last executing test programs: 2m7.954606476s ago: executing program 2 (id=3): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c3aeaf14251b01d834053cbacffe17d54a346a1e1b3aa4f96068d5d4a4a678f1a6fc83497f8236019b132b2de344bf187f1ed3a7082a5ecf620b2d6b9031c6950d41fbd601103303bf9898f1d6b5009079cf754af639eed8c5a3414c70a8a0026cfe40ad797d1078730ac255fc03ea7d0f303b085c4779727e896ca57f94293eaa3f28404feb93b79e7dca568110ed1146296de9ea62f3bf528c0e29595ea0c7419bfd1d9fd3beff04f8a8c2a6083e2b160bcd5f6e0a73a657e21d41416df23b878fba9c62fd46c34b4801d66a13d636e2bd", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080001"], 0x68}}, 0x4000000) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000080)={0x0}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) (async) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async, rerun: 64) r5 = fcntl$dupfd(r4, 0x406, r4) (rerun: 64) write$binfmt_elf64(r5, 0x0, 0xfffffdcf) (async) recvmsg$can_bcm(r5, &(0x7f0000001840)={&(0x7f00000004c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/72, 0x48}, {&(0x7f0000001640)=""/19, 0x13}, {&(0x7f0000001680)=""/4, 0x4}, {&(0x7f00000016c0)=""/55, 0x37}, {&(0x7f0000001700)=""/189, 0xbd}], 0x8}, 0x10000) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) (async) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000280)={0x2, 0xb40e76ce23c14f51, 0xfffffff7}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f0000001880)) r8 = socket$tipc(0x1e, 0x5, 0x0) listen(r8, 0x0) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r10 = userfaultfd(0x801) (async) unshare(0x20000400) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_CONTINUE(r10, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) 2m7.876900958s ago: executing program 2 (id=8): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@caif, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000002c0)=""/63, 0x3f}], 0x2, &(0x7f0000000340)=""/59, 0x3b}, 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m7.812550381s ago: executing program 2 (id=9): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000465ca7cbf273182f00000000001d0109005d0012801800f8801400040000000000000000000000000000000001428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db00000004000680"], 0x78}, 0x1, 0x0, 0x0, 0x5}, 0xc804) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010043020000082505a1a440000102030109023b00010102f407090400000002060000052406000005240000000d240f0100000000000000000009058202ff03000000090503020000000000"], &(0x7f0000000680)={0x0, 0x0, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="260fbeba5b31b30b"], 0x3, [{0x0, 0x0}, {0x82, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x51}}]}) 2m6.549047212s ago: executing program 2 (id=13): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x800800) read$usbmon(r0, &(0x7f00000000c0)=""/54, 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES8=r2], 0x30, 0x1}, 0x0) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x800, 0xae) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) openat$incfs(r4, &(0x7f00000002c0)='.pending_reads\x00', 0x1, 0x130) 2m6.189368133s ago: executing program 2 (id=15): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=unix,', {[{@version_u}]}}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfff2abd7000fbdbdf2501"], 0x5c}, 0x1, 0x0, 0x0, 0x4004002}, 0x44000) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="30020000", @ANYRES16=r3, @ANYBLOB="e14329bd7000fbdbdf250300000008000100", @ANYRES32=r1, @ANYBLOB="14020280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c509ffff080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000400001007479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600"/180, @ANYRES32=r1, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007bffffff64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004008100010204000000ff07b801d00000000900010682940000ff7f5806070000000300f00503000000080007000008000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400fffffeff08000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB], 0x230}}, 0x8090) 2m6.164023874s ago: executing program 2 (id=16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x46) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xc, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x55, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580dafe9ddceb2"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000280), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040), 0x8) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}, {0x0}], 0x2}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r6, &(0x7f00000005c0)="826bb66f5da428f317681810e39b06bc841b7b1ccffa196ec18d1c636d3017449c5791deecfcb1383dd8176171ea43a4b33fa7f6282962761a410b645bd79df3259dfe201309946b39a1c2d7c7151af88d4839251ed70f998591b4d7ecae55c1dbc3ef44ce53200b6055a9069b071b679365c750f2838015e1e5e06e75", 0x7d, 0x4000, 0x0, 0x0) 2m6.124480855s ago: executing program 32 (id=16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x46) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xc, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x55, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580dafe9ddceb2"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000280), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040), 0x8) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}, {0x0}], 0x2}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r6, &(0x7f00000005c0)="826bb66f5da428f317681810e39b06bc841b7b1ccffa196ec18d1c636d3017449c5791deecfcb1383dd8176171ea43a4b33fa7f6282962761a410b645bd79df3259dfe201309946b39a1c2d7c7151af88d4839251ed70f998591b4d7ecae55c1dbc3ef44ce53200b6055a9069b071b679365c750f2838015e1e5e06e75", 0x7d, 0x4000, 0x0, 0x0) 22.269817798s ago: executing program 1 (id=822): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$TCSETS2(r0, 0x5435, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x100000000) syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4f, 0x60, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x401, 0x1, 0x2, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0x4, 0x3ff, 0x80, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7, 0x4, {0x7, 0x25, 0x1, 0x4, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x58, 0x3, 0x80, {0x7, 0x25, 0x1, 0x8, 0x5, 0x4}}}}}}}}]}}, 0x0) 21.741262076s ago: executing program 1 (id=825): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0x2e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xb, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xc9, 0x5, {0x8, 0x25, 0x1, 0x182, 0x3f, 0x2, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x1, 0xf, {0x8, 0x25, 0x1, 0x0, 0xf, 0x3, 0x9}}}}}}}}]}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) (async) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0x2e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xb, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xc9, 0x5, {0x8, 0x25, 0x1, 0x182, 0x3f, 0x2, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x1, 0xf, {0x8, 0x25, 0x1, 0x0, 0xf, 0x3, 0x9}}}}}}}}]}}, 0x0) (async) 21.262956181s ago: executing program 1 (id=828): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x41}}, 0x8) r1 = getpid() openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32) sched_setscheduler(r1, 0x2, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) getpeername$inet6(r5, 0x0, &(0x7f0000000240)) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000480)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000280)='./file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') (async) creat(&(0x7f0000000040)='./file1\x00', 0x32) 21.192774604s ago: executing program 1 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7a0dfee4, 0x44}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004841}, 0x80) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x66}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ec82f1fef92d5f6dc2e06ded05df1402"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c4eb4bd0e825c90a62c044795cacafaf"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x80040) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r3, &(0x7f00000011c0)='./file0\x00', 0x0) 21.104949526s ago: executing program 1 (id=831): unshare(0x60000600) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x810) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10000) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r5, r6+10000000}) 21.055439958s ago: executing program 1 (id=832): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') (async) socket$igmp6(0xa, 0x3, 0x2) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000280)={{r1}, "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"}) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891a"], 0x0, 0x0, 0x0}, 0x0) 20.948220311s ago: executing program 33 (id=832): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') (async) socket$igmp6(0xa, 0x3, 0x2) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000280)={{r1}, "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"}) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891a"], 0x0, 0x0, 0x0}, 0x0) 9.109309344s ago: executing program 0 (id=867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="06"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e22, 0x2, @empty, 0x8}, 0x1c) (async) listen(r0, 0x204) (async) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) (async) write$selinux_attr(r2, 0x0, 0x0) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="06"], 0x0) (async) 9.108953604s ago: executing program 4 (id=868): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x100, 0x138) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x6, 0x203) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x2000000, 0x10000}) 9.108574895s ago: executing program 3 (id=869): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x27b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xfc, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x10, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc4, 0x8, 0x7b}}}}}]}}]}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000080)) 7.517872766s ago: executing program 0 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_targets\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x800) ioctl$EVIOCGLED(r3, 0x80404519, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf4e) writev(r4, &(0x7f0000019880), 0x1000000000000078) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="35011001000005086307812040000102030109026e0003017fa006080b0002012030230904000000010130000a2401100a000a0000000904010000010230000904010101010230000905010960002503020a252501040000050500090402"], 0x0) 7.516865236s ago: executing program 4 (id=871): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x85000003) (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x5, 0x5}) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 7.514691896s ago: executing program 3 (id=872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x7f, 0x1, 0x2, 0x6, 0xf0, 0xe, 0x81, 0xb, 0x9, 0x7, 0x800, 0x5, 0x4, 0x8], 0x50000, 0x80304}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.792706342s ago: executing program 0 (id=873): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x40}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r2 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r2, 0x89e0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x20000, 0x2, 0x2d4}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000) 5.792177602s ago: executing program 4 (id=874): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b01"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r1 = epoll_create(0x8017) read(r1, 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x2, 0x160, 0x19}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x10000010}) symlinkat(&(0x7f00000001c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105) mkdirat(r2, &(0x7f00000002c0)='./file2\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) getdents(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) getdents(r6, 0x0, 0x0) pread64$ublk_bdev(r6, &(0x7f0000000200)=""/168, 0xa8, 0xfcc1) 5.791941132s ago: executing program 3 (id=875): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) (async) r0 = inotify_init() (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) (async, rerun: 64) r3 = signalfd(r1, &(0x7f0000000080)={[0x9]}, 0x8) (rerun: 64) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000340)={0x3, 0x0, 0x98, &(0x7f0000000280)={0x3, 0x4, 0x1}}) 3.905175233s ago: executing program 0 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250f000000400007800c000300"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4084) (async) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040008}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x238, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @local, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @private2, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6ee8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20a1926e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x955}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8801}, 0x4810) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) (async) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902020000000001000000090401000001023000090400010101023000090501"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.902169583s ago: executing program 4 (id=877): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1740, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000091, 0x3}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, &(0x7f00000000c0)}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x2d7, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.901653383s ago: executing program 3 (id=878): symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000340)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@measure}, {@smackfshat={'smackfshat', 0x3d, '/%'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r0, r0, 0x0) lchown(&(0x7f00000000c0)='./file0/file1\x00', r0, 0xee01) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x1, 0x2, 0x0, {0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, r4, 0x6b20}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file2\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [{0x2, 0x4, r0}, {0x2, 0x4, r0}, {0x2, 0x2, r0}, {0x2, 0x7, r0}, {0x2, 0x0, r0}, {0x2, 0x1, r0}, {0x2, 0x7, r0}, {0x2, 0x3, r0}, {0x2, 0x1, r0}], {0x4, 0x1}, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x6, r4}], {0x10, 0x5}, {0x20, 0x4}}, 0x84, 0x0) 2.032819414s ago: executing program 0 (id=879): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb180000000000000029000000360000002b35d9"], 0x40}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) syz_clone(0x20000, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x1, 0x4002, 0xb2}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x9000, 0x10000001, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1023, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab63, 0x200, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0xe, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) 2.005787885s ago: executing program 4 (id=880): r0 = geteuid() r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) memfd_create(0x0, 0x0) setuid(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="27788763", @ANYRES16=r4, @ANYBLOB="010025bd70000000000001000000300008802c000080240001000000000000000000000000000000000000000000000000000000000000000000040009801400020077673000"/82], 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 2.003209085s ago: executing program 3 (id=881): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0xc}, 0x0) syz_io_uring_setup(0x10e9, &(0x7f0000000640)={0x0, 0x2456, 0x10000, 0x0, 0x8026d}, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400001, 0x80, 0x20}, 0x18) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 2.03125ms ago: executing program 0 (id=882): ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000000)={0x0}) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000080)={r0}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000001c0)=0x5) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000200)={0x6, 0x7, 0x3800000000000, 0xfffffff0, 0x0, 0x1, 0x1}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x141080, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e4, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x24004010) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000640)=0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f00000006c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20013900}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x108, 0x453, 0xf00, 0x70bd27, 0x25dfdbfe, "e8b0ac00795f22dc86ee43bd7af174d5a4341be5f19e6a1399e8630a3827939420b61114e6404f30d4f07d4f148e18e04832d6176ffaffcee7a2ac6877c0d1b335e9b8b1b2fc8f16372943b85d3a78cee6c623890ae1cc4252439c30c5df961e3de653154da833418d704503ea750013fffbaee006cdf45894aaabcaf88ffda4348fb4a577d24020818f8c8c70e63d62dbc1d97e63d633e99fb8ce097f570857856cef4cda2116904fe649efcc87500b6ff1a9bd0c6941d41c3156cc5b0d36ace85970cddfda08d29544ef7c8a6d5dd8868d0f91f7d9015fcdbdf396b8a98e2312fa0bf0f3a11aded035c417755c87db1e72a6ba56cc97", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x8000) getsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f0000000900)=""/207, &(0x7f0000000a00)=0xcf) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000a40)=0x2) ioctl$UBLK_U_CMD_GET_FEATURES(r2, 0x80207513, &(0x7f0000000ac0)={0x0, 0xffff, 0x8, &(0x7f0000000a80)}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000b40)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b80)={@private1, @multicast1, 0x9, 0xc}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000c80)={{r1}, 0x0, 0x28, @inherit={0x78, &(0x7f0000000c00)={0x1, 0x6, 0x1, 0x57, {0x1c, 0xfb, 0x0, 0x8000, 0x1}, [0x8, 0xca6, 0x100000000, 0x60, 0x2, 0xffffffffffffffff]}}, @name="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"}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001c80)={@ipv4={'\x00', '\xff\xff', @local}, @broadcast, 0xe, 0x19}}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000001d00)={0xc2, 0xa9}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001d40)={@private0, 0x5b, r6}) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000001d80)) 1.08247ms ago: executing program 4 (id=883): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000000000050001100fe8000000000000000000000000000bbe0000002000000000000000000000000fc000000000000000000000000000000fc02000000000000000000000000000033040000080000000a000a0014000d00ac1e0101000000000000000000000000e4000600fc020000000000000000000000000001fe8000000000000000000000000000bb4e2300004e230ab10000900000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d5320000007f0000010000004541000000000000000008000000000000000001000000000000000000000000000000010000000000df00000000000000080000000000000006000000000000000000000000180000080000000000000000010000000000001a9d20007e0d0000e70c000029bd7000000000000a00001001000000000000000c001c00"/172, @ANYRES32=r0, @ANYBLOB="03000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x800}, 0x0) wait4(r0, &(0x7f0000000180), 0x40000000, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) keyctl$revoke(0x3, r2) r3 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)=ANY=[@ANYBLOB="0000950a000000006162636465666768696a6b6c6d6e6f70"], 0x18, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, r4, 0x0, 0x0) keyctl$unlink(0x9, r3, r4) 0s ago: executing program 3 (id=884): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0x4, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x7813, 0x3, 0x0, 0x3, 0x1ff, 0x1, 0x1}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x380) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004280)=""/4086, 0xff6}], 0x1}}], 0x1, 0x400122a0, 0x0) kernel console output (not intermixed with test programs): [ 72.911864][ T45] usb 2-1: too many configurations: 237, using maximum allowed: 8 [ 72.921621][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 72.929610][ T45] usb 2-1: can't read configurations, error -61 [ 72.936426][ T45] usb usb2-port1: attempt power cycle [ 72.946364][ T471] usb 4-1: device descriptor read/64, error -71 [ 73.196193][ T471] usb 4-1: device descriptor read/64, error -71 [ 73.306204][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 73.336538][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 73.342228][ T45] usb 2-1: too many configurations: 237, using maximum allowed: 8 [ 73.351630][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 73.359566][ T45] usb 2-1: can't read configurations, error -61 [ 73.456318][ T471] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 73.498073][ T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 73.516499][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 73.522177][ T45] usb 2-1: too many configurations: 237, using maximum allowed: 8 [ 73.531456][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 73.539479][ T45] usb 2-1: can't read configurations, error -61 [ 73.546126][ T45] usb usb2-port1: unable to enumerate USB device [ 73.586292][ T471] usb 4-1: device descriptor read/64, error -71 [ 73.826150][ T471] usb 4-1: device descriptor read/64, error -71 [ 73.886182][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 73.936662][ T471] usb usb4-port1: attempt power cycle [ 74.036191][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 74.042610][ T45] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 74.050922][ T45] usb 1-1: config 1 has no interface number 0 [ 74.057159][ T45] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 74.067175][ T45] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 74.077251][ T45] usb 1-1: config 1 interface 105 has no altsetting 0 [ 74.085752][ T45] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 74.094929][ T45] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 74.103167][ T45] usb 1-1: Product: syz [ 74.107544][ T45] usb 1-1: Manufacturer: syz [ 74.112268][ T45] usb 1-1: SerialNumber: syz [ 74.118707][ T310] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 74.126756][ T310] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 74.128266][ T1157] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 74.139516][ T310] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 74.142930][ T1157] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 74.149858][ T310] usb 5-1: 3:0: cannot get min/max values for control 11 (id 3) [ 74.167040][ T310] usb 5-1: USB disconnect, device number 24 [ 74.228338][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.276207][ T471] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 74.297261][ T471] usb 4-1: device descriptor read/8, error -71 [ 74.369518][ T45] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 74.381592][ T45] usb 1-1: USB disconnect, device number 30 [ 74.389960][ T1162] random: crng reseeded on system resumption [ 74.436933][ T471] usb 4-1: device descriptor read/8, error -71 [ 74.676232][ T471] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 74.697237][ T471] usb 4-1: device descriptor read/8, error -71 [ 74.827294][ T471] usb 4-1: device descriptor read/8, error -71 [ 74.866232][ T334] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 74.936258][ T471] usb usb4-port1: unable to enumerate USB device [ 74.964638][ T1178] incfs: ino