/0x260 [ 38.656425][ T566] ? __cfi_ksys_read+0x10/0x10 [ 38.656446][ T566] ? __kasan_check_write+0x18/0x20 [ 38.656465][ T566] ? fput+0x1a4/0x230 [ 38.656490][ T566] ? __kasan_check_read+0x15/0x20 [ 38.656512][ T566] __x64_sys_read+0x7f/0x90 [ 38.656534][ T566] x64_sys_call+0x2638/0x2ee0 [ 38.656553][ T566] do_syscall_64+0x57/0xf0 [ 38.656572][ T566] ? clear_bhb_loop+0x50/0xa0 [ 38.656597][ T566] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.656622][ T566] RIP: 0033:0x7fc6e135e98e [ 38.656639][ T566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.656655][ T566] RSP: 002b:00007fc6e21cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.656678][ T566] RAX: ffffffffffffffda RBX: 00007fc6e21cc6c0 RCX: 00007fc6e135e98e [ 38.656693][ T566] RDX: 000000000000000f RSI: 00007fc6e21cc0a0 RDI: 0000000000000005 [ 38.656706][ T566] RBP: 00007fc6e21cc090 R08: 0000000000000000 R09: 0000000000000000 [ 38.656718][ T566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.656729][ T566] R13: 00007fc6e1626038 R14: 00007fc6e1625fa0 R15: 00007ffed9981368 [ 38.656757][ T566] [ 38.925021][ T310] usb 3-1: USB disconnect, device number 9 [ 38.942639][ T310] usblp0: removed [ 38.988601][ T571] FAULT_INJECTION: forcing a failure. [ 38.988601][ T571] name failslab, interval 1, probability 0, space 0, times 0 [ 39.001337][ T571] CPU: 0 UID: 0 PID: 571 Comm: syz.0.83 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 39.001372][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.001384][ T571] Call Trace: [ 39.001391][ T571] [ 39.001400][ T571] __dump_stack+0x21/0x30 [ 39.001435][ T571] dump_stack_lvl+0x140/0x1c0 [ 39.001463][ T571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.001493][ T571] dump_stack+0x19/0x20 [ 39.001519][ T571] should_fail_ex+0x3c2/0x510 [ 39.001545][ T571] should_failslab+0xac/0x100 [ 39.001571][ T571] kmem_cache_alloc_node_noprof+0x45/0x420 [ 39.001595][ T571] ? dup_task_struct+0xc1/0xd80 [ 39.001621][ T571] ? kasan_save_alloc_info+0x3a/0x50 [ 39.001640][ T571] ? __kasan_kmalloc+0x96/0xb0 [ 39.001663][ T571] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.001686][ T571] dup_task_struct+0xc1/0xd80 [ 39.001710][ T571] ? __kasan_check_write+0x18/0x20 [ 39.001731][ T571] ? _raw_spin_lock_irq+0x93/0x120 [ 39.001750][ T571] ? copy_process+0x3350/0x3350 [ 39.001776][ T571] ? __kasan_check_write+0x18/0x20 [ 39.001798][ T571] copy_process+0x57c/0x3350 [ 39.001825][ T571] ? kasan_save_alloc_info+0x3a/0x50 [ 39.001844][ T571] ? __cfi_copy_process+0x10/0x10 [ 39.001868][ T571] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.001891][ T571] ? __kasan_check_write+0x18/0x20 [ 39.001912][ T571] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 39.001936][ T571] vhost_task_create+0x1f7/0x3f0 [ 39.001958][ T571] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 39.001983][ T571] ? __cfi_vhost_task_create+0x10/0x10 [ 39.002006][ T571] ? __cfi_vhost_task_fn+0x10/0x10 [ 39.002028][ T571] ? __kasan_check_write+0x18/0x20 [ 39.002048][ T571] ? mutex_lock+0x97/0x1d0 [ 39.002071][ T571] ? __cfi_mutex_lock+0x10/0x10 [ 39.002094][ T571] ? kernel_text_address+0xa9/0xe0 [ 39.002123][ T571] kvm_mmu_post_init_vm+0x161/0x300 [ 39.002154][ T571] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 39.002181][ T571] ? _parse_integer_limit+0x195/0x1e0 [ 39.002205][ T571] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 39.002241][ T571] ? kstrtoull+0x13b/0x1e0 [ 39.002263][ T571] ? kstrtouint+0x78/0xf0 [ 39.002286][ T571] ? ioctl_has_perm+0x1bc/0x500 [ 39.002308][ T571] ? __asan_memcpy+0x5a/0x80 [ 39.002329][ T571] ? ioctl_has_perm+0x408/0x500 [ 39.002351][ T571] ? has_cap_mac_admin+0xd0/0xd0 [ 39.002373][ T571] ? __kasan_check_write+0x18/0x20 [ 39.002393][ T571] ? mutex_lock_killable+0x97/0x1d0 [ 39.002418][ T571] ? __cfi_mutex_lock_killable+0x10/0x10 [ 39.002442][ T571] ? proc_fail_nth_write+0x184/0x220 [ 39.002474][ T571] kvm_vcpu_ioctl+0xa43/0x1000 [ 39.002495][ T571] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 39.002517][ T571] ? __cfi_vfs_write+0x10/0x10 [ 39.002539][ T571] ? __kasan_check_write+0x18/0x20 [ 39.002560][ T571] ? mutex_unlock+0x90/0x240 [ 39.002583][ T571] ? __cfi_mutex_unlock+0x10/0x10 [ 39.002609][ T571] ? __fget_files+0x2bc/0x330 [ 39.002634][ T571] ? bpf_lsm_file_ioctl+0xd/0x20 [ 39.002660][ T571] ? security_file_ioctl+0x3e/0x110 [ 39.002682][ T571] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 39.002701][ T571] __se_sys_ioctl+0x123/0x1b0 [ 39.002727][ T571] __x64_sys_ioctl+0x7f/0xa0 [ 39.002751][ T571] x64_sys_call+0x1878/0x2ee0 [ 39.002771][ T571] do_syscall_64+0x57/0xf0 [ 39.002790][ T571] ? clear_bhb_loop+0x50/0xa0 [ 39.002816][ T571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.002841][ T571] RIP: 0033:0x7fc6e139e159 [ 39.002859][ T571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.002877][ T571] RSP: 002b:00007fc6e21cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.002902][ T571] RAX: ffffffffffffffda RBX: 00007fc6e1625fa0 RCX: 00007fc6e139e159 [ 39.002917][ T571] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 39.002930][ T571] RBP: 00007fc6e21cc090 R08: 0000000000000000 R09: 0000000000000000 [ 39.002943][ T571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.002957][ T571] R13: 00007fc6e1626038 R14: 00007fc6e1625fa0 R15: 00007ffed9981368 [ 39.002974][ T571] [ 39.712183][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 39.712229][ T36] audit: type=1400 audit(1790041954.340:180): avc: denied { mount } for pid=582 comm="syz.0.86" name="/" dev="configfs" ino=1259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.814066][ T36] audit: type=1400 audit(1790041954.380:181): avc: denied { search } for pid=582 comm="syz.0.86" name="/" dev="configfs" ino=1259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.904289][ T591] FAULT_INJECTION: forcing a failure. [ 39.904289][ T591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.907362][ T36] audit: type=1400 audit(1790041954.380:182): avc: denied { ioctl } for pid=582 comm="syz.0.86" path="socket:[8323]" dev="sockfs" ino=8323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.917731][ T591] CPU: 0 UID: 0 PID: 591 Comm: syz.1.88 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 39.917760][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.917771][ T591] Call Trace: [ 39.917778][ T591] [ 39.917785][ T591] __dump_stack+0x21/0x30 [ 39.917816][ T591] dump_stack_lvl+0x140/0x1c0 [ 39.917842][ T591] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.917869][ T591] dump_stack+0x19/0x20 [ 39.917894][ T591] should_fail_ex+0x3c2/0x510 [ 39.917918][ T591] should_fail+0xf/0x20 [ 39.917939][ T591] should_fail_usercopy+0x1e/0x30 [ 39.917963][ T591] _copy_from_user+0x20/0xa0 [ 39.917990][ T591] do_ipv6_getsockopt+0x2b2/0x1fd0 [ 39.918016][ T591] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 39.918041][ T591] ? __cfi_do_ipv6_getsockopt+0x10/0x10 [ 39.918066][ T591] ? __cfi_bpf_lsm_kernfs_init_security+0x10/0x10 [ 39.918092][ T591] ? _parse_integer_limit+0x195/0x1e0 [ 39.918114][ T591] ? _parse_integer+0x2e/0x40 [ 39.918134][ T591] ? avc_has_perm_noaudit+0x26b/0x360 [ 39.918158][ T591] ? __asan_memcpy+0x5a/0x80 [ 39.918178][ T591] ? avc_has_perm_noaudit+0x289/0x360 [ 39.918202][ T591] ? avc_has_perm+0x155/0x240 [ 39.918224][ T591] ? __cfi_avc_has_perm+0x10/0x10 [ 39.918249][ T591] ipv6_getsockopt+0xbe/0x2b0 [ 39.918273][ T591] ? __cfi_bpf_lsm_kernfs_init_security+0x10/0x10 [ 39.918297][ T591] ? __cfi_bpf_lsm_kernfs_init_security+0x10/0x10 [ 39.918322][ T591] ? __cfi_ipv6_getsockopt+0x10/0x10 [ 39.918347][ T591] ? vfs_write+0xbcf/0xfd0 [ 39.918376][ T591] tcp_getsockopt+0x103/0x130 [ 39.918395][ T591] ? __cfi_vfs_write+0x10/0x10 [ 39.918416][ T591] sock_common_getsockopt+0xaf/0xd0 [ 39.918436][ T591] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 39.918455][ T591] do_sock_getsockopt+0x3a4/0x6c0 [ 39.918481][ T591] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 39.918506][ T591] ? __fget_files+0x2bc/0x330 [ 39.918531][ T591] __x64_sys_getsockopt+0x1aa/0x250 [ 39.918558][ T591] x64_sys_call+0x10db/0x2ee0 [ 39.918575][ T591] do_syscall_64+0x57/0xf0 [ 39.918594][ T591] ? clear_bhb_loop+0x50/0xa0 [ 39.918618][ T591] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.918640][ T591] RIP: 0033:0x7fe78a19e159 [ 39.918657][ T591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.918673][ T591] RSP: 002b:00007fe78b073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 39.918695][ T591] RAX: ffffffffffffffda RBX: 00007fe78a425fa0 RCX: 00007fe78a19e159 [ 39.918710][ T591] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 39.918722][ T591] RBP: 00007fe78b073090 R08: 0000200000000080 R09: 0000000000000000 [ 39.918735][ T591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.918748][ T591] R13: 00007fe78a426038 R14: 00007fe78a425fa0 R15: 00007ffe42be8838 [ 39.918764][ T591] [ 40.231100][ T36] audit: type=1400 audit(1790041954.380:183): avc: denied { setopt } for pid=582 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.280666][ T36] audit: type=1400 audit(1790041954.880:184): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.409639][ T36] audit: type=1400 audit(1790041955.030:185): avc: denied { create } for pid=599 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.559769][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.719800][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 40.726258][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 40.736013][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 40.744920][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 