last executing test programs: 7.758278042s ago: executing program 2 (id=294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000015c0)={0xd, 0x0, [{0x0, 0x0, 0x1}, {0x3, 0x0, 0x807f}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffff9, 0x0, 0x5365}, {0x80, 0x0, 0x499}, {0xa, 0x0, 0x3f}, {0x40, 0x0, 0x4}, {0xc0, 0x0, 0x7}, {0x3, 0x0, 0x5}, {0x47, 0x0, 0x40}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x7f, 0x0, 0x4}, {0x40, 0x0, 0x7}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x6, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r4, &(0x7f0000000740)=""/377, 0x179) readlinkat(r4, &(0x7f0000000100)='./file2\x00', &(0x7f0000000140)=""/16, 0x10) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x0) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xff, 0x40, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x7}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x51, &(0x7f0000000540)={0x5, 0xf, 0x51, 0x1, [@generic={0x4c, 0x10, 0xa, "02efb88f574c69133427e171a7c673af4794c239b97bc9dde77eb73673f3bd1861f2b385bbc4a8aace6a209263e77c11fc84a5e34e2cd85bdab00bd25a0ea24963380866f10fe4bb09"}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 4.721805044s ago: executing program 2 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x0) write(r0, &(0x7f0000000340)="ffffffffffff11223344556688ca5b500028003a00000000000001", 0x1b) 4.629491678s ago: executing program 2 (id=311): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000380)="ffffffffffff11223344556688ca4f400038200000000000000001000001010010020000126700000000000005dc000003e80000000a0000000000000000", 0x3e) 4.595734767s ago: executing program 2 (id=312): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) (async) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r1, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000009c0)="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", 0x641}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4, 0x100, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async) r5 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@code={0xa, 0x50, {"48c7c00000000148c7000000000048c740080000000048c740100000000048c740180100000048c740200100000048c7c11300020048c7c2000000010f01c1"}}], 0x50}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000280)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffc, 0x0, 0x12, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c800000000000000040f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae42e62a674b7353300", [0xfffffffffffffce8, 0x6]}}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETOWNER(r7, 0x400454cc, r8) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x3, 0x0, 0x31237647}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000000, 0x0, 0x2}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.447491436s ago: executing program 2 (id=317): unshare(0x60000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e0003000d009c0200100000000040000000000000006102000000000000000000002d8f38000100feff0200070003000000010000f80a00000000000000ffffff7f00000000ff0100000000000010"], 0x78) close(r0) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="4a39020986b7cd480fe425a067aca58482e33fdacd1c69f3ada92fc6f3c96373c9afbc424efb6ffeeef57b0ac7890e5174c41bb22d9346a47a30bef23b577c2cfdd85ab9a93777537555ffde4f151caca9ae3bec0c4ebb52d2fcd57a001842f35d", @ANYRES64=r3], 0x2e) r6 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r6, &(0x7f0000000580)='ic', 0x2) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$netlink(0x10, 0x3, 0xa) writev(r8, &(0x7f0000000040)=[{0x0}], 0x1) getsockopt$packet_int(r7, 0x107, 0x13, 0x0, &(0x7f0000000240)) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0xffe) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff"], 0x610) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x400, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x1, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x2, 0x10, 0x10001004, 0x2, 0x6, 0x1bf7, 0xc, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0xeb94, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x10000002, 0x0, 0x6, 0x8, 0x5, 0x2af, 0x3, 0x5, 0x800002, 0xa, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x8, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0xfffffffe, 0xe, 0x2, 0xd9a, 0xc8, 0x9, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x20008, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0x9]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') pread64(r9, &(0x7f0000000140)=""/5, 0x5, 0x7fffffff) 2.12026813s ago: executing program 0 (id=340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xa000, 0x0, {}, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.068713245s ago: executing program 0 (id=341): mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="040000000000000000000000380100003801000000f0ff000000000000000000003200000000000000000000000000006d70617468307009567e0b9c6d9f790f93bc218b9925d0e90846bf3baaaac2435c8e7a6a12987949cf02e5c74c340000000000000000") 2.014890779s ago: executing program 0 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xb3, 0x1, 0xffffffffffffffff, 0x7}}], 0x38}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.988632675s ago: executing program 0 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb0}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.911812516s ago: executing program 1 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x2, 0x4, 0x2, 0x7ff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8030000) 1.909857326s ago: executing program 0 (id=347): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x8, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x20, 0x14d5, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0x9, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x80, 0x3, 0x9}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.750830798s ago: executing program 1 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xa000, 0x0, {}, 0x1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.729032964s ago: executing program 1 (id=350): mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="040000000000000000000000380100003801000000f0ff000000000000000000003200000000000000000000000000006d70617468307009567e0b9c6d9f790f93bc218b9925d0e90846bf3baaaac2435c8e7a6a12987949cf02e5c74c340000000000000000") 1.720893156s ago: executing program 1 (id=351): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\')-\x00', 0xdd9b67d06d270831, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x4]}, {0x8, 0xc6, 0xea, 0x3}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x66d}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@rand_addr, @remote, 0x0}, &(0x7f0000000180)=0xc) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x3, r1, 0x1e}, 0x10) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000300)={'sit0\x00', r1, 0x10, 0x7800, 0x209, 0x8, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x66, 0x0, 0x3, 0x2f, 0x0, @broadcast, @multicast2, {[@generic={0x7, 0x5, "3384bd"}]}}}}}) recvfrom$packet(r2, &(0x7f0000000200)=""/212, 0xd4, 0x800000a2, &(0x7f0000000380)={0x11, 0xac1923531ba4b335, r3, 0x1, 0x6}, 0x14) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x300, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r1}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x40, 0x7f}, {0x8, 0x3, 0x9, 0x2}, {0x6a5a, 0x3, 0xc, 0x6}, {0x8, 0xe, 0x6, 0x1}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x323}}}]}}, {{0x8, 0x1, r3}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x300}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg(r2, &(0x7f0000001c00)={&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x4, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000840)="89c7b63d5641903325160d340d1e70f15ddf5b3a9a0e95b7dead75c2d2a4914e13e20b98f43dd4988314acc09f43816930d91c6338b18c81e47c0245adbd3b85093ffc36b2404f72ab9a34acb69e68957d21a9f9e0bfe39648055fcbc3c722dcc2", 0x61}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="dfdab2b8bb5fc725b9dd9d6bd38ee1ed678fc2f69b81621bf9d5542f0a2b85027f8a97d10d35a59e28d3f952a0b61fc66cb022f633fa150493bb6a099d0522d7f86c25cbc6d91a5e05ea778649d586a9f6ad", 0x52}, {&(0x7f0000001940)="d1900d99eef6bae99f280ac6d407dfa9b550bc37c2a6350502afe818a3772743a1d540b35f9991738da97baf6b42411ccdfc5793a60f05b34dd187dfe0b68f1c3f0153dd", 0x44}], 0x4, &(0x7f0000001a00)=[{0xb8, 0x84, 0x0, "6fb06bd536e2d50cc6dd9bc732bf515e08128fee18b723824f80406b73feebeb3c1a7bfc98757a5df6ac00970cb8626b687b791b30cbd2adec8888555a25d019c6b4695e51faa55aeb8c09ec62d4765a9ea05e40427684700955729a162e1c0980986ed95725b0db266bf448189602b5e030557cf769b53f70d606b6d9106ce1078b1e1e50c9cbab43b292b63215ef9cd710e5e0120686a3c6aa67dadbf6c798e87311c811f09f6c"}, {0x20, 0x0, 0xaf8, "a989f572cd77753ed7ab35305be2a291"}, {0x100, 0x119, 0x800, "deb7d9548ea66f0d15fad9fdba1ca860ad3abc87dfdfb66d4a8e18d620a165e05fa0b04084ae84717a7baa14afe5adf0e486609c1c4d87077ccd528e0f5f458b15b39e16c54233f468b2203475c287ae3dc75c77a457ed38c3a19f36f67d73b90468f1725545b0b171412836e98e27674b8ba2daae8cb2cdbca0ca5d2739e382d3f8aabe31d2db583e59288bc732883e55689b28b5d7cef98c4cebb0d1ad9813d1ef1c2c84ec472f2a08efd8d2ab0b3128cf6fd59a5b06dda75aafffd542c6571b54b7048a69ce5681bc5a139dc44d6832edfe70a73f3e20d8ff697faa5375fecc96615be804ba0c3cbe37f6"}], 0x1d8}, 0x4000024) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001c40)={0x2, 0x4, "67891f", 0x5, 0x7}) bind$802154_raw(r0, &(0x7f0000001c80)={0x24, @none={0x0, 0x3}}, 0x14) readv(r2, &(0x7f0000001f00)=[{&(0x7f0000001cc0)=""/78, 