conflict with backing FS 2 [ 75.017670][ T334] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.026325][ T334] usb 5-1: config index 0 descriptor too short (expected 64366, got 110) [ 75.034804][ T334] usb 5-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 75.045246][ T334] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.067283][ T334] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 75.076515][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.084547][ T334] usb 5-1: Product: syz [ 75.088785][ T334] usb 5-1: Manufacturer: syz [ 75.093520][ T334] usb 5-1: SerialNumber: syz [ 75.172756][ T36] audit: type=1400 audit(1780751193.250:352): avc: denied { setattr } for pid=1184 comm="syz.0.246" name="L2CAP" dev="sockfs" ino=12418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.215183][ T1190] random: crng reseeded on system resumption [ 75.316078][ T334] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.327382][ T334] usb 5-1: USB disconnect, device number 25 [ 75.327911][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.671106][ T1209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=1209 comm=syz.1.255 [ 75.726222][ T471] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 75.887401][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.898428][ T310] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 75.906183][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.915944][ T471] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.928898][ T471] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 75.938435][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.950019][ T471] usb 1-1: config 0 descriptor?? [ 76.076245][ T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 76.086167][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 76.093631][ T310] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 76.102877][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.111218][ T310] usb 4-1: Product: syz [ 76.115454][ T310] usb 4-1: Manufacturer: syz [ 76.120141][ T310] usb 4-1: SerialNumber: syz [ 76.206225][ T45] usb 5-1: device descriptor read/64, error -71 [ 76.334641][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 76.345694][ T310] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 76.356801][ T310] usb 4-1: USB disconnect, device number 33 [ 76.363544][ T1197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.379000][ T1197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.388311][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.456240][ T45] usb 5-1: device descriptor read/64, error -71 [ 76.496665][ T1218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.505217][ T1218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.575426][ T471] usbhid 1-1:0.0: can't add hid device: -71 [ 76.582511][ T471] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 76.591731][ T471] usb 1-1: USB disconnect, device number 31 [ 76.706219][ T45] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 76.846430][ T45] usb 5-1: device descriptor read/64, error -71 [ 77.086205][ T45] usb 5-1: device descriptor read/64, error -71 [ 77.086760][ T334] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 77.100858][ T1222] random: crng reseeded on system resumption [ 77.196283][ T45] usb usb5-port1: attempt power cycle [ 77.267514][ T334] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 77.278725][ T334] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.285382][ T334] usb 4-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 77.294514][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.303436][ T334] usb 4-1: config 0 descriptor?? [ 77.311029][ T1220] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.536164][ T45] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 77.557336][ T45] usb 5-1: device descriptor read/8, error -71 [ 77.586233][ T310] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 77.688956][ T45] usb 5-1: device descriptor read/8, error -71 [ 77.724435][ T1220] rust_binder: Write failure EFAULT in pid:153 [ 77.737334][ T310] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.751675][ T310] usb 1-1: config 0 has no interface number 0 [ 77.757850][ T310] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.768802][ T310] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.778597][ T310] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.791441][ T310] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 77.800630][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.810172][ T310] usb 1-1: config 0 descriptor?? [ 77.842958][ T36] audit: type=1326 audit(1780751195.920:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1219 comm="syz.3.258" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abf99ce59 code=0x7fc00000 [ 77.956195][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 77.979488][ T45] usb 5-1: device descriptor read/8, error -71 [ 78.107228][ T45] usb 5-1: device descriptor read/8, error -71 [ 78.218120][ T310] hid (null): bogus close delimiter [ 78.226999][ T45] usb usb5-port1: unable to enumerate USB device [ 78.423840][ T310] uclogic 0003:28BD:0042.000D: failed retrieving string descriptor #100: -71 [ 78.432849][ T310] uclogic 0003:28BD:0042.000D: failed retrieving pen parameters: -71 [ 78.441171][ T310] uclogic 0003:28BD:0042.000D: pen probing failed: -71 [ 78.448235][ T310] uclogic 0003:28BD:0042.000D: failed probing parameters: -71 [ 78.455765][ T310] uclogic 0003:28BD:0042.000D: probe with driver uclogic failed with error -71 [ 78.466041][ T310] usb 1-1: USB disconnect, device number 32 [ 78.546238][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 78.696271][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 78.702664][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.712826][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.723271][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.732399][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.740427][ T45] usb 2-1: Product: syz [ 78.744715][ T45] usb 2-1: Manufacturer: syz [ 78.749372][ T45] usb 2-1: SerialNumber: syz [ 78.958781][ T45] usb 2-1: 0:2 : does not exist [ 78.966853][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 78.984563][ T45] usb 2-1: USB disconnect, device number 39 [ 79.063515][ T1244] random: crng reseeded on system resumption [ 79.246173][ T310] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 79.398888][ T310] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 79.408037][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.416168][ T310] usb 5-1: Product: syz [ 79.420359][ T310] usb 5-1: Manufacturer: syz [ 79.424982][ T310] usb 5-1: SerialNumber: syz [ 79.506200][ T67] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 79.666160][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 79.672550][ T67] usb 1-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 79.683126][ T67] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.693805][ T67] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.703388][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.711499][ T67] usb 1-1: Product: syz [ 79.715728][ T67] usb 1-1: Manufacturer: syz [ 79.720407][ T67] usb 1-1: SerialNumber: syz [ 79.756176][ T462] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 79.848107][ T36] audit: type=1326 audit(1780751197.930:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1219 comm="syz.3.258" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7abf99ce59 code=0x7fc00000 [ 79.906177][ T462] usb 2-1: Using ep0 maxpacket: 32 [ 79.922662][ T334] usbhid 4-1:0.0: can't add hid device: -71 [ 79.929176][ T462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.943942][ T334] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 79.952637][ T462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.952773][ T67] usb 1-1: 0:2 : does not exist [ 79.967938][ T462] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 79.984700][ T334] usb 4-1: USB disconnect, device number 34 [ 79.993397][ T462] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 80.004390][ T462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.014238][ T67] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 80.022705][ T462] usb 2-1: config 0 descriptor?? [ 80.040133][ T67] usb 1-1: USB disconnect, device number 33 [ 80.044677][ T310] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 80.074836][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.240726][ T310] usb 5-1: USB disconnect, device number 30 [ 80.240751][ C0] usb 5-1: Rx status -71 [ 80.251160][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 80.258533][ T150] usb 5-1: device reset failed [ 80.356178][ T334] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 80.440429][ T1250] can0: slcan on ttyS3. [ 80.515808][ T334] usb 4-1: Using ep0 maxpacket: 8 [ 80.526056][ T334] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.540809][ T1249] can0 (unregistered): slcan off ttyS3. [ 80.546487][ T334] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 80.556652][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.565557][ T462] usbhid 2-1:0.0: can't add hid device: -71 [ 80.571873][ T462] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 80.580648][ T334] usb 4-1: config 0 descriptor?? [ 80.589409][ T334] usb 4-1: bad CDC descriptors [ 80.594348][ T334] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 80.606649][ T462] usb 2-1: USB disconnect, device number 40 [ 80.614264][ T334] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 80.621081][ T334] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 80.716201][ T67] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 80.867453][ T67] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.878709][ T67] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.891729][ T67] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.898392][ T67] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 80.907849][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.916829][ T67] usb 1-1: config 0 descriptor?? [ 81.072775][ T1314] input: syz0 as /devices/virtual/input/input12 [ 81.309539][ T1321] overlay: ./bus is not a directory [ 81.324000][ T1285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.335282][ T1285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.351149][ T67] usbhid 1-1:0.0: can't add hid device: -71 [ 81.364059][ T67] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.383168][ T67] usb 1-1: USB disconnect, device number 34 [ 81.395712][ T1331] rust_binder: Write failure EFAULT in pid:250 [ 81.396145][ T310] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 81.577356][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.588501][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.598625][ T310] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.608112][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.617201][ T310] usb 2-1: config 0 descriptor?? [ 81.716196][ T67] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 81.811514][ T36] audit: type=1400 audit(1780751199.890:355): avc: denied { create } for pid=1343 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.832032][ T1344] netlink: 37 bytes leftover after parsing attributes in process `syz.4.284'. [ 81.833272][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 81.850476][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 81.862328][ T310] usb 2-1: USB disconnect, device number 41 [ 81.877229][ T67] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 81.885554][ T67] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 81.894482][ T67] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 81.905867][ T67] usb 1-1: config 220 has no interface number 2 [ 81.912301][ T67] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 81.925676][ T67] usb 1-1: config 220 interface 0 has no altsetting 0 [ 81.932646][ T67] usb 1-1: config 220 interface 76 has no altsetting 0 [ 81.939693][ T67] usb 1-1: config 220 interface 1 has no altsetting 0 [ 81.948135][ T67] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 81.957360][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.965474][ T67] usb 1-1: Product: syz [ 81.969774][ T67] usb 1-1: Manufacturer: syz [ 81.974587][ T67] usb 1-1: SerialNumber: syz [ 82.115363][ T36] audit: type=1400 audit(1780751200.190:356): avc: denied { name_bind } for pid=1318 comm="syz.1.277" path="socket:[12286]" dev="sockfs" ino=12286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 82.190374][ T67] usb 1-1: selecting invalid altsetting 0 [ 82.196860][ T67] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 82.203378][ T67] usb 1-1: No valid video chain found. [ 82.215183][ T67] usb 1-1: USB disconnect, device number 35 [ 82.759720][ T1354] syz.0.286: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 82.777844][ T1354] CPU: 1 UID: 0 PID: 1354 Comm: syz.0.286 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 82.777876][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 82.777889][ T1354] Call Trace: [ 82.777897][ T1354] [ 82.777905][ T1354] __dump_stack+0x21/0x30 [ 82.777937][ T1354] dump_stack_lvl+0x140/0x1c0 [ 82.777964][ T1354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.777991][ T1354] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 82.778014][ T1354] dump_stack+0x19/0x20 [ 82.778039][ T1354] warn_alloc+0x1e7/0x2c0 [ 82.778066][ T1354] ? kasan_save_free_info+0x4a/0x60 [ 82.778083][ T1354] ? __cfi_warn_alloc+0x10/0x10 [ 82.778109][ T1354] ? __get_vm_area_node+0x201/0x3d0 [ 82.778136][ T1354] ? packet_set_ring+0x745/0x28c0 [ 82.778155][ T1354] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 82.778183][ T1354] ? packet_set_ring+0x679/0x28c0 [ 82.778204][ T1354] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 82.778233][ T1354] ? __asan_memset+0x39/0x50 [ 82.778251][ T1354] ? __alloc_pages_noprof+0xe0/0x7e0 [ 82.778278][ T1354] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.778315][ T1354] ? packet_set_ring+0x745/0x28c0 [ 82.778332][ T1354] vzalloc_noprof+0x103/0x1d0 [ 82.778359][ T1354] ? packet_set_ring+0x745/0x28c0 [ 82.778376][ T1354] ? __cfi_vzalloc_noprof+0x10/0x10 [ 82.778404][ T1354] ? packet_set_ring+0x679/0x28c0 [ 82.778422][ T1354] packet_set_ring+0x745/0x28c0 [ 82.778441][ T1354] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 82.778461][ T1354] ? check_stack_object+0x12b/0x150 [ 82.778482][ T1354] ? packet_mmap+0x590/0x590 [ 82.778502][ T1354] ? __check_object_size+0xe0/0x830 [ 82.778521][ T1354] ? __asan_memcpy+0x5a/0x80 [ 82.778538][ T1354] ? __cfi___check_object_size+0x10/0x10 [ 82.778559][ T1354] ? avc_has_perm_noaudit+0x28a/0x360 [ 82.778582][ T1354] ? __kasan_check_write+0x18/0x20 [ 82.778601][ T1354] packet_setsockopt+0xdb5/0x1510 [ 82.778618][ T1354] ? __cfi_packet_setsockopt+0x10/0x10 [ 82.778637][ T1354] ? selinux_socket_setsockopt+0x324/0x3d0 [ 82.778662][ T1354] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 82.778694][ T1354] ? do_futex+0x32a/0x510 [ 82.778720][ T1354] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 82.778743][ T1354] ? security_socket_setsockopt+0x3d/0x100 [ 82.778768][ T1354] ? __cfi_packet_setsockopt+0x10/0x10 [ 82.778785][ T1354] do_sock_setsockopt+0x27c/0x410 [ 82.778832][ T1354] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 82.778863][ T1354] __x64_sys_setsockopt+0x1b7/0x250 [ 82.778892][ T1354] x64_sys_call+0x2adc/0x2ee0 [ 82.778915][ T1354] do_syscall_64+0x57/0xf0 [ 82.778958][ T1354] ? clear_bhb_loop+0x50/0xa0 [ 82.778982][ T1354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.779004][ T1354] RIP: 0033:0x7ff1ea39ce59 [ 82.779019][ T1354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.779035][ T1354] RSP: 002b:00007ff1eb271028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.779056][ T1354] RAX: ffffffffffffffda RBX: 00007ff1ea615fa0 RCX: 00007ff1ea39ce59 [ 82.779070][ T1354] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 82.779082][ T1354] RBP: 00007ff1ea432d6f R08: 000000000000001c R09: 0000000000000000 [ 82.779094][ T1354] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 82.779106][ T1354] R13: 00007ff1ea616038 R14: 00007ff1ea615fa0 R15: 00007ffdfe3cf118 [ 82.779122][ T1354] [ 82.779181][ T1354] Mem-Info: [ 83.049384][ T67] usb 4-1: USB disconnect, device number 35 [ 83.126302][ T1354] active_anon:7231 inactive_anon:2 isolated_anon:0 [ 83.126302][ T1354] active_file:14753 inactive_file:2645 isolated_file:0 [ 83.126302][ T1354] unevictable:0 dirty:47 writeback:0 [ 83.126302][ T1354] slab_reclaimable:5732 slab_unreclaimable:69969 [ 83.126302][ T1354] mapped:24670 shmem:167 pagetables:953 [ 83.126302][ T1354] sec_pagetables:0 bounce:0 [ 83.126302][ T1354] kernel_misc_reclaimable:0 [ 83.126302][ T1354] free:1515169 free_pcp:5999 free_cma:0 [ 83.172029][ T1354] Node 0 active_anon:28908kB inactive_anon:8kB active_file:59012kB inactive_file:10580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98680kB dirty:188kB writeback:0kB shmem:664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6632kB pagetables:3816kB sec_pagetables:0kB all_unreclaimable? no [ 83.204090][ T1354] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963320kB mlocked:0kB bounce:0kB free_pcp:5156kB local_pcp:0kB free_cma:0kB [ 83.234396][ T1354] lowmem_reserve[]: 0 3921 3921 [ 83.239649][ T1354] Normal free:3119648kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28940kB inactive_anon:8kB active_file:59012kB inactive_file:10580kB unevictable:0kB writepending:188kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2156kB local_pcp:756kB free_cma:0kB [ 83.271121][ T1354] lowmem_reserve[]: 0 0 0 [ 83.275603][ T1354] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 83.291644][ T1354] Normal: 1*4kB (E) 211*8kB (UM) 298*16kB (UME) 325*32kB (UME) 282*64kB (UME) 102*128kB (UME) 25*256kB (UME) 17*512kB (UME) 10*1024kB (UME) 27*2048kB (UME) 730*4096kB (UM) = 3118684kB [ 83.310376][ T1354] 17563 total pagecache pages [ 83.315160][ T1354] 5 pages in swap cache [ 83.319663][ T1354] Free swap = 124632kB [ 83.324001][ T1354] Total swap = 124996kB [ 83.328774][ T1354] 2097051 pages RAM [ 83.332661][ T1354] 0 pages HighMem/MovableOnly [ 83.337681][ T1354] 352255 pages reserved [ 83.341920][ T1354] 0 pages cma reserved [ 83.349173][ T1354] Memory allocations: [ 83.353247][ T1354] 0 B 0 init/main.c:1477 func:do_initcalls [ 83.360856][ T1354] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 83.369162][ T1354] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 83.377079][ T1354] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 83.385124][ T1354] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 83.393425][ T1354] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 83.402481][ T1354] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 83.410981][ T1354] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 83.419133][ T1354] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 83.427441][ T1354] 0 B 0 init/initramfs.c:101 func:find_link [ 83.452032][ T1369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.290'. [ 83.466211][ T67] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 83.616208][ T67] usb 4-1: Using ep0 maxpacket: 32 [ 83.622820][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.632999][ T67] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 83.642095][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.650224][ T67] usb 4-1: Product: syz [ 83.654492][ T67] usb 4-1: Manufacturer: syz [ 83.659164][ T67] usb 4-1: SerialNumber: syz [ 83.776167][ T471] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 83.806197][ T310] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 83.926160][ T471] usb 1-1: Using ep0 maxpacket: 32 [ 83.932505][ T471] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.944140][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 83.956118][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.967334][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 83.972570][ T471] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 83.981702][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.990769][ T471] usb 1-1: config 0 descriptor?? [ 83.996204][ T310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.004103][ T1381] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 84.011908][ T310] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 84.022748][ T471] hub 1-1:0.0: USB hub found [ 84.027517][ T310] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 84.038400][ T310] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 84.053058][ T310] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 84.062210][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.070293][ T310] usb 5-1: Product: syz [ 84.074510][ T310] usb 5-1: Manufacturer: syz [ 84.079185][ T310] usb 5-1: SerialNumber: syz [ 84.125459][ T67] usb 4-1: unit 0 not found! [ 84.212438][ T471] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 84.338001][ T67] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 84.349004][ T67] usb 4-1: unit 0 not found! [ 84.355642][ T67] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 84.366264][ T67] usb 4-1: unit 0 not found! [ 84.375335][ T67] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 84.385754][ T67] usb 4-1: USB disconnect, device number 36 [ 84.398109][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.422178][ T471] usbhid 1-1:0.0: can't add hid device: -71 [ 84.428544][ T471] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 84.456633][ T471] usb 1-1: USB disconnect, device number 36 [ 84.556187][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 84.707335][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.718379][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.728303][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.741396][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.750593][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.759388][ T45] usb 2-1: config 0 descriptor?? [ 85.096174][ T67] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 85.167738][ T45] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 85.177124][ T45] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 85.246225][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 85.252921][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.261703][ T67] usb 4-1: config 127 has an invalid interface number: 159 but max is 1 [ 85.270123][ T67] usb 4-1: config 127 has an invalid interface number: 92 but max is 1 [ 85.278445][ T67] usb 4-1: config 127 has an invalid interface association descriptor of length 2, skipping [ 85.288631][ T67] usb 4-1: config 127 has no interface number 0 [ 85.294999][ T67] usb 4-1: config 127 has no interface number 1 [ 85.302258][ T67] usb 4-1: config 127 interface 159 altsetting 5 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 85.314233][ T67] usb 4-1: config 127 interface 159 altsetting 5 endpoint 0x8 has an invalid bInterval 185, changing to 7 [ 85.325597][ T67] usb 4-1: config 127 interface 159 has no altsetting 0 [ 85.332625][ T67] usb 4-1: config 127 interface 92 has no altsetting 0 [ 85.341081][ T67] usb 4-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=e2.70 [ 85.350213][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.358272][ T67] usb 4-1: Product: syz [ 85.362453][ T67] usb 4-1: Manufacturer: syz [ 85.367204][ T67] usb 4-1: SerialNumber: syz [ 85.405516][ T1398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.414786][ T1398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.423470][ T36] audit: type=1326 audit(1780751203.510:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1397 comm="syz.1.296" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f399239ce59 code=0x0 [ 85.525776][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.534457][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.576902][ T67] cdc_acm 4-1:127.92: invalid descriptor buffer length [ 85.588225][ T67] usb 4-1: USB disconnect, device number 37 [ 86.326158][ T67] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 86.476177][ T67] usb 4-1: Using ep0 maxpacket: 32 [ 86.482711][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.493741][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.503579][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.512694][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.527477][ T67] usb 4-1: config 0 descriptor?? [ 86.539358][ T67] hub 4-1:0.0: USB hub found [ 86.545848][ T310] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 86.563450][ T310] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 86.578186][ T310] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 86.589937][ T310] usb 5-1: USB disconnect, device number 31 [ 86.604321][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.734887][ T67] hub 4-1:0.0: 26 ports detected [ 86.741686][ T67] hub 4-1:0.0: insufficient power available to use all downstream ports [ 86.756542][ T67] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 86.765684][ T67] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 86.779446][ T36] audit: type=1400 audit(1780751204.860:358): avc: denied { read } for pid=1423 comm="syz.3.302" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.802118][ T36] audit: type=1400 audit(1780751204.860:359): avc: denied { open } for pid=1423 comm="syz.3.302" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.826169][ T67] usbhid 4-1:0.0: can't add hid device: -71 [ 86.832219][ T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 86.857619][ T67] usb 4-1: USB disconnect, device number 38 [ 86.878813][ T1426] incfs: ino conflict with backing FS 2 [ 86.936352][ T36] audit: type=1400 audit(1780751205.020:360): avc: denied { bind } for pid=1425 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.036175][ T310] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 87.187655][ T310] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1023 [ 87.200235][ T310] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 87.209545][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.217811][ T310] usb 5-1: Product: syz [ 87.222063][ T310] usb 5-1: Manufacturer: syz [ 87.226710][ T310] usb 5-1: SerialNumber: syz [ 87.307878][ T45] usb 2-1: USB disconnect, device number 42 [ 87.400198][ T36] audit: type=1400 audit(1780751205.480:361): avc: denied { getopt } for pid=1431 comm="syz.1.305" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.438191][ T310] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.445709][ T310] usb 5-1: unit 4 not found! [ 87.454866][ T310] usb 5-1: USB disconnect, device number 32 [ 87.467347][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.732612][ T1440] 9pnet: Could not find request transport: Ïen [ 87.766803][ T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 87.811945][ T36] audit: type=1400 audit(1780751205.890:362): avc: denied { write } for pid=1442 comm="syz.3.308" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.847081][ T36] audit: type=1400 audit(1780751205.930:363): avc: denied { watch watch_reads } for pid=1448 comm="syz.3.309" path="/56" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.899071][ T36] audit: type=1400 audit(1780751205.980:364): avc: denied { getopt } for pid=1450 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.916383][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 87.928732][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.937424][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 87.972613][ T1453] random: crng reseeded on system resumption [ 87.974102][ T45] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 87.987912][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.997996][ T45] usb 2-1: Product: syz [ 88.006157][ T45] usb 2-1: Manufacturer: syz [ 88.011016][ T45] usb 2-1: SerialNumber: syz [ 88.074940][ T36] audit: type=1400 audit(1780751206.150:365): avc: denied { getopt } for pid=1461 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.094505][ T1463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 88.137745][ T1468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.146990][ T1468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.161561][ T36] audit: type=1400 audit(1780751206.240:366): avc: denied { create } for pid=1465 comm="syz.4.315" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.219245][ T45] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 88.227764][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.366306][ T310] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 88.396167][ T462] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 88.527708][ T310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.536251][ T310] usb 5-1: config 172 has an invalid interface number: 178 but max is 0 [ 88.544713][ T310] usb 5-1: config 172 has no interface number 0 [ 88.546883][ T462] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 88.551306][ T310] usb 5-1: config 172 interface 178 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.561802][ T462] usb 1-1: config 0 has no interfaces? [ 88.572649][ T310] usb 5-1: config 172 interface 178 has no altsetting 0 [ 88.581098][ T462] usb 1-1: config 0 has no interfaces? [ 88.591702][ T462] usb 1-1: config 0 has no interfaces? [ 88.600483][ T462] usb 1-1: config 0 has no interfaces? [ 88.607023][ T462] usb 1-1: config 0 has no interfaces? [ 88.613267][ T462] usb 1-1: config 0 has no interfaces? [ 88.618910][ T334] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 88.633123][ T462] usb 1-1: config 0 has no interfaces? [ 88.639595][ T462] usb 1-1: config 0 has no interfaces? [ 88.642215][ T45] usb 2-1: USB disconnect, device number 43 [ 88.656743][ T462] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 88.665860][ T462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 88.676156][ T462] usb 1-1: Product: syz [ 88.679798][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.680378][ T462] usb 1-1: Manufacturer: syz [ 88.700741][ T462] usb 1-1: SerialNumber: syz [ 88.707912][ T462] usb 1-1: config 0 descriptor?? [ 88.786156][ T334] usb 4-1: Using ep0 maxpacket: 8 [ 88.792816][ T334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.801298][ T334] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 88.809558][ T334] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 88.819746][ T334] usb 4-1: config 4 has no interface number 0 [ 88.827471][ T334] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 88.836587][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 88.844709][ T334] usb 4-1: Product: syz [ 88.848927][ T334] usb 4-1: Manufacturer: syz [ 88.853658][ T334] usb 4-1: SerialNumber: syz [ 88.920095][ T1470] incfs: ino conflict with backing FS 2 [ 88.981663][ T462] usb 1-1: USB disconnect, device number 37 [ 89.063455][ T334] usb 4-1: USB disconnect, device number 39 [ 89.416198][ T462] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 89.567357][ T462] usb 2-1: config index 0 descriptor too short (expected 50724, got 36) [ 89.575789][ T462] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 89.585039][ T462] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.596356][ T462] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 89.609708][ T462] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.616597][ T462] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 89.625842][ T462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.645194][ T462] usb 2-1: config 0 descriptor?? [ 89.876224][ T45] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 90.027348][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 90.038490][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 90.051294][ T45] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 90.060507][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.062554][ T1480] usb usb8: usbfs: process 1480 (syz.1.320) did not claim interface 0 before use [ 90.068582][ T45] usb 4-1: Product: syz [ 90.082127][ T45] usb 4-1: Manufacturer: syz [ 90.086861][ T45] usb 4-1: SerialNumber: syz [ 90.149957][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.156986][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.163928][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.171020][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.178037][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.184968][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.191897][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.198833][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.205852][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.212800][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.219735][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.226709][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.233625][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.240583][ T462] wacom 0003:056A:0059.000F: unknown main item tag 0x0 [ 90.248652][ T462] wacom 0003:056A:0059.000F: hidraw0: USB HID v0.04 Device [HID 056a:0059] on usb-dummy_hcd.1-1/input0 [ 90.294789][ T1488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.303944][ T1488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.315666][ T45] usb 4-1: Can't get UAC3 power state for id 10 [ 90.325413][ T45] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 90.338220][ T45] usb 4-1: USB disconnect, device number 40 [ 90.353099][ T1134] usb 2-1: USB disconnect, device number 44 [ 90.362344][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.716171][ T462] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 90.867816][ T462] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.879376][ T462] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 90.891416][ T1509] SELinux: security_context_str_to_sid () failed with errno=-22 [ 90.895327][ T36] audit: type=1400 audit(1780751208.970:367): avc: denied { mounton } for pid=1508 comm="syz.1.329" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.923313][ T462] usb 1-1: can't read configurations, error -61 [ 90.945958][ T36] audit: type=1400 audit(1780751209.020:368): avc: denied { getopt } for pid=1511 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.066168][ T462] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 91.132535][ T310] usb 5-1: New USB device found, idVendor=2020, idProduct=2060, bcdDevice=3d.9e [ 91.151020][ T310] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 91.166215][ T310] usb 5-1: can't set config #172, error -71 [ 91.177365][ T36] audit: type=1400 audit(1780751209.250:369): avc: denied { bind } for pid=1526 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.198101][ T310] usb 5-1: USB disconnect, device number 33 [ 91.206185][ T1134] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 91.227488][ T462] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.242655][ T462] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 91.251228][ T462] usb 1-1: can't read configurations, error -61 [ 91.258503][ T462] usb usb1-port1: attempt power cycle [ 91.357231][ T1134] usb 4-1: config 0 has no interfaces? [ 91.366892][ T1134] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 91.386169][ T1134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.404201][ T1134] usb 4-1: config 0 descriptor?? [ 91.626189][ T462] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 91.628475][ T1134] usb 4-1: USB disconnect, device number 41 [ 91.648333][ T462] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.666244][ T334] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 91.675019][ T462] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 91.682751][ T462] usb 1-1: can't read configurations, error -61 [ 91.816161][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 91.827108][ T334] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.833756][ T334] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 91.846266][ T462] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 91.853948][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.863321][ T334] usb 5-1: config 0 descriptor?? [ 91.878014][ T462] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.886986][ T462] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 91.894689][ T462] usb 1-1: can't read configurations, error -61 [ 91.901691][ T462] usb usb1-port1: unable to enumerate USB device [ 92.275376][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.282972][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.290682][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.298362][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.305792][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.313465][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.321111][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.328806][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.336414][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.343952][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.351563][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.359450][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.367061][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.376658][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.384120][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.391896][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.399525][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.407198][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.414650][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.425784][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.427273][ T1553] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 92.434113][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.442124][ T36] audit: type=1400 audit(1780751210.510:370): avc: denied { remount } for pid=1552 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.450307][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.477297][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.484745][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.486276][ T1134] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 92.492241][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.507411][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.514849][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.522485][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.530119][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.537900][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.545385][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.553081][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.560726][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.568421][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.575848][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.584245][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.592247][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.599761][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.607223][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.614707][ T334] steelseries 0003:1038:12B6.0010: unknown main item tag 0x0 [ 92.622883][ T334] steelseries 0003:1038:12B6.0010: hidraw0: USB HID v0.03 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 92.636758][ T334] steelseries 0003:1038:12B6.0010: hid_hw_raw_request() failed with -71 [ 92.648684][ T334] usb 5-1: USB disconnect, device number 34 [ 92.656128][ T1134] usb 4-1: Using ep0 maxpacket: 16 [ 92.664133][ T1557] fido_id[1557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 92.679876][ T1134] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.695341][ T1134] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 92.704630][ T1134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.712706][ T1134] usb 4-1: Product: syz [ 92.717177][ T1134] usb 4-1: Manufacturer: syz [ 92.721818][ T1134] usb 4-1: SerialNumber: syz [ 92.846220][ T310] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 92.929163][ T1134] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 92.936669][ T1134] usb 4-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 92.944010][ T1134] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 92.953667][ T1134] usb 4-1: unit 3 not found! [ 92.962336][ T1134] usb 4-1: USB disconnect, device number 42 [ 92.976178][ T310] usb 2-1: device descriptor read/64, error -71 [ 92.978324][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.014459][ T36] audit: type=1400 audit(1780751211.090:371): avc: denied { getopt } for pid=1558 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.046370][ T36] audit: type=1400 audit(1780751211.120:372): avc: denied { setopt } for pid=1560 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.139912][ T1565] incfs: ino conflict with backing FS 1 [ 93.146655][ T36] audit: type=1400 audit(1780751211.230:373): avc: denied { ioctl } for pid=1564 comm="syz.4.350" path="socket:[18387]" dev="sockfs" ino=18387 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.171799][ T36] audit: type=1400 audit(1780751211.230:374): avc: denied { write } for pid=1564 comm="syz.4.350" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.194178][ T36] audit: type=1400 audit(1780751211.230:375): avc: denied { setattr } for pid=1564 comm="syz.4.350" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.226179][ T310] usb 2-1: device descriptor read/64, error -71 [ 93.292400][ T36] audit: type=1400 audit(1780751211.370:376): avc: denied { map } for pid=1568 comm="syz.4.352" path="socket:[18400]" dev="sockfs" ino=18400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.383530][ T1573] tipc: Started in network mode [ 93.388542][ T1573] tipc: Node identity 7f000001, cluster identity 4711 [ 93.395583][ T1573] tipc: Enabled bearer , priority 10 [ 93.403064][ T1573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.354'. [ 93.413231][ T1573] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 93.421914][ T1573] tipc: Enabled bearer , priority 10 [ 93.466198][ T310] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 93.596208][ T310] usb 2-1: device descriptor read/64, error -71 [ 93.750031][ T1581] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 93.760374][ T1581] SELinux: failed to load policy [ 93.762505][ T1583] incfs: ino conflict with backing FS 2 [ 93.838652][ T310] usb 2-1: device descriptor read/64, error -71 [ 93.870060][ T1589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 93.879969][ T1589] SELinux: policydb magic number 0xdfd0006 does not match expected magic number 0xf97cff8c [ 93.890203][ T1589] SELinux: failed to load policy [ 93.926181][ T1595] netlink: 104 bytes leftover after parsing attributes in process `syz.3.364'. [ 93.946307][ T310] usb usb2-port1: attempt power cycle [ 93.966207][ T334] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 94.026207][ T67] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 94.116553][ T334] usb 1-1: Using ep0 maxpacket: 8 [ 94.122986][ T334] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 94.131365][ T334] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 94.140308][ T334] usb 1-1: config 3 has no interface number 0 [ 94.146473][ T334] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.159476][ T334] usb 1-1: config 3 interface 45 has no altsetting 0 [ 94.167763][ T334] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 94.177082][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.185111][ T334] usb 1-1: Product: syz [ 94.186334][ T1134] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 94.189405][ T67] usb 5-1: Using ep0 maxpacket: 8 [ 94.201918][ T334] usb 1-1: Manufacturer: syz [ 94.206554][ T334] usb 1-1: SerialNumber: syz [ 94.212819][ T67] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 94.221328][ T67] usb 5-1: config 0 has no interface number 0 [ 94.229283][ T67] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 94.238460][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.246562][ T67] usb 5-1: Product: syz [ 94.250782][ T67] usb 5-1: Manufacturer: syz [ 94.255423][ T67] usb 5-1: SerialNumber: syz [ 94.261422][ T67] usb 5-1: config 0 descriptor?? [ 94.286200][ T310] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 94.307326][ T310] usb 2-1: device descriptor read/8, error -71 [ 94.357487][ T1134] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.367691][ T1134] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.379372][ T1134] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 94.388509][ T1134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.396604][ T1134] usb 4-1: Product: syz [ 94.400804][ T1134] usb 4-1: Manufacturer: syz [ 94.405426][ T1134] usb 4-1: SerialNumber: syz [ 94.437265][ T310] usb 2-1: device descriptor read/8, error -71 [ 94.468096][ T1585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.477893][ T1585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.493561][ T67] usb 5-1: USB disconnect, device number 35 [ 94.506210][ T511] tipc: Node number set to 2130706433 [ 94.594923][ T334] usb 1-1: USB disconnect, device number 42 [ 94.607317][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.621093][ T1134] usb 4-1: 0:1 : does not exist [ 94.628723][ T1134] usb 4-1: unit 9 not found! [ 94.640824][ T1134] usb 4-1: USB disconnect, device number 43 [ 94.650408][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.676194][ T310] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 94.697277][ T310] usb 2-1: device descriptor read/8, error -71 [ 94.827361][ T310] usb 2-1: device descriptor read/8, error -71 [ 94.936398][ T310] usb usb2-port1: unable to enumerate USB device [ 95.236392][ T334] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 95.260175][ T1609] FAULT_INJECTION: forcing a failure. [ 95.260175][ T1609] name failslab, interval 1, probability 0, space 0, times 0 [ 95.272985][ T1609] CPU: 1 UID: 0 PID: 1609 Comm: syz.3.370 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 95.273024][ T1609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.273041][ T1609] Call Trace: [ 95.273047][ T1609] [ 95.273053][ T1609] __dump_stack+0x21/0x30 [ 95.273080][ T1609] dump_stack_lvl+0x140/0x1c0 [ 95.273102][ T1609] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.273127][ T1609] dump_stack+0x19/0x20 [ 95.273148][ T1609] should_fail_ex+0x3d7/0x530 [ 95.273163][ T1609] should_failslab+0xac/0x100 [ 95.273183][ T1609] __kmalloc_node_noprof+0x6c/0x4f0 [ 95.273200][ T1609] ? __kvmalloc_node_noprof+0x128/0x300 [ 95.273215][ T1609] __kvmalloc_node_noprof+0x128/0x300 [ 95.273237][ T1609] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 95.273253][ T1609] traverse+0xf5/0x710 [ 95.273273][ T1609] ? __cfi_mutex_lock+0x10/0x10 [ 95.273295][ T1609] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 95.273315][ T1609] seq_read_iter+0xe50/0xfd0 [ 95.273335][ T1609] ? _parse_integer_limit+0x195/0x1e0 [ 95.273361][ T1609] seq_read+0x368/0x490 [ 95.273381][ T1609] ? __cfi_seq_read+0x10/0x10 [ 95.273401][ T1609] ? __cfi_selinux_file_permission+0x10/0x10 [ 95.273426][ T1609] ? __import_iovec+0x5ad/0x7c0 [ 95.273447][ T1609] ? __cfi_seq_read+0x10/0x10 [ 95.273466][ T1609] proc_reg_read+0x1f7/0x2f0 [ 95.273482][ T1609] vfs_readv+0x5f0/0xa10 [ 95.273502][ T1609] ? __cfi_proc_reg_read+0x10/0x10 [ 95.273519][ T1609] ? do_readv+0x2e0/0x2e0 [ 95.273540][ T1609] ? __cfi_mutex_unlock+0x10/0x10 [ 95.273562][ T1609] __x64_sys_preadv+0x1a6/0x2c0 [ 95.273581][ T1609] ? __cfi___x64_sys_preadv+0x10/0x10 [ 95.273634][ T1609] ? __kasan_check_read+0x15/0x20 [ 95.273650][ T1609] x64_sys_call+0x1ee9/0x2ee0 [ 95.273666][ T1609] do_syscall_64+0x57/0xf0 [ 95.273682][ T1609] ? clear_bhb_loop+0x50/0xa0 [ 95.273702][ T1609] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.273722][ T1609] RIP: 0033:0x7f7abf99ce59 [ 95.273737][ T1609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.273750][ T1609] RSP: 002b:00007f7ac08b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 95.273767][ T1609] RAX: ffffffffffffffda RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 95.273779][ T1609] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 95.273789][ T1609] RBP: 00007f7ac08b4090 R08: 0000000000000000 R09: 0000000000000000 [ 95.273800][ T1609] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 95.273810][ T1609] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 95.273824][ T1609] [ 95.532983][ T67] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 95.569104][ T334] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 95.578238][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.586489][ T334] usb 5-1: Product: syz [ 95.590750][ T334] usb 5-1: Manufacturer: syz [ 95.595534][ T334] usb 5-1: SerialNumber: syz [ 95.706213][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 95.712582][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.722790][ T67] usb 1-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 95.733934][ T67] usb 1-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 95.747347][ T67] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.757172][ T67] usb 1-1: config 1 interface 2 has no altsetting 0 [ 95.765394][ T67] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 95.774574][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.782688][ T67] usb 1-1: Product: syz [ 95.787138][ T67] usb 1-1: Manufacturer: syz [ 95.791810][ T67] usb 1-1: SerialNumber: syz [ 95.826164][ T310] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 95.956163][ T462] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 95.977313][ T310] usb 4-1: config 0 has no interfaces? [ 95.984287][ T310] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 95.993465][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.001544][ T310] usb 4-1: SerialNumber: syz [ 96.007365][ T310] usb 4-1: config 0 descriptor?? [ 96.014578][ T1599] netlink: 'syz.4.365': attribute type 4 has an invalid length. [ 96.041206][ T67] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.046477][ T1599] netlink: 'syz.4.365': attribute type 4 has an invalid length. [ 96.048733][ T67] usb 1-1: unit 4 not found! [ 96.061304][ T334] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 96.072216][ T67] usb 1-1: unit 144 not found! [ 96.085427][ T67] usb 1-1: USB disconnect, device number 43 [ 96.106134][ T462] usb 2-1: device descriptor read/64, error -71 [ 96.217827][ T1611] incfs: ino conflict with backing FS 2 [ 96.224383][ T334] usb 4-1: USB disconnect, device number 44 [ 96.346291][ T462] usb 2-1: device descriptor read/64, error -71 [ 96.396212][ T67] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 96.411834][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 96.411853][ T36] audit: type=1400 audit(1780751214.490:386): avc: denied { read write } for pid=1598 comm="syz.4.365" name="lp0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 96.441429][ T36] audit: type=1400 audit(1780751214.490:387): avc: denied { open } for pid=1598 comm="syz.4.365" path="/dev/usb/lp0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 96.546209][ T67] usb 1-1: Using ep0 maxpacket: 8 [ 96.561680][ T67] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.572107][ T67] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 96.580575][ T67] usb 1-1: can't read configurations, error -71 [ 96.596214][ T462] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 96.667270][ T1622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.676054][ T1622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.723564][ T36] audit: type=1400 audit(1780751214.800:388): avc: denied { ioctl } for pid=1644 comm="syz.0.380" path="socket:[19282]" dev="sockfs" ino=19282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.726381][ T462] usb 2-1: device descriptor read/64, error -71 [ 96.748294][ T36] audit: type=1400 audit(1780751214.800:389): avc: denied { bind } for pid=1644 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.781625][ T36] audit: type=1400 audit(1780751214.840:390): avc: denied { lock } for pid=1644 comm="syz.0.380" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.791990][ T1647] overlay: ./bus is not a directory [ 96.813437][ T1647] No source specified [ 96.830114][ T1649] FAULT_INJECTION: forcing a failure. [ 96.830114][ T1649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.846708][ T1651] syz.0.383: attempt to access beyond end of device [ 96.846708][ T1651] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 96.853219][ T1649] CPU: 0 UID: 0 PID: 1649 Comm: syz.3.382 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 96.853313][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.853354][ T1649] Call Trace: [ 96.853376][ T1649] [ 96.853401][ T1649] __dump_stack+0x21/0x30 [ 96.853510][ T1649] dump_stack_lvl+0x140/0x1c0 [ 96.853593][ T1649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.853685][ T1649] ? selinux_file_open+0x46c/0x630 [ 96.853747][ T1649] ? kasan_save_alloc_info+0x40/0x50 [ 96.853841][ T1649] dump_stack+0x19/0x20 [ 96.853942][ T1649] should_fail_ex+0x3d7/0x530 [ 96.854018][ T1649] should_fail+0xf/0x20 [ 96.854069][ T1649] should_fail_usercopy+0x1e/0x30 [ 96.854146][ T1649] _copy_to_iter+0x3b8/0x1510 [ 96.854213][ T1649] ? __cfi__copy_to_iter+0x10/0x10 [ 96.854276][ T1649] ? __check_object_size+0x527/0x830 [ 96.854348][ T1649] ? __cfi___check_object_size+0x10/0x10 [ 96.854414][ T1649] seq_read_iter+0x2f0/0xfd0 [ 96.854490][ T1649] ? _parse_integer_limit+0x195/0x1e0 [ 96.854584][ T1649] seq_read+0x368/0x490 [ 96.854665][ T1649] ? __cfi_seq_read+0x10/0x10 [ 96.854737][ T1649] ? __cfi_selinux_file_permission+0x10/0x10 [ 96.854822][ T1649] ? __import_iovec+0x5ad/0x7c0 [ 96.854896][ T1649] ? __cfi_seq_read+0x10/0x10 [ 96.854963][ T1649] proc_reg_read+0x1f7/0x2f0 [ 96.855026][ T1649] vfs_readv+0x5f0/0xa10 [ 96.855106][ T1649] ? __cfi_proc_reg_read+0x10/0x10 [ 96.855157][ T1649] ? do_readv+0x2e0/0x2e0 [ 96.855236][ T1649] ? __cfi_mutex_unlock+0x10/0x10 [ 96.855358][ T1649] __x64_sys_preadv+0x1a6/0x2c0 [ 96.855437][ T1649] ? __cfi___x64_sys_preadv+0x10/0x10 [ 96.855508][ T1649] ? __kasan_check_read+0x15/0x20 [ 96.855563][ T1649] x64_sys_call+0x1ee9/0x2ee0 [ 96.855623][ T1649] do_syscall_64+0x57/0xf0 [ 96.855686][ T1649] ? clear_bhb_loop+0x50/0xa0 [ 96.855758][ T1649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.855832][ T1649] RIP: 0033:0x7f7abf99ce59 [ 96.855884][ T1649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.855917][ T1649] RSP: 002b:00007f7ac08b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 96.855974][ T1649] RAX: ffffffffffffffda RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 96.856018][ T1649] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 96.856057][ T1649] RBP: 00007f7ac08b4090 R08: 0000000000000000 R09: 0000000000000000 [ 96.856094][ T1649] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 96.856124][ T1649] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 96.856177][ T1649] [ 96.943866][ T36] audit: type=1400 audit(1780751215.020:391): avc: denied { write } for pid=1652 comm="syz.3.384" name="file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.949950][ T1651] FAT-fs (loop0): unable to read boot sector [ 96.958257][ T36] audit: type=1400 audit(1780751215.020:392): avc: denied { open } for pid=1652 comm="syz.3.384" path="/77/file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.143753][ T1661] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 97.181714][ T462] usb 2-1: device descriptor read/64, error -71 [ 97.189981][ T36] audit: type=1400 audit(1780751215.030:393): avc: denied { mounton } for pid=1652 comm="syz.3.384" path="/77/file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.215066][ T36] audit: type=1400 audit(1780751215.200:394): avc: denied { relabelfrom } for pid=1660 comm="syz.0.387" name="AF_VSOCK" dev="sockfs" ino=19839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.238650][ T36] audit: type=1400 audit(1780751215.230:395): avc: denied { relabelto } for pid=1660 comm="syz.0.387" name="AF_VSOCK" dev="sockfs" ino=19839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=vsock_socket permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 97.296315][ T462] usb usb2-port1: attempt power cycle [ 97.446197][ T1134] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 97.596146][ T1134] usb 4-1: Using ep0 maxpacket: 32 [ 97.602754][ T1134] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.611229][ T1134] usb 4-1: config 8 has an invalid interface number: 53 but max is 0 [ 97.619360][ T1134] usb 4-1: config 8 has no interface number 0 [ 97.625502][ T1134] usb 4-1: config 8 interface 53 altsetting 33 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 97.636456][ T1134] usb 4-1: config 8 interface 53 has no altsetting 0 [ 97.644838][ T1134] usb 4-1: New USB device found, idVendor=10f5, idProduct=f35a, bcdDevice=51.8b [ 97.653999][ T1134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.656388][ T462] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 97.662203][ T1134] usb 4-1: Product: syz [ 97.670708][ T67] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 97.673828][ T1134] usb 4-1: Manufacturer: syz [ 97.673848][ T1134] usb 4-1: SerialNumber: syz [ 97.697617][ T462] usb 2-1: device descriptor read/8, error -71 [ 97.826235][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 97.832539][ T462] usb 2-1: device descriptor read/8, error -71 [ 97.839023][ T67] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 97.847410][ T67] usb 1-1: config 0 has no interface number 0 [ 97.853545][ T67] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 97.864004][ T67] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 97.875507][ T67] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 97.884646][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.892703][ T67] usb 1-1: Product: syz [ 97.896941][ T67] usb 1-1: Manufacturer: syz [ 97.901604][ T67] usb 1-1: SerialNumber: syz [ 97.909953][ T67] usb 1-1: config 0 descriptor?? [ 97.917458][ T1134] usb 4-1: USB disconnect, device number 45 [ 97.923508][ T1674] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 97.931537][ T1674] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 98.008368][ T1616] usb 5-1: USB disconnect, device number 36 [ 98.023064][ T1616] usblp0: removed [ 98.086204][ T462] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 98.107118][ T462] usb 2-1: device descriptor read/8, error -71 [ 98.141967][ T1674] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 98.149367][ T1674] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 98.208588][ T1677] incfs: ino conflict with backing FS 2 [ 98.247266][ T462] usb 2-1: device descriptor read/8, error -71 [ 98.357955][ T462] usb usb2-port1: unable to enumerate USB device [ 98.364460][ T67] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 98.457961][ T1683] FAULT_INJECTION: forcing a failure. [ 98.457961][ T1683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.471151][ T1683] CPU: 0 UID: 0 PID: 1683 Comm: syz.3.394 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 98.471177][ T1683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.471188][ T1683] Call Trace: [ 98.471194][ T1683] [ 98.471201][ T1683] __dump_stack+0x21/0x30 [ 98.471232][ T1683] dump_stack_lvl+0x140/0x1c0 [ 98.471255][ T1683] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.471279][ T1683] ? check_stack_object+0x12b/0x150 [ 98.471298][ T1683] dump_stack+0x19/0x20 [ 98.471319][ T1683] should_fail_ex+0x3d7/0x530 [ 98.471356][ T1683] should_fail+0xf/0x20 [ 98.471377][ T1683] should_fail_usercopy+0x1e/0x30 [ 98.471407][ T1683] _copy_to_user+0x24/0xa0 [ 98.471426][ T1683] simple_read_from_buffer+0xed/0x160 [ 98.471448][ T1683] proc_fail_nth_read+0x1aa/0x220 [ 98.471471][ T1683] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.471495][ T1683] ? bpf_lsm_file_permission+0xd/0x20 [ 98.471515][ T1683] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.471538][ T1683] vfs_read+0x286/0xcb0 [ 98.471554][ T1683] ? do_readv+0x2e0/0x2e0 [ 98.471573][ T1683] ? __cfi_vfs_read+0x10/0x10 [ 98.471588][ T1683] ? __kasan_check_write+0x18/0x20 [ 98.471604][ T1683] ? mutex_lock+0x97/0x1d0 [ 98.471624][ T1683] ? __cfi_mutex_lock+0x10/0x10 [ 98.471644][ T1683] ? __fget_files+0x2c5/0x340 [ 98.471665][ T1683] ksys_read+0x145/0x260 [ 98.471680][ T1683] ? fput+0x1a4/0x240 [ 98.471700][ T1683] ? __cfi_ksys_read+0x10/0x10 [ 98.471715][ T1683] ? __x64_sys_preadv+0x1e4/0x2c0 [ 98.471733][ T1683] ? __kasan_check_read+0x15/0x20 [ 98.471748][ T1683] __x64_sys_read+0x7f/0x90 [ 98.471764][ T1683] x64_sys_call+0x2638/0x2ee0 [ 98.471779][ T1683] do_syscall_64+0x57/0xf0 [ 98.471797][ T1683] ? clear_bhb_loop+0x50/0xa0 [ 98.471819][ T1683] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.471838][ T1683] RIP: 0033:0x7f7abf95d68e [ 98.471853][ T1683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.471867][ T1683] RSP: 002b:00007f7ac08b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.471884][ T1683] RAX: ffffffffffffffda RBX: 00007f7ac08b46c0 RCX: 00007f7abf95d68e [ 98.471896][ T1683] RDX: 000000000000000f RSI: 00007f7ac08b40a0 RDI: 0000000000000004 [ 98.471906][ T1683] RBP: 00007f7ac08b4090 R08: 0000000000000000 R09: 0000000000000000 [ 98.471916][ T1683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.471925][ T1683] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 98.471939][ T1683] [ 98.776184][ T1134] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 98.882494][ T1691] netlink: 68 bytes leftover after parsing attributes in process `syz.4.398'. [ 98.891567][ T1691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 98.926499][ T1134] usb 4-1: Using ep0 maxpacket: 32 [ 98.937516][ T1134] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.947835][ T1134] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 98.957024][ T1134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.965319][ T1134] usb 4-1: Product: syz [ 98.969938][ T1134] usb 4-1: Manufacturer: syz [ 98.978987][ T1134] usb 4-1: SerialNumber: syz [ 99.068530][ T1699] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 99.116539][ T1674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.126421][ T1674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.136163][ T45] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 99.286149][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 99.292358][ T45] usb 2-1: config 3 has an invalid interface number: 255 but max is 0 [ 99.300831][ T45] usb 2-1: config 3 has no interface number 0 [ 99.307010][ T45] usb 2-1: config 3 interface 255 altsetting 243 bulk endpoint 0x6 has invalid maxpacket 32 [ 99.317192][ T45] usb 2-1: config 3 interface 255 has no altsetting 0 [ 99.325501][ T45] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 99.334650][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.342701][ T45] usb 2-1: Product: syz [ 99.346957][ T45] usb 2-1: Manufacturer: syz [ 99.351622][ T45] usb 2-1: SerialNumber: syz [ 99.357739][ T1689] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.389909][ T1134] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 99.567699][ T45] usbserial_generic 2-1:3.255: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 99.579195][ T45] usbserial_generic 2-1:3.255: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 99.590305][ T45] usbserial_generic 2-1:3.255: generic converter detected [ 99.598008][ T1134] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 99.611270][ T45] usb 2-1: generic converter now attached to ttyUSB0 [ 99.622748][ T1134] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 99.632429][ T45] usb 2-1: USB disconnect, device number 53 [ 99.639625][ T45] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 99.648327][ T1134] usb 4-1: USB disconnect, device number 46 [ 99.660599][ T45] usbserial_generic 2-1:3.255: device disconnected [ 99.671332][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.956159][ T471] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 100.092277][ T636] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.107083][ T471] usb 5-1: Using ep0 maxpacket: 16 [ 100.119294][ T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.132558][ T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.142763][ T471] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.155967][ T471] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.165286][ T471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.178156][ T1706] kvm: MONITOR instruction emulated as NOP! [ 100.184395][ T471] usb 5-1: config 0 descriptor?? [ 100.346164][ T1134] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 100.346524][ T67] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 100.364016][ T67] asix 1-1:0.34: probe with driver asix failed with error -71 [ 100.373411][ T67] usb 1-1: USB disconnect, device number 45 [ 100.506148][ T1134] usb 2-1: Using ep0 maxpacket: 16 [ 100.512133][ T1134] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.520574][ T1134] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.532379][ T1134] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 100.541515][ T1134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.549566][ T1134] usb 2-1: Product: syz [ 100.553772][ T1134] usb 2-1: Manufacturer: syz [ 100.558604][ T1134] usb 2-1: SerialNumber: syz [ 100.767272][ T1134] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 100.775662][ T1134] usb 2-1: USB disconnect, device number 54 [ 100.861893][ T1718] cgroup: none used incorrectly [ 101.141177][ T1725] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 101.148065][ T462] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 101.307502][ T462] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.318510][ T462] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 101.330334][ T462] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.339500][ T462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.348075][ T462] usb 1-1: Product: syz [ 101.352285][ T462] usb 1-1: Manufacturer: syz [ 101.357133][ T462] usb 1-1: SerialNumber: syz [ 101.365275][ T462] cdc_mbim 1-1:1.0: skipping garbage [ 101.426189][ T1616] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 101.565044][ T1722] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.587719][ T1616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.596349][ T1616] usb 4-1: config 6 has an invalid interface number: 198 but max is 1 [ 101.604584][ T1616] usb 4-1: config 6 has an invalid interface number: 2 but max is 1 [ 101.612901][ T1616] usb 4-1: config 6 has no interface number 0 [ 101.619140][ T1616] usb 4-1: config 6 has no interface number 1 [ 101.625372][ T1616] usb 4-1: config 6 interface 198 has no altsetting 0 [ 101.632809][ T1616] usb 4-1: config 6 interface 2 has no altsetting 0 [ 101.641634][ T1616] usb 4-1: string descriptor 0 read error: -22 [ 101.648028][ T1616] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff5e, bcdDevice=4b.53 [ 101.657522][ T1616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.870355][ T1729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.879760][ T1729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.888514][ T1616] usb 4-1: USB disconnect, device number 47 [ 102.106154][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.106154][ T1704] Bluetooth: hci0: command 0x1003 tx timeout [ 102.174747][ T1722] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 102.183231][ T462] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 102.190416][ T462] wwan wwan0: port wwan0mbim0 attached [ 102.198155][ T462] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ee:cf:a3:33:ef:00 [ 102.355948][ T150] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 102.384882][ T1722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.393971][ T1722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.402808][ T462] usb 1-1: USB disconnect, device number 46 [ 102.409520][ T462] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 102.484677][ T462] wwan wwan0: port wwan0mbim0 disconnected [ 102.797776][ T471] usbhid 5-1:0.0: can't add hid device: -71 [ 102.806050][ T471] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.816501][ T471] usb 5-1: USB disconnect, device number 37 [ 102.850220][ T1778] x_tables: unsorted underflow at hook 4 [ 102.896159][ T45] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 103.025714][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 103.025733][ T36] audit: type=1400 audit(1780751221.100:400): avc: denied { shutdown } for pid=1797 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.066127][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 103.072396][ T45] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 103.080584][ T45] usb 2-1: config 0 has no interface number 0 [ 103.087367][ T45] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 103.098365][ T45] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 103.110788][ T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 103.120106][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.130989][ T45] usb 2-1: Product: syz [ 103.135418][ T45] usb 2-1: Manufacturer: syz [ 103.140520][ T45] usb 2-1: SerialNumber: syz [ 103.150022][ T45] usb 2-1: config 0 descriptor?? [ 103.157790][ T1772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.165316][ T1772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.174971][ T36] audit: type=1400 audit(1780751221.260:401): avc: denied { remount } for pid=1806 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.212428][ T1815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.250117][ T36] audit: type=1400 audit(1780751221.330:402): avc: denied { sqpoll } for pid=1814 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.309491][ T36] audit: type=1400 audit(1780751221.390:403): avc: denied { write } for pid=1823 comm="syz.0.431" name="ip6_mr_vif" dev="proc" ino=4026532447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.342006][ T1826] overlayfs: failed to resolve './file0': -2 [ 103.377890][ T36] audit: type=1400 audit(1780751221.460:404): avc: denied { mounton } for pid=1771 comm="syz.1.414" path="/89/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 103.476152][ T462] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 103.489849][ T45] asix 2-1:0.34: probe with driver asix failed with error -71 [ 103.504798][ T45] usb 2-1: USB disconnect, device number 55 [ 103.633994][ T1838] cgroup: fork rejected by pids controller in /syz3 [ 103.647549][ T462] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.656135][ T1134] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 103.665788][ T462] usb 5-1: not running at top speed; connect to a high speed hub [ 103.674391][ T462] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.686814][ T462] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.707996][ T462] usb 5-1: string descriptor 0 read error: -22 [ 103.714323][ T462] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.723535][ T462] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.733877][ T462] usb 5-1: 0:2 : does not exist [ 103.816215][ T45] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 103.836594][ T1134] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 103.856134][ T1134] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 103.869038][ T1134] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 103.878382][ T1134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.888337][ T1134] usb 1-1: Product: syz [ 103.892547][ T1134] usb 1-1: Manufacturer: syz [ 103.906121][ T1134] usb 1-1: SerialNumber: syz [ 103.997283][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.016134][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.027310][ T45] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 104.046197][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.059351][ T45] usb 2-1: config 0 descriptor?? [ 104.344592][ T1817] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 104.355210][ T36] audit: type=1400 audit(1780751222.420:405): avc: denied { create } for pid=1816 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.481205][ T45] usbhid 2-1:0.0: can't add hid device: -32 [ 104.487258][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 104.784812][ T462] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 104.798840][ T462] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.813531][ T462] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 104.832427][ T462] usb 5-1: USB disconnect, device number 38 [ 104.836281][ T1134] usb 1-1: Can't get UAC3 power state for id 10 [ 104.859577][ T1134] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 104.871284][ T1134] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 104.897586][ T1134] usb 1-1: USB disconnect, device number 47 [ 104.913413][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 105.314831][ T1885] overlayfs: failed to resolve './file0': -2 [ 105.746158][ T511] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 105.917259][ T511] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.937618][ T511] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.953533][ T511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.966130][ T511] usb 5-1: Product: syz [ 105.970466][ T511] usb 5-1: Manufacturer: syz [ 105.976036][ T511] usb 5-1: SerialNumber: syz [ 106.056185][ T462] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 106.214981][ T1844] syz.3.437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 106.230750][ T462] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.243605][ T462] usb 4-1: config 0 has no interface number 0 [ 106.253005][ T462] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.266167][ T1844] CPU: 0 UID: 0 PID: 1844 Comm: syz.3.437 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 106.266206][ T1844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.266222][ T1844] Call Trace: [ 106.266229][ T1844] [ 106.266237][ T1844] __dump_stack+0x21/0x30 [ 106.266277][ T1844] dump_stack_lvl+0x140/0x1c0 [ 106.266310][ T1844] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.266343][ T1844] ? ___ratelimit+0x40e/0x5b0 [ 106.266371][ T1844] dump_stack+0x19/0x20 [ 106.266401][ T1844] dump_header+0xd6/0x490 [ 106.266431][ T1844] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 106.266464][ T1844] oom_kill_process+0x35d/0x640 [ 106.266492][ T1844] out_of_memory+0x624/0xa30 [ 106.266543][ T1844] ? __cfi_out_of_memory+0x10/0x10 [ 106.266569][ T1844] ? mutex_lock_killable+0x97/0x1d0 [ 106.266600][ T1844] ? __cfi_mutex_lock_killable+0x10/0x10 [ 106.266633][ T1844] mem_cgroup_out_of_memory+0x2c8/0x390 [ 106.266658][ T1844] ? css_next_descendant_pre+0x202/0x230 [ 106.266687][ T1844] ? drain_obj_stock+0xed0/0xed0 [ 106.266713][ T1844] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 106.266737][ T1844] try_charge_memcg+0x91c/0xe10 [ 106.266771][ T1844] ? __cfi_try_charge_memcg+0x10/0x10 [ 106.266803][ T1844] ? __alloc_pages_noprof+0x35f/0x7e0 [ 106.266838][ T1844] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 106.266873][ T1844] __mem_cgroup_charge+0xfc/0x420 [ 106.266895][ T1844] ? folio_add_lru+0x116/0x400 [ 106.266923][ T1844] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 106.266947][ T1844] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 106.266978][ T1844] ? shmem_replace_folio+0x9b0/0x9b0 [ 106.267006][ T1844] ? shmem_huge_global_enabled+0x2da/0x360 [ 106.267034][ T1844] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 106.267060][ T1844] ? __kasan_check_write+0x18/0x20 [ 106.267082][ T1844] ? _raw_spin_lock+0x92/0x120 [ 106.267104][ T1844] shmem_get_folio_gfp+0x607/0x1390 [ 106.267133][ T1844] ? shmem_get_folio+0xc0/0xc0 [ 106.267156][ T1844] ? follow_page_pte+0x90f/0xbc0 [ 106.267189][ T1844] ? inode_to_bdi+0x6d/0x100 [ 106.267223][ T1844] shmem_write_begin+0xf4/0x270 [ 106.267251][ T1844] generic_perform_write+0x32b/0x970 [ 106.267286][ T1844] ? __cfi_generic_perform_write+0x10/0x10 [ 106.267317][ T1844] ? down_write+0xee/0x2b0 [ 106.267349][ T1844] ? file_update_time+0xa3/0x210 [ 106.267383][ T1844] shmem_file_write_iter+0x105/0x130 [ 106.267415][ T1844] __kernel_write_iter+0x42f/0x8a0 [ 106.267439][ T1844] ? __cfi___kernel_write_iter+0x10/0x10 [ 106.267461][ T1844] ? get_dump_page+0x165/0x220 [ 106.267491][ T1844] ? __asan_memset+0x39/0x50 [ 106.267520][ T1844] ? iov_iter_bvec+0xc0/0x180 [ 106.267548][ T1844] dump_user_range+0xb8b/0xe60 [ 106.267574][ T1844] ? __cfi_dump_user_range+0x10/0x10 [ 106.267598][ T1844] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 106.267635][ T1844] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 106.267671][ T1844] ? elf_core_dump+0x24c0/0x3960 [ 106.267701][ T1844] elf_core_dump+0x2e7e/0x3960 [ 106.267733][ T1844] ? __cfi_elf_core_dump+0x10/0x10 [ 106.267770][ T1844] ? dump_interrupted+0xf0/0xf0 [ 106.267791][ T1844] ? filp_open+0x199/0x1f0 [ 106.267821][ T1844] ? 0xffffffffff600000 [ 106.267840][ T1844] do_coredump+0x208a/0x2fe0 [ 106.267866][ T1844] ? __cfi_do_coredump+0x10/0x10 [ 106.267887][ T1844] ? asm_exc_page_fault+0x2b/0x30 [ 106.267923][ T1844] ? __kasan_slab_free+0x6a/0x80 [ 106.267950][ T1844] ? kmem_cache_free+0x1bd/0x4f0 [ 106.267974][ T1844] ? get_signal+0xa74/0x14e0 [ 106.268005][ T1844] get_signal+0x11f8/0x14e0 [ 106.268040][ T1844] arch_do_signal_or_restart+0xbc/0x760 [ 106.268064][ T1844] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 106.268090][ T1844] ? __kasan_check_write+0x18/0x20 [ 106.268114][ T1844] irqentry_exit_to_user_mode+0x4d/0xb0 [ 106.268147][ T1844] irqentry_exit+0x16/0x60 [ 106.268178][ T1844] exc_page_fault+0x65/0xc0 [ 106.268209][ T1844] asm_exc_page_fault+0x2b/0x30 [ 106.268235][ T1844] RIP: 0033:0x7f7abf99ce59 [ 106.268258][ T1844] Code: Unable to access opcode bytes at 0x7f7abf99ce2f. [ 106.268269][ T1844] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 106.268291][ T1844] RAX: 0000000000000000 RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 106.268307][ T1844] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 106.268322][ T1844] RBP: 00007f7abfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 106.268337][ T1844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.268350][ T1844] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 106.268369][ T1844] [ 106.268395][ T1844] memory: usage 307200kB, limit 307200kB, failcnt 16076 [ 106.416220][ T1913] overlayfs: failed to resolve './file0': -2 [ 106.420185][ T462] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.425909][ T1844] memory+swap: usage 432136kB, limit 9007199254740988kB, failcnt 0 [ 106.431709][ T462] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.438813][ T1844] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 106.442741][ T462] usb 4-1: config 0 interface 1 has no altsetting 0 [ 106.448326][ T1844] Memory cgroup stats for [ 106.452916][ T462] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 106.476035][ T1844] /syz3 [ 106.477486][ T462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.494552][ T1844] : [ 106.547276][ T462] usb 4-1: config 0 descriptor?? [ 106.554702][ T1844] cache 314372096 [ 106.591064][ T67] usb 2-1: USB disconnect, device number 56 [ 106.606567][ T1844] rss 139264 [ 106.615908][ T1894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.625552][ T1844] rss_huge 0 [ 106.659414][ T1894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.684031][ T1844] shmem 314372096 [ 106.744815][ T1894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.753129][ T1844] mapped_file 0 [ 106.767695][ T1616] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 106.774142][ T1844] dirty 0 [ 106.799015][ T1894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.806328][ T1844] writeback 0 [ 106.866847][ T1844] workingset_refault_anon 21 [ 106.871487][ T1844] workingset_refault_file 15 [ 106.876214][ T1844] swap 127934464 [ 106.879827][ T1844] swapcached 61440 [ 106.883837][ T1844] pgpgin 128578 [ 106.887754][ T1844] pgpgout 51778 [ 106.891331][ T1844] pgfault 26913 [ 106.895003][ T1844] pgmajfault 11 [ 106.899254][ T1844] inactive_anon 127213568 [ 106.903708][ T1844] active_anon 187359232 [ 106.908231][ T1844] inactive_file 0 [ 106.911907][ T1844] active_file 0 [ 106.915473][ T1844] unevictable 0 [ 106.919262][ T1844] hierarchical_memory_limit 314572800 [ 106.925888][ T1844] hierarchical_memsw_limit 9223372036854771712 [ 106.932169][ T1844] total_cache 314372096 [ 106.936375][ T1844] total_rss 139264 [ 106.940142][ T1844] total_rss_huge 0 [ 106.943943][ T1844] total_shmem 314372096 [ 106.948115][ T1616] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 106.948144][ T1616] usb 1-1: config 0 has no interface number 0 [ 106.948166][ T1616] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 106.948214][ T1616] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 106.948244][ T1616] usb 1-1: config 0 interface 49 has no altsetting 0 [ 106.952961][ T1616] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 106.957143][ T1844] total_mapped_file 0 [ 106.973453][ T1616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.973483][ T1616] usb 1-1: Product: syz [ 106.989179][ T1844] total_dirty 0 [ 107.000834][ T1616] usb 1-1: Manufacturer: syz [ 107.004347][ T1844] total_writeback 0 [ 107.010505][ T1616] usb 1-1: SerialNumber: syz [ 107.015227][ T1844] total_workingset_refault_anon 21 [ 107.026634][ T1616] usb 1-1: config 0 descriptor?? [ 107.027034][ T1920] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 107.034555][ T1844] total_workingset_refault_file 15 [ 107.058995][ T1844] total_swap 127934464 [ 107.063360][ T1844] total_swapcached 61440 [ 107.067852][ T1894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.077314][ T1894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.088707][ T1844] total_pgpgin 128578 [ 107.092923][ T1844] total_pgpgout 51778 [ 107.097190][ T1844] total_pgfault 26913 [ 107.101288][ T1844] total_pgmajfault 11 [ 107.105336][ T1844] total_inactive_anon 127213568 [ 107.110252][ T1844] total_active_anon 187359232 [ 107.115016][ T1844] total_inactive_file 0 [ 107.119247][ T1844] total_active_file 0 [ 107.123633][ T1844] total_unevictable 0 [ 107.127731][ T1844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=1845,uid=0 [ 107.143131][ T1844] Memory cgroup out of memory: Killed process 1845 (syz.3.437) total-vm:49264kB, anon-rss:0kB, file-rss:30464kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 107.230712][ T1864] syz.3.437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 107.241993][ T1915] incfs: Error accessing: ./file0. [ 107.249887][ T1915] incfs: mount failed -2 [ 107.255798][ T1864] CPU: 0 UID: 0 PID: 1864 Comm: syz.3.437 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 107.255835][ T1864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.255850][ T1864] Call Trace: [ 107.255857][ T1864] [ 107.255866][ T1864] __dump_stack+0x21/0x30 [ 107.255907][ T1864] dump_stack_lvl+0x140/0x1c0 [ 107.255937][ T1864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.255968][ T1864] ? ___ratelimit+0x40e/0x5b0 [ 107.255996][ T1864] dump_stack+0x19/0x20 [ 107.256027][ T1864] dump_header+0xd6/0x490 [ 107.256056][ T1864] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 107.256088][ T1864] oom_kill_process+0x35d/0x640 [ 107.256117][ T1864] out_of_memory+0x624/0xa30 [ 107.256144][ T1864] ? __cfi_out_of_memory+0x10/0x10 [ 107.256169][ T1864] ? mutex_lock_killable+0x115/0x1d0 [ 107.256201][ T1864] ? __cfi_mutex_lock_killable+0x10/0x10 [ 107.256234][ T1864] mem_cgroup_out_of_memory+0x2c8/0x390 [ 107.256260][ T1864] ? css_next_descendant_pre+0x202/0x230 [ 107.256290][ T1864] ? drain_obj_stock+0xed0/0xed0 [ 107.256316][ T1864] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 107.256340][ T1864] try_charge_memcg+0x91c/0xe10 [ 107.256373][ T1864] ? __cfi_try_charge_memcg+0x10/0x10 [ 107.256424][ T1864] ? __alloc_pages_noprof+0x35f/0x7e0 [ 107.256528][ T1864] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 107.256563][ T1864] __mem_cgroup_charge+0xfc/0x420 [ 107.256585][ T1864] ? folio_add_lru+0x116/0x400 [ 107.256615][ T1864] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 107.256639][ T1864] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 107.256671][ T1864] ? shmem_replace_folio+0x9b0/0x9b0 [ 107.256699][ T1864] ? shmem_huge_global_enabled+0x2da/0x360 [ 107.256742][ T1864] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 107.256769][ T1864] ? __kasan_check_write+0x18/0x20 [ 107.256791][ T1864] ? _raw_spin_lock+0x92/0x120 [ 107.256815][ T1864] shmem_get_folio_gfp+0x607/0x1390 [ 107.256843][ T1864] ? shmem_get_folio+0xc0/0xc0 [ 107.256867][ T1864] ? follow_page_pte+0x90f/0xbc0 [ 107.256900][ T1864] ? inode_to_bdi+0x6d/0x100 [ 107.256934][ T1864] shmem_write_begin+0xf4/0x270 [ 107.256961][ T1864] generic_perform_write+0x32b/0x970 [ 107.256996][ T1864] ? __cfi_generic_perform_write+0x10/0x10 [ 107.257027][ T1864] ? down_write+0xee/0x2b0 [ 107.257059][ T1864] ? file_update_time+0xa3/0x210 [ 107.257092][ T1864] shmem_file_write_iter+0x105/0x130 [ 107.257125][ T1864] __kernel_write_iter+0x42f/0x8a0 [ 107.257150][ T1864] ? __cfi___kernel_write_iter+0x10/0x10 [ 107.257173][ T1864] ? get_dump_page+0x165/0x220 [ 107.257203][ T1864] ? __asan_memset+0x39/0x50 [ 107.257225][ T1864] ? iov_iter_bvec+0xc0/0x180 [ 107.257254][ T1864] dump_user_range+0xb8b/0xe60 [ 107.257281][ T1864] ? __cfi_dump_user_range+0x10/0x10 [ 107.257305][ T1864] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 107.257342][ T1864] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 107.257379][ T1864] ? elf_core_dump+0x24c0/0x3960 [ 107.257410][ T1864] elf_core_dump+0x2e7e/0x3960 [ 107.257442][ T1864] ? __cfi_elf_core_dump+0x10/0x10 [ 107.257488][ T1864] ? dump_interrupted+0xf0/0xf0 [ 107.257509][ T1864] ? filp_open+0x199/0x1f0 [ 107.257541][ T1864] ? 0xffffffffff600000 [ 107.257560][ T1864] do_coredump+0x208a/0x2fe0 [ 107.257586][ T1864] ? __cfi_do_coredump+0x10/0x10 [ 107.257608][ T1864] ? asm_exc_page_fault+0x2b/0x30 [ 107.257643][ T1864] ? __kasan_slab_free+0x6a/0x80 [ 107.257670][ T1864] ? kmem_cache_free+0x1bd/0x4f0 [ 107.257695][ T1864] ? get_signal+0xa74/0x14e0 [ 107.257728][ T1864] get_signal+0x11f8/0x14e0 [ 107.257763][ T1864] arch_do_signal_or_restart+0xbc/0x760 [ 107.257787][ T1864] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 107.257814][ T1864] ? __kasan_check_write+0x18/0x20 [ 107.257837][ T1864] irqentry_exit_to_user_mode+0x4d/0xb0 [ 107.257871][ T1864] irqentry_exit+0x16/0x60 [ 107.257903][ T1864] exc_page_fault+0x65/0xc0 [ 107.257934][ T1864] asm_exc_page_fault+0x2b/0x30 [ 107.257961][ T1864] RIP: 0033:0x7f7abf99ce59 [ 107.257986][ T1864] Code: Unable to access opcode bytes at 0x7f7abf99ce2f. [ 107.258030][ T1864] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 107.258052][ T1864] RAX: 0000000000000000 RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 107.258069][ T1864] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 107.258083][ T1864] RBP: 00007f7abfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 107.258099][ T1864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.258113][ T1864] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 107.258132][ T1864] [ 107.395715][ T1915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.413408][ T511] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 107.415433][ T1915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.420077][ T511] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 107.439578][ T1864] memory: usage 294716kB, limit 307200kB, failcnt 17151 [ 107.441203][ T511] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 107.445877][ T1864] memory+swap: usage 401640kB, limit 9007199254740988kB, failcnt 0 [ 107.445896][ T1864] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 107.455999][ T1616] hub 1-1:0.49: bad descriptor, ignoring hub [ 107.461869][ T1864] Memory cgroup stats for [ 107.465843][ T1616] hub 1-1:0.49: probe with driver hub failed with error -5 [ 107.471670][ T1134] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 107.488563][ T1864] /syz3 [ 107.688373][ T1134] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 107.692664][ T511] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 107.693769][ T1864] : [ 107.705175][ T1616] usb 1-1: USB disconnect, device number 48 [ 107.711780][ T1134] usb 2-1: config 0 has no interface number 0 [ 107.726171][ T511] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 107.733701][ T1134] usb 2-1: config 0 interface 41 has no altsetting 0 [ 107.752242][ T511] usb 5-1: USB disconnect, device number 39 [ 107.771263][ T1864] cache 301588480 [ 107.787089][ T511] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 107.843504][ T1864] rss 139264 [ 107.846869][ T1864] rss_huge 0 [ 107.850220][ T1864] shmem 301588480 [ 107.853942][ T1864] mapped_file 0 [ 107.857713][ T1864] dirty 0 [ 107.860716][ T1864] writeback 0 [ 107.864129][ T1864] workingset_refault_anon 21 [ 107.864646][ T1134] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 107.870157][ T1864] workingset_refault_file 15 [ 107.877962][ T1134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.883720][ T1864] swap 109490176 [ 107.890565][ T1134] usb 2-1: Product: syz [ 107.895130][ T1864] swapcached 61440 [ 107.902216][ T1864] pgpgin 128578 [ 107.905309][ T1134] usb 2-1: Manufacturer: syz [ 107.908968][ T1864] pgpgout 54899 [ 107.910375][ T1134] usb 2-1: SerialNumber: syz [ 107.918555][ T1864] pgfault 26915 [ 107.922667][ T1864] pgmajfault 12 [ 107.926741][ T1864] inactive_anon 124051456 [ 107.931324][ T1864] active_anon 177737728 [ 107.935772][ T1134] usb 2-1: config 0 descriptor?? [ 107.940797][ T1864] inactive_file 0 [ 107.946065][ T1864] active_file 0 [ 107.949595][ T1864] unevictable 0 [ 107.953092][ T1864] hierarchical_memory_limit 314572800 [ 107.958783][ T1864] hierarchical_memsw_limit 9223372036854771712 [ 107.965593][ T1864] total_cache 301588480 [ 107.970128][ T1864] total_rss 139264 [ 107.974144][ T1864] total_rss_huge 0 [ 107.978105][ T1864] total_shmem 301588480 [ 107.982300][ T1864] total_mapped_file 0 [ 107.986652][ T1864] total_dirty 0 [ 107.990552][ T1864] total_writeback 0 [ 107.994435][ T1864] total_workingset_refault_anon 21 [ 107.999974][ T1864] total_workingset_refault_file 15 [ 108.005399][ T1864] total_swap 109490176 [ 108.009953][ T1864] total_swapcached 61440 [ 108.014276][ T1864] total_pgpgin 128578 [ 108.018562][ T1864] total_pgpgout 54899 [ 108.022645][ T1864] total_pgfault 26915 [ 108.026888][ T1864] total_pgmajfault 12 [ 108.030915][ T1864] total_inactive_anon 124051456 [ 108.036692][ T1864] total_active_anon 177737728 [ 108.041658][ T1864] total_inactive_file 0 [ 108.046000][ T1864] total_active_file 0 [ 108.050510][ T1864] total_unevictable 0 [ 108.054534][ T1864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=1849,uid=0 [ 108.069716][ T1864] Memory cgroup out of memory: Killed process 1849 (syz.3.437) total-vm:49264kB, anon-rss:0kB, file-rss:30208kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 108.126586][ T1933] overlayfs: conflicting options: userxattr,metacopy=on [ 108.166865][ T1841] syz.3.437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 108.199611][ T1134] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 108.227484][ T1134] usb 2-1: USB disconnect, device number 57 [ 108.253998][ T1937] overlayfs: failed to resolve './file0': -2 [ 108.268229][ T36] audit: type=1400 audit(1780751226.350:406): avc: denied { read } for pid=1935 comm="syz.0.462" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.280412][ T1841] CPU: 1 UID: 0 PID: 1841 Comm: syz.3.437 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 108.280522][ T1841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.280556][ T1841] Call Trace: [ 108.280576][ T1841] [ 108.280596][ T1841] __dump_stack+0x21/0x30 [ 108.280700][ T1841] dump_stack_lvl+0x140/0x1c0 [ 108.280790][ T1841] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.280880][ T1841] ? ___ratelimit+0x40e/0x5b0 [ 108.280963][ T1841] dump_stack+0x19/0x20 [ 108.281069][ T1841] dump_header+0xd6/0x490 [ 108.281141][ T1841] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 108.281233][ T1841] oom_kill_process+0x35d/0x640 [ 108.281304][ T1841] out_of_memory+0x624/0xa30 [ 108.281381][ T1841] ? __cfi_out_of_memory+0x10/0x10 [ 108.281461][ T1841] ? mutex_lock_killable+0x115/0x1d0 [ 108.281545][ T1841] ? __cfi_mutex_lock_killable+0x10/0x10 [ 108.281628][ T1841] mem_cgroup_out_of_memory+0x2c8/0x390 [ 108.281690][ T1841] ? css_next_descendant_pre+0x202/0x230 [ 108.281772][ T1841] ? drain_obj_stock+0xed0/0xed0 [ 108.281841][ T1841] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 108.281902][ T1841] try_charge_memcg+0x91c/0xe10 [ 108.281998][ T1841] ? __cfi_try_charge_memcg+0x10/0x10 [ 108.282079][ T1841] ? __alloc_pages_noprof+0x35f/0x7e0 [ 108.282161][ T1841] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 108.282251][ T1841] __mem_cgroup_charge+0xfc/0x420 [ 108.282271][ T1841] ? folio_add_lru+0x116/0x400 [ 108.282350][ T1841] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 108.282440][ T1841] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 108.282522][ T1841] ? shmem_replace_folio+0x9b0/0x9b0 [ 108.282592][ T1841] ? shmem_huge_global_enabled+0x2da/0x360 [ 108.282663][ T1841] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 108.282733][ T1841] ? __kasan_check_write+0x18/0x20 [ 108.282793][ T1841] ? _raw_spin_lock+0x92/0x120 [ 108.282854][ T1841] shmem_get_folio_gfp+0x607/0x1390 [ 108.282927][ T1841] ? shmem_get_folio+0xc0/0xc0 [ 108.282989][ T1841] ? follow_page_pte+0x90f/0xbc0 [ 108.283070][ T1841] ? inode_to_bdi+0x6d/0x100 [ 108.283160][ T1841] shmem_write_begin+0xf4/0x270 [ 108.283232][ T1841] generic_perform_write+0x32b/0x970 [ 108.283321][ T1841] ? __cfi_generic_perform_write+0x10/0x10 [ 108.283394][ T1841] ? down_write+0xee/0x2b0 [ 108.283485][ T1841] ? file_update_time+0xa3/0x210 [ 108.283568][ T1841] shmem_file_write_iter+0x105/0x130 [ 108.283657][ T1841] __kernel_write_iter+0x42f/0x8a0 [ 108.283747][ T1841] ? __cfi___kernel_write_iter+0x10/0x10 [ 108.283820][ T1841] ? get_dump_page+0x165/0x220 [ 108.283900][ T1841] ? __asan_memset+0x39/0x50 [ 108.283956][ T1841] ? iov_iter_bvec+0xc0/0x180 [ 108.284034][ T1841] dump_user_range+0xb8b/0xe60 [ 108.284109][ T1841] ? __cfi_dump_user_range+0x10/0x10 [ 108.284172][ T1841] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 108.284265][ T1841] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 108.284344][ T1841] ? elf_core_dump+0x24c0/0x3960 [ 108.284441][ T1841] elf_core_dump+0x2e7e/0x3960 [ 108.284532][ T1841] ? __cfi_elf_core_dump+0x10/0x10 [ 108.284616][ T1841] ? dump_interrupted+0xf0/0xf0 [ 108.284658][ T1841] ? filp_open+0x199/0x1f0 [ 108.284733][ T1841] ? 