40.754170][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.764012][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.774000][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.781709][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.797965][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.807272][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.817521][ T45] usb 3-1: config 0 descriptor?? [ 40.941600][ T310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 40.953564][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 40.964514][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.031212][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.397304][ T621] loop0: detected capacity change from 0 to 65536 [ 41.559754][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.709793][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 41.720480][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.728863][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.759741][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.768772][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.789725][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.799438][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.812563][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.821768][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.830952][ T10] usb 1-1: config 0 descriptor?? [ 42.043978][ T10] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.093933][ T414] usb 3-1: USB disconnect, device number 10 [ 42.119467][ T414] usblp0: removed [ 42.147494][ T624] netlink: 'syz.2.98': attribute type 4 has an invalid length. [ 42.159650][ T624] netlink: 'syz.2.98': attribute type 4 has an invalid length. [ 42.569760][ T414] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 42.732626][ T414] usb 3-1: config 0 has no interfaces? [ 42.738564][ T414] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 42.748136][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.757700][ T414] usb 3-1: config 0 descriptor?? [ 43.542468][ T310] usbhid 2-1:1.0: can't add hid device: -71 [ 43.558096][ T310] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 43.572585][ T310] usb 2-1: USB disconnect, device number 6 [ 43.691512][ T36] audit: type=1400 audit(1790041958.320:186): avc: denied { mount } for pid=623 comm="syz.2.98" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.325396][ T9] usb 1-1: USB disconnect, device number 5 [ 44.332875][ T9] usblp1: removed [ 44.919742][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.079766][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 45.091745][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.107896][ T9] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 45.125126][ T9] usb 2-1: config 2 has no interface number 0 [ 45.128209][ T414] usb 3-1: USB disconnect, device number 11 [ 45.144056][ T36] audit: type=1400 audit(1790041959.760:187): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.169000][ T9] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x8 has invalid wMaxPacketSize 0 [ 45.188976][ T9] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x8 has invalid maxpacket 0 [ 45.211274][ T36] audit: type=1400 audit(1790041959.830:188): avc: denied { shutdown } for pid=641 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.240184][ T9] usb 2-1: config 2 interface 232 has no altsetting 0 [ 45.252059][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 45.272866][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.280998][ T36] audit: type=1400 audit(1790041959.830:189): avc: denied { block_suspend } for pid=641 comm="syz.2.103" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.285243][ T644] FAULT_INJECTION: forcing a failure. [ 45.285243][ T644] name failslab, interval 1, probability 0, space 0, times 0 [ 45.302328][ T9] usb 2-1: Product: ည [ 45.332322][ T9] usb 2-1: Manufacturer: Е [ 45.336987][ T9] usb 2-1: SerialNumber: Ј [ 45.339795][ T644] CPU: 1 UID: 0 PID: 644 Comm: syz.2.104 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 45.339827][ T644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.339838][ T644] Call Trace: [ 45.339845][ T644] [ 45.339852][ T644] __dump_stack+0x21/0x30 [ 45.339884][ T644] dump_stack_lvl+0x140/0x1c0 [ 45.339910][ T644] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.339937][ T644] ? kstrtouint_from_user+0x117/0x170 [ 45.339961][ T644] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 45.339984][ T644] dump_stack+0x19/0x20 [ 45.340009][ T644] should_fail_ex+0x3c2/0x510 [ 45.340033][ T644] should_failslab+0xac/0x100 [ 45.340057][ T644] kmem_cache_alloc_noprof+0x42/0x410 [ 45.340078][ T644] ? ep_insert+0x21c/0x1600 [ 45.340103][ T644] ep_insert+0x21c/0x1600 [ 45.340126][ T644] ? vfs_write+0xbcf/0xfd0 [ 45.340147][ T644] ? ep_loop_check+0xa0/0xa0 [ 45.340170][ T644] ? mutex_lock+0x97/0x1d0 [ 45.340193][ T644] ? security_capable+0x44/0x130 [ 45.340221][ T644] do_epoll_ctl+0x955/0xcf0 [ 45.340255][ T644] __x64_sys_epoll_ctl+0x166/0x1b0 [ 45.340280][ T644] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 45.340304][ T644] ? __kasan_check_read+0x15/0x20 [ 45.340325][ T644] x64_sys_call+0x2c44/0x2ee0 [ 45.340343][ T644] do_syscall_64+0x57/0xf0 [ 45.340361][ T644] ? clear_bhb_loop+0x50/0xa0 [ 45.340385][ T644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.340408][ T644] RIP: 0033:0x7ff5bc79e159 [ 45.340425][ T644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.340441][ T644] RSP: 002b:00007ff5bd680028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 45.340464][ T644] RAX: ffffffffffffffda RBX: 00007ff5bca25fa0 RCX: 00007ff5bc79e159 [ 45.340479][ T644] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 45.340492][ T644] RBP: 00007ff5bd680090 R08: 0000000000000000 R09: 0000000000000000 [ 45.340505][ T644] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 45.340518][ T644] R13: 00007ff5bca26038 R14: 00007ff5bca25fa0 R15: 00007ffd2d9542c8 [ 45.340534][ T644] [ 45.360825][ T646] capability: warning: `syz.2.105' uses 32-bit capabilities (legacy support in use) [ 45.651841][ T640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.661766][ T640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.678837][ T640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.741376][ T412] udevd[412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.758619][ T9] usb 2-1: USB disconnect, device number 7 [ 45.839806][ T350] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.849894][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.001001][ T350] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.013615][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 46.025059][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 46.034426][ T350] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 46.045775][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.056119][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.071249][ T350] usb 3-1: Product: syz [ 46.075577][ T350] usb 3-1: Manufacturer: syz [ 46.080467][ T350] usb 3-1: SerialNumber: syz [ 46.091902][ T350] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 46.097881][ T350] cdc_wdm 3-1:1.0: Unknown control protocol [ 46.293389][ T36] audit: type=1400 audit(1790041960.920:190): avc: denied { read write } for pid=648 comm="syz.2.106" name="cdc-wdm0" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 46.317444][ T36] audit: type=1400 audit(1790041960.920:191): avc: denied { open } for pid=648 comm="syz.2.106" path="/dev/cdc-wdm0" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 46.344564][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 6 bytes [ 46.499785][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.649764][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 46.656226][ T310] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.666365][ T310] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.675489][ T310] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.684740][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.694988][ T310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.705102][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.718533][ T310] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.727815][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.737692][ T310] usb 2-1: config 0 descriptor?? [ 46.945066][ T310] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 47.997751][ T310] usb 2-1: USB disconnect, device number 8 [ 48.030450][ T310] usblp0: removed [ 48.189744][ T36] audit: type=1400 audit(1790041962.810:192): avc: denied { mounton } for pid=662 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.243028][ T13] bridge_slave_1: left allmulticast mode [ 48.249336][ T13] bridge_slave_1: left promiscuous mode [ 48.255434][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.263584][ T13] bridge_slave_0: left allmulticast mode [ 48.269344][ T13] bridge_slave_0: left promiscuous mode [ 48.275674][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.360448][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.367731][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.375390][ T662] bridge_slave_0: entered allmulticast mode [ 48.383037][ T662] bridge_slave_0: entered promiscuous mode [ 48.393900][ T13] veth1_macvtap: left promiscuous mode [ 48.399651][ T13] veth0_vlan: left promiscuous mode [ 48.490740][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.498012][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.507497][ T662] bridge_slave_1: entered allmulticast mode [ 48.514344][ T662] bridge_slave_1: entered promiscuous mode [ 48.602412][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.609546][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.616884][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.623953][ T662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.645221][ T310] usb 3-1: USB disconnect, device number 12 [ 48.653386][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 48.668498][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 48.683560][ T669] FAULT_INJECTION: forcing a failure. [ 48.683560][ T669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.686124][ T36] audit: type=1400 audit(1790041963.310:193): avc: denied { read } for pid=668 comm="syz.0.112" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.699980][ T10] usb 1-1: USB disconnect, device number 6 [ 48.733683][ T36] audit: type=1400 audit(1790041963.310:194): avc: denied { open } for pid=668 comm="syz.0.112" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.734087][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.757134][ T669] CPU: 1 UID: 0 PID: 669 Comm: syz.0.112 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 48.757233][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.757246][ T669] Call Trace: [ 48.757253][ T669] [ 48.757260][ T669] __dump_stack+0x21/0x30 [ 48.757292][ T669] dump_stack_lvl+0x140/0x1c0 [ 48.757317][ T669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.757345][ T669] ? check_stack_object+0x138/0x150 [ 48.757367][ T669] dump_stack+0x19/0x20 [ 48.757392][ T669] should_fail_ex+0x3c2/0x510 [ 48.757416][ T669] should_fail+0xf/0x20 [ 48.757438][ T669] should_fail_usercopy+0x1e/0x30 [ 48.757462][ T669] _copy_to_user+0x24/0xa0 [ 48.757489][ T669] simple_read_from_buffer+0xed/0x160 [ 48.757517][ T669] proc_fail_nth_read+0x1aa/0x220 [ 48.757545][ T669] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.757573][ T669] ? bpf_lsm_file_permission+0xd/0x20 [ 48.757599][ T669] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.757625][ T669] vfs_read+0x288/0xc70 [ 48.757646][ T669] ? fput+0x1a4/0x230 [ 48.757671][ T669] ? __cfi_vfs_read+0x10/0x10 [ 48.757691][ T669] ? __kasan_check_write+0x18/0x20 [ 48.757711][ T669] ? mutex_lock+0x97/0x1d0 [ 48.757733][ T669] ? __cfi_mutex_lock+0x10/0x10 [ 48.757757][ T669] ksys_read+0x145/0x260 [ 48.757778][ T669] ? __cfi_ksys_read+0x10/0x10 [ 48.757798][ T669] ? __secure_computing+0xee/0x2b0 [ 48.757822][ T669] __x64_sys_read+0x7f/0x90 [ 48.757842][ T669] x64_sys_call+0x2638/0x2ee0 [ 48.757861][ T669] do_syscall_64+0x57/0xf0 [ 48.757879][ T669] ? clear_bhb_loop+0x50/0xa0 [ 48.757902][ T669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.757925][ T669] RIP: 0033:0x7fc6e135e98e [ 48.757942][ T669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.757959][ T669] RSP: 002b:00007fc6e21cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.757982][ T669] RAX: ffffffffffffffda RBX: 00007fc6e21cc6c0 RCX: 00007fc6e135e98e [ 48.757998][ T669] RDX: 000000000000000f RSI: 00007fc6e21cc0a0 RDI: 0000000000000006 [ 48.758012][ T669] RBP: 00007fc6e21cc090 R08: 0000000000000000 R09: 0000000000000000 [ 48.758025][ T669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.758038][ T669] R13: 00007fc6e1626038 R14: 00007fc6e1625fa0 R15: 00007ffed9981368 [ 48.758055][ T669] [ 48.901179][ T671] SELinux: failed to load policy [ 49.016960][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.024280][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.065070][ T36] audit: type=1400 audit(1790041963.690:195): avc: denied { bind } for pid=673 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.085218][ T310] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.121033][ T662] veth0_vlan: entered promiscuous mode [ 49.128885][ T36] audit: type=1400 audit(1790041963.750:196): avc: denied { write } for pid=673 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.154394][ T662] veth1_macvtap: entered promiscuous mode [ 49.260848][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.273810][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 49.283464][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.293378][ T310] usb 3-1: Product: syz [ 49.297656][ T310] usb 3-1: Manufacturer: syz [ 49.302382][ T310] usb 3-1: SerialNumber: syz [ 49.310827][ T310] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 49.316767][ T310] cdc_wdm 3-1:1.0: Unknown control protocol [ 49.471382][ T690] kvm: kvm [689]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 49.511412][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 7 bytes [ 49.529816][ T64] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 49.579859][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.675292][ T694] FAULT_INJECTION: forcing a failure. [ 49.675292][ T694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.679798][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 49.688705][ T694] CPU: 1 UID: 0 PID: 694 Comm: syz.4.121 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 49.688737][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.688749][ T694] Call Trace: [ 49.688757][ T694] [ 49.688766][ T694] __dump_stack+0x21/0x30 [ 49.688801][ T694] dump_stack_lvl+0x140/0x1c0 [ 49.688827][ T694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.688853][ T694] ? check_stack_object+0x138/0x150 [ 49.688875][ T694] dump_stack+0x19/0x20 [ 49.688900][ T694] should_fail_ex+0x3c2/0x510 [ 49.688924][ T694] should_fail+0xf/0x20 [ 49.688945][ T694] should_fail_usercopy+0x1e/0x30 [ 49.688969][ T694] _copy_to_user+0x24/0xa0 [ 49.688997][ T694] simple_read_from_buffer+0xed/0x160 [ 49.689024][ T694] proc_fail_nth_read+0x1aa/0x220 [ 49.689052][ T694] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.689098][ T694] ? bpf_lsm_file_permission+0xd/0x20 [ 49.689124][ T694] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.689151][ T694] vfs_read+0x288/0xc70 [ 49.689172][ T694] ? __cfi_vfs_read+0x10/0x10 [ 49.689191][ T694] ? __kasan_check_write+0x18/0x20 [ 49.689212][ T694] ? mutex_lock+0x97/0x1d0 [ 49.689235][ T694] ? __cfi_mutex_lock+0x10/0x10 [ 49.689260][ T694] ksys_read+0x145/0x260 [ 49.689279][ T694] ? __cfi_ksys_read+0x10/0x10 [ 49.689299][ T694] ? __kasan_check_write+0x18/0x20 [ 49.689318][ T694] ? fput+0x1a4/0x230 [ 49.689342][ T694] ? __kasan_check_read+0x15/0x20 [ 49.689362][ T694] __x64_sys_read+0x7f/0x90 [ 49.689383][ T694] x64_sys_call+0x2638/0x2ee0 [ 49.689401][ T694] do_syscall_64+0x57/0xf0 [ 49.689428][ T694] ? clear_bhb_loop+0x50/0xa0 [ 49.689453][ T694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.689476][ T694] RIP: 0033:0x7ffa29b5e98e [ 49.689494][ T694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.689511][ T694] RSP: 002b:00007ffa285f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.689533][ T694] RAX: ffffffffffffffda RBX: 00007ffa285f76c0 RCX: 00007ffa29b5e98e [ 49.689548][ T694] RDX: 000000000000000f RSI: 00007ffa285f70a0 RDI: 0000000000000006 [ 49.689562][ T694] RBP: 00007ffa285f7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.689575][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.689587][ T694] R13: 00007ffa29e26038 R14: 00007ffa29e25fa0 R15: 00007ffd71113c78 [ 49.689604][ T694] [ 49.719103][ T45] usb 3-1: USB disconnect, device number 13 [ 49.724169][ T64] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.751345][ T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.754528][ T64] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.766011][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 49.769398][ T64] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.774626][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.780173][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.786038][ T310] usb 1-1: Product: syz [ 49.791638][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.800174][ T310] usb 1-1: Manufacturer: syz [ 49.800196][ T310] usb 1-1: SerialNumber: syz [ 49.805657][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.827411][ T310] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 49.829724][ T64] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.833794][ T310] cdc_wdm 1-1:1.0: Unknown control protocol [ 49.837998][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.839116][ T64] usb 2-1: config 0 descriptor?? [ 50.088256][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 7 bytes [ 50.283675][ T64] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 50.529755][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.679753][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 50.691841][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 50.700279][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 50.708990][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 50.718292][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 50.727985][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 50.737732][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.750758][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 50.759976][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.769187][ T9] usb 3-1: config 0 descriptor?? [ 50.980346][ T9] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 51.233420][ T715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.242638][ T715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.332474][ C0] usblp0: nonzero read bulk status received: -71 [ 51.332602][ T310] usb 2-1: USB disconnect, device number 9 [ 51.346326][ T710] usblp0: error -71 reading from printer [ 51.359713][ T709] usblp0: removed [ 51.374361][ T64] usb 3-1: USB disconnect, device number 14 [ 51.381584][ T64] usblp1: removed [ 51.599815][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.751203][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 51.759293][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 51.769473][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 51.778956][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.787227][ T9] usb 5-1: Product: syz [ 51.791523][ T9] usb 