0x4e}, {&(0x7f0000001d40)=""/55, 0x37}, {&(0x7f0000001d80)=""/135, 0x87}, {&(0x7f0000001e40)=""/149, 0x95}], 0x4) r5 = getpid() ptrace$setregs(0xf, r5, 0x0, &(0x7f0000001f40)="cb7be13e500a78389a40b55cfb98815af9fe83f92108ed79ab67699e6803c2b1eb8e9e2a08b7bceb7f8bf1836480f414a7e71e1bf5ef") ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r6 = open(&(0x7f0000001f80)='./file0\x00', 0x50d280, 0x100) capget(&(0x7f0000001fc0)={0x20071026, r5}, &(0x7f0000002000)={0x10000, 0x10000, 0x782, 0x4, 0x8, 0x8}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000002040)={0x4c, 0x1, 0x3}) ptrace$ARCH_GET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1011) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000002080)={0x3, r0, 'id1\x00'}) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f0000002100)) sendmsg$sock(r0, &(0x7f0000002300)={&(0x7f0000002140)=@sco, 0x80, &(0x7f0000002240)=[{&(0x7f00000021c0)="ce4f24ad7ec6d16c624804afe985612483a1fe41e9b4b2d442b3d535dce7b1b52679072c075c317e4e84e055fdb4633f045a9bc7a31609fa1471acde18fae1659c7f4606cc73792e0dd0ed9b6a8fedc93b855049b8675cf1b817160177943f909a29c228090f993f506ab24535c1ad", 0x6f}], 0x1, &(0x7f0000002280)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x48}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5c}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$inet(r0, &(0x7f0000004b80)={&(0x7f0000002440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000004900)=[{&(0x7f0000002480)="15447eee45ab9b42efc5a84ba15a00dd848bf034c27c648030d281af7163164c667cfc3d9c6953b8198134bf0295a3920a6e659163745a4e53353898076d3530f8746531b7f64319833238907f115d141c13b88600558a3f60c397eb8686891719ec810c18cf5c876fe8eff0184d071ffc53662af25624095fae5f6303fc07b96fb83e285ff0d3adaa86fc42f3bcbb6ed83ef9e7d9df1a58742fd20856fc6cc0735bf86b3f41a80247d2145c4c49f6bec8706a3c4882038f19fc69775a5614fde4f6f9082b3c6d12d1625c886a03124bb23b2bd8b555838fa062b7a7a8640f3990d86856ce3faedc04bfa1d9a98393ea8486243a8b7aa573c0480ce7bcd321c356d7e492ebc529c2af9d6f5a5bedc6045994a88328f9b951d8216c5ccab0669c1c59ef9e870b932e1c25fd43444f735074259c91376418d11e35cb468163fd83eab711c85124c8c238400c7cda6d84ad18855e28c83fd8cc0397de1df7d2a1b5ae798287d6240208053130f9348b36729c7a1004ae1610463b22bc31a3ed83e307ae098ca3fa822b66902cade8e351046dd2f84383fab876c3b48011b4a09ad368b9a3966720e5e7cbed5de0d94497d64f602534f0908a616aa3c4cc74624b6e52080104660bab0c9eb33bb9e20d9c49bf929ad8a50c6b12d1c34a9f0b3f9b9ae99e7c8a9815cb2f6888b0c599bd7002929314e74de5f8e2c658542ee4e7c012d15d4eb22a73ac82c142b2a57536d1d0546778df9302464212abb14e9d0d1bb144c730390c50f4f7317643ece1f5caa4602b9d29e6365b889f13c928db1cf4dca5f19bc0b19cfb1ed041ab29f60912cd95316325d251233c032197646a6f479af29773a3d46482c791abe28077f7b026419fad45043aa433db86e1a15c4ad79cef98b7ac6e02cf2ac770e1bfc7467f8e526c406c01fe48d5609f29331b1d144a79d304af39c6143ba9fb44ff2211b5b7e72140a4ebf15f46aa63d8e467625cb0c3d06d3d034d17fa4a5993dc1a7b8247c1b932f35a8a150abafe163eb5e9c60b02fdbbf9c978b91698cd063e5bc6ad73d8e3865669b36d3f5f3b9007c1067de35d8afe5429f6e73fb5dbb5a077dba589823b9a97352d02c67e2aba0dfc8934b6c74d6fa41c011418a46e331c52af59ceed70a0e68f90df955ae81deb51f12e5b7cc9816b6994135f4841ec72ab6f067962c92c273b560fbc66dc2968fd17cc68a579c34eeafc14d2d9727cf2513074a02e9b1a9c9c8db55be9fe08ad30de94cd80303d35509868c158d9ca25f1d09a4cc28b2aef1186d3ed6093b66322c4c96a4563349290c9c180156d1b04a0a0cb2ccfd7fcccef129317d287183cd2c4c663306aa916c8eefa6577db5d0d6f9dd5f92bd3d51c531393531d078b37ca9d5f89f6ca46d5edddb67b9be6acff2207ee33defb413ef482ee7dca18dfbadef69a162c7c79ed764f9a392dbc1b6a4c58ddcc4482beefe4b35851e379a72a03c24af891833f01a3e13aa179bae49d1a98d3f349612614b08714e5dbef0e3e5bed4a426c69fa38fc5bbf481d0badb7a9c1f3c1ee91b1cf516176dab89c6fd1596c81d7d7b07c569ae8d9d1ff19819e9fcfe820cf1d595751313e267e8ac019006de2b8685fd527ec9185e6d12debeaa3fb82f4f81d5a236cac2108d42201a541e5ac403d5d4cdb8b0da5a32f0cbcac6c34925f9ba98907e3b405c4a1add28674e83abec3437bd03171da25c3b507903482ea0803deafad506d22d6ec587db957463ac491e380431e223d5bc3ffc6527d492bb1f5363647d436b3171bc41ac71d36516707e2ab7a0508bd98780f1801cb93ad81376c2065dfd695459c06a183cca809a09db2bfc23dfcaea3ab7655c1a6860a0bb2c3779a8bb8ebf59f90f89a86e0a4d6f1045bf08d6a9eadb3e12d6a0508612325f3bf64ec699b1f83ae126fbd26a5514cece5dac638a12cb56e3de6adfff603137148b1849daf58fbb9267d27d385b06e3fc275596549e395b1a613c8593bcf29084565b7cc26dfcfef183cdbd156ffbe7a89c3b8800b6949c194ad14485f0e096a8488329bc90b7f5874bac4399d37d85ff87303f787de361da023b6e8896959dedf175ee7cdc423cb62386ec84f6b384013ff45b92e7bafb67e6e8af292fc50bbd291caf2109eee7a62e91747b4711529c9c71096b6c98536c8bb68e863203f03af9a8d991f9020914ceac692f7deebe083e954da3b0d21f9131120a2a1347373ce13d5d050ccaa36ad1f5f050f01d5f8996578423487db4b901aa1751483d132434f727ce769c6929c0b609f1f8e9f9fe136b487a3c8dc9f185fc89bf2ead30bdcca8e1f8a84a55d9841a8f7f888875372eb92be3e2912e0574016fbc7ce11955472fd6d4b25d2a4f00100129ca838244141c0771444ea7ca7c2fecf9344906f4ada242f5ac406b893ee1a952036bf86c11f700c6cc82501f61489ac5a6d5532b649a5421e0568f737a09198a1f1c82f05cca9e3ce9ff10eb50533f1bd4788926480ab66c2039db15bc0543732d05a9d975e9e6f953faaab27cf1ea9a7501b9e30ac7b155a587657bc3ca4a2a62763bad3e10c68bee2452822806db19afabd9a8ed45677b028669eb36b585a663317f3b7ec36132c14cb71882b698ab705370c406e9b2b594f4bf613ad51f2dd1c667cad485730146078de94689f0e2056fac005c00d4acd40cf7d22e508d13b909c93cd19c63cc235fbfa1e3fc8b303aa4cffedfea37eb3ddba0b7add21bbd1b8d36c85e1dd9b1aff07ff0ef50a6235c19bf8892dab5b9698f2fdec65e8a421df3176491013c65b1032439f41ee109933a8083845bc1f6468824b7f1ee80f5cc8ad17a80fafef26b4b60f0afffacc67caf90e94bd98cfc29d8e0a4b91d789f07bc212561d00b7cf0cc4325f6f09b3463c3bde25cafa677b15981f65eb08bbe17faf131234a303f49176167b73242d0c000543d231c8d92ce1aea7609148bc1cd33bd199d38d85f260dee50c3e5deb57b7efea8581de46b21b8e2e5a9f731efccc2f00d4510452f4de8514b27b95b4131d1f16173be276c035f2c4c95bfa96ed0c377da95a9b4958ee39e38e4387aa06af036aa7a3ea17086d6ba91a7e44d8b4d9a3e5646640d7058f294a261b53363fa3eb16bcf85ec504e192a30b6f9429f0d5617c2f3db54f2472380b5db400db8ef5ea0d40d8309d4a006dcb854838e69921861af3cb04fa497748d98c961aafde6e5d018aa57dfa14f858a6110b129774a0ef3a505434ad13ad1a36cc49616ace81eb0cec7a4c5a7cd5c55721790529e906c2fcfe96d6662fa0178e33ef98622937b2665cb876c2085c88adb70c0cc61ed42f0b107b1496781ef063ad94820604a5669f51453a508890123aa5617690bcb254864924f174865cc7b6fd78491a6e176b5fad50675faa6a364251561e3cdb77d7f3f723a3a059065d1445360c9590aaa6c55100d14b71be8ded4ee79eeede1ea2ba57ddb7162bd4dff4d58409fcddece6e35400919a2751863cf7770e3052a520995f132873257dbf270baa7db580eb95673d3c87838ff4f05bf065863b6b2a88b7270715f3d345fb8c0a4dfb3c90e52074199749b7d80383c3b7ae51eb68b1dbe3e3674098fa1bf8669c1b6d475910997868fcb0cb4606aa069bb4ee824900f7351d0040a76bae1964980f8a9f5d910efb42bab63bcfb1ec96ad1bfef42bd64e5a750ba79d76bf6c93adb2d8739018e3c3c8a94bd73307283cf5841d7381c7b7bcbc51fc095c4cc371a9ae14bcccf7907a50438b6d8a1e7b2ca206342b9a1d2a7d9451535bf02081b1b676842a3de0baaa24bffdd08207aebda68ef32868cb7b4099df85c4ac4fa39a2cabd2f6a5cd09283c36236931ba023a9449a205c80cedba3459538679ad6638b78d2b214e72bb37d4418ae9a81842888206406ac2b8683fc1d885e072c9d77e9e78108cea6f95305b111e1e613fef150a4f25b01534cb85da596f4f47014da9df0ae5908f53c897db422c45798cbf03d531455e1dba8dc9b61e4bd53d7e1107ba9b907c77330e380d4d9e8ba8d87a9facd1f523c0e3ac02c646b5ffb3178a782cc7cbdc6289d8d9fff306bb95ce667d9ebf494d1480533318fc565f844d3df58557efecf46cd3a43709ac78df21a4e4ebafd7fec38ff38f1027aabb0da1adaf1c3a695e624c8387360b135cb878ce39bec23ca2ff6debca25395675ee726b5b522894f8cdcf6bcd86d32f0e54be8949fba23c8ea8fa54524c2dabaac5f87000b3de64101d346c9a0a9cb8fdf1afefb78fd6ca07982565b25a77e2e4f0052c87be8e9bd114687dba3f9224f69effb625653d66eeab8d29ec0d122749f24033c49a144b039cfb171f866cf396a1cd3e4420ed3b3736afec28ab04b552c239b3caae53e6c649b221ca053ea1dac92dda026d41d6fba600eb353f224171d1a46585eca80d8608e158c59a0ffd8e0236db42267eb3338d3e6cbc41408b00d78e3502990c07a25eaef8bc2fc9c89d652f54d9aa73d938eceba2f0a478b11727f9863cf3754e3490d18a3549c662796df9385acb1a2e9435b1a7f992dda8891b240c7beb9736ccbbe231b47471118a7d17ae61e06f9b16bf858b281e82dd8c5b173033f70f5e08853975a596d89a35c841251207e809fe2e48b200eb5ef7a81e7261a62d130107e753cf8a72574864ec9ec3d215b2b7049d90a9179ac557d0464299e2d138330cbbb4b56523317b5904f57ac70d3c19140f89b64c78d9f26d430706f6d14b0e89aaf1e7c16935ee5d6a04c135d1efbda87eb2f2e3a38b1e14a4a1ac787a7dcec16a3b3046465d41a2b0c0b970d4125823bbd367321f0a5f458f4fdfba4c0c0f428756d548ff6e85058c96910b33df6a245deb77aedb7a9e051c77360f743af0516cfa23af3e420359f0a298330ee9990f183cd4507cffc51591f872652196f6911e0e8ba6ed98993d5781a2aa3a34e54a4d0f1549b1cbd095d8bb0c34b8cf5c8f839229c231cbfbbcaefffc1be3cf0e219879c885cc4093a8d775f0414d70466c4bb2cfe80bfebaaf21ecab1f6869b60075d31ef5c4c9cd36d657fa15fba9aa85d3095d2feacad4ac8fd08b94840dc6db0710070293cedb405274f62ea5714c37487c24c0e830d7e31c33be95cc9b53a7af0fa442394b1ade63978c80c46cc0d211fc6d3275c782bd135ac612b5e16b794e94283e596ea733e2e48553841f15f51fd2f3ed9f13a10112ce94ffa8874345f2747e804db4c0483e3f61405e1aa5b3d77eb67dec7d556833f679a4504b359652583062d27fb4d4fe562785db1b70a2f070026e60798dc84c6c3a99e3d4ca84cf8acbcce7789870cc8d843cb641d743f845cb4513796836c42c94b6a89208487b2583ce3ae3e323b5343bef9032049ef323af124c2fb901a20fcfbb5c7c057c1ef2ab61c5b488d5d42d6897b79e3672e2a6889267d5534b4d85b9da8597bf690b5e317cb2c7572fc4bf0483a4e3164c147cb59dda2e03a4827887fd16af707b7ffb7c101fe0d9f5567ed9eca9cda33bfa7f9a179981af067d276aa1327c715e63ba1307f7cd98c9ffac3d984ae9ee272d04fa4b6fd4c8ab295dab93909e34257fd51f6cc79180e40818c4664bb711ee37da36e7b63b122a4d0075322f1cc32465c96259080a91f909e06ff4211e0da0d2839f76c013226595b8c7fc97343f2b7557a32278c0bf1d172b2687a5f31752daa5d3ca3a6c7e24065e98b81b2166342e70f4a6c0b27e84adfb3b09f098e474439fd4c2113e3dd4c54d6749d92a411ddbc7", 