0xffffffffff600000 [ 108.284772][ T1841] do_coredump+0x208a/0x2fe0 [ 108.284849][ T1841] ? __cfi_do_coredump+0x10/0x10 [ 108.284900][ T1841] ? asm_exc_page_fault+0x2b/0x30 [ 108.284968][ T1841] ? __kasan_slab_free+0x6a/0x80 [ 108.285034][ T1841] ? kmem_cache_free+0x1bd/0x4f0 [ 108.285136][ T1841] ? get_signal+0xa74/0x14e0 [ 108.285209][ T1841] get_signal+0x11f8/0x14e0 [ 108.285297][ T1841] arch_do_signal_or_restart+0xbc/0x760 [ 108.285348][ T1841] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 108.285399][ T1841] ? __kasan_check_write+0x18/0x20 [ 108.285471][ T1841] irqentry_exit_to_user_mode+0x4d/0xb0 [ 108.285550][ T1841] irqentry_exit+0x16/0x60 [ 108.285616][ T1841] exc_page_fault+0x65/0xc0 [ 108.285694][ T1841] asm_exc_page_fault+0x2b/0x30 [ 108.285757][ T1841] RIP: 0033:0x7f7abf99ce59 [ 108.285808][ T1841] Code: Unable to access opcode bytes at 0x7f7abf99ce2f. [ 108.285840][ T1841] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 108.285892][ T1841] RAX: 0000000000000000 RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 108.285928][ T1841] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 108.285967][ T1841] RBP: 00007f7abfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 108.286000][ T1841] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 108.286038][ T1841] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 108.286091][ T1841] [ 108.357965][ T1841] memory: usage 306636kB, limit 307200kB, failcnt 17910 [ 108.458375][ T462] usbhid 4-1:0.1: can't add hid device: -71 [ 108.650982][ T36] audit: type=1400 audit(1780751226.720:407): avc: denied { connect } for pid=1944 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.666588][ T1841] memory+swap: usage 403612kB, limit 9007199254740988kB, failcnt 0 [ 108.765281][ T1841] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 108.772231][ T1841] Memory cgroup stats for /syz3: [ 108.772389][ T1841] cache 307097600 [ 108.781027][ T1841] rss 49152 [ 108.784158][ T1841] rss_huge 0 [ 108.787486][ T462] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 108.796892][ T462] usb 4-1: USB disconnect, device number 48 [ 108.819206][ T1841] shmem 307093504 [ 108.822928][ T1841] mapped_file 0 [ 108.870367][ T36] audit: type=1400 audit(1780751226.950:408): avc: denied { setattr } for pid=1947 comm="syz.4.464" name="NETLINK" dev="sockfs" ino=21151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.896145][ T1616] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 108.915829][ T1841] dirty 0 [ 108.929087][ T1841] writeback 0 [ 108.933804][ T1841] workingset_refault_anon 21 [ 108.967673][ T1841] workingset_refault_file 16 [ 108.994379][ T1841] swap 107339776 [ 109.023343][ T1841] swapcached 61440 [ 109.041279][ T1841] pgpgin 134299 [ 109.057349][ T1616] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.068654][ T1841] pgpgout 59276 [ 109.068646][ T1616] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 109.069689][ T1616] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 109.083443][ T1841] pgfault 27277 [ 109.096109][ T1616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.104177][ T1616] usb 1-1: SerialNumber: syz [ 109.125004][ T1841] pgmajfault 12 [ 109.128956][ T1616] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 109.138130][ T1616] usb-storage 1-1:1.0: USB Mass Storage device detected [ 109.146181][ T1616] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 109.161599][ T1841] inactive_anon 127447040 [ 109.190931][ T1956] kernel profiling enabled (shift: 4) [ 109.224962][ T1841] active_anon 178049024 [ 109.249785][ T1841] inactive_file 0 [ 109.253495][ T1841] active_file 4096 [ 109.257286][ T1841] unevictable 0 [ 109.260766][ T1841] hierarchical_memory_limit 314572800 [ 109.266254][ T1841] hierarchical_memsw_limit 9223372036854771712 [ 109.272433][ T1841] total_cache 307097600 [ 109.276652][ T1841] total_rss 49152 [ 109.280310][ T1841] total_rss_huge 0 [ 109.284057][ T1841] total_shmem 307093504 [ 109.288272][ T1841] total_mapped_file 0 [ 109.292286][ T1841] total_dirty 0 [ 109.295769][ T1841] total_writeback 0 [ 109.299860][ T1841] total_workingset_refault_anon 21 [ 109.305010][ T1841] total_workingset_refault_file 16 [ 109.316176][ T1841] total_swap 107339776 [ 109.320354][ T1841] total_swapcached 61440 [ 109.324634][ T1841] total_pgpgin 134299 [ 109.331495][ T1938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.345970][ T1841] total_pgpgout 59276 [ 109.351846][ T1938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.360910][ T1841] total_pgfault 27277 [ 109.364936][ T1841] total_pgmajfault 12 [ 109.371538][ T1841] total_inactive_anon 127447040 [ 109.372806][ T1616] usb 1-1: USB disconnect, device number 49 [ 109.397593][ T1841] total_active_anon 178049024 [ 109.402347][ T1841] total_inactive_file 0 [ 109.413373][ T1841] total_active_file 4096 [ 109.417880][ T1841] total_unevictable 0 [ 109.421895][ T1841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=1846,uid=0 [ 109.437035][ T1841] Memory cgroup out of memory: Killed process 1846 (syz.3.437) total-vm:49264kB, anon-rss:0kB, file-rss:27520kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 109.455447][ T1966] overlayfs: failed to resolve './file0': -2 [ 109.496351][ T1855] syz.3.437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 109.536269][ T1855] CPU: 0 UID: 0 PID: 1855 Comm: syz.3.437 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 109.536316][ T1855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.536330][ T1855] Call Trace: [ 109.536337][ T1855] [ 109.536345][ T1855] __dump_stack+0x21/0x30 [ 109.536380][ T1855] dump_stack_lvl+0x140/0x1c0 [ 109.536411][ T1855] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.536442][ T1855] ? ___ratelimit+0x40e/0x5b0 [ 109.536469][ T1855] dump_stack+0x19/0x20 [ 109.536496][ T1855] dump_header+0xd6/0x490 [ 109.536524][ T1855] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 109.536557][ T1855] oom_kill_process+0x35d/0x640 [ 109.536583][ T1855] out_of_memory+0x624/0xa30 [ 109.536610][ T1855] ? __cfi_out_of_memory+0x10/0x10 [ 109.536635][ T1855] ? mutex_lock_killable+0x115/0x1d0 [ 109.536667][ T1855] ? __cfi_mutex_lock_killable+0x10/0x10 [ 109.536700][ T1855] mem_cgroup_out_of_memory+0x2c8/0x390 [ 109.536724][ T1855] ? css_next_descendant_pre+0x202/0x230 [ 109.536751][ T1855] ? drain_obj_stock+0xed0/0xed0 [ 109.537183][ T1855] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 109.537208][ T1855] try_charge_memcg+0x91c/0xe10 [ 109.537242][ T1855] ? __cfi_try_charge_memcg+0x10/0x10 [ 109.537274][ T1855] ? __alloc_pages_noprof+0x35f/0x7e0 [ 109.537325][ T1855] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 109.537368][ T1855] __mem_cgroup_charge+0xfc/0x420 [ 109.537390][ T1855] ? folio_add_lru+0x116/0x400 [ 109.537419][ T1855] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 109.537444][ T1855] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 109.537475][ T1855] ? shmem_replace_folio+0x9b0/0x9b0 [ 109.537504][ T1855] ? shmem_huge_global_enabled+0x2da/0x360 [ 109.537533][ T1855] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 109.537559][ T1855] ? __kasan_check_write+0x18/0x20 [ 109.537582][ T1855] ? _raw_spin_lock+0x92/0x120 [ 109.537606][ T1855] shmem_get_folio_gfp+0x607/0x1390 [ 109.537635][ T1855] ? shmem_get_folio+0xc0/0xc0 [ 109.537660][ T1855] ? __kasan_check_write+0x18/0x20 [ 109.537683][ T1855] ? inode_to_bdi+0x6d/0x100 [ 109.537716][ T1855] shmem_write_begin+0xf4/0x270 [ 109.537745][ T1855] generic_perform_write+0x32b/0x970 [ 109.537777][ T1855] ? inode_update_timestamps+0x4f0/0x700 [ 109.537812][ T1855] ? __cfi_generic_perform_write+0x10/0x10 [ 109.537844][ T1855] ? down_write+0xee/0x2b0 [ 109.537875][ T1855] ? mnt_get_write_access_file+0x1af/0x3b0 [ 109.537906][ T1855] ? mnt_put_write_access_file+0xc2/0x100 [ 109.537939][ T1855] ? file_update_time+0x1de/0x210 [ 109.537984][ T1855] shmem_file_write_iter+0x105/0x130 [ 109.538016][ T1855] __kernel_write_iter+0x42f/0x8a0 [ 109.538042][ T1855] ? __cfi___kernel_write_iter+0x10/0x10 [ 109.538065][ T1855] ? get_dump_page+0x165/0x220 [ 109.538096][ T1855] ? __asan_memset+0x39/0x50 [ 109.538119][ T1855] ? iov_iter_bvec+0xc0/0x180 [ 109.538147][ T1855] dump_user_range+0xb8b/0xe60 [ 109.538173][ T1855] ? __cfi_dump_user_range+0x10/0x10 [ 109.538198][ T1855] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 109.538235][ T1855] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 109.538272][ T1855] ? elf_core_dump+0x24c0/0x3960 [ 109.538309][ T1855] elf_core_dump+0x2e7e/0x3960 [ 109.538342][ T1855] ? __cfi_elf_core_dump+0x10/0x10 [ 109.538379][ T1855] ? dump_interrupted+0xf0/0xf0 [ 109.538401][ T1855] ? filp_open+0x199/0x1f0 [ 109.538433][ T1855] ? 0xffffffffff600000 [ 109.538452][ T1855] do_coredump+0x208a/0x2fe0 [ 109.538479][ T1855] ? __cfi_do_coredump+0x10/0x10 [ 109.538500][ T1855] ? asm_exc_page_fault+0x2b/0x30 [ 109.538536][ T1855] ? __kasan_slab_free+0x6a/0x80 [ 109.538564][ T1855] ? kmem_cache_free+0x1bd/0x4f0 [ 109.538588][ T1855] ? get_signal+0xa74/0x14e0 [ 109.538620][ T1855] get_signal+0x11f8/0x14e0 [ 109.538656][ T1855] arch_do_signal_or_restart+0xbc/0x760 [ 109.538680][ T1855] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 109.538705][ T1855] ? __kasan_check_write+0x18/0x20 [ 109.538730][ T1855] irqentry_exit_to_user_mode+0x4d/0xb0 [ 109.538764][ T1855] irqentry_exit+0x16/0x60 [ 109.538795][ T1855] exc_page_fault+0x65/0xc0 [ 109.538828][ T1855] asm_exc_page_fault+0x2b/0x30 [ 109.538853][ T1855] RIP: 0033:0x7f7abf99ce59 [ 109.538879][ T1855] Code: Unable to access opcode bytes at 0x7f7abf99ce2f. [ 109.538891][ T1855] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 109.538911][ T1855] RAX: 0000000000000000 RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 109.538928][ T1855] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 109.538942][ T1855] RBP: 00007f7abfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 109.538957][ T1855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.538971][ T1855] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 109.538990][ T1855] [ 109.539784][ T1855] memory: usage 305160kB, limit 307200kB, failcnt 21641 [ 109.706384][ T45] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 109.709153][ T1855] memory+swap: usage 422864kB, limit 9007199254740988kB, failcnt 0 [ 109.878686][ T45] usb 5-1: config 9 has an invalid interface number: 235 but max is 0 [ 109.882268][ T1855] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 109.896311][ T45] usb 5-1: config 9 has no interface number 0 [ 109.896818][ T1855] Memory cgroup stats for [ 109.906677][ T45] usb 5-1: config 9 interface 235 has no altsetting 0 [ 109.908568][ T1855] /syz3 [ 109.926284][ T45] usb 5-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=c6.b8 [ 109.939332][ T1855] : [ 109.955221][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.079693][ T1855] cache 314413056 [ 110.083388][ T1855] rss 49152 [ 110.096151][ T1855] rss_huge 0 [ 110.112642][ T1855] shmem 313548800 [ 110.116442][ T36] audit: type=1400 audit(1780751228.190:409): avc: denied { map } for pid=1972 comm="syz.0.473" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.120065][ T1855] mapped_file 716800 [ 110.140535][ T45] usb 5-1: Product: syz [ 110.151859][ T36] audit: type=1400 audit(1780751228.230:410): avc: denied { write } for pid=1974 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.171275][ T45] usb 5-1: Manufacturer: syz [ 110.175910][ T45] usb 5-1: SerialNumber: syz [ 110.181167][ T1855] dirty 0 [ 110.188302][ T1855] writeback 0 [ 110.191758][ T1855] workingset_refault_anon 21 [ 110.196827][ T1855] workingset_refault_file 16 [ 110.201529][ T1855] swap 122724352 [ 110.205580][ T1855] swapcached 4096 [ 110.206003][ T1977] rust_binder: 1972:1977 transaction to 0 failed: ENOENT [ 110.209329][ T1855] pgpgin 149266 [ 110.220231][ T1855] pgpgout 72492 [ 110.223749][ T1855] pgfault 28200 [ 110.227279][ T1855] pgmajfault 12 [ 110.230774][ T1855] inactive_anon 74432512 [ 110.237261][ T1855] active_anon 238751744 [ 110.241476][ T1855] inactive_file 0 [ 110.245326][ T1855] active_file 864256 [ 110.249366][ T1855] unevictable 0 [ 110.252945][ T1855] hierarchical_memory_limit 314572800 [ 110.258743][ T1855] hierarchical_memsw_limit 9223372036854771712 [ 110.264984][ T1855] total_cache 314413056 [ 110.269260][ T1855] total_rss 49152 [ 110.272961][ T1855] total_rss_huge 0 [ 110.276775][ T1855] total_shmem 313548800 [ 110.281001][ T1855] total_mapped_file 716800 [ 110.285486][ T1855] total_dirty 0 [ 110.289064][ T1855] total_writeback 0 [ 110.296150][ T1855] total_workingset_refault_anon 21 [ 110.306818][ T1855] total_workingset_refault_file 16 [ 110.317642][ T1855] total_swap 122724352 [ 110.327230][ T1855] total_swapcached 4096 [ 110.335879][ T1855] total_pgpgin 149266 [ 110.345778][ T1855] total_pgpgout 72492 [ 110.354877][ T1855] total_pgfault 28200 [ 110.363371][ T1855] total_pgmajfault 12 [ 110.367589][ T1855] total_inactive_anon 74432512 [ 110.372432][ T1855] total_active_anon 238751744 [ 110.377225][ T1855] total_inactive_file 0 [ 110.381446][ T1855] total_active_file 864256 [ 110.385938][ T1855] total_unevictable 0 [ 110.390019][ T1134] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 110.400736][ T45] ftdi_sio 5-1:9.235: FTDI USB Serial Device converter detected [ 110.413935][ T45] ftdi_sio ttyUSB0: unknown device type: 0xc6b8 [ 110.428394][ T45] usb 5-1: USB disconnect, device number 40 [ 110.435733][ T45] ftdi_sio 5-1:9.235: device disconnected [ 110.441644][ T1855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=1840,uid=0 [ 110.461484][ T1855] Memory cgroup out of memory: Killed process 1840 (syz.3.437) total-vm:49264kB, anon-rss:0kB, file-rss:31744kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 110.566155][ T1134] usb 2-1: Using ep0 maxpacket: 32 [ 110.572425][ T1134] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 110.584060][ T1134] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 110.595285][ T1134] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.611381][ T1134] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.622226][ T1134] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 110.636123][ T1134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.649389][ T1134] usb 2-1: config 0 descriptor?? [ 111.055409][ T1983] FAULT_INJECTION: forcing a failure. [ 111.055409][ T1983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.072659][ T1134] input: HID 28bd:0935 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0011/input/input18 [ 111.091967][ T1983] CPU: 1 UID: 0 PID: 1983 Comm: syz.0.477 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 111.092002][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.092017][ T1983] Call Trace: [ 111.092025][ T1983] [ 111.092033][ T1983] __dump_stack+0x21/0x30 [ 111.092072][ T1983] dump_stack_lvl+0x140/0x1c0 [ 111.092104][ T1983] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.092139][ T1983] ? check_stack_object+0x81/0x150 [ 111.092163][ T1983] ? __virt_addr_valid+0x2a6/0x380 [ 111.092193][ T1983] dump_stack+0x19/0x20 [ 111.092225][ T1983] should_fail_ex+0x3d7/0x530 [ 111.092249][ T1983] should_fail+0xf/0x20 [ 111.092268][ T1983] should_fail_usercopy+0x1e/0x30 [ 111.092292][ T1983] _copy_from_user+0x20/0xa0 [ 111.092321][ T1983] memdup_user+0x81/0x170 [ 111.092350][ T1983] kvm_arch_vcpu_ioctl+0x10ec/0x2d90 [ 111.092378][ T1983] ? avc_has_perm+0x155/0x240 [ 111.092403][ T1983] ? __cfi_avc_has_perm+0x10/0x10 [ 111.092429][ T1983] ? kasan_save_alloc_info+0x40/0x50 [ 111.092466][ T1983] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 111.092494][ T1983] ? selinux_file_open+0x46c/0x630 [ 111.092517][ T1983] ? __cfi_selinux_file_open+0x10/0x10 [ 111.092545][ T1983] ? is_bpf_text_address+0x17b/0x1a0 [ 111.092590][ T1983] ? kernel_text_address+0xa9/0xe0 [ 111.092623][ T1983] ? __kernel_text_address+0x11/0x40 [ 111.092654][ T1983] ? __asan_set_shadow_00+0x12/0x20 [ 111.092685][ T1983] ? do_vfs_ioctl+0x182d/0x2010 [ 111.092713][ T1983] ? arch_stack_walk+0x10a/0x170 [ 111.092736][ T1983] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 111.092777][ T1983] ? _parse_integer_limit+0x195/0x1e0 [ 111.092811][ T1983] ? _parse_integer+0x2e/0x40 [ 111.092843][ T1983] ? kstrtoull+0x13b/0x1e0 [ 111.092875][ T1983] ? kstrtouint+0x78/0xf0 [ 111.092907][ T1983] ? ioctl_has_perm+0x1bc/0x500 [ 111.092929][ T1983] ? __asan_memcpy+0x5a/0x80 [ 111.092953][ T1983] ? ioctl_has_perm+0x408/0x500 [ 111.092975][ T1983] ? has_cap_mac_admin+0xd0/0xd0 [ 111.092996][ T1983] ? __kasan_check_write+0x18/0x20 [ 111.093019][ T1983] ? mutex_lock_killable+0x97/0x1d0 [ 111.093049][ T1983] ? __cfi_mutex_lock_killable+0x10/0x10 [ 111.093081][ T1983] ? proc_fail_nth_write+0x184/0x220 [ 111.093114][ T1983] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 111.093149][ T1983] kvm_vcpu_ioctl+0x7da/0x1000 [ 111.093175][ T1983] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 111.093199][ T1983] ? __cfi_vfs_write+0x10/0x10 [ 111.093223][ T1983] ? __kasan_check_write+0x18/0x20 [ 111.093247][ T1983] ? mutex_unlock+0x90/0x240 [ 111.093277][ T1983] ? __cfi_mutex_unlock+0x10/0x10 [ 111.093307][ T1983] ? __fget_files+0x2c5/0x340 [ 111.093336][ T1983] ? __fget_files+0x2c5/0x340 [ 111.093365][ T1983] ? bpf_lsm_file_ioctl+0xd/0x20 [ 111.093396][ T1983] ? security_file_ioctl+0x3e/0x110 [ 111.093431][ T1983] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 111.093455][ T1983] __se_sys_ioctl+0x132/0x1b0 [ 111.093484][ T1983] __x64_sys_ioctl+0x7f/0xa0 [ 111.093512][ T1983] x64_sys_call+0x1878/0x2ee0 [ 111.093535][ T1983] do_syscall_64+0x57/0xf0 [ 111.093560][ T1983] ? clear_bhb_loop+0x50/0xa0 [ 111.093604][ T1983] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.093632][ T1983] RIP: 0033:0x7ff1ea39ce59 [ 111.093652][ T1983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.093674][ T1983] RSP: 002b:00007ff1eb271028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.093700][ T1983] RAX: ffffffffffffffda RBX: 00007ff1ea615fa0 RCX: 00007ff1ea39ce59 [ 111.093718][ T1983] RDX: 0000200000000240 RSI: 000000004188aea7 RDI: 0000000000000005 [ 111.093734][ T1983] RBP: 00007ff1eb271090 R08: 0000000000000000 R09: 0000000000000000 [ 111.093750][ T1983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.093764][ T1983] R13: 00007ff1ea616038 R14: 00007ff1ea615fa0 R15: 00007ffdfe3cf118 [ 111.093783][ T1983] [ 111.248733][ T36] audit: type=1400 audit(1780751229.280:411): avc: denied { create } for pid=1984 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 111.479528][ T1134] uclogic 0003:28BD:0935.0011: input,hidraw0: USB HID v1.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 111.612723][ T1994] overlayfs: failed to resolve './file0': -2 [ 111.644428][ T36] audit: type=1400 audit(1780751229.280:412): avc: denied { sys_admin } for pid=1984 comm="syz.4.478" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 111.691217][ T1996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 111.946131][ T511] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 112.011805][ T1842] syz.3.437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 112.096138][ T511] usb 5-1: Using ep0 maxpacket: 32 [ 112.102502][ T511] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.113885][ T511] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 112.124044][ T511] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 112.136267][ T511] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.149970][ T1842] CPU: 0 UID: 0 PID: 1842 Comm: syz.3.437 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 112.150010][ T1842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.150026][ T1842] Call Trace: [ 112.150034][ T1842] [ 112.150044][ T1842] __dump_stack+0x21/0x30 [ 112.150082][ T1842] dump_stack_lvl+0x140/0x1c0 [ 112.150115][ T1842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.150148][ T1842] ? ___ratelimit+0x40e/0x5b0 [ 112.150178][ T1842] dump_stack+0x19/0x20 [ 112.150209][ T1842] dump_header+0xd6/0x490 [ 112.150238][ T1842] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 112.150271][ T1842] oom_kill_process+0x35d/0x640 [ 112.150300][ T1842] out_of_memory+0x624/0xa30 [ 112.150327][ T1842] ? __cfi_out_of_memory+0x10/0x10 [ 112.150352][ T1842] ? mutex_lock_killable+0x97/0x1d0 [ 112.150383][ T1842] ? __cfi_mutex_lock_killable+0x10/0x10 [ 112.150416][ T1842] mem_cgroup_out_of_memory+0x2c8/0x390 [ 112.150443][ T1842] ? css_next_descendant_pre+0x202/0x230 [ 112.150481][ T1842] ? drain_obj_stock+0xed0/0xed0 [ 112.150508][ T1842] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 112.150532][ T1842] try_charge_memcg+0x91c/0xe10 [ 112.150565][ T1842] ? __cfi_try_charge_memcg+0x10/0x10 [ 112.150598][ T1842] ? __alloc_pages_noprof+0x35f/0x7e0 [ 112.150633][ T1842] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 112.150668][ T1842] __mem_cgroup_charge+0xfc/0x420 [ 112.150691][ T1842] ? do_pte_missing+0x3859/0x4410 [ 112.150722][ T1842] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 112.150747][ T1842] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 112.150781][ T1842] ? shmem_replace_folio+0x9b0/0x9b0 [ 112.150811][ T1842] ? shmem_huge_global_enabled+0x2da/0x360 [ 112.150840][ T1842] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 112.150868][ T1842] ? __kasan_check_write+0x18/0x20 [ 112.150891][ T1842] ? _raw_spin_lock+0x92/0x120 [ 112.150917][ T1842] shmem_get_folio_gfp+0x607/0x1390 [ 112.150947][ T1842] ? shmem_get_folio+0xc0/0xc0 [ 112.150971][ T1842] ? follow_page_pte+0x90f/0xbc0 [ 112.151005][ T1842] ? inode_to_bdi+0x6d/0x100 [ 112.151039][ T1842] shmem_write_begin+0xf4/0x270 [ 112.151069][ T1842] generic_perform_write+0x32b/0x970 [ 112.151106][ T1842] ? __cfi_generic_perform_write+0x10/0x10 [ 112.151139][ T1842] ? down_write+0xee/0x2b0 [ 112.151172][ T1842] ? file_update_time+0xa3/0x210 [ 112.151207][ T1842] shmem_file_write_iter+0x105/0x130 [ 112.151240][ T1842] __kernel_write_iter+0x42f/0x8a0 [ 112.151266][ T1842] ? __cfi___kernel_write_iter+0x10/0x10 [ 112.151290][ T1842] ? get_dump_page+0x165/0x220 [ 112.151323][ T1842] ? __asan_memset+0x39/0x50 [ 112.151346][ T1842] ? iov_iter_bvec+0xc0/0x180 [ 112.151375][ T1842] dump_user_range+0xb8b/0xe60 [ 112.151403][ T1842] ? __cfi_dump_user_range+0x10/0x10 [ 112.151439][ T1842] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 112.151484][ T1842] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 112.151522][ T1842] ? elf_core_dump+0x24c0/0x3960 [ 112.151554][ T1842] elf_core_dump+0x2e7e/0x3960 [ 112.151588][ T1842] ? __cfi_elf_core_dump+0x10/0x10 [ 112.151626][ T1842] ? dump_interrupted+0xf0/0xf0 [ 112.151649][ T1842] ? filp_open+0x199/0x1f0 [ 112.151679][ T1842] ? 