5-1: Manufacturer: syz [ 51.796142][ T9] usb 5-1: SerialNumber: syz [ 51.829766][ T310] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.979746][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 51.986262][ T310] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.997520][ T310] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.010663][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 52.017537][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 52.023369][ T9] usb 5-1: invalid MIDI in EP 0 [ 52.027537][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.041088][ T310] usb 2-1: config 0 descriptor?? [ 52.042065][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.064038][ T9] usb 5-1: USB disconnect, device number 2 [ 52.077272][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.246989][ T725] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.259423][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 52.259462][ T36] audit: type=1400 audit(1790041966.880:206): avc: denied { bind } for pid=724 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.261060][ T725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.266058][ T36] audit: type=1400 audit(1790041966.880:207): avc: denied { name_bind } for pid=724 comm="syz.1.130" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 52.286253][ T725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.293900][ T36] audit: type=1400 audit(1790041966.880:208): avc: denied { node_bind } for pid=724 comm="syz.1.130" saddr=::ffff:172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 52.345425][ T9] usb 1-1: USB disconnect, device number 7 [ 52.399814][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.525738][ T310] input: HID 046d:c215 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C215.0007/input/input12 [ 52.557560][ T310] logitech 0003:046D:C215.0007: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.1-1/input0 [ 52.571639][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 52.591137][ T45] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 52.603220][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 52.612259][ T45] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 52.621375][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.633394][ T45] usb 3-1: config 0 descriptor?? [ 52.788527][ T45] usb 2-1: USB disconnect, device number 10 [ 52.829789][ T414] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.843707][ T732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=732 comm=syz.2.132 [ 52.979739][ T414] usb 5-1: Using ep0 maxpacket: 16 [ 52.987014][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.998764][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.008997][ T414] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 53.018710][ T414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.028426][ T414] usb 5-1: config 0 descriptor?? [ 53.559747][ T350] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 53.641345][ T414] usbhid 5-1:0.0: can't add hid device: -71 [ 53.647332][ T414] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 53.659450][ T414] usb 5-1: USB disconnect, device number 3 [ 53.729821][ T350] usb 2-1: Using ep0 maxpacket: 32 [ 53.736520][ T350] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.745125][ T350] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.753923][ T350] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.763169][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.772888][ T350] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.782864][ T350] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.795884][ T350] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.804960][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.813670][ T350] usb 2-1: config 0 descriptor?? [ 53.909801][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 54.020248][ T350] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.059769][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 54.066146][ T9] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 54.074701][ T9] usb 1-1: config 1 has no interface number 0 [ 54.081285][ T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 54.091457][ T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 54.101613][ T9] usb 1-1: config 1 interface 105 has no altsetting 0 [ 54.110095][ T9] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 54.119150][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 54.127438][ T9] usb 1-1: Product: syz [ 54.131887][ T9] usb 1-1: Manufacturer: syz [ 54.136506][ T9] usb 1-1: SerialNumber: syz [ 54.142249][ T757] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 54.149441][ T757] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 54.399778][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.551150][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.558994][ T757] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 54.563688][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 54.569654][ T757] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 54.578693][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.593595][ T45] usb 5-1: Product: syz [ 54.597809][ T45] usb 5-1: Manufacturer: syz [ 54.602426][ T45] usb 5-1: SerialNumber: syz [ 54.611217][ T45] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 54.617165][ T45] cdc_wdm 5-1:1.0: Unknown control protocol [ 54.864279][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 7 bytes [ 55.087525][ T414] usb 2-1: USB disconnect, device number 11 [ 55.099458][ T414] usblp0: removed [ 55.131751][ T36] audit: type=1400 audit(1790041969.760:209): avc: denied { setopt } for pid=764 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.152453][ T765] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 55.159197][ T36] audit: type=1400 audit(1790041969.780:210): avc: denied { ioctl } for pid=764 comm="syz.1.143" path="socket:[11014]" dev="sockfs" ino=11014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.163167][ T765] SELinux: failed to load policy [ 55.188816][ T350] usb 3-1: USB disconnect, device number 15 [ 55.198497][ T36] audit: type=1400 audit(1790041969.780:211): avc: denied { write } for pid=764 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.222241][ T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 55.236991][ T769] FAULT_INJECTION: forcing a failure. [ 55.236991][ T769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.253546][ T769] CPU: 0 UID: 0 PID: 769 Comm: syz.1.145 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 55.253583][ T769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.253596][ T769] Call Trace: [ 55.253603][ T769] [ 55.253612][ T769] __dump_stack+0x21/0x30 [ 55.253657][ T769] dump_stack_lvl+0x140/0x1c0 [ 55.253700][ T769] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.253730][ T769] ? check_stack_object+0x138/0x150 [ 55.253754][ T769] dump_stack+0x19/0x20 [ 55.253781][ T769] should_fail_ex+0x3c2/0x510 [ 55.253808][ T769] should_fail+0xf/0x20 [ 55.253831][ T769] should_fail_usercopy+0x1e/0x30 [ 55.253858][ T769] _copy_to_user+0x24/0xa0 [ 55.253889][ T769] simple_read_from_buffer+0xed/0x160 [ 55.253919][ T769] proc_fail_nth_read+0x1aa/0x220 [ 55.253950][ T769] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.253981][ T769] ? bpf_lsm_file_permission+0xd/0x20 [ 55.254009][ T769] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.254039][ T769] vfs_read+0x288/0xc70 [ 55.254059][ T769] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 55.254083][ T769] ? __cfi_vfs_read+0x10/0x10 [ 55.254105][ T769] ? __kasan_check_write+0x18/0x20 [ 55.254126][ T769] ? mutex_lock+0x97/0x1d0 [ 55.254152][ T769] ? __cfi_mutex_lock+0x10/0x10 [ 55.254178][ T769] ksys_read+0x145/0x260 [ 55.254199][ T769] ? __cfi_ksys_read+0x10/0x10 [ 55.254220][ T769] ? __kasan_check_write+0x18/0x20 [ 55.254241][ T769] ? fput+0x1a4/0x230 [ 55.254267][ T769] ? __kasan_check_read+0x15/0x20 [ 55.254290][ T769] __x64_sys_read+0x7f/0x90 [ 55.254312][ T769] x64_sys_call+0x2638/0x2ee0 [ 55.254332][ T769] do_syscall_64+0x57/0xf0 [ 55.254352][ T769] ? clear_bhb_loop+0x50/0xa0 [ 55.254380][ T769] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.254404][ T769] RIP: 0033:0x7fe78a15e98e [ 55.254423][ T769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.254441][ T769] RSP: 002b:00007fe78b072fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.254466][ T769] RAX: ffffffffffffffda RBX: 00007fe78b0736c0 RCX: 00007fe78a15e98e [ 55.254482][ T769] RDX: 000000000000000f RSI: 00007fe78b0730a0 RDI: 0000000000000004 [ 55.254497][ T769] RBP: 00007fe78b073090 R08: 0000000000000000 R09: 0000000000000000 [ 55.254511][ T769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.254525][ T769] R13: 00007fe78a426038 R14: 00007fe78a425fa0 R15: 00007ffe42be8838 [ 55.254543][ T769] [ 55.510811][ T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 55.524259][ T9] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e2:da:27:c1:7f:3d [ 55.543272][ T9] usb 1-1: USB disconnect, device number 8 [ 55.600328][ T9] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 55.650640][ T9] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 55.660057][ T9] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 55.669427][ T9] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 56.439740][ T414] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 56.514210][ T789] FAULT_INJECTION: forcing a failure. [ 56.514210][ T789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.527327][ T789] CPU: 1 UID: 0 PID: 789 Comm: syz.2.152 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 56.527361][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.527374][ T789] Call Trace: [ 56.527383][ T789] [ 