0x1000}, {&(0x7f0000003480)}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f00000044c0)="46cba3c254af542b", 0x8}, {&(0x7f0000004500)="5034dd91d10b6ef0415191ee919ec07da22f0327327150fadac9751af9880107edea52415d61aa947511b1e1b89a8e545484c61ae8d9d96f713a39d2b4359249e2e69cd5660e43db0308dc43c303c6783e3aad93a512d50b957935faccd6f2af8603c6b173f225bad50f34690f4bddb4243d2728c8bec6b67b6eeeea713a683e8ff3aebc10559c120d138bcd8fbf3f22f0476b7d5c631c5a3fb77824aa0e2a503b", 0xa1}, {&(0x7f00000045c0)="de51247337c2009865c439e29d6e7f1a452520083693914979432fffd0cb80facded1a6e124660d60b480bf715419a2f95f287494ceac738d6b445a48ac467590e99e0b3732c74b23197b9a0d4dcf4602ccb160325a10aa4a6cc8aca46bf73e749be6dbba84ef20517231346e2cc78825f9b93131e2e5752057853643943e00c8f42235bc347a0800c486cbb08486106840ee0df729a70e6b75c514e", 0x9c}, {&(0x7f0000004680)="9339f0b5262badaec46bea7e6aaf9aba80c06c4e06a62ddbf51dfa087578bf39611d6ab943df2b5b434aa74046a0a3e2921ae0bc55051ca8264ecdbfde0cb34454", 0x41}, {&(0x7f0000004700)="ba7cf21dafec95b97f1e8d932066b40d2c26bb184168df1d4803b4692a98def27eecb1af191f3f87d4cef048b3d1fe056c17d123b9385e54d52600a65faa61eab233932f5186121e6f8c1c61e37876689f1296f80953f258eb0838d9df53562722f4ecd8b8104814aa4909b3cb49df98c09b90758225ee8aa4737ea520143ac909fe16d9fe5ff1920da12b3662cfcdbc3b4fd00635c4943c68e8e26ace690c7da82f36c912d9b1ba", 0xa8}, {&(0x7f00000047c0)="c5bf15b424f7fc9cb1831342a003cf6f6f1067f576dd6422fc9b2cea830d4857b849d90494787ada02dacb4a8cce9e8c2b8b8c2e5d9057371b6c93de77aba57be76cd26e65930c554555cb4caf2e31f3e43ff3c4753166b7fd60c0dc211363d3cd2c2e08541af4b5c4d1e47edf9b65bb63f9", 0x72}, {&(0x7f0000004840)="103402ffdc442f575c83b0480f3c6ee987f721ac7cf011ee0dd895a1bba5f7b8db7b4c3b3304151279134e296f1e71186520217da18bee50ad633ad87139148975b39e6388c99215483273b6354270b067da6c1182c63a984f1699a5921d6d53cf829b28db475ed12712f399eb453542009d8f5f53428ff063d92125034fea3ccf82afa7117dcf8c51aa821100c0f155", 0x90}], 0xa, &(0x7f00000049c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @broadcast}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x28, 0x1d, 0x0, 0x1, [0x0, 0x80000000, 0x7, 0x1, 0x7fff, 0x4, 0x80000000, 0x2, 0xe0]}, @rr={0x7, 0x7, 0xa3, [@empty]}, @timestamp={0x44, 0xc, 0xd9, 0x0, 0x8, [0x83, 0x15d]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xc4, 0x3, 0x3, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0xf}, {@loopback, 0xd58}, {@rand_addr=0x64010102, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp={0x44, 0xc, 0xb3, 0x0, 0x2, [0xa, 0x6]}, @rr={0x7, 0x1b, 0x7d, [@rand_addr=0x64010102, @loopback, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xd3, [@remote, @local, @rand_addr=0x64010101, @rand_addr=0x64010100]}, @end, @timestamp={0x44, 0x24, 0x17, 0x0, 0x6, [0x8, 0x3, 0x6, 0x7000000, 0x6, 0x5, 0x0, 0x10000]}, @timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x2}, {@private=0xa010101, 0xb}, {@broadcast, 0x3ff}]}, @timestamp_addr={0x44, 0xc, 0x86, 0x1, 0x9, [{@loopback}]}, @timestamp_addr={0x44, 0x14, 0x16, 0x1, 0xe, [{@loopback, 0x1ff}, {@private=0xa010101, 0xbcbc}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14}}], 0x1b0}, 0x4000) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000004c00)={0x2e, 0x8, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004bc0)=@new_dev={0x2, 0xf0e, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x2}}}, &(0x7f0000004c80)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000004cc0)={0x0, 0xfdd7, 0x10000, 0x1, 0x86, 0x0, r7}, &(0x7f0000004d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71d2, 0x40000, 0x0, 0x25f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa392, 0x4, 0x2, 0x19a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5534, 0x8, 0x1, 0x33}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x314c, 0x100, 0x2, 0x5d, 0x0, r7}}], 0x4, &(0x7f0000005fc0)={0x2e, 0x15, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x79}, 0x0, 0x0, '\x00', {0x0, 0x9c4, 0x0, &(0x7f0000004fc0)=@buf_512="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"}}, &(0x7f0000006040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000060c0), r6) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000006300)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000062c0)={&(0x7f0000006100)={0x1b0, r10, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6a95642deecaefdf44651bdb5190c606870eed676fcc"}}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "c51558ea63a62c2ea57de6fdda5e0844e32de5624d217afb6e878fb8c6e6b9b3632b98cd3c647fb1e5b101ce05f702057d401a46a464880dbca0d37ae3808e498c105faecf809c59d8dd3231b68cad0acd81b192682d3d1779cd16614551d0a984c56ca4d7b924dd613f83996624057c5987cd96ada54b8c447f40459e2ab23b220798e976a057d7e77d90ebe9c4ab4c3bd5aeb86967aaeaebcf2083ca6282d8b031b694ad626b3799051dffeccd6ec673f66ee4bf"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x344}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ccf928b76f8f5e59c06a1185f9025c675ee3a9af2bc319"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000006340)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x7}) 1.670715599s ago: executing program 1 (id=352): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB=' \x00(\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x11, 0x3f, {0x3f, 0x5, "3374ba53d3c2e4fbe826db05361cb606532d80afd62dae27eb89be9be3b40272ac5d9d8d877ddbf6c549270a79f12be9540f081877b5a317146675bfbc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x14, @string={0x14, 0x3, "ae9fec8f47184f5faa555938d957985eb24a"}}, &(0x7f00000007c0)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x6, 0x1, 0x6696, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x8, 0xff0f, 0xec, [0xf, 0xffff00, 0xf, 0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5530bab316531a353b9ced237a40ba64"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x5, 0x81, 0x4, 0xa3}, @ext_cap={0x7, 0x10, 0x2, 0xdc91bc290d976fc0, 0xa, 0x5, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "afe169bc00bd95a33f69bcb17487786b"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x7, 0x7, "1689cb9c", "a4fc70c7"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x2, 0x6, 0x81, 0xac68, 0x3}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x40, 0x15, 0xa, "56aa7ab811c0bde66b6f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x400, 0xaa, [0xf0f0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000480)={0x40, 0xb, 0x2, "24bf"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "9956"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xf}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x40}}) 1.401569081s ago: executing program 2 (id=353): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.204400513s ago: executing program 1 (id=354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.064456439s ago: executing program 0 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0x8, 0xf, 0x5, 0x4, 0x42, 0xff, 0x0, 0x34, 0x9}, {0x100000, 0xb000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x7f, 0x5}, {0xdddd0000, 0x1, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0x5, 0x8, 0x85}, {0x200000, 0x8080000, 0x10, 0x6, 0x7, 0xff, 0xfd, 0x1, 0xa, 0xa0, 0x9, 0xf1}, {0xfec00000, 0x2000, 0x10, 0x3, 0x5, 0x0, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x7}, {0x2000, 0xb000, 0xc, 0xa, 0xf7, 0x6, 0x1, 0x1, 0x80, 0x13, 0x5}, {0x6000, 0xba845000, 0xb, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0xeeee0000, 0x9000, 0xc, 0x2, 0xf, 0x7, 0x6a, 0xe2, 0xff, 0x18, 0xee, 0x9}, {0xe000, 0x3}, {0x3000, 0x2}, 0x80000031, 0x0, 0x58000, 0x42064, 0x400000006, 0x9000, 0x25000, [0x400000000000a2, 0x5, 0x400000000063, 0x7]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000010000c2000905", @ANYBLOB="4c371105"], 0x0) 674.669042ms ago: executing program 3 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f0000000340)="ffffffffffff11223344556688ca5b500028003a00000000000001", 0x1b) 653.619698ms ago: executing program 3 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000340)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36) write(r0, &(0x7f0000000380)="ffffffffffff11223344556688ca4f400038200000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r0, &(0x7f00000003c0)="ffffffffffff11223344556688ca4f400038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/68, 0x44) write(r0, &(0x7f0000000440)="ffffffffffff11223344556688ca4fc00038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r0, &(0x7f0000000480)="ffffffffffff11223344556688ca4f400038200100000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000500)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36) 452.927821ms ago: executing program 3 (id=363): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x40050000}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) 186.935151ms ago: executing program 3 (id=364): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) fsopen(&(0x7f0000002200)='autofs\x00', 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) 111.987201ms ago: executing program 3 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb0}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=366): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'erspan0\x00', {0x1}, 0xdd3c}) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004600)=""/4089, 0xff9}], 0x1}, 0x40000002}], 