0xffffffffff600000 [ 112.151696][ T1842] do_coredump+0x208a/0x2fe0 [ 112.151720][ T1842] ? __cfi_do_coredump+0x10/0x10 [ 112.151739][ T1842] ? asm_exc_page_fault+0x2b/0x30 [ 112.151770][ T1842] ? __kasan_slab_free+0x6a/0x80 [ 112.151796][ T1842] ? kmem_cache_free+0x1bd/0x4f0 [ 112.151818][ T1842] ? get_signal+0xa74/0x14e0 [ 112.151846][ T1842] get_signal+0x11f8/0x14e0 [ 112.151878][ T1842] arch_do_signal_or_restart+0xbc/0x760 [ 112.151899][ T1842] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 112.151922][ T1842] ? __kasan_check_write+0x18/0x20 [ 112.151944][ T1842] irqentry_exit_to_user_mode+0x4d/0xb0 [ 112.151975][ T1842] irqentry_exit+0x16/0x60 [ 112.152003][ T1842] exc_page_fault+0x65/0xc0 [ 112.152031][ T1842] asm_exc_page_fault+0x2b/0x30 [ 112.152054][ T1842] RIP: 0033:0x7f7abf99ce59 [ 112.152076][ T1842] Code: Unable to access opcode bytes at 0x7f7abf99ce2f. [ 112.152087][ T1842] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 112.152105][ T1842] RAX: 0000000000000000 RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 112.152121][ T1842] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 112.152134][ T1842] RBP: 00007f7abfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 112.152147][ T1842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.152160][ T1842] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 112.152178][ T1842] [ 112.152187][ T1842] memory: usage 307200kB, limit 307200kB, failcnt 26263 [ 112.596827][ T1842] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 112.600863][ T511] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.605554][ T1842] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 112.614169][ T511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.621828][ T1842] Memory cgroup stats for /syz3: [ 112.629145][ T1842] cache 314458112 [ 112.638097][ T1842] rss 114688 [ 112.641440][ T511] usb 5-1: SerialNumber: syz [ 112.641460][ T1842] rss_huge 0 [ 112.649724][ T1842] shmem 314454016 [ 112.652779][ T1998] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.653486][ T1842] mapped_file 0 [ 112.660612][ T1998] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.662749][ T511] hub 5-1:1.0: bad descriptor, ignoring hub [ 112.675314][ T1842] dirty 0 [ 112.677605][ T511] hub 5-1:1.0: probe with driver hub failed with error -5 [ 112.682980][ T1842] writeback 0 [ 112.692112][ T1842] workingset_refault_anon 25 [ 112.693285][ T511] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 112.697438][ T1842] workingset_refault_file 670 [ 112.709601][ T1842] swap 127995904 [ 112.713163][ T1842] swapcached 0 [ 112.716756][ T1842] pgpgin 160035 [ 112.720364][ T1842] pgpgout 83235 [ 112.723892][ T1842] pgfault 28895 [ 112.727416][ T1842] pgmajfault 41 [ 112.730964][ T1842] inactive_anon 20803584 [ 112.735339][ T1842] active_anon 293765120 [ 112.739775][ T1842] inactive_file 0 [ 112.743498][ T1842] active_file 4096 [ 112.747292][ T1842] unevictable 0 [ 112.750797][ T1842] hierarchical_memory_limit 314572800 [ 112.756289][ T1842] hierarchical_memsw_limit 9223372036854771712 [ 112.762484][ T1842] total_cache 314458112 [ 112.766735][ T1842] total_rss 114688 [ 112.770499][ T1842] total_rss_huge 0 [ 112.774262][ T1842] total_shmem 314454016 [ 112.778538][ T1842] total_mapped_file 0 [ 112.782562][ T1842] total_dirty 0 [ 112.786064][ T1842] total_writeback 0 [ 112.790062][ T1842] total_workingset_refault_anon 25 [ 112.795218][ T1842] total_workingset_refault_file 670 [ 112.800543][ T1842] total_swap 127995904 [ 112.804649][ T1842] total_swapcached 0 [ 112.808432][ T2003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2003 comm=syz.0.483 [ 112.809363][ T2003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2003 comm=syz.0.483 [ 112.821274][ T1842] total_pgpgin 160035 [ 112.837771][ T1842] total_pgpgout 83235 [ 112.841814][ T1842] total_pgfault 28895 [ 112.845851][ T1842] total_pgmajfault 41 [ 112.849916][ T1842] total_inactive_anon 20803584 [ 112.854774][ T1842] total_active_anon 293765120 [ 112.859552][ T1842] total_inactive_file 0 [ 112.863769][ T1842] total_active_file 4096 [ 112.868084][ T1842] total_unevictable 0 [ 112.870666][ T1998] netlink: 'syz.4.482': attribute type 7 has an invalid length. [ 112.872105][ T1842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=1841,uid=0 [ 112.888742][ T1998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.482'. [ 112.894745][ T1842] Memory cgroup out of memory: Killed process 1841 (syz.3.437) total-vm:49264kB, anon-rss:0kB, file-rss:32980kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 112.922934][ T511] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 112.946708][ T511] usb 5-1: USB disconnect, device number 41 [ 113.060049][ T1844] syz.3.437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 113.100343][ T1844] CPU: 1 UID: 0 PID: 1844 Comm: syz.3.437 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 113.100381][ T1844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.100398][ T1844] Call Trace: [ 113.100405][ T1844] [ 113.100414][ T1844] __dump_stack+0x21/0x30 [ 113.100453][ T1844] dump_stack_lvl+0x140/0x1c0 [ 113.100486][ T1844] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.100519][ T1844] ? ___ratelimit+0x40e/0x5b0 [ 113.100552][ T1844] dump_stack+0x19/0x20 [ 113.100583][ T1844] dump_header+0xd6/0x490 [ 113.100612][ T1844] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 113.100646][ T1844] oom_kill_process+0x35d/0x640 [ 113.100674][ T1844] out_of_memory+0x624/0xa30 [ 113.100701][ T1844] ? __cfi_out_of_memory+0x10/0x10 [ 113.100726][ T1844] ? mutex_lock_killable+0x115/0x1d0 [ 113.100759][ T1844] ? __cfi_mutex_lock_killable+0x10/0x10 [ 113.100792][ T1844] mem_cgroup_out_of_memory+0x2c8/0x390 [ 113.100817][ T1844] ? css_next_descendant_pre+0x202/0x230 [ 113.100846][ T1844] ? drain_obj_stock+0xed0/0xed0 [ 113.100872][ T1844] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 113.100897][ T1844] try_charge_memcg+0x91c/0xe10 [ 113.100932][ T1844] ? __cfi_try_charge_memcg+0x10/0x10 [ 113.100965][ T1844] ? __alloc_pages_noprof+0x35f/0x7e0 [ 113.101008][ T1844] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 113.101043][ T1844] __mem_cgroup_charge+0xfc/0x420 [ 113.101065][ T1844] ? folio_add_lru+0x116/0x400 [ 113.101093][ T1844] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 113.101118][ T1844] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 113.101149][ T1844] ? shmem_replace_folio+0x9b0/0x9b0 [ 113.101179][ T1844] ? shmem_huge_global_enabled+0x2da/0x360 [ 113.101207][ T1844] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 113.101234][ T1844] ? __kasan_check_write+0x18/0x20 [ 113.101258][ T1844] ? _raw_spin_lock+0x92/0x120 [ 113.101282][ T1844] shmem_get_folio_gfp+0x607/0x1390 [ 113.101312][ T1844] ? shmem_get_folio+0xc0/0xc0 [ 113.101336][ T1844] ? follow_page_pte+0x90f/0xbc0 [ 113.101368][ T1844] ? inode_to_bdi+0x6d/0x100 [ 113.101400][ T1844] shmem_write_begin+0xf4/0x270 [ 113.101430][ T1844] generic_perform_write+0x32b/0x970 [ 113.101465][ T1844] ? __cfi_generic_perform_write+0x10/0x10 [ 113.101497][ T1844] ? down_write+0xee/0x2b0 [ 113.101532][ T1844] ? file_update_time+0xa3/0x210 [ 113.101566][ T1844] shmem_file_write_iter+0x105/0x130 [ 113.101597][ T1844] __kernel_write_iter+0x42f/0x8a0 [ 113.101622][ T1844] ? __cfi___kernel_write_iter+0x10/0x10 [ 113.101646][ T1844] ? get_dump_page+0x165/0x220 [ 113.101676][ T1844] ? __asan_memset+0x39/0x50 [ 113.101699][ T1844] ? iov_iter_bvec+0xc0/0x180 [ 113.101727][ T1844] dump_user_range+0xb8b/0xe60 [ 113.101754][ T1844] ? __cfi_dump_user_range+0x10/0x10 [ 113.101779][ T1844] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 113.101816][ T1844] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 113.101853][ T1844] ? elf_core_dump+0x24c0/0x3960 [ 113.101883][ T1844] elf_core_dump+0x2e7e/0x3960 [ 113.101915][ T1844] ? __cfi_elf_core_dump+0x10/0x10 [ 113.101952][ T1844] ? dump_interrupted+0xf0/0xf0 [ 113.101975][ T1844] ? filp_open+0x199/0x1f0 [ 113.102014][ T1844] ? 0xffffffffff600000 [ 113.102033][ T1844] do_coredump+0x208a/0x2fe0 [ 113.102060][ T1844] ? __cfi_do_coredump+0x10/0x10 [ 113.102083][ T1844] ? asm_exc_page_fault+0x2b/0x30 [ 113.102118][ T1844] ? __kasan_slab_free+0x6a/0x80 [ 113.102146][ T1844] ? kmem_cache_free+0x1bd/0x4f0 [ 113.102170][ T1844] ? get_signal+0xa74/0x14e0 [ 113.102202][ T1844] get_signal+0x11f8/0x14e0 [ 113.102236][ T1844] arch_do_signal_or_restart+0xbc/0x760 [ 113.102260][ T1844] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 113.102285][ T1844] ? __kasan_check_write+0x18/0x20 [ 113.102309][ T1844] irqentry_exit_to_user_mode+0x4d/0xb0 [ 113.102344][ T1844] irqentry_exit+0x16/0x60 [ 113.102376][ T1844] exc_page_fault+0x65/0xc0 [ 113.102407][ T1844] asm_exc_page_fault+0x2b/0x30 [ 113.102434][ T1844] RIP: 0033:0x7f7abf99ce59 [ 113.102458][ T1844] Code: Unable to access opcode bytes at 0x7f7abf99ce2f. [ 113.102470][ T1844] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 113.102491][ T1844] RAX: 0000000000000000 RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 113.102509][ T1844] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 113.102524][ T1844] RBP: 00007f7abfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 113.102540][ T1844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.102554][ T1844] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 113.102575][ T1844] [ 113.102686][ T1844] memory: usage 306200kB, limit 307200kB, failcnt 27388 [ 113.195890][ T511] usb 2-1: USB disconnect, device number 58 [ 113.336314][ T31] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 113.426287][ T1844] memory+swap: usage 427716kB, limit 9007199254740988kB, failcnt 0 [ 113.590174][ T2020] overlayfs: failed to resolve './file1': -2 [ 113.611072][ T1844] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 113.619135][ T1844] Memory cgroup stats for /syz3: [ 113.619292][ T1844] cache 314142720 [ 113.626638][ T1134] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 113.636131][ T1844] rss 126976 [ 113.639384][ T1844] rss_huge 0 [ 113.642611][ T1844] shmem 312999936 [ 113.660853][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.676166][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 113.704683][ T31] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 113.706970][ T2025] FAULT_INJECTION: forcing a failure. [ 113.706970][ T2025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.724907][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.731800][ T2025] CPU: 0 UID: 0 PID: 2025 Comm: syz.1.492 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 113.731956][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.732000][ T2025] Call Trace: [ 113.732022][ T2025] [ 113.732052][ T2025] __dump_stack+0x21/0x30 [ 113.732154][ T2025] dump_stack_lvl+0x140/0x1c0 [ 113.732234][ T2025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.732329][ T2025] ? check_stack_object+0x12b/0x150 [ 113.732403][ T2025] dump_stack+0x19/0x20 [ 113.732479][ T2025] should_fail_ex+0x3d7/0x530 [ 113.732543][ T2025] should_fail+0xf/0x20 [ 113.732596][ T2025] should_fail_usercopy+0x1e/0x30 [ 113.732669][ T2025] _copy_to_user+0x24/0xa0 [ 113.732737][ T2025] simple_read_from_buffer+0xed/0x160 [ 113.732828][ T2025] proc_fail_nth_read+0x1aa/0x220 [ 113.732934][ T2025] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 113.733023][ T2025] ? bpf_lsm_file_permission+0xd/0x20 [ 113.733098][ T2025] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 113.733211][ T2025] vfs_read+0x286/0xcb0 [ 113.733292][ T2025] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 113.733351][ T2025] ? __cfi_vfs_read+0x10/0x10 [ 113.733379][ T2025] ? __kasan_check_write+0x18/0x20 [ 113.733449][ T2025] ? mutex_lock+0x97/0x1d0 [ 113.733527][ T2025] ? __cfi_mutex_lock+0x10/0x10 [ 113.733600][ T2025] ? __fget_files+0x2c5/0x340 [ 113.733682][ T2025] ksys_read+0x145/0x260 [ 113.733743][ T2025] ? __cfi_ksys_read+0x10/0x10 [ 113.733807][ T2025] ? __kasan_check_read+0x15/0x20 [ 113.733868][ T2025] __x64_sys_read+0x7f/0x90 [ 113.733937][ T2025] x64_sys_call+0x2638/0x2ee0 [ 113.733992][ T2025] do_syscall_64+0x57/0xf0 [ 113.734066][ T2025] ? clear_bhb_loop+0x50/0xa0 [ 113.734140][ T2025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.734213][ T2025] RIP: 0033:0x7f399235d68e [ 113.734267][ T2025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.734322][ T2025] RSP: 002b:00007f39932abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.734396][ T2025] RAX: ffffffffffffffda RBX: 00007f39932ac6c0 RCX: 00007f399235d68e [ 113.734474][ T2025] RDX: 000000000000000f RSI: 00007f39932ac0a0 RDI: 0000000000000006 [ 113.734522][ T2025] RBP: 00007f39932ac090 R08: 0000000000000000 R09: 0000000000000000 [ 113.734572][ T2025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.734645][ T2025] R13: 00007f3992616038 R14: 00007f3992615fa0 R15: 00007fff033f97a8 [ 113.734717][ T2025] [ 113.982502][ T31] usb 4-1: Product: syz [ 113.986821][ T31] usb 4-1: Manufacturer: syz [ 113.991462][ T31] usb 4-1: SerialNumber: syz [ 113.996549][ T1844] mapped_file 884736 [ 114.000476][ T1844] dirty 0 [ 114.006128][ T1134] usb 1-1: Using ep0 maxpacket: 16 [ 114.012566][ T1844] writeback 0 [ 114.015963][ T1134] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.023630][ T1134] usb 1-1: can't read configurations, error -61 [ 114.031290][ T1844] workingset_refault_anon 25 [ 114.036173][ T1844] workingset_refault_file 987 [ 114.041000][ T1844] swap 126566400 [ 114.044603][ T1844] swapcached 4096 [ 114.048402][ T1844] pgpgin 166481 [ 114.051909][ T1844] pgpgout 89745 [ 114.055419][ T1844] pgfault 29290 [ 114.061098][ T1844] pgmajfault 43 [ 114.064621][ T1844] inactive_anon 303079424 [ 114.094076][ T31] usb 4-1: can't set config #1, error -71 [ 114.106917][ T31] usb 4-1: USB disconnect, device number 49 [ 114.149579][ T1844] active_anon 8839168 [ 114.153635][ T1844] inactive_file 0 [ 114.157435][ T1134] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 114.208816][ T1844] active_file 1142784 [ 114.212892][ T1844] unevictable 0 [ 114.253898][ T1844] hierarchical_memory_limit 314572800 [ 114.280733][ T1844] hierarchical_memsw_limit 9223372036854771712 [ 114.292463][ T1844] total_cache 314142720 [ 114.296776][ T1844] total_rss 126976 [ 114.300608][ T1844] total_rss_huge 0 [ 114.304359][ T1844] total_shmem 312999936 [ 114.308587][ T1844] total_mapped_file 884736 [ 114.316601][ T1134] usb 1-1: Using ep0 maxpacket: 16 [ 114.322061][ T1844] total_dirty 0 [ 114.326143][ T310] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 114.334687][ T1134] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.347302][ T1134] usb 1-1: can't read configurations, error -61 [ 114.354163][ T1134] usb usb1-port1: attempt power cycle [ 114.360308][ T1844] total_writeback 0 [ 114.364155][ T1844] total_workingset_refault_anon 25 [ 114.370502][ T1844] total_workingset_refault_file 987 [ 114.375926][ T1844] total_swap 126566400 [ 114.390237][ T2041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2041 comm=syz.4.498 [ 114.395925][ T1844] total_swapcached 4096 [ 114.407180][ T1844] total_pgpgin 166481 [ 114.411216][ T1844] total_pgpgout 89745 [ 114.415223][ T1844] total_pgfault 29290 [ 114.419563][ T1844] total_pgmajfault 43 [ 114.420725][ T2041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2041 comm=syz.4.498 [ 114.423669][ T1844] total_inactive_anon 303079424 [ 114.441466][ T1844] total_active_anon 8839168 [ 114.452885][ T1844] total_inactive_file 0 [ 114.463824][ T1844] total_active_file 1142784 [ 114.468544][ T1844] total_unevictable 0 [ 114.472784][ T1844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 114.472930][ T2045] overlayfs: failed to resolve './file1': -2 [ 114.485865][ T1844] ,cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=1858,uid=0 [ 114.496345][ T1844] Memory cgroup out of memory: Killed process 1858 (syz.3.437) total-vm:49264kB, anon-rss:0kB, file-rss:32936kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 114.514512][ T310] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 114.533620][ T310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.556152][ T310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 114.567453][ T310] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 114.567768][ T2047] netlink: 56 bytes leftover after parsing attributes in process `syz.4.500'. [ 114.587995][ T310] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.599177][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.607459][ T310] usb 2-1: SerialNumber: syz [ 114.608640][ T2047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.500'. [ 114.618426][ T2030] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 114.645429][ T1855] syz.3.437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 114.646257][ T36] audit: type=1404 audit(1780751232.720:413): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 114.672407][ T2014] syzkaller1: entered allmulticast mode [ 114.698425][ T36] audit: type=1400 audit(1780751232.730:414): avc: denied { ioctl } for pid=2013 comm="syz.0.487" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 114.730506][ T1134] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 114.743126][ T36] audit: type=1400 audit(1780751232.730:415): avc: denied { read } for pid=2013 comm="syz.0.487" dev="nsfs" ino=4026532400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 114.764195][ T1855] CPU: 1 UID: 0 PID: 1855 Comm: syz.3.437 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 114.764233][ T1855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.764248][ T1855] Call Trace: [ 114.764244][ T36] audit: type=1400 audit(1780751232.750:416): avc: denied { getattr } for pid=2046 comm="syz.4.500" path="socket:[22975]" dev="sockfs" ino=22975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 114.764257][ T1855] [ 114.764266][ T1855] __dump_stack+0x21/0x30 [ 114.764358][ T1855] dump_stack_lvl+0x140/0x1c0 [ 114.764464][ T1855] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.764553][ T1855] ? ___ratelimit+0x40e/0x5b0 [ 114.764635][ T1855] dump_stack+0x19/0x20 [ 114.764726][ T1855] dump_header+0xd6/0x490 [ 114.764801][ T1855] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 114.764901][ T1855] oom_kill_process+0x35d/0x640 [ 114.764985][ T1855] out_of_memory+0x624/0xa30 [ 114.765050][ T1855] ? __cfi_out_of_memory+0x10/0x10 [ 114.765120][ T1855] ? mutex_lock_killable+0x115/0x1d0 [ 114.765208][ T1855] ? __cfi_mutex_lock_killable+0x10/0x10 [ 114.765292][ T1855] mem_cgroup_out_of_memory+0x2c8/0x390 [ 114.765349][ T1855] ? css_next_descendant_pre+0x202/0x230 [ 114.765429][ T1855] ? drain_obj_stock+0xed0/0xed0 [ 114.765492][ T1855] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 114.765560][ T1855] try_charge_memcg+0x91c/0xe10 [ 114.765643][ T1855] ? __cfi_try_charge_memcg+0x10/0x10 [ 114.765728][ T1855] ? __alloc_pages_noprof+0x35f/0x7e0 [ 114.765863][ T1855] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 114.765956][ T1855] __mem_cgroup_charge+0xfc/0x420 [ 114.766016][ T1855] ? folio_add_lru+0x116/0x400 [ 114.766090][ T1855] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 114.766152][ T1855] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 114.766227][ T1855] ? shmem_replace_folio+0x9b0/0x9b0 [ 114.766306][ T1855] ? shmem_huge_global_enabled+0x2da/0x360 [ 114.766370][ T1855] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 114.766435][ T1855] ? __kasan_check_write+0x18/0x20 [ 114.766504][ T1855] ? _raw_spin_lock+0x92/0x120 [ 114.766567][ T1855] shmem_get_folio_gfp+0x607/0x1390 [ 114.766639][ T1855] ? shmem_get_folio+0xc0/0xc0 [ 114.766707][ T1855] ? follow_page_pte+0x90f/0xbc0 [ 114.766790][ T1855] ? inode_to_bdi+0x6d/0x100 [ 114.766884][ T1855] shmem_write_begin+0xf4/0x270 [ 114.766965][ T1855] generic_perform_write+0x32b/0x970 [ 114.767057][ T1855] ? __cfi_generic_perform_write+0x10/0x10 [ 114.767140][ T1855] ? down_write+0xee/0x2b0 [ 114.767265][ T1855] ? file_update_time+0xa3/0x210 [ 114.767358][ T1855] shmem_file_write_iter+0x105/0x130 [ 114.767445][ T1855] __kernel_write_iter+0x42f/0x8a0 [ 114.767514][ T1855] ? __cfi___kernel_write_iter+0x10/0x10 [ 114.767575][ T1855] ? get_dump_page+0x165/0x220 [ 114.767656][ T1855] ? __asan_memset+0x39/0x50 [ 114.767716][ T1855] ? iov_iter_bvec+0xc0/0x180 [ 114.767787][ T1855] dump_user_range+0xb8b/0xe60 [ 114.767867][ T1855] ? __cfi_dump_user_range+0x10/0x10 [ 114.767927][ T1855] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 114.768020][ T1855] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 114.768119][ T1855] ? elf_core_dump+0x24c0/0x3960 [ 114.768202][ T1855] elf_core_dump+0x2e7e/0x3960 [ 114.768284][ T1855] ? __cfi_elf_core_dump+0x10/0x10 [ 114.768389][ T1855] ? dump_interrupted+0xf0/0xf0 [ 114.768449][ T1855] ? filp_open+0x199/0x1f0 [ 114.768537][ T1855] ? 