56.527392][ T789] __dump_stack+0x21/0x30 [ 56.527424][ T789] dump_stack_lvl+0x140/0x1c0 [ 56.527444][ T789] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.527460][ T789] ? check_stack_object+0x138/0x150 [ 56.527478][ T789] dump_stack+0x19/0x20 [ 56.527505][ T789] should_fail_ex+0x3c2/0x510 [ 56.527530][ T789] should_fail+0xf/0x20 [ 56.527552][ T789] should_fail_usercopy+0x1e/0x30 [ 56.527577][ T789] _copy_to_user+0x24/0xa0 [ 56.527614][ T789] simple_read_from_buffer+0xed/0x160 [ 56.527643][ T789] proc_fail_nth_read+0x1aa/0x220 [ 56.527672][ T789] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.527701][ T789] ? bpf_lsm_file_permission+0xd/0x20 [ 56.527717][ T789] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.527734][ T789] vfs_read+0x288/0xc70 [ 56.527748][ T789] ? __cfi_vfs_read+0x10/0x10 [ 56.527762][ T789] ? __kasan_check_write+0x18/0x20 [ 56.527784][ T789] ? mutex_lock+0x97/0x1d0 [ 56.527807][ T789] ? __cfi_mutex_lock+0x10/0x10 [ 56.527832][ T789] ksys_read+0x145/0x260 [ 56.527853][ T789] ? __cfi_ksys_read+0x10/0x10 [ 56.527876][ T789] ? __kasan_check_read+0x15/0x20 [ 56.527896][ T789] __x64_sys_read+0x7f/0x90 [ 56.527919][ T789] x64_sys_call+0x2638/0x2ee0 [ 56.527937][ T789] do_syscall_64+0x57/0xf0 [ 56.527956][ T789] ? clear_bhb_loop+0x50/0xa0 [ 56.527981][ T789] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.527999][ T789] RIP: 0033:0x7ff5bc75e98e [ 56.528011][ T789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.528023][ T789] RSP: 002b:00007ff5bd67ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.528038][ T789] RAX: ffffffffffffffda RBX: 00007ff5bd6806c0 RCX: 00007ff5bc75e98e [ 56.528050][ T789] RDX: 000000000000000f RSI: 00007ff5bd6800a0 RDI: 0000000000000004 [ 56.528063][ T789] RBP: 00007ff5bd680090 R08: 0000000000000000 R09: 0000000000000000 [ 56.528077][ T789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.528090][ T789] R13: 00007ff5bca26038 R14: 00007ff5bca25fa0 R15: 00007ffd2d9542c8 [ 56.528108][ T789] [ 56.779755][ T414] usb 1-1: Using ep0 maxpacket: 32 [ 56.787218][ T414] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 56.795658][ T414] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 56.804361][ T414] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 56.813443][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.823148][ T414] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.832837][ T414] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 56.845823][ T414] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 56.854976][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.863906][ T414] usb 1-1: config 0 descriptor?? [ 56.919734][ T311] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 56.928858][ T36] audit: type=1400 audit(1790041971.550:212): avc: denied { ioctl } for pid=795 comm="syz.2.155" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 56.928993][ T796] FAULT_INJECTION: forcing a failure. [ 56.928993][ T796] name failslab, interval 1, probability 0, space 0, times 0 [ 56.966404][ T796] CPU: 0 UID: 0 PID: 796 Comm: syz.2.155 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 56.966439][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.966456][ T796] Call Trace: [ 56.966463][ T796] [ 56.966471][ T796] __dump_stack+0x21/0x30 [ 56.966513][ T796] dump_stack_lvl+0x140/0x1c0 [ 56.966542][ T796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.966569][ T796] ? vfs_write+0xbcf/0xfd0 [ 56.966591][ T796] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 56.966613][ T796] dump_stack+0x19/0x20 [ 56.966638][ T796] should_fail_ex+0x3c2/0x510 [ 56.966663][ T796] should_failslab+0xac/0x100 [ 56.966688][ T796] __kmalloc_cache_noprof+0x41/0x470 [ 56.966712][ T796] ? __se_sys_timerfd_create+0x1c6/0x590 [ 56.966732][ T796] __se_sys_timerfd_create+0x1c6/0x590 [ 56.966750][ T796] ? xfd_validate_state+0x68/0x140 [ 56.966778][ T796] ? __x64_sys_timerfd_create+0x80/0x80 [ 56.966797][ T796] ? __kasan_check_write+0x18/0x20 [ 56.966819][ T796] __x64_sys_timerfd_create+0x5f/0x80 [ 56.966838][ T796] x64_sys_call+0x2e54/0x2ee0 [ 56.966857][ T796] do_syscall_64+0x57/0xf0 [ 56.966875][ T796] ? clear_bhb_loop+0x50/0xa0 [ 56.966900][ T796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.966922][ T796] RIP: 0033:0x7ff5bc79e159 [ 56.966940][ T796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.966958][ T796] RSP: 002b:00007ff5bd680028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 56.966981][ T796] RAX: ffffffffffffffda RBX: 00007ff5bca25fa0 RCX: 00007ff5bc79e159 [ 56.966997][ T796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.967010][ T796] RBP: 00007ff5bc83506b R08: 0000000000000000 R09: 0000000000000000 [ 56.967024][ T796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.967036][ T796] R13: 00007ff5bca26038 R14: 00007ff5bca25fa0 R15: 00007ffd2d9542c8 [ 56.967054][ T796] [ 57.070842][ T311] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.170792][ T9] usb 5-1: USB disconnect, device number 4 [ 57.189939][ T414] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.213730][ T311] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 57.234658][ T311] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.250591][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 57.257232][ T311] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 57.266465][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.276766][ T311] usb 2-1: config 0 descriptor?? [ 57.282149][ T787] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.499787][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.609738][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 57.651005][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.663526][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 57.672798][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.680849][ T9] usb 5-1: Product: syz [ 57.685080][ T9] usb 5-1: Manufacturer: syz [ 57.689743][ T9] usb 5-1: SerialNumber: syz [ 57.696452][ T311] kye 0003:0458:5013.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 57.699735][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 57.707578][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.713374][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 57.719985][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.732693][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.739415][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.746311][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.753121][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.760115][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.766844][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.773655][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.780398][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 57.785566][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.792391][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.799262][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.806049][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.812988][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.819893][ T45] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 57.827980][ T45] usb 3-1: config 0 has no interface number 0 [ 57.834105][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.840842][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.847537][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.854354][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.861328][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.868265][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.875088][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.882016][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.888820][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.895978][ T311] kye 0003:0458:5013.0008: unknown main item tag 0x0 [ 57.903095][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 57.912468][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.920900][ T45] usb 3-1: Product: syz [ 57.925409][ T311] kye 0003:0458:5013.0008: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 57.936487][ T45] usb 3-1: Manufacturer: syz [ 57.941884][ T45] usb 3-1: SerialNumber: syz [ 57.947075][ T311] kye 0003:0458:5013.0008: tablet-enabling feature report not found [ 57.955492][ T45] usb 3-1: config 0 descriptor?? [ 57.960562][ T311] kye 0003:0458:5013.0008: tablet enabling failed [ 58.008714][ T311] usb 2-1: USB disconnect, device number 12 [ 58.128238][ T414] usb 1-1: USB disconnect, device number 9 [ 58.137104][ T414] usblp0: removed [ 58.146353][ T36] audit: type=1400 audit(1790041972.770:213): avc: denied { create } for pid=810 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.165893][ T36] audit: type=1400 audit(1790041972.770:214): avc: denied { bind } for pid=810 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.185536][ T36] audit: type=1400 audit(1790041972.770:215): avc: denied { listen } for pid=810 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.186001][ T45] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 58.205222][ T36] audit: type=1400 audit(1790041972.770:216): avc: denied { connect } for pid=810 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.211742][ T45] usb 3-1: Failed to initialize entity for entity 6 [ 58.237544][ T45] usb 3-1: Failed to register entities (-22). [ 58.536965][ T36] audit: type=1400 audit(1790041973.160:217): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 58.799786][ T414] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 58.951017][ T414] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.962596][ T414] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.975618][ T414] usb 2-1: config 0 interface 0 has