0x1, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004600)=""/4089, 0xff9}], 0x1}, 0x40000002}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000402505a1a440000102030109025c0002010280080904000001020d0000052406000105040009000d240f2001000000050809000406241a01801609058103ff03080705090401"], &(0x7f00000005c0)={0x0, 0x0, 0x19, 0x0}) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) socket$tipc(0x1e, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/split_huge_pages\x00', 0x42, 0x1ff) (async) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x2, 0x11, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660fa880fe00b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x4, @empty, 0x2}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000180)='/', 0x1) kernel console output (not intermixed with test programs): -1:1.2: probe with driver snd-usb-audio failed with error -22 [ 23.843309][ T313] usb 2-1: USB disconnect, device number 2 [ 23.914159][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 23.947531][ T50] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 23.954517][ T50] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 23.965341][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 23.976311][ T50] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 24.002538][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.008172][ T50] usb 4-1: USB disconnect, device number 2 [ 24.287586][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.437559][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 24.444921][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 24.454081][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.462135][ T10] usb 3-1: Product: syz [ 24.466770][ T10] usb 3-1: Manufacturer: syz [ 24.468284][ T361] tipc: Started in network mode [ 24.471767][ T10] usb 3-1: SerialNumber: syz [ 24.476332][ T361] tipc: Node identity 76ca66b09f71, cluster identity 4711 [ 24.488155][ T361] tipc: Enabled bearer , priority 10 [ 24.498316][ T360] tipc: Resetting bearer [ 24.504837][ T360] tipc: Disabling bearer [ 24.617493][ T50] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.637525][ T365] size and base must be multiples of 4 kiB [ 24.643464][ T365] CPU: 0 UID: 0 PID: 365 Comm: syz.0.18 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 24.643496][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.643515][ T365] Call Trace: [ 24.643521][ T365] [ 24.643529][ T365] __dump_stack+0x21/0x30 [ 24.643558][ T365] dump_stack_lvl+0x140/0x1c0 [ 24.643575][ T365] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.643591][ T365] dump_stack+0x19/0x20 [ 24.643603][ T365] mtrr_add+0xd8/0x100 [ 24.643614][ T365] mtrr_ioctl+0xbd8/0x1170 [ 24.643626][ T365] ? __cfi_mtrr_ioctl+0x10/0x10 [ 24.643638][ T365] ? __fget_files+0x2bc/0x330 [ 24.643651][ T365] ? __cfi_mtrr_ioctl+0x10/0x10 [ 24.643662][ T365] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 24.643673][ T365] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 24.643684][ T365] __se_sys_ioctl+0x126/0x1b0 [ 24.643696][ T365] __x64_sys_ioctl+0x7f/0xa0 [ 24.643708][ T365] x64_sys_call+0x1878/0x2ee0 [ 24.643717][ T365] do_syscall_64+0x57/0xf0 [ 24.643728][ T365] ? clear_bhb_loop+0x50/0xa0 [ 24.643741][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.643753][ T365] RIP: 0033:0x7f5b9c19e159 [ 24.643767][ T365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.643776][ T365] RSP: 002b:00007f5b9cfe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.643793][ T365] RAX: ffffffffffffffda RBX: 00007f5b9c425fa0 RCX: 00007f5b9c19e159 [ 24.643801][ T365] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000000 [ 24.643808][ T365] RBP: 00007f5b9c23506b R08: 0000000000000000 R09: 0000000000000000 [ 24.643814][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.643820][ T365] R13: 00007f5b9c426038 R14: 00007f5b9c425fa0 R15: 00007ffef0e519c8 [ 24.643829][ T365] [ 24.835833][ T10] usb 3-1: unit 0 not found! [ 24.843310][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.843866][ T10] usb 3-1: USB disconnect, device number 3 [ 24.868367][ T313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.872093][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.877483][ T50] usb 2-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 24.904629][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.917718][ T50] usb 2-1: config 0 descriptor?? [ 24.932681][ T368] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 24.937784][ T369] SELinux: Context system_u:object_r:fsadm_log_t:s0 is not valid (left unmapped). [ 24.954266][ T370] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 24.986156][ T375] fuse: Unknown parameter 'fsmagic' [ 25.047921][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 25.056639][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.068466][ T313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.081397][ T313] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 25.090694][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.107758][ T313] usb 4-1: config 0 descriptor?? [ 25.326650][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0xe [ 25.333601][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 25.340534][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 25.347417][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 25.354359][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 25.361377][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 25.368583][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 25.375577][ T50] wacom 0003:056A:0300.0001: unknown main item tag 0x0 [ 25.382842][ T50] wacom 0003:056A:0300.0001: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 25.393057][ T50] wacom 0003:056A:0300.0001: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.1-1/input0 [ 25.404615][ T50] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0300.0001/input/input4 [ 25.437498][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.514817][ T313] hid (null): global environment stack underflow [ 25.524095][ T313] kye 0003:0458:5017.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 25.535230][ T313] kye 0003:0458:5017.0002: unknown main item tag 0x5 [ 25.542650][ T313] kye 0003:0458:5017.0002: global environment stack underflow [ 25.550469][ T313] kye 0003:0458:5017.0002: item 0 0 1 11 parsing failed [ 25.558018][ T313] kye 0003:0458:5017.0002: parse failed [ 25.563633][ T313] kye 0003:0458:5017.0002: probe with driver kye failed with error -22 [ 25.597487][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 25.603871][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.614203][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.625957][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.635936][ T10] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.649050][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.655662][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 25.664798][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.673311][ T10] usb 1-1: config 0 descriptor?? [ 25.716713][ T50] usb 4-1: USB disconnect, device number 3 [ 25.877840][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.027476][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 26.033728][ T313] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 26.046257][ T313] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 26.055415][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.063441][ T313] usb 3-1: Product: syz [ 26.067690][ T313] usb 3-1: Manufacturer: syz [ 26.072309][ T313] usb 3-1: SerialNumber: syz [ 26.087934][ T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0003/input/input7 [ 26.107673][ T10] appleir 0003:05AC:8241.0003: input,hiddev96,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 26.281746][ T313] usb 3-1: selecting invalid altsetting 1 [ 26.288420][ T313] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.300188][ T313] usb 3-1: selecting invalid altsetting 1 [ 26.307779][ T313] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 26.310987][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 26.311001][ T36] audit: type=1400 audit(1790779769.739:151): avc: denied { write } for pid=381 comm="syz.0.23" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.318376][ T313] usb 3-1: selecting invalid altsetting 1 [ 26.330102][ T36] audit: type=1400 audit(1790779769.759:152): avc: denied { write } for pid=381 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 26.348176][ T313] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 26.366173][ T36] audit: type=1400 audit(1790779769.789:153): avc: denied { read } for pid=395 comm="syz.3.27" dev="nsfs" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.373183][ T313] usb 3-1: USB disconnect, device number 4 [ 26.385734][ T36] audit: type=1400 audit(1790779769.789:154): avc: denied { open } for pid=395 comm="syz.3.27" path="net:[4026532486]" dev="nsfs" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.430461][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.430878][ T36] audit: type=1400 audit(1790779769.809:155): avc: denied { create } for pid=395 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.465756][ T36] audit: type=1400 audit(1790779769.809:156): avc: denied { getopt } for pid=395 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.485555][ T36] audit: type=1400 audit(1790779769.809:157): avc: denied { create } for pid=395 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.505456][ T36] audit: type=1400 audit(1790779769.809:158): avc: denied { setopt } for pid=395 comm="syz.3.27" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.525461][ T36] audit: type=1400 audit(1790779769.809:159): avc: denied { write } for pid=395 comm="syz.3.27" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.617558][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.767507][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 26.773630][ T9] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 26.782786][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.791477][ T9] usb 4-1: config 0 descriptor?? [ 26.910856][ T36] audit: type=1400 audit(1790779770.339:160): avc: denied { append } for pid=400 comm="syz.2.28" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.944273][ T403] FAULT_INJECTION: forcing a failure. [ 26.944273][ T403] name failslab, interval 1, probability 0, space 0, times 1 [ 26.957048][ T403] CPU: 1 UID: 0 PID: 403 Comm: syz.2.29 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 26.957080][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.957091][ T403] Call Trace: [ 26.957097][ T403] [ 26.957104][ T403] __dump_stack+0x21/0x30 [ 26.957134][ T403] dump_stack_lvl+0x140/0x1c0 [ 26.957156][ T403] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.957180][ T403] dump_stack+0x19/0x20 [ 26.957201][ T403] should_fail_ex+0x3c2/0x510 [ 26.957222][ T403] should_failslab+0xac/0x100 [ 26.957244][ T403] __kmalloc_node_noprof+0x69/0x500 [ 26.957263][ T403] ? __kvmalloc_node_noprof+0x128/0x300 [ 26.957281][ T403] __kvmalloc_node_noprof+0x128/0x300 [ 26.957299][ T403] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 26.957316][ T403] ? plist_add+0x4d4/0x570 [ 26.957336][ T403] traverse+0xfe/0x700 [ 26.957353][ T403] ? mutex_lock+0x97/0x1d0 [ 26.957366][ T403] ? __cfi_mutex_lock+0x10/0x10 [ 26.957379][ T403] ? __cfi___futex_queue+0x10/0x10 [ 26.957402][ T403] seq_read_iter+0xdbd/0xf30 [ 26.957427][ T403] ? __asan_memset+0x39/0x50 [ 26.957444][ T403] ? iov_iter_init+0xc0/0x180 [ 26.957468][ T403] seq_read+0x368/0x490 [ 26.957490][ T403] ? __cfi_seq_read+0x10/0x10 [ 26.957510][ T403] ? __cfi_selinux_file_permission+0x10/0x10 [ 26.957521][ T403] ? futex_wait+0x2b8/0x7c0 [ 26.957537][ T403] ? __cfi_seq_read+0x10/0x10 [ 26.957559][ T403] proc_reg_read+0x1f7/0x2f0 [ 26.957579][ T403] ? __cfi_proc_reg_read+0x10/0x10 [ 26.957597][ T403] vfs_read+0x28b/0xc70 [ 26.957615][ T403] ? __cfi_vfs_read+0x10/0x10 [ 26.957632][ T403] ? __fget_files+0x2bc/0x330 [ 26.957654][ T403] ksys_pread64+0x170/0x270 [ 26.957682][ T403] ? __cfi_ksys_pread64+0x10/0x10 [ 26.957702][ T403] ? __kasan_check_write+0x18/0x20 [ 26.957719][ T403] ? fpregs_restore_userregs+0x11c/0x260 [ 26.957740][ T403] __x64_sys_pread64+0x9f/0xb0 [ 26.957754][ T403] x64_sys_call+0x2a34/0x2ee0 [ 26.957763][ T403] do_syscall_64+0x57/0xf0 [ 26.957773][ T403] ? clear_bhb_loop+0x50/0xa0 [ 26.957786][ T403] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.957798][ T403] RIP: 0033:0x7f3e4919e159 [ 26.957809][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.957823][ T403] RSP: 002b:00007f3e47bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 26.957843][ T403] RAX: ffffffffffffffda RBX: 00007f3e49425fa0 RCX: 00007f3e4919e159 [ 26.957857][ T403] RDX: 0000000000001000 RSI: 0000200000000540 RDI: 0000000000000004 [ 26.957869][ T403] RBP: 00007f3e4923506b R08: 0000000000000000 R09: 0000000000000000 [ 26.957880][ T403] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 26.957890][ T403] R13: 00007f3e49426038 R14: 00007f3e49425fa0 R15: 00007ffcb88169a8 [ 26.957898][ T403] [ 27.246145][ T9] usb 4-1: string descriptor 0 read error: -71 [ 27.252677][ T9] uvcvideo 4-1:0.0: Found multiple Units with ID 1 [ 27.259352][ T9] usb 4-1: Found UVC 0.00 device (2833:0201) [ 27.260411][ T408] netlink: 'syz.2.30': attribute type 16 has an invalid length. [ 27.266276][ T9] usb 4-1: No valid video chain found. [ 27.280580][ T9] usb 4-1: USB disconnect, device number 4 [ 27.288068][ T388] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 27.367087][ T406] usb 2-1: USB disconnect, device number 3 [ 27.450189][ T422] tipc: Started in network mode [ 27.455146][ T422] tipc: Node identity 52eee415ef2f, cluster identity 4711 [ 27.462641][ T422] tipc: Enabled bearer , priority 10 [ 27.470948][ T421] tipc: Resetting bearer [ 27.478475][ T421] tipc: Disabling bearer [ 27.518483][ T425] FAULT_INJECTION: forcing a failure. [ 27.518483][ T425] name failslab, interval 1, probability 0, space 0, times 0 [ 27.531188][ T425] CPU: 0 UID: 0 PID: 425 Comm: syz.1.37 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 27.531229][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.531241][ T425] Call Trace: [ 27.531248][ T425] [ 27.531255][ T425] __dump_stack+0x21/0x30 [ 27.531274][ T425] dump_stack_lvl+0x140/0x1c0 [ 27.531288][ T425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.531303][ T425] ? do_futex+0x32a/0x510 [ 27.531316][ T425] dump_stack+0x19/0x20 [ 27.531328][ T425] should_fail_ex+0x3c2/0x510 [ 27.531341][ T425] should_failslab+0xac/0x100 [ 27.531354][ T425] kmem_cache_alloc_noprof+0x42/0x410 [ 27.531364][ T425] ? prepare_creds+0x47/0x6b0 [ 27.531375][ T425] ? __cfi_make_kgid+0x10/0x10 [ 27.531387][ T425] prepare_creds+0x47/0x6b0 [ 27.531398][ T425] __sys_setresgid+0x629/0xb10 [ 27.531410][ T425] __x64_sys_setresgid+0x7e/0x90 [ 27.531422][ T425] x64_sys_call+0x256c/0x2ee0 [ 27.531432][ T425] do_syscall_64+0x57/0xf0 [ 27.531442][ T425] ? clear_bhb_loop+0x50/0xa0 [ 27.531455][ T425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.531467][ T425] RIP: 0033:0x7f0de559e159 [ 27.531478][ T425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.531487][ T425] RSP: 002b:00007f0de64ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 27.531500][ T425] RAX: ffffffffffffffda RBX: 00007f0de5825fa0 RCX: 00007f0de559e159 [ 27.531508][ T425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.531514][ T425] RBP: 00007f0de563506b R08: 0000000000000000 R09: 0000000000000000 [ 27.531520][ T425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.531527][ T425] R13: 00007f0de5826038 R14: 00007f0de5825fa0 R15: 00007ffea1e20458 [ 27.531535][ T425] [ 27.758819][ T430] ======================================================= [ 27.758819][ T430] WARNING: The mand mount option has been deprecated and [ 27.758819][ T430] and is ignored by this kernel. Remove the mand [ 27.758819][ T430] option from the mount to silence this warning. [ 27.758819][ T430] ======================================================= [ 27.794329][ T430] SELinux: security_context_str_to_sid (syt|v\{‹) failed with errno=-22 [ 27.817587][ T430] syzkaller0: entered promiscuous mode [ 27.823150][ T430] syzkaller0: entered allmulticast mode [ 28.047506][ T336] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.177862][ T336] usb 4-1: device descriptor read/64, error -71 [ 28.356320][ T439] 9pnet_fd: Insufficient options for proto=fd [ 28.368351][ T45] bridge_slave_1: left allmulticast mode [ 28.374488][ T45] bridge_slave_1: left promiscuous mode [ 28.380363][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.388302][ T45] bridge_slave_0: left allmulticast mode [ 28.393962][ T45] bridge_slave_0: left promiscuous mode [ 28.399938][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.418026][ T336] usb 4-1: device descriptor read/64, error -71 [ 28.528432][ T45] veth1_macvtap: left promiscuous mode [ 28.534031][ T45] veth0_vlan: left promiscuous mode [ 28.635749][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.643182][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.653376][ T467] bridge_slave_0: entered allmulticast mode [ 28.655064][ T471] futex_wake_op: syz.0.51 tries to shift op by 144; fix this program [ 28.660399][ T467] bridge_slave_0: entered promiscuous mode [ 28.674442][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.681552][ T336] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 28.681760][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.696279][ T467] bridge_slave_1: entered allmulticast mode [ 28.702866][ T467] bridge_slave_1: entered promiscuous mode [ 28.769656][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.776765][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.784064][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.791130][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.813509][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.821046][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.828298][ T336] usb 4-1: device descriptor read/64, error -71 [ 28.836748][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.843822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.854702][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.861806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.883750][ T467] veth0_vlan: entered promiscuous mode [ 28.894250][ T467] veth1_macvtap: entered promiscuous mode [ 28.919748][ T487] Zero length message leads to an empty skb [ 28.977561][ T406] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.027879][ T63] usb 1-1: USB disconnect, device number 2 [ 29.037607][ T497] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.076877][ T504] overlayfs: missing 'lowerdir' [ 29.081938][ T336] usb 4-1: device descriptor read/64, error -71 [ 29.103224][ T506] fuse: Unknown parameter 'ÛZB¤ä+8L~' [ 29.111609][ T511] fuse: Unknown parameter 'ÛZB¤ä+8L~' [ 29.127239][ T513] netlink: 100 bytes