0xffffffffff600000 [ 114.768607][ T1855] do_coredump+0x208a/0x2fe0 [ 114.768692][ T1855] ? __cfi_do_coredump+0x10/0x10 [ 114.768746][ T1855] ? asm_exc_page_fault+0x2b/0x30 [ 114.768843][ T1855] ? __kasan_slab_free+0x6a/0x80 [ 114.768914][ T1855] ? kmem_cache_free+0x1bd/0x4f0 [ 114.768977][ T1855] ? get_signal+0xa74/0x14e0 [ 114.769065][ T1855] get_signal+0x11f8/0x14e0 [ 114.769156][ T1855] arch_do_signal_or_restart+0xbc/0x760 [ 114.769218][ T1855] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 114.769288][ T1855] ? __kasan_check_write+0x18/0x20 [ 114.769345][ T1855] irqentry_exit_to_user_mode+0x4d/0xb0 [ 114.769435][ T1855] irqentry_exit+0x16/0x60 [ 114.769514][ T1855] exc_page_fault+0x65/0xc0 [ 114.769596][ T1855] asm_exc_page_fault+0x2b/0x30 [ 114.769666][ T1855] RIP: 0033:0x7f7abf99ce59 [ 114.769735][ T1855] Code: Unable to access opcode bytes at 0x7f7abf99ce2f. [ 114.769765][ T1855] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 114.769818][ T1855] RAX: 0000000000000000 RBX: 00007f7abfc15fa0 RCX: 00007f7abf99ce59 [ 114.769876][ T1855] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 114.769930][ T1855] RBP: 00007f7abfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 114.769984][ T1855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.770038][ T1855] R13: 00007f7abfc16038 R14: 00007f7abfc15fa0 R15: 00007ffc7e0ad7a8 [ 114.770096][ T1855] [ 114.826532][ T1855] memory: usage 303756kB, limit 307200kB, failcnt 30631 [ 114.829800][ T36] audit: type=1400 audit(1780751232.750:417): avc: denied { ioctl } for pid=2046 comm="syz.4.500" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 114.867408][ T1855] memory+swap: usage 429264kB, limit 9007199254740988kB, failcnt 0 [ 114.886251][ T36] audit: type=1400 audit(1780751232.770:418): avc: denied { read write } for pid=372 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.992231][ T310] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 115.001741][ T1855] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 115.038022][ T310] usb 2-1: USB disconnect, device number 59 [ 115.042077][ T36] audit: type=1400 audit(1780751232.770:419): avc: denied { read } for pid=2049 comm="syz.4.501" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 115.166222][ T1134] usb 1-1: device not accepting address 52, error -71 [ 115.168903][ T1855] Memory cgroup stats for [ 115.336890][ T36] audit: type=1400 audit(1780751232.810:420): avc: denied { read write } for pid=372 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.369295][ T36] audit: type=1400 audit(1780751232.820:421): avc: denied { read write } for pid=2051 comm="syz.4.502" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 115.393537][ T36] audit: type=1400 audit(1780751233.060:422): avc: denied { read write } for pid=2029 comm="syz.1.494" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 115.426769][ T1855] /syz3: [ 115.427126][ T1855] cache 306925568 [ 115.433863][ T1855] rss 77824 [ 115.439344][ T1855] rss_huge 0 [ 115.442603][ T1855] shmem 305156096 [ 115.476196][ T1855] mapped_file 1572864 [ 115.480294][ T1855] dirty 0 [ 115.483264][ T1855] writeback 0 [ 115.496115][ T1855] workingset_refault_anon 25 [ 115.500814][ T1855] workingset_refault_file 1807 [ 115.505614][ T1855] swap 127995904 [ 115.547611][ T1855] swapcached 0 [ 115.551054][ T1855] pgpgin 172869 [ 115.554543][ T1855] pgpgout 97886 [ 115.586127][ T1855] pgfault 29690 [ 115.589655][ T1855] pgmajfault 62 [ 115.593163][ T1855] inactive_anon 251383808 [ 115.616452][ T1855] active_anon 53293056 [ 115.620701][ T1855] inactive_file 0 [ 115.628033][ T1855] active_file 1683456 [ 115.636254][ T1855] unevictable 0 [ 115.639763][ T1855] hierarchical_memory_limit 314572800 [ 115.645162][ T1855] hierarchical_memsw_limit 9223372036854771712 [ 115.676175][ T1855] total_cache 306925568 [ 115.680576][ T1855] total_rss 77824 [ 115.684350][ T1855] total_rss_huge 0 [ 115.702899][ T1855] total_shmem 305156096 [ 115.716157][ T1855] total_mapped_file 1572864 [ 115.720746][ T1855] total_dirty 0 [ 115.724252][ T1855] total_writeback 0 [ 115.766151][ T1855] total_workingset_refault_anon 25 [ 115.775658][ T1855] total_workingset_refault_file 1807 [ 115.797192][ T1855] total_swap 127995904 [ 115.801332][ T1855] total_swapcached 0 [ 115.815609][ T1855] total_pgpgin 172869 [ 115.819731][ T1855] total_pgpgout 97886 [ 115.823742][ T1855] total_pgfault 29690 [ 115.836130][ T1855] total_pgmajfault 62 [ 115.846140][ T1855] total_inactive_anon 251383808 [ 115.856149][ T1855] total_active_anon 53293056 [ 115.860893][ T1855] total_inactive_file 0 [ 115.886121][ T1855] total_active_file 1683456 [ 115.891232][ T1855] total_unevictable 0 [ 115.913550][ T1855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=1843,uid=0 [ 115.945914][ T1855] Memory cgroup out of memory: Killed process 1843 (syz.3.437) total-vm:49264kB, anon-rss:0kB, file-rss:33024kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 116.106913][ T2087] syzkaller0: entered promiscuous mode [ 116.112467][ T2087] syzkaller0: entered allmulticast mode [ 116.348337][ T2103] can0: slcan on ttyS3. [ 116.376166][ T2105] netlink: 'syz.4.524': attribute type 2 has an invalid length. [ 116.414854][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 116.432353][ T2103] can0 (unregistered): slcan off ttyS3. [ 117.738716][ T2152] syz_tun: tun_net_xmit 1510 [ 117.827641][ T2152] syz_tun: tun_net_xmit 99 [ 118.108861][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.691452][ T2182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 118.700761][ T2182] bridge_slave_1: left allmulticast mode [ 118.707125][ T2182] bridge_slave_1: left promiscuous mode [ 118.713141][ T2182] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.722507][ T2182] bridge_slave_0: left allmulticast mode [ 118.759230][ T2182] bridge_slave_0: left promiscuous mode [ 118.787391][ T2182] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.795266][ T2185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2185 comm=syz.1.555 [ 119.011206][ T2191] netlink: 'syz.1.558': attribute type 27 has an invalid length. [ 119.656197][ T36] kauditd_printk_skb: 19103 callbacks suppressed [ 119.656218][ T36] audit: type=1400 audit(1780751237.740:18506): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.675697][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.683849][ T36] audit: type=1400 audit(1780751237.740:18507): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.691445][ T150] audit: audit_lost=341 audit_rate_limit=0 audit_backlog_limit=64 [ 119.711429][ T36] audit: type=1400 audit(1780751237.740:18508): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.711465][ T36] audit: type=1400 audit(1780751237.740:18509): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.720262][ T150] audit: backlog limit exceeded [ 119.766945][ T36] audit: type=1400 audit(1780751237.740:18510): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.769505][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.788038][ T36] audit: type=1400 audit(1780751237.740:18511): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.119598][ T2201] syz.1.562 (2201): /proc/2200/oom_adj is deprecated, please use /proc/2200/oom_score_adj instead. [ 120.176137][ T1704] Bluetooth: hci0: command 0x1003 tx timeout [ 120.176155][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.218595][ T2216] netlink: 'syz.0.567': attribute type 32 has an invalid length. [ 120.239859][ T2216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 120.282018][ T2223] netlink: 212 bytes leftover after parsing attributes in process `syz.0.570'. [ 120.705999][ T2265] netlink: 'syz.0.585': attribute type 12 has an invalid length. [ 120.902549][ T2276] netlink: 'syz.1.590': attribute type 29 has an invalid length. [ 120.910450][ T2276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 121.804733][ T2321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'. [ 123.413943][ T2373] syz_tun: tun_net_xmit 42 [ 124.276017][ T2402] syzkaller1: entered promiscuous mode [ 124.291908][ T2402] syzkaller1: entered allmulticast mode [ 124.666135][ T36] kauditd_printk_skb: 37997 callbacks suppressed [ 124.666171][ T36] audit: type=1400 audit(1780751242.740:56507): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.685918][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.694505][ T36] audit: type=1400 audit(1780751242.750:56508): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.700416][ T150] audit: audit_lost=343 audit_rate_limit=0 audit_backlog_limit=64 [ 124.722096][ T36] audit: type=1400 audit(1780751242.750:56509): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.729240][ T150] audit: backlog limit exceeded [ 124.751005][ T36] audit: type=1400 audit(1780751242.750:56510): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.751048][ T36] audit: type=1400 audit(1780751242.750:56511): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.751079][ T36] audit: type=1400 audit(1780751242.750:56512): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.751108][ T36] audit: type=1400 audit(1780751242.750:56513): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.598910][ T2439] netlink: 252 bytes leftover after parsing attributes in process `syz.0.652'. [ 126.414387][ T2456] ªªªªªª: renamed from vlan0 (while UP) [ 127.305279][ T2498] netlink: 'syz.1.677': attribute type 4 has an invalid length. [ 127.313330][ T2498] netlink: 'syz.1.677': attribute type 6 has an invalid length. [ 127.321647][ T2498] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.677'. [ 127.520071][ T2511] netlink: 17 bytes leftover after parsing attributes in process `syz.3.682'. [ 127.531432][ T2511] netlink: 'syz.3.682': attribute type 4 has an invalid length. [ 128.916695][ T2597] netlink: 55 bytes leftover after parsing attributes in process `syz.1.716'. [ 129.406600][ T2616] serio: Serial port ttyS3 [ 129.676101][ T36] kauditd_printk_skb: 41844 callbacks suppressed [ 129.676122][ T36] audit: type=1400 audit(1780751247.750:98244): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.705857][ T150] audit: audit_backlog=66 > audit_backlog_limit=64 [ 129.708023][ T2620] audit: audit_backlog=66 > audit_backlog_limit=64 [ 129.719425][ T150] audit: audit_lost=382 audit_rate_limit=0 audit_backlog_limit=64 [ 129.727512][ T150] audit: backlog limit exceeded [ 129.731688][ T2621] audit: audit_backlog=67 > audit_backlog_limit=64 [ 129.737020][ T150] audit: audit_backlog=67 > audit_backlog_limit=64 [ 129.745463][ T150] audit: audit_lost=383 audit_rate_limit=0 audit_backlog_limit=64 [ 129.748430][ T2621] audit: audit_lost=384 audit_rate_limit=0 audit_backlog_limit=64 [ 129.754028][ T36] audit: type=1400 audit(1780751247.760:98245): avc: denied { read write } for pid=2619 comm="syz.1.724" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 131.546427][ T2674] netlink: 'syz.1.748': attribute type 46 has an invalid length. [ 131.554933][ T2674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 131.573746][ T2675] netlink: 'syz.1.748': attribute type 46 has an invalid length. [ 131.606132][ T2675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 134.677070][ T2767] veth1_to_bridge: entered promiscuous mode [ 134.686201][ T36] kauditd_printk_skb: 35368 callbacks suppressed [ 134.686230][ T36] audit: type=1400 audit(1780751252.770:132016): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.708188][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.723912][ T150] audit: audit_lost=918 audit_rate_limit=0 audit_backlog_limit=64 [ 134.724520][ T2767] veth1_to_bridge: entered allmulticast mode [ 134.737958][ T36] audit: type=1400 audit(1780751252.770:132017): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.744206][ T150] audit: backlog limit exceeded [ 134.762387][ T2768] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.766412][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.771021][ T36] audit: type=1400 audit(1780751252.770:132018): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.786764][ T150] audit: audit_lost=919 audit_rate_limit=0 audit_backlog_limit=64 [ 134.799500][ T2768] audit: audit_lost=920 audit_rate_limit=0 audit_backlog_limit=64 [ 136.116401][ T2817] IPv6: addrconf: prefix option has invalid lifetime [ 136.503056][ T2823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2823 comm=syz.3.798 [ 136.654579][ T2842] tc_dump_action: action bad kind [ 136.919660][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.150320][ T2861] netlink: 'syz.4.812': attribute type 8 has an invalid length. [ 137.158180][ T2861] netlink: 'syz.4.812': attribute type 32 has an invalid length. [ 138.976110][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.976116][ T1704] Bluetooth: hci0: command 0x1003 tx timeout [ 139.132426][ T2909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2909 comm=syz.1.830 [ 139.462182][ T369] veth1_macvtap: left promiscuous mode [ 139.468025][ T369] veth0_vlan: left promiscuous mode [ 139.696324][ T36] kauditd_printk_skb: 39060 callbacks suppressed [ 139.696345][ T36] audit: type=1400 audit(1780751257.770:170516): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.715765][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.724993][ T36] audit: type=1400 audit(1780751257.780:170517): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.732496][ T150] audit: audit_lost=1108 audit_rate_limit=0 audit_backlog_limit=64 [ 139.753505][ T36] audit: type=1400 audit(1780751257.780:170518): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.761053][ T150] audit: backlog limit exceeded [ 139.782778][ T36] audit: type=1400 audit(1780751257.780:170519): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.788012][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.809067][ T36] audit: type=1400 audit(1780751257.780:170520): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.814907][ T150] audit: audit_lost=1109 audit_rate_limit=0 audit_backlog_limit=64 [ 141.753601][ T2947] syzkaller1: entered promiscuous mode [ 141.761928][ T2947] syzkaller1: entered allmulticast mode [ 141.778096][ T2947] syzkaller1: left promiscuous mode [ 141.783370][ T2947] syzkaller1: left allmulticast mode [ 141.942844][ T2948] syzkaller1: entered promiscuous mode [ 141.948722][ T2948] syzkaller1: entered allmulticast mode [ 144.534749][ T2974] FAULT_INJECTION: forcing a failure. [ 144.534749][ T2974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.572819][ T2974] CPU: 1 UID: 0 PID: 2974 Comm: syz.4.852 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 144.572855][ T2974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.572870][ T2974] Call Trace: [ 144.572879][ T2974] [ 144.572888][ T2974] __dump_stack+0x21/0x30 [ 144.572928][ T2974] dump_stack_lvl+0x140/0x1c0 [ 144.572962][ T2974] ? __cfi_dump_stack_lvl+0x10/0x10 [ 144.572998][ T2974] ? check_stack_object+0x12b/0x150 [ 144.573024][ T2974] dump_stack+0x19/0x20 [ 144.573056][ T2974] should_fail_ex+0x3d7/0x530 [ 144.573081][ T2974] should_fail+0xf/0x20 [ 144.573101][ T2974] should_fail_usercopy+0x1e/0x30 [ 144.573126][ T2974] _copy_to_user+0x24/0xa0 [ 144.573154][ T2974] simple_read_from_buffer+0xed/0x160 [ 144.573193][ T2974] proc_fail_nth_read+0x1aa/0x220 [ 144.573232][ T2974] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 144.573267][ T2974] ? bpf_lsm_file_permission+0xd/0x20 [ 144.573298][ T2974] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 144.573332][ T2974] vfs_read+0x286/0xcb0 [ 144.573355][ T2974] ? __cfi_atime_needs_update+0x10/0x10 [ 144.573390][ T2974] ? __cfi_vfs_read+0x10/0x10 [ 144.573412][ T2974] ? __kasan_check_write+0x18/0x20 [ 144.573437][ T2974] ? mutex_lock+0x97/0x1d0 [ 144.573466][ T2974] ? __cfi_mutex_lock+0x10/0x10 [ 144.573496][ T2974] ? __fget_files+0x2c5/0x340 [ 144.573525][ T2974] ksys_read+0x145/0x260 [ 144.573548][ T2974] ? __cfi_filldir+0x10/0x10 [ 144.573578][ T2974] ? __cfi_ksys_read+0x10/0x10 [ 144.573602][ T2974] ? __kasan_check_read+0x15/0x20 [ 144.573626][ T2974] __x64_sys_read+0x7f/0x90 [ 144.573649][ T2974] x64_sys_call+0x2638/0x2ee0 [ 144.573672][ T2974] do_syscall_64+0x57/0xf0 [ 144.573696][ T2974] ? clear_bhb_loop+0x50/0xa0 [ 144.573737][ T2974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.573765][ T2974] RIP: 0033:0x7febcf95d68e [ 144.573786][ T2974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.573807][ T2974] RSP: 002b:00007febd0934fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.573832][ T2974] RAX: ffffffffffffffda RBX: 00007febd09356c0 RCX: 00007febcf95d68e [ 144.573850][ T2974] RDX: 000000000000000f RSI: 00007febd09350a0 RDI: 0000000000000005 [ 144.573865][ T2974] RBP: 00007febd0935090 R08: 0000000000000000 R09: 0000000000000000 [ 144.573879][ T2974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.573894][ T2974] R13: 00007febcfc16038 R14: 00007febcfc15fa0 R15: 00007ffe50ff3208 [ 144.573914][ T2974] [ 144.736366][ T36] kauditd_printk_skb: 46178 callbacks suppressed [ 144.736419][ T36] audit: type=1400 audit(1780751262.770:216323): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.858202][ T36] audit: type=1400 audit(1780751262.930:216324): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.879510][ T36] audit: type=1400 audit(1780751262.930:216325): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.883163][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.901342][ T36] audit: type=1400 audit(1780751262.930:216326): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.916407][ T150] audit: audit_lost=1235 audit_rate_limit=0 audit_backlog_limit=64 [ 144.928923][ T36] audit: type=1400 audit(1780751262.930:216327): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.957705][ T36] audit: type=1400 audit(1780751262.930:216328): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.977549][ T150] audit: backlog limit exceeded [ 144.984438][ T36] audit: type=1400 audit(1780751262.930:216329): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.926245][ T2989] ip6gretap0: entered promiscuous mode [ 146.931855][ T2989] ip6gretap0: entered allmulticast mode [ 148.217467][ T3000] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.862'. [ 149.746189][ T36] kauditd_printk_skb: 47247 callbacks suppressed [ 149.746209][ T36] audit: type=1400 audit(1780751267.830:263199): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.766835][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.774438][ T36] audit: type=1400 audit(1780751267.830:263200): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.780239][ T150] audit: audit_lost=1362 audit_rate_limit=0 audit_backlog_limit=64 [ 149.801920][ T36] audit: type=1400 audit(1780751267.830:263201): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.809275][ T150] audit: backlog limit exceeded [ 149.809991][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.830628][ T36] audit: type=1400 audit(1780751267.830:263202): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.835880][ T150] audit: audit_lost=1363 audit_rate_limit=0 audit_backlog_limit=64 [ 149.842120][ T36] audit: type=1400 audit(1780751267.830:263203): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.756132][ T36] kauditd_printk_skb: 49725 callbacks suppressed [ 154.756153][ T36] audit: type=1400 audit(1780751272.830:311233): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.776648][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.784489][ T36] audit: type=1400 audit(1780751272.840:311234): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.790598][ T150] audit: audit_lost=1929 audit_rate_limit=0 audit_backlog_limit=64 [ 154.811902][ T36] audit: type=1400 audit(1780751272.840:311235): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.819555][ T150] audit: backlog limit exceeded [ 154.841124][ T36] audit: type=1400 audit(1780751272.840:311236): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.847477][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.867169][ T36] audit: type=1400 audit(1780751272.840:311237): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.873509][ T150] audit: audit_lost=1930 audit_rate_limit=0 audit_backlog_limit=64 [ 159.766127][ T36] kauditd_printk_skb: 49132 callbacks suppressed [ 159.766154][ T36] audit: type=1400 audit(1780751277.840:360027): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.786165][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.794293][ T36] audit: type=1400 audit(1780751277.850:360028): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.800416][ T150] audit: audit_lost=2045 audit_rate_limit=0 audit_backlog_limit=64 [ 159.821757][ T36] audit: type=1400 audit(1780751277.850:360029): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.829386][ T150] audit: backlog limit exceeded [ 159.850869][ T36] audit: type=1400 audit(1780751277.850:360030): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.856817][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.876979][ T36] audit: type=1400 audit(1780751277.850:360031): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.883243][ T150] audit: audit_lost=2046 audit_rate_limit=0 audit_backlog_limit=64 [ 160.587307][ T369] bridge_slave_1: left allmulticast mode [ 160.593021][ T369] bridge_slave_1: left promiscuous mode [ 160.607260][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.626748][ T369] bridge_slave_0: left allmulticast mode [ 160.632539][ T369] bridge_slave_0: left promiscuous mode [ 160.646192][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.788419][ T369] tipc: Disabling bearer [ 160.794123][ T369] tipc: Disabling bearer [ 160.799797][ T369] tipc: Left network mode [ 160.805601][ T369] veth1_macvtap: left promiscuous mode [ 160.811482][ T369] veth0_vlan: left promiscuous mode [ 161.047937][ T369] bridge_slave_1: left allmulticast mode [ 161.053701][ T369] bridge_slave_1: left promiscuous mode [ 161.059616][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.067475][ T369] bridge_slave_0: left allmulticast mode [ 161.073162][ T369] bridge_slave_0: left promiscuous mode [ 161.079137][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.199510][ T369] veth1_macvtap: left promiscuous mode [ 161.269775][ T369] dummy0 (unregistering): left allmulticast mode [ 164.776140][ T36] kauditd_printk_skb: 46497 callbacks suppressed [ 164.776161][ T36] audit: type=1400 audit(1780751282.860:406228): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.795875][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.804247][ T36] audit: type=1400 audit(1780751282.860:406229): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.810552][ T150] audit: audit_lost=2147 audit_rate_limit=0 audit_backlog_limit=64 [ 164.831909][ T36] audit: type=1400 audit(1780751282.860:406230): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.839850][ T150] audit: backlog limit exceeded [ 164.861222][ T36] audit: type=1400 audit(1780751282.860:406231): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.867214][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.887220][ T36] audit: type=1400 audit(1780751282.860:406232): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.893568][ T150] audit: audit_lost=2148 audit_rate_limit=0 audit_backlog_limit=64 [ 169.786141][ T36] kauditd_printk_skb: 49610 callbacks suppressed [ 169.786161][ T36] audit: type=1400 audit(1780751287.870:455626): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.805746][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.814286][ T36] audit: type=1400 audit(1780751287.870:455627): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.820301][ T150] audit: audit_lost=2221 audit_rate_limit=0 audit_backlog_limit=64 [ 169.841448][ T36] audit: type=1400 audit(1780751287.870:455628): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.850060][ T150] audit: backlog limit exceeded [ 169.871276][ T36] audit: type=1400 audit(1780751287.870:455629): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.876808][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.897023][ T36] audit: type=1400 audit(1780751287.870:455630): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.903075][ T150] audit: audit_lost=2222 audit_rate_limit=0 audit_backlog_limit=64 [ 174.796136][ T36] kauditd_printk_skb: 48743 callbacks suppressed [ 174.796159][ T36] audit: type=1400 audit(1780751292.880:504373): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.823822][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.824163][ T36] audit: type=1400 audit(1780751292.880:504374): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.830620][ T150] audit: audit_lost=2223 audit_rate_limit=0 audit_backlog_limit=64 [ 174.851981][ T36] audit: type=1400 audit(1780751292.880:504375): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.859710][ T150] audit: backlog limit exceeded [ 174.881018][ T36] audit: type=1400 audit(1780751292.880:504376): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.886957][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.907070][ T36] audit: type=1400 audit(1780751292.880:504377): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.913345][ T150] audit: audit_lost=2224 audit_rate_limit=0 audit_backlog_limit=64 [ 179.806173][ T36] kauditd_printk_skb: 49509 callbacks suppressed [ 179.806221][ T36] audit: type=1400 audit(1780751297.890:553886): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.825236][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.834315][ T36] audit: type=1400 audit(1780751297.890:553887): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.840908][ T150] audit: audit_lost=2225 audit_rate_limit=0 audit_backlog_limit=64 [ 179.861842][ T36] audit: type=1400 audit(1780751297.890:553888): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.869943][ T150] audit: backlog limit exceeded [ 179.890970][ T36] audit: type=1400 audit(1780751297.890:553889): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.896978][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.917211][ T36] audit: type=1400 audit(1780751297.890:553890): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.923222][ T150] audit: audit_lost=2226 audit_rate_limit=0 audit_backlog_limit=64