no altsetting 0 [ 58.983064][ T414] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 58.992368][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.000953][ T414] usb 2-1: config 0 descriptor?? [ 59.410553][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.417821][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.424859][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.431959][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.438920][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.445921][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.452962][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.459959][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.466908][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.473882][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.480959][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.488177][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.495202][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.502287][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.509448][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.516841][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.524269][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.531445][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.531802][ T36] audit: type=1400 audit(1790041974.160:218): avc: denied { read } for pid=820 comm="syz.0.163" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.538425][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.562171][ T36] audit: type=1400 audit(1790041974.160:219): avc: denied { open } for pid=820 comm="syz.0.163" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.575670][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.592009][ T36] audit: type=1400 audit(1790041974.190:220): avc: denied { ioctl } for pid=820 comm="syz.0.163" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.599177][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.625432][ T822] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.631294][ T822] rust_binder: Read failure Err(EFAULT) in pid:156 [ 59.631949][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.644436][ T36] audit: type=1326 audit(1790041974.260:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=820 comm="syz.0.163" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6e139e159 code=0x0 [ 59.646505][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.684951][ T414] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 59.692660][ T414] elecom 0003:056E:010C.0009: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 59.706628][ T414] usb 2-1: USB disconnect, device number 13 [ 60.198299][ T311] usb 5-1: USB disconnect, device number 5 [ 60.375497][ T36] audit: type=1400 audit(1790041975.000:222): avc: denied { append } for pid=829 comm="syz.0.166" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.375712][ T830] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 60.410248][ T830] FAULT_INJECTION: forcing a failure. [ 60.410248][ T830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.416053][ T414] usb 3-1: USB disconnect, device number 16 [ 60.423535][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 60.437309][ T830] CPU: 0 UID: 0 PID: 830 Comm: syz.0.166 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 60.437341][ T830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.437352][ T830] Call Trace: [ 60.437359][ T830] [ 60.437366][ T830] __dump_stack+0x21/0x30 [ 60.437400][ T830] dump_stack_lvl+0x140/0x1c0 [ 60.437427][ T830] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.437455][ T830] ? check_stack_object+0x138/0x150 [ 60.437478][ T830] dump_stack+0x19/0x20 [ 60.437517][ T830] should_fail_ex+0x3c2/0x510 [ 60.437543][ T830] should_fail+0xf/0x20 [ 60.437565][ T830] should_fail_usercopy+0x1e/0x30 [ 60.437591][ T830] _copy_to_user+0x24/0xa0 [ 60.437619][ T830] simple_read_from_buffer+0xed/0x160 [ 60.437700][ T830] proc_fail_nth_read+0x1aa/0x220 [ 60.437730][ T830] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.437759][ T830] ? bpf_lsm_file_permission+0xd/0x20 [ 60.437785][ T830] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.437820][ T830] vfs_read+0x288/0xc70 [ 60.437842][ T830] ? __cfi_vfs_read+0x10/0x10 [ 60.437862][ T830] ? __kasan_check_write+0x18/0x20 [ 60.437882][ T830] ? mutex_lock+0x97/0x1d0 [ 60.437906][ T830] ? __cfi_mutex_lock+0x10/0x10 [ 60.437932][ T830] ksys_read+0x145/0x260 [ 60.437952][ T830] ? xfd_validate_state+0x68/0x140 [ 60.437980][ T830] ? __cfi_ksys_read+0x10/0x10 [ 60.438001][ T830] ? __kasan_check_write+0x18/0x20 [ 60.438021][ T830] ? fpregs_restore_userregs+0x11c/0x260 [ 60.438046][ T830] __x64_sys_read+0x7f/0x90 [ 60.438067][ T830] x64_sys_call+0x2638/0x2ee0 [ 60.438086][ T830] do_syscall_64+0x57/0xf0 [ 60.438106][ T830] ? clear_bhb_loop+0x50/0xa0 [ 60.438130][ T830] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.438154][ T830] RIP: 0033:0x7fc6e135e98e [ 60.438171][ T830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.438189][ T830] RSP: 002b:00007fc6e21cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.438213][ T830] RAX: ffffffffffffffda RBX: 00007fc6e21cc6c0 RCX: 00007fc6e135e98e [ 60.438229][ T830] RDX: 000000000000000f RSI: 00007fc6e21cc0a0 RDI: 0000000000000004 [ 60.438243][ T830] RBP: 00007fc6e21cc090 R08: 0000000000000000 R09: 0000000000000000 [ 60.438256][ T830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.438269][ T830] R13: 00007fc6e1626038 R14: 00007fc6e1625fa0 R15: 00007ffed9981368 [ 60.438288][ T830] [ 60.739789][ T311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 60.829767][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 60.836068][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.846995][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.856824][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 60.866289][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.875359][ T9] usb 2-1: config 0 descriptor?? [ 60.890882][ T311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.903340][ T311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 60.912478][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.920506][ T311] usb 5-1: Product: syz [ 60.925021][ T311] usb 5-1: Manufacturer: syz [ 60.929788][ T311] usb 5-1: SerialNumber: syz [ 60.929796][ T350] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.945587][ T311] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 60.951673][ T311] cdc_wdm 5-1:1.0: Unknown control protocol [ 61.079761][ T350] usb 1-1: Using ep0 maxpacket: 32 [ 61.086039][ T350] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 61.094455][ T350] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 61.103451][ T350] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 61.112472][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.122158][ T350] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 61.131826][ T350] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 61.144844][ T350] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 61.154034][ T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.162902][ T350] usb 1-1: config 0 descriptor?? [ 61.199344][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 7 bytes [ 61.286262][ T9] apple 0003:05AC:024B.000A: unknown global tag 0xe [ 61.292984][ T9] apple 0003:05AC:024B.000A: item 0 1 1 14 parsing failed [ 61.300341][ T9] apple 0003:05AC:024B.000A: parse failed [ 61.306133][ T9] apple 0003:05AC:024B.000A: probe with driver apple failed with error -22 [ 61.370417][ T350] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 61.449806][ T519] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 61.488997][ T350] usb 2-1: USB disconnect, device number 14 [ 61.579741][ T519] usb 3-1: device descriptor read/64, error -71 [ 61.819746][ T519] usb 3-1: device descriptor read/64, error -71 [ 62.005035][ T842] FAULT_INJECTION: forcing a failure. [ 62.005035][ T842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.018353][ T842] CPU: 0 UID: 0 PID: 842 Comm: syz.1.170 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 62.018389][ T842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.018404][ T842] Call Trace: [ 62.018413][ T842] [ 62.018419][ T842] __dump_stack+0x21/0x30 [ 62.018447][ T842] dump_stack_lvl+0x140/0x1c0 [ 62.018475][ T842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.018503][ T842] ? check_stack_object+0x138/0x150 [ 62.018526][ T842] dump_stack+0x19/0x20 [ 62.018544][ T842] should_fail_ex+0x3c2/0x510 [ 62.018559][ T842] should_fail+0xf/0x20 [ 62.018576][ T842] should_fail_usercopy+0x1e/0x30 [ 62.018596][ T842] _copy_to_user+0x24/0xa0 [ 62.018625][ T842] simple_read_from_buffer+0xed/0x160 [ 62.018654][ T842] proc_fail_nth_read+0x1aa/0x220 [ 62.018682][ T842] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 62.018700][ T842] ? bpf_lsm_file_permission+0xd/0x20 [ 62.018716][ T842] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 62.018733][ T842] vfs_read+0x288/0xc70 [ 62.018753][ T842] ? __cfi_vfs_read+0x10/0x10 [ 62.018774][ T842] ? __kasan_check_write+0x18/0x20 [ 62.018796][ T842] ? mutex_lock+0x97/0x1d0 [ 62.018819][ T842] ? __cfi_mutex_lock+0x10/0x10 [ 62.018845][ T842] ksys_read+0x145/0x260 [ 62.018861][ T842] ? __cfi_ksys_read+0x10/0x10 [ 62.018873][ T842] ? __kasan_check_write+0x18/0x20 [ 62.018886][ T842] ? fput+0x1a4/0x230 [ 62.018962][ T842] ? __kasan_check_read+0x15/0x20 [ 62.018984][ T842] __x64_sys_read+0x7f/0x90 [ 62.018998][ T842] x64_sys_call+0x2638/0x2ee0 [ 62.019010][ T842] do_syscall_64+0x57/0xf0 [ 62.019021][ T842] ? clear_bhb_loop+0x50/0xa0 [ 62.019037][ T842] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.019058][ T842] RIP: 0033:0x7fe78a15e98e [ 