leftover after parsing attributes in process `syz.0.62'. [ 29.127489][ T406] usb 2-1: Using ep0 maxpacket: 32 [ 29.163127][ T406] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.174187][ T406] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.185472][ T406] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 29.194590][ T406] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 29.202952][ T406] usb 2-1: Product: syz [ 29.207145][ T406] usb 2-1: Manufacturer: syz [ 29.207601][ T336] usb usb4-port1: attempt power cycle [ 29.215061][ T406] hub 2-1:4.0: USB hub found [ 29.423874][ T406] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 29.448412][ T406] usb 2-1: USB disconnect, device number 4 [ 29.547561][ T336] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 29.567532][ T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.568622][ T336] usb 4-1: device descriptor read/8, error -71 [ 29.707641][ T63] usb 3-1: device descriptor read/64, error -71 [ 29.708828][ T336] usb 4-1: device descriptor read/8, error -71 [ 29.957553][ T336] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 29.967543][ T63] usb 3-1: device descriptor read/64, error -71 [ 29.978586][ T336] usb 4-1: device descriptor read/8, error -71 [ 30.108678][ T336] usb 4-1: device descriptor read/8, error -71 [ 30.157564][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.167639][ T50] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.217550][ T63] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.217733][ T336] usb usb4-port1: unable to enumerate USB device [ 30.317506][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 30.324820][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.335792][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.337477][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 30.348733][ T50] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.354346][ T63] usb 3-1: device descriptor read/64, error -71 [ 30.367350][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.373846][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.381517][ T50] usb 2-1: config 0 descriptor?? [ 30.391451][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.407023][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.417133][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.430790][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.437462][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 30.446570][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.455400][ T9] usb 1-1: config 0 descriptor?? [ 30.617534][ T63] usb 3-1: device descriptor read/64, error -71 [ 30.727586][ T63] usb usb3-port1: attempt power cycle [ 30.842992][ T557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.75'. [ 30.867080][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0004/input/input10 [ 30.889832][ T9] appleir 0003:05AC:8241.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 31.000931][ T560] tipc: Enabled bearer , priority 10 [ 31.008435][ T559] tipc: Resetting bearer [ 31.015211][ T559] tipc: Disabling bearer [ 31.072856][ T562] Mass Storage Function, version: 2009/09/11 [ 31.079009][ T562] LUN: removable file: (no medium) [ 31.097472][ T63] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 31.118564][ T63] usb 3-1: device descriptor read/8, error -71 [ 31.248506][ T63] usb 3-1: device descriptor read/8, error -71 [ 31.337488][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 31.487511][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 31.492721][ T63] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 31.501605][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.510140][ T9] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 31.523196][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 31.530916][ T63] usb 3-1: device descriptor read/8, error -71 [ 31.538219][ T9] usb 4-1: string descriptor 0 read error: -22 [ 31.544457][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.40 [ 31.553541][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.565328][ T9] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 31.629178][ T31] usb 1-1: USB disconnect, device number 3 [ 31.658559][ T63] usb 3-1: device descriptor read/8, error -71 [ 31.765035][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.773653][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.777579][ T63] usb usb3-port1: unable to enumerate USB device [ 31.782764][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.796557][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.860591][ T566] overlayfs: failed to resolve '/ ': -2 [ 31.866407][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 31.866425][ T36] audit: type=1400 audit(1790779775.289:221): avc: denied { mounton } for pid=563 comm="syz.3.78" path="/11/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 31.895223][ T566] incfs: Can't find or create .index dir in ./file0 [ 31.902012][ T566] incfs: mount failed -1 [ 32.180238][ T36] audit: type=1400 audit(1790779775.609:222): avc: denied { cmd } for pid=567 comm="iou-wrk-568" path="socket:[5571]" dev="sockfs" ino=5571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.237473][ T36] audit: type=1400 audit(1790779775.659:223): avc: denied { mounton } for pid=567 comm="syz.0.79" path="/32/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 32.340587][ T36] audit: type=1400 audit(1790779775.769:224): avc: denied { ioctl } for pid=590 comm="syz.2.81" path="socket:[6408]" dev="sockfs" ino=6408 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.667491][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.727490][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 32.817659][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 32.823905][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.834888][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.847741][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.854373][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 32.863530][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.872199][ T9] usb 1-1: config 0 descriptor?? [ 32.888513][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.899511][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.909286][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.922121][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.931209][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.939642][ T50] usbhid 2-1:0.0: can't add hid device: -71 [ 32.945859][ T50] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.954432][ T31] usb 3-1: config 0 descriptor?? [ 32.962283][ T50] usb 2-1: USB disconnect, device number 5 [ 33.279571][ T36] audit: type=1400 audit(1790779776.709:225): avc: denied { map } for pid=598 comm="syz.0.83" path="socket:[6412]" dev="sockfs" ino=6412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 33.302304][ T36] audit: type=1400 audit(1790779776.709:226): avc: denied { mount } for pid=598 comm="syz.0.83" name="/" dev="pstore" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 33.303160][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 33.331725][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 33.341952][ T9] usb 1-1: USB disconnect, device number 4 [ 33.376764][ T593] tipc: Started in network mode [ 33.381685][ T593] tipc: Node identity 2000004, cluster identity 4711 [ 33.388459][ T593] tipc: Node number set to 33554436 [ 33.394341][ T36] audit: type=1400 audit(1790779776.819:228): avc: denied { write } for pid=592 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.413550][ T36] audit: type=1400 audit(1790779776.819:227): avc: denied { write } for pid=592 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.899429][ T36] audit: type=1400 audit(1790779777.329:229): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.953000][ T36] audit: type=1400 audit(1790779777.379:230): avc: denied { mounton } for pid=618 comm="syz.1.90" path="/proc/58/cgroup" dev="proc" ino=5746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 34.002180][ T623] capability: warning: `syz.1.91' uses deprecated v2 capabilities in a way that may be insecure [ 34.349182][ T63] usb 4-1: USB disconnect, device number 9 [ 34.372376][ T631] ./dev/sda1: Can't lookup blockdev [ 34.595720][ T642] bridge0: port 3(syz_tun) entered blocking state [ 34.602262][ T642] bridge0: port 3(syz_tun) entered disabled state [ 34.608872][ T642] syz_tun: entered allmulticast mode [ 34.614715][ T642] syz_tun: entered promiscuous mode [ 34.620170][ T642] bridge0: port 3(syz_tun) entered blocking state [ 34.626616][ T642] bridge0: port 3(syz_tun) entered forwarding state [ 34.635957][ T642] rust_binder: 641:642 error while translating object: ENOENT [ 34.643646][ T642] rust_binder: Failure in copy_transaction_data: ENOENT [ 34.643686][ T642] rust_binder: 641:642 transaction async to 641:0 failed ENOENT, code 0 size 72-24 [ 34.769032][ T648] tipc: Enabled bearer , priority 10 [ 34.777021][ T647] tipc: Resetting bearer [ 34.784429][ T647] tipc: Disabling bearer [ 34.829255][ T650] tipc: Enabled bearer , priority 10 [ 34.836977][ T649] tipc: Resetting bearer [ 34.843750][ T649] tipc: Disabling bearer [ 34.907494][ T63] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.059227][ T63] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 35.070591][ T63] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.087349][ T63] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.094033][ T63] usb 