62.019077][ T842] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.019095][ T842] RSP: 002b:00007fe78b072fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.019119][ T842] RAX: ffffffffffffffda RBX: 00007fe78b0736c0 RCX: 00007fe78a15e98e [ 62.019135][ T842] RDX: 000000000000000f RSI: 00007fe78b0730a0 RDI: 0000000000000005 [ 62.019144][ T842] RBP: 00007fe78b073090 R08: 0000000000000000 R09: 0000000000000000 [ 62.019152][ T842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.019160][ T842] R13: 00007fe78a426038 R14: 00007fe78a425fa0 R15: 00007ffe42be8838 [ 62.019171][ T842] [ 62.263638][ T519] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 62.399770][ T519] usb 3-1: device descriptor read/64, error -71 [ 62.649747][ T519] usb 3-1: device descriptor read/64, error -71 [ 62.673148][ T9] usb 1-1: USB disconnect, device number 10 [ 62.688416][ T9] usblp0: removed [ 62.715566][ T851] netlink: 'syz.0.173': attribute type 32 has an invalid length. [ 62.760493][ T519] usb usb3-port1: attempt power cycle [ 63.119785][ T519] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 63.150887][ T519] usb 3-1: device descriptor read/8, error -71 [ 63.232596][ T311] usb 5-1: USB disconnect, device number 6 [ 63.276353][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 63.276374][ T36] audit: type=1400 audit(1790041977.900:227): avc: denied { search } for pid=854 comm="syz.4.174" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.314370][ T519] usb 3-1: device descriptor read/8, error -71 [ 63.337342][ T36] audit: type=1400 audit(1790041977.900:228): avc: denied { write } for pid=854 comm="syz.4.174" name="trace_clock" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 63.361442][ T36] audit: type=1400 audit(1790041977.900:229): avc: denied { open } for pid=854 comm="syz.4.174" path="/14/tracing/trace_clock" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 63.386050][ T36] audit: type=1400 audit(1790041977.960:230): avc: denied { read } for pid=662 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.411657][ T36] audit: type=1400 audit(1790041977.960:231): avc: denied { open } for pid=662 comm="syz-executor" path="/14/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.441989][ T36] audit: type=1400 audit(1790041977.960:232): avc: denied { search } for pid=662 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.467372][ T36] audit: type=1400 audit(1790041977.960:233): avc: denied { write } for pid=662 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.490313][ T36] audit: type=1400 audit(1790041977.960:234): avc: denied { setattr } for pid=662 comm="syz-executor" path="/14/tracing/instances" dev="tracefs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.580777][ T519] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 63.614084][ T519] usb 3-1: device descriptor read/8, error -71 [ 63.631250][ T46] bridge_slave_1: left allmulticast mode [ 63.639743][ T46] bridge_slave_1: left promiscuous mode [ 63.650381][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.664430][ T46] bridge_slave_0: left allmulticast mode [ 63.676210][ T46] bridge_slave_0: left promiscuous mode [ 63.689941][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.764941][ T519] usb 3-1: device descriptor read/8, error -71 [ 63.796243][ T46] veth1_macvtap: left promiscuous mode [ 63.801806][ T46] veth0_vlan: left promiscuous mode [ 63.849781][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 63.865550][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.872643][ T865] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.879986][ T865] bridge_slave_0: entered allmulticast mode [ 63.886881][ T865] bridge_slave_0: entered promiscuous mode [ 63.893112][ T519] usb usb3-port1: unable to enumerate USB device [ 63.900692][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.907836][ T865] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.915610][ T865] bridge_slave_1: entered allmulticast mode [ 63.922388][ T865] bridge_slave_1: entered promiscuous mode [ 63.970691][ T877] WARNING! power/level is deprecated; use power/control instead [ 63.992160][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.999241][ T865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.006591][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.013670][ T865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.021250][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 64.027697][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.038739][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.048704][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 64.049020][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.057781][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.074119][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.082000][ T9] usb 2-1: config 0 descriptor?? [ 64.092560][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.099653][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.109085][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.116218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.139766][ T311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 64.144946][ T865] veth0_vlan: entered promiscuous mode [ 64.159305][ T865] veth1_macvtap: entered promiscuous mode [ 64.180701][ T36] audit: type=1400 audit(1790041978.810:235): avc: denied { mounton } for pid=865 comm="syz-executor" path="/root/syzkaller.DMWNRn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.237779][ T880] fuse: Bad value for 'rootmode' [ 64.258028][ T36] audit: type=1400 audit(1790041978.880:236): avc: denied { getopt } for pid=881 comm="syz.5.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.289756][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 64.296515][ T311] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.305125][ T311] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.314182][ T311] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.323214][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.332899][ T311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.342617][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.355604][ T311] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.364815][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.373885][ T311] usb 1-1: config 0 descriptor?? [ 64.494595][ T9] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 64.506495][ T519] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.583431][ T311] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.609600][ T887] ------------[ cut here ]------------ [ 64.615193][ T887] WARNING: CPU: 0 PID: 887 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 64.624754][ T887] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.628674][ T887] CPU: 0 UID: 0 PID: 887 Comm: syz.2.186 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 64.640292][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.650509][ T887] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 64.656541][ T887] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e5 c8 0b 06 00 0f 85 c2 00 00 00 c6 05 d8 c8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 64.676393][ T887] RSP: 0018:ffffc9000eba7560 EFLAGS: 00010246 [ 64.682669][ T887] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 64.690714][ T887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000eba7618 [ 64.698900][ T887] RBP: ffffc9000eba76a0 R08: ffffc9000eba7617 R09: 0000000000000000 [ 64.706974][ T887] R10: ffffc9000eba7600 R11: fffff52001d74ec3 R12: ffffc9000eba75a0 [ 64.715003][ T887] R13: dffffc0000000000 R14: 1ffff92001d74eb0 R15: 0000000000000000 [ 64.723151][ T887] FS: 00007ff5bd6806c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 64.732167][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.738881][ T887] CR2: 0000200000012000 CR3: 00000001191b6000 CR4: 00000000003526b0 [ 64.747036][ T887] Call Trace: [ 64.750397][ T887] [ 64.753351][ T887] ? vfs_write+0x3c1/0xfd0 [ 64.757788][ T887] ? ksys_write+0x145/0x260 [ 64.762371][ T887] ? x64_sys_call+0x271c/0x2ee0 [ 64.767285][ T887] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.773153][ T887] ? hashtab_init+0xd6/0x1f0 [ 64.777803][ T887] ___kmalloc_large_node+0x81/0x220 [ 64.783098][ T887] ? hashtab_init+0xd6/0x1f0 [ 64.787748][ T887] __kmalloc_large_node_noprof+0x1e/0xd0 [ 64.793436][ T887] ? hashtab_init+0xd6/0x1f0 [ 64.798085][ T887] __kmalloc_noprof+0x326/0x510 [ 64.802974][ T887] ? kasan_save_alloc_info+0x3a/0x50 [ 64.808299][ T887] hashtab_init+0xd6/0x1f0 [ 64.812799][ T887] ? common_read+0x175/0x490 [ 64.817418][ T887] symtab_init+0x44/0x70 [ 64.821710][ T887] common_read+0x1e7/0x490 [ 64.826157][ T887] ? hashtab_init+0xd6/0x1f0 [ 64.830793][ T887] ? __cfi_common_read+0x10/0x10 [ 64.835850][ T887] ? hashtab_init+0x100/0x1f0 [ 64.840565][ T887] policydb_read+0xa86/0x2860 [ 64.845303][ T887] ? __kasan_kmalloc+0x96/0xb0 [ 64.850210][ T887] ? __cfi_policydb_read+0x10/0x10 [ 64.855372][ T887] ? security_load_policy+0x130/0x12d0 [ 64.861088][ T887] security_load_policy+0x16a/0x12d0 [ 64.866417][ T887] ? irqentry_exit+0x4a/0x60 [ 64.871328][ T887] ? __kasan_check_write+0x18/0x20 [ 64.876485][ T887] ? mutex_lock+0x97/0x1d0 [ 64.881041][ T887] ? __cfi_security_load_policy+0x10/0x10 [ 64.886916][ T887] ? rep_movs_alternative+0x4a/0xa0 [ 64.892155][ T887] sel_write_load+0x258/0x600 [ 64.896858][ T887] ? __cfi_sel_write_load+0x10/0x10 [ 64.902230][ T887] ? bpf_lsm_file_permission+0xd/0x20 [ 64.907672][ T887] ? __cfi_sel_write_load+0x10/0x10 [ 64.913021][ T887] vfs_write+0x3c1/0xfd0 [ 64.917350][ T887] ? __cfi_vfs_write+0x10/0x10 [ 64.922202][ T887] ? __kasan_check_write+0x18/0x20 [ 64.927437][ T887] ? mutex_lock+0x97/0x1d0 [ 64.932084][ T887] ? __cfi_mutex_lock+0x10/0x10 [ 64.937238][ T887] ksys_write+0x145/0x260 [ 64.941813][ T887] ? __cfi_ksys_write+0x10/0x10 [ 64.946703][ T887] ? __kasan_check_write+0x18/0x20 [ 64.951858][ T887] ? fpregs_restore_userregs+0x11c/0x260 [ 64.957552][ T887] __x64_sys_write+0x7f/0x90 [ 64.962295][ T887] x64_sys_call+0x271c/0x2ee0 [ 64.967017][ T887] do_syscall_64+0x57/0xf0 [ 64.971468][ T887] ? clear_bhb_loop+0x50/0xa0 [ 64.976188][ T887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.982206][ T887] RIP: 0033:0x7ff5bc79e159 [ 64.986636][ T887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.006409][ T887] RSP: 002b:00007ff5bd680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.015153][ T887] RAX: ffffffffffffffda RBX: 00007ff5bca25fa0 RCX: 00007ff5bc79e159 [ 65.023201][ T887] RDX: 0000000000012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 65.031234][ T887] RBP: 00007ff5bc83506b R08: 0000000000000000 R09: 0000000000000000 [ 65.039251][ T887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.047287][ T887] R13: 00007ff5bca26038 R14: 00007ff5bca25fa0 R15: 00007ffd2d9542c8 [ 65.055329][ T887] [ 65.058367][ T887] ---[ end trace 0000000000000000 ]--- [ 65.065749][ T519] usb 6-1: device descriptor read/64, error -71 [ 65.070530][ T887] SELinux: failed to load policy [ 65.210914][ T46] bridge_slave_1: left allmulticast mode [ 65.216594][ T46] bridge_slave_1: left promiscuous mode [ 65.222282][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.229841][ T46] bridge_slave_0: left allmulticast mode [ 65.235598][ T46] bridge_slave_0: left promiscuous mode [ 65.237824][ T311] usb 1-1: USB disconnect, device number 11 [ 65.247280][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.248510][ T311] usblp0: removed [ 65.291130][ T414] usb 2-1: USB disconnect, device number 15 [ 65.392021][ T46] veth1_macvtap: left promiscuous mode [ 65.397548][ T46] veth0_vlan: left promiscuous mode [ 65.682570][ T46] bridge_slave_1: left allmulticast mode [ 65.688254][ T46] bridge_slave_1: left promiscuous mode [ 65.694090][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.701808][ T46] bridge_slave_0: left allmulticast mode [ 65.707466][ T46] bridge_slave_0: left promiscuous mode [ 65.713097][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.720653][ T46] bridge_slave_1: left allmulticast mode [ 65.726418][ T46] bridge_slave_1: left promiscuous mode [ 65.732235][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.739730][ T46] bridge_slave_0: left allmulticast mode [ 65.745383][ T46] bridge_slave_0: left promiscuous mode [ 65.751315][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.759072][ T46] bridge_slave_1: left allmulticast mode [ 65.765162][ T46] bridge_slave_1: left promiscuous mode [ 65.770995][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.778437][ T46] bridge_slave_0: left allmulticast mode [ 65.784203][ T46] bridge_slave_0: left promiscuous mode [ 65.790030][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.014410][ T46] veth1_macvtap: left promiscuous mode [ 66.020122][ T46] veth0_vlan: left promiscuous mode [ 66.025723][ T46] veth1_macvtap: left promiscuous mode [ 66.031280][ T46] veth0_vlan: left promiscuous mode [ 66.036754][ T46] veth1_macvtap: left promiscuous mode [ 66.042860][ T46] veth0_vlan: left promiscuous mode [ 66.601468][ T46] ------------[ cut here ]------------ [ 66.606971][ T46] WARNING: CPU: 1 PID: 46 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 66.616968][ T46] Modules linked in: [ 66.621382][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 66.634545][ T46] Tainted: [W]=WARN [ 66.638440][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.648526][ T46] Workqueue: netns cleanup_net [ 66.653350][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 66.659372][ T46] Code: e8 e1 86 d5 fc 4b 83 3c 3e 00 75 19 e8 55 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 47 a3 7c fc 49 83 c7 08 eb c9 e8 3c a3 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 66.679291][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 66.685435][ T46] RAX: ffffffff850ad734 RBX: ffff88812cc80000 RCX: ffff88810b669300 [ 66.693765][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881023087f0 [ 66.701993][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 66.710100][ T46] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: dffffc0000000000 [ 66.718276][ T46] R13: dffffc0000000000 R14: ffff888102308000 R15: 00000000000007f0 [ 66.726387][ T46] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 66.735471][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.742087][ T46] CR2: 00007ff668d99492 CR3: 000000010cf8e000 CR4: 00000000003526b0 [ 66.750110][ T46] Call Trace: [ 66.753389][ T46] [ 66.756336][ T46] cleanup_net+0x6ba/0xc90 [ 66.760790][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 66.765770][ T46] ? kick_pool+0xb9/0x540 [ 66.770136][ T46] process_scheduled_works+0x7f4/0x1060 [ 66.775711][ T46] worker_thread+0xc99/0x13f0 [ 66.780603][ T46] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 66.786485][ T46] ? __kasan_check_read+0x15/0x20 [ 66.791813][ T46] kthread+0x2c4/0x360 [ 66.796023][ T46] ? __cfi_worker_thread+0x10/0x10 [ 66.801163][ T46] ? __cfi_kthread+0x10/0x10 [ 66.805768][ T46] ret_from_fork+0x64/0xa0 [ 66.810855][ T46] ? __cfi_kthread+0x10/0x10 [ 66.815543][ T46] ret_from_fork_asm+0x1a/0x30 [ 66.820363][ T46] [ 66.823398][ T46] ---[ end trace 0000000000000000 ]--- [ 66.829157][ T46] ------------[ cut here ]------------ [ 66.834640][ T46] WARNING: CPU: 0 PID: 46 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 66.844788][ T46] Modules linked in: [ 66.848702][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 66.861783][ T46] Tainted: [W]=WARN [ 66.865604][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.875900][ T46] Workqueue: netns cleanup_net [ 66.880735][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 66.886970][ T46] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 f2 a2 7c fc 49 83 c7 08 eb c5 e8 e7 a2 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 a2 7c fc 5b 41 5c 41 5e 41 [ 66.906628][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 66.912847][ T46] RAX: ffffffff850ad789 RBX: ffff888102308800 RCX: ffff88810b669300 [ 66.920920][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888102308808 [ 66.928945][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 66.936993][ T46] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: dffffc0000000000 [ 66.945040][ T46] R13: dffffc0000000000 R14: ffff888102308000 R15: 0000000000000008 [ 66.953147][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 66.962427][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.969114][ T46] CR2: 0000200000012000 CR3: 000000010b3fe000 CR4: 00000000003526b0 [ 66.977228][ T46] Call Trace: [ 66.980552][ T46] [ 66.983576][ T46] cleanup_net+0x6ba/0xc90 [ 66.988016][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 66.993005][ T46] ? kick_pool+0xb9/0x540 [ 66.997388][ T46] process_scheduled_works+0x7f4/0x1060 [ 67.003177][ T46] worker_thread+0xc99/0x13f0 [ 67.007903][ T46] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 67.013703][ T46] ? __kasan_check_read+0x15/0x20 [ 67.018770][ T46] kthread+0x2c4/0x360 [ 67.022893][ T46] ? __cfi_worker_thread+0x10/0x10 [ 67.028029][ T46] ? __cfi_kthread+0x10/0x10 [ 67.032658][ T46] ret_from_fork+0x64/0xa0 [ 67.037109][ T46] ? __cfi_kthread+0x10/0x10 [ 67.041721][ T46] ret_from_fork_asm+0x1a/0x30 [ 67.046514][ T46] [ 67.049533][ T46] ---[ end trace 0000000000000000 ]--- [ 67.058129][ T46] ------------[ cut here ]------------ [ 67.063766][ T46] WARNING: CPU: 0 PID: 46 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 67.073826][ T46] Modules linked in: [ 67.077748][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 67.090933][ T46] Tainted: [W]=WARN [ 67.094763][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.104912][ T46] Workqueue: netns cleanup_net [ 67.109966][ T46] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 67.115908][ T46] Code: 3c 20 00 74 08 48 89 df e8 ff 44 f0 fc 48 8b 3b e8 47 35 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 98 b7 00 cc e8 62 61 97 fc <0f> 0b e9 b0 fd ff ff e8 56 61 97 fc 0f 0b e9 18 fe ff ff e8 4a 61 [ 67.135598][ T46] RSP: 0018:ffffc900002ffb70 EFLAGS: 00010293 [ 67.141768][ T46] RAX: ffffffff84f0190e RBX: ffff88812cc80000 RCX: ffff88810b669300 [ 67.149841][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810b669300 [ 67.158039][ T46] RBP: ffffc900002ffb98 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 67.166146][ T46] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: 1ffffffff0fa8534 [ 67.174196][ T46] R13: dffffc0000000000 R14: ffff88812cc80c00 R15: dffffc0000000000 [ 67.182204][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 67.191266][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.197901][ T46] CR2: 0000200000012000 CR3: 000000010b3fe000 CR4: 00000000003526b0 [ 67.206036][ T46] Call Trace: [ 67.209337][ T46] [ 67.212319][ T46] xfrm_net_exit+0x31/0x80 [ 67.216765][ T46] cleanup_net+0x6ba/0xc90 [ 67.221229][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 67.226186][ T46] ? kick_pool+0xb9/0x540 [ 67.230567][ T46] process_scheduled_works+0x7f4/0x1060 [ 67.236162][ T46] worker_thread+0xc99/0x13f0 [ 67.241043][ T46] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 67.246882][ T46] ? __kasan_check_read+0x15/0x20 [ 67.251959][ T46] kthread+0x2c4/0x360 [ 67.256059][ T46] ? __cfi_worker_thread+0x10/0x10 [ 67.261202][ T46] ? __cfi_kthread+0x10/0x10 [ 67.265811][ T46] ret_from_fork+0x64/0xa0 [ 67.270274][ T46] ? __cfi_kthread+0x10/0x10 [ 67.274885][ T46] ret_from_fork_asm+0x1a/0x30 [ 67.279643][ T46] [ 67.282680][ T46] ---[ end trace 0000000000000000 ]---