1-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 35.103587][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.112338][ T63] usb 1-1: config 0 descriptor?? [ 35.149014][ T668] netlink: 'syz.1.106': attribute type 4 has an invalid length. [ 35.419706][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 35.425684][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.435204][ T31] usb 3-1: USB disconnect, device number 9 [ 35.520982][ T63] wacom 0003:056A:00B5.0005: item fetching failed at offset 0/6 [ 35.535741][ T63] wacom 0003:056A:00B5.0005: parse failed [ 35.540070][ T672] tipc: Enabled bearer , priority 10 [ 35.544104][ T63] wacom 0003:056A:00B5.0005: probe with driver wacom failed with error -22 [ 35.561433][ T672] tipc: Enabled bearer , priority 10 [ 35.569542][ T671] tipc: Resetting bearer [ 35.576504][ T671] tipc: Disabling bearer [ 35.628918][ T671] tipc: Disabling bearer [ 35.642512][ T674] tipc: Enabled bearer , priority 10 [ 35.651750][ T673] tipc: Resetting bearer [ 35.658346][ T673] tipc: Disabling bearer [ 35.677701][ T676] tipc: Enabled bearer , priority 10 [ 35.685136][ T675] tipc: Resetting bearer [ 35.691754][ T675] tipc: Disabling bearer [ 35.723508][ T63] usb 1-1: USB disconnect, device number 5 [ 35.728859][ T31] rust_binder: 641: undelivered TRANSACTION_ERROR: 29201 [ 35.741551][ T680] tipc: Enabled bearer , priority 10 [ 35.749049][ T679] tipc: Resetting bearer [ 35.757666][ T679] tipc: Disabling bearer [ 35.787821][ T691] FAULT_INJECTION: forcing a failure. [ 35.787821][ T691] name failslab, interval 1, probability 0, space 0, times 0 [ 35.800478][ T691] CPU: 0 UID: 0 PID: 691 Comm: syz.3.115 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 35.800507][ T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.800517][ T691] Call Trace: [ 35.800523][ T691] [ 35.800529][ T691] __dump_stack+0x21/0x30 [ 35.800558][ T691] dump_stack_lvl+0x140/0x1c0 [ 35.800579][ T691] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.800602][ T691] ? kasan_save_track+0x4f/0x80 [ 35.800623][ T691] ? kasan_save_alloc_info+0x3a/0x50 [ 35.800640][ T691] dump_stack+0x19/0x20 [ 35.800660][ T691] should_fail_ex+0x3c2/0x510 [ 35.800683][ T691] should_failslab+0xac/0x100 [ 35.800706][ T691] kmem_cache_alloc_noprof+0x42/0x410 [ 35.800723][ T691] ? mas_wr_store_type+0xfbf/0x1b40 [ 35.800745][ T691] ? mas_alloc_nodes+0x254/0x9d0 [ 35.800768][ T691] mas_alloc_nodes+0x254/0x9d0 [ 35.800800][ T691] mas_preallocate+0x79b/0xc90 [ 35.800822][ T691] ? __cfi_mas_preallocate+0x10/0x10 [ 35.800844][ T691] ? __asan_memset+0x39/0x50 [ 35.800860][ T691] ? vm_area_alloc+0x5f/0x190 [ 35.800878][ T691] mmap_region+0x1409/0x1d10 [ 35.800898][ T691] ? xas_alloc+0x25f/0x530 [ 35.800919][ T691] ? __cfi_mmap_region+0x10/0x10 [ 35.800939][ T691] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 35.800962][ T691] ? shmem_mapping+0x11/0x50 [ 35.800980][ T691] do_mmap+0xa47/0x1370 [ 35.800997][ T691] ? __cfi_do_mmap+0x10/0x10 [ 35.801012][ T691] ? __kasan_check_write+0x18/0x20 [ 35.801029][ T691] ? down_write_killable+0xee/0x2d0 [ 35.801053][ T691] ? __cfi_down_write_killable+0x10/0x10 [ 35.801077][ T691] vm_mmap_pgoff+0x367/0x4b0 [ 35.801095][ T691] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 35.801112][ T691] ? __fget_files+0x2bc/0x330 [ 35.801135][ T691] ksys_mmap_pgoff+0x165/0x1e0 [ 35.801153][ T691] __x64_sys_mmap+0x121/0x140 [ 35.801170][ T691] x64_sys_call+0x13bf/0x2ee0 [ 35.801187][ T691] do_syscall_64+0x57/0xf0 [ 35.801204][ T691] ? clear_bhb_loop+0x50/0xa0 [ 35.801227][ T691] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.801249][ T691] RIP: 0033:0x7f2fd8b9dec2 [ 35.801265][ T691] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 35.801279][ T691] RSP: 002b:00007f2fd9a2bed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 35.801299][ T691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2fd8b9dec2 [ 35.801312][ T691] RDX: 0000000000000003 RSI: 0000000000011080 RDI: 0000000000000000 [ 35.801323][ T691] RBP: 0000000000008001 R08: 0000000000000007 R09: 0000000000000000 [ 35.801335][ T691] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000b08 [ 35.801346][ T691] R13: 0000200000000b10 R14: 00007f2fd9a2bfd8 R15: 0000000000000000 [ 35.801361][ T691] [ 36.337535][ T313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.487478][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 36.493677][ T313] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 36.502327][ T313] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 36.510958][ T313] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 36.520204][ T313] usb 2-1: config 250 has no interface number 0 [ 36.526475][ T313] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 36.538286][ T313] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 36.548896][ T313] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 36.559368][ T313] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 36.569806][ T313] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 36.584491][ T313] usb 2-1: config 250 interface 228 has no altsetting 0 [ 36.592696][ T313] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 36.602048][ T313] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 36.610797][ T313] usb 2-1: Product: syz [ 36.616691][ T313] usb 2-1: SerialNumber: syz [ 36.625192][ T313] hub 2-1:250.228: bad descriptor, ignoring hub [ 36.634041][ T313] hub 2-1:250.228: probe with driver hub failed with error -5 [ 36.648220][ T706] tipc: Enabled bearer , priority 10 [ 36.669073][ T705] tipc: Resetting bearer [ 36.676067][ T708] Invalid ELF header len 1 [ 36.682436][ T705] tipc: Disabling bearer [ 36.733602][ T715] overlay: filesystem on ./file0 not supported as upperdir [ 36.770241][ T723] ./mnt: Can't lookup blockdev [ 36.824752][ T313] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 36.858500][ T313] usb 2-1: USB disconnect, device number 6 [ 36.876486][ T313] usblp0: removed [ 36.880787][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 36.880801][ T36] audit: type=1400 audit(1790779780.309:258): avc: denied { write } for pid=724 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.924281][ T730] FAULT_INJECTION: forcing a failure. [ 36.924281][ T730] name failslab, interval 1, probability 0, space 0, times 0 [ 36.937063][ T730] CPU: 0 UID: 0 PID: 730 Comm: syz.3.129 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 36.937092][ T730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.937102][ T730] Call Trace: [ 36.937108][ T730] [ 36.937116][ T730] __dump_stack+0x21/0x30 [ 36.937146][ T730] dump_stack_lvl+0x140/0x1c0 [ 36.937169][ T730] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.937194][ T730] dump_stack+0x19/0x20 [ 36.937216][ T730] should_fail_ex+0x3c2/0x510 [ 36.937238][ T730] should_failslab+0xac/0x100 [ 36.937260][ T730] kmem_cache_alloc_bulk_noprof+0x4c/0x480 [ 36.937281][ T730] ? mas_alloc_nodes+0x254/0x9d0 [ 36.937305][ T730] mas_alloc_nodes+0x43c/0x9d0 [ 36.937329][ T730] mas_preallocate+0x79b/0xc90 [ 36.937352][ T730] ? __cfi_mas_preallocate+0x10/0x10 [ 36.937375][ T730] ? __asan_memset+0x39/0x50 [ 36.937392][ T730] ? vm_area_alloc+0x5f/0x190 [ 36.937412][ T730] mmap_region+0x1409/0x1d10 [ 36.937433][ T730] ? xas_alloc+0x25f/0x530 [ 36.937456][ T730] ? __cfi_mmap_region+0x10/0x10 [ 36.937476][ T730] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 36.937500][ T730] ? shmem_mapping+0x11/0x50 [ 36.937519][ T730] do_mmap+0xa47/0x1370 [ 36.937538][ T730] ? __cfi_do_mmap+0x10/0x10 [ 36.937555][ T730] ? __kasan_check_write+0x18/0x20 [ 36.937573][ T730] ? down_write_killable+0xee/0x2d0 [ 36.937597][ T730] ? __cfi_down_write_killable+0x10/0x10 [ 36.937629][ T730] vm_mmap_pgoff+0x367/0x4b0 [ 36.937648][ T730] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 36.937666][ T730] ? __fget_files+0x2bc/0x330 [ 36.937688][ T730] ksys_mmap_pgoff+0x165/0x1e0 [ 36.937706][ T730] __x64_sys_mmap+0x121/0x140 [ 36.937724][ T730] x64_sys_call+0x13bf/0x2ee0 [ 36.937741][ T730] do_syscall_64+0x57/0xf0 [ 36.937759][ T730] ? clear_bhb_loop+0x50/0xa0 [ 36.937782][ T730] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.937804][ T730] RIP: 0033:0x7f2fd8b9dec2 [ 36.937820][ T730] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 36.937835][ T730] RSP: 002b:00007f2fd9a2bed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 36.937855][ T730] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2fd8b9dec2 [ 36.937869][ T730] RDX: 0000000000000003 RSI: 0000000000011080 RDI: 0000000000000000 [ 36.937881][ T730] RBP: 0000000000008001 R08: 0000000000000007 R09: 0000000000000000 [ 36.937892][ T730] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000b08 [ 36.937904][ T730] R13: 0000200000000b10 R14: 00007f2fd9a2bfd8 R15: 0000000000000000 [ 36.937919][ T730] [ 37.226230][ T732] tipc: Enabled bearer , priority 10 [ 37.233728][ T731] tipc: Disabling bearer [ 37.267143][ T736] x_tables: unsorted entry at hook 2 [ 37.281051][ T739] syzkaller1: entered promiscuous mode [ 37.286567][ T739] syzkaller1: entered allmulticast mode [ 37.627503][ T313] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 37.741806][ T36] audit: type=1400 audit(1790779781.169:259): avc: denied { write } for pid=760 comm="syz.3.140" name="sda1" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.757488][ T313] usb 3-1: device descriptor read/64, error -71 [ 37.920887][ T128] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.930504][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.939287][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.948320][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.957170][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.965895][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.974572][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.983346][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.992069][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.997482][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.000767][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.016947][ T770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.027525][ T313] usb 3-1: device descriptor read/64, error -71 [ 38.137641][ T31] usb 4-1: device descriptor read/64, error -71 [ 38.267519][ T313] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 38.377541][ T31] usb 4-1: device descriptor read/64, error -71 [ 38.387603][ T50] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.397646][ T313] usb 3-1: device descriptor read/64, error -71 [ 38.537503][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 38.543757][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.554827][ T50] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.567806][ T50] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 38.576848][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.585766][ T50] usb 1-1: config 0 descriptor?? [ 38.627501][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.637487][ T313] usb 3-1: device descriptor read/64, error -71 [ 38.747605][ T313] usb usb3-port1: attempt power cycle [ 38.757516][ T31] usb 4-1: device descriptor read/64, error -71 [ 38.992779][ T50] hid (null): global environment stack underflow [ 38.999243][ T31] usb 4-1: device descriptor read/64, error -71 [ 39.006138][ T50] kye 0003:0458:5017.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 39.016870][ T50] kye 0003:0458:5017.0006: unknown main item tag 0x5 [ 39.023686][ T50] kye 0003:0458:5017.0006: global environment stack underflow [ 39.031208][ T50] kye 0003:0458:5017.0006: item 0 0 1 11 parsing failed [ 39.038373][ T50] kye 0003:0458:5017.0006: parse failed [ 39.043936][ T50] kye 0003:0458:5017.0006: probe with driver kye failed with error -22 [ 39.107523][ T313] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 39.115284][ T31] usb usb4-port1: attempt power cycle [ 39.138577][ T313] usb 3-1: device descriptor read/8, error -71 [ 39.194734][ T50] usb 1-1: USB disconnect, device number 6 [ 39.268540][ T313] usb 3-1: device descriptor read/8, error -71 [ 39.457529][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 39.478713][ T31] usb 4-1: device descriptor read/8, error -71 [ 39.507549][ T313] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 39.528507][ T313] usb 3-1: device descriptor read/8, error -71 [ 39.608564][ T31] usb 4-1: device descriptor read/8, error -71 [ 39.658613][ T313] usb 3-1: device descriptor read/8, error -71 [ 39.710424][ T784] tipc: Enabled bearer , priority 10 [ 39.717868][ T784] tipc: Enabled bearer , priority 10 [ 39.725695][ T783] tipc: Resetting bearer [ 39.735579][ T783] tipc: Disabling bearer [ 39.767703][ T313] usb usb3-port1: unable to enumerate USB device [ 39.774958][ T783] tipc: Disabling bearer [ 39.847497][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 39.868633][ T31] usb 4-1: device descriptor read/8, error -71 [ 39.937478][ T774] Bluetooth: hci0: command 0x1003 tx timeout [ 39.937517][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.000402][ T31] usb 4-1: device descriptor read/8, error -71 [ 40.117591][ T31] usb usb4-port1: unable to enumerate USB device [ 40.409999][ T812] netlink: 'syz.2.152': attribute type 4 has an invalid length. [ 40.430914][ T815] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 40.571167][ T822] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 40.840096][ T36] audit: type=1400 audit(1790779784.269:260): avc: denied { create } for pid=835 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 40.840378][ T836] syz.3.160 uses obsolete (PF_INET,SOCK_PACKET) [ 40.865786][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 40.881571][ T836] netlink: 'syz.3.160': attribute type 4 has an invalid length. [ 41.017482][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 41.023953][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.032402][ T31] usb 3-1: config 0 has no interface number 0 [ 41.046401][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.055671][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.064786][ T31] usb 3-1: Product: syz [ 41.069212][ T31] usb 3-1: Manufacturer: syz [ 41.073918][ T31] usb 3-1: SerialNumber: syz [ 41.079700][ T31] usb 3-1: config 0 descriptor?? [ 41.085533][ T31] smsc95xx v2.0.0 [ 41.137221][ T843] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 41.240136][ T36] audit: type=1400 audit(1790779784.669:261): avc: denied { ioctl } for pid=847 comm="syz.1.164" path="socket:[9864]" dev="sockfs" ino=9864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.264612][ T36] audit: type=1400 audit(1790779784.669:262): avc: denied { connect } for pid=847 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.287619][ T36] audit: type=1400 audit(1790779784.669:263): avc: denied { write } for pid=847 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.289154][ T848] mmap: syz.1.164 (848) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.487307][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.498528][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.521233][ T856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 41.689659][ T36] audit: type=1400 audit(1790779785.119:264): avc: denied { watch } for pid=861 comm="syz.3.170" path="/28" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.719032][ T36] audit: type=1400 audit(1790779785.139:265): avc: denied { watch } for pid=861 comm="syz.3.170" path="/28/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.799269][ T868] netlink: 220 bytes leftover after parsing attributes in process `syz.3.171'. [ 41.999797][ T894] tipc: Enabled bearer , priority 10 [ 42.007559][ T893] tipc: Resetting bearer [ 42.024378][ T893] tipc: Disabling bearer [ 42.097684][ T901] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.411151][ T36] audit: type=1326 audit(1790779785.839:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.1.182" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0de559e159 code=0x0 [ 42.512000][ T36] audit: type=1400 audit(1790779785.939:267): avc: denied { ioctl } for pid=912 comm="syz.1.182" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.536357][ T36] audit: type=1400 audit(1790779785.939:268): avc: denied { execmod } for pid=912 comm="syz.1.182" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.559732][ T36] audit: type=1400 audit(1790779785.939:269): avc: denied { execute } for pid=912 comm="syz.1.182" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.578355][ T917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.588028][ T36] audit: type=1400 audit(1790779785.939:270): avc: denied { setopt } for pid=912 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.591999][ T917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.638668][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 42.649596][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 42.661052][ T31] usb 3-1: USB disconnect, device number 14 [ 42.797495][ T313] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 42.948601][ T313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.958759][ T313] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.967800][ T313] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.979926][ T313] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36, setting to 8 [ 42.990632][ T313] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 42.999693][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.008972][ T916] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 43.016810][ T313] hub 4-1:1.0: bad descriptor, ignoring hub [ 43.023860][ T313] hub 4-1:1.0: probe with driver hub failed with error -5 [ 43.031384][ T313] cdc_wdm 4-1:1.0: skipping garbage [ 43.036643][ T313] cdc_wdm 4-1:1.0: skipping garbage [ 43.046033][ T313] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 43.052153][ T313] cdc_wdm 4-1:1.0: Unknown control protocol [ 43.052680][ T927] tipc: Enabled bearer , priority 10 [ 43.067539][ T926] tipc: Resetting bearer [ 43.078428][ T926] tipc: Disabling bearer [ 43.164796][ T36] audit: type=1326 audit(1790779786.589:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.0.186" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b9c19e159 code=0x0 [ 43.216638][ T36] audit: type=1400 audit(1790779786.639:272): avc: denied { associate } for pid=928 comm="syz.0.186" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.272752][ T937] FAULT_INJECTION: forcing a failure. [ 43.272752][ T937] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.285878][ T937] CPU: 0 UID: 0 PID: 937 Comm: syz.2.189 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 43.285905][ T937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.285917][ T937] Call Trace: [ 43.285922][ T937] [ 43.285930][ T937] __dump_stack+0x21/0x30 [ 43.285958][ T937] dump_stack_lvl+0x140/0x1c0 [ 43.285981][ T937] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.286004][ T937] ? __seccomp_filter+0x48a/0x1b70 [ 43.286026][ T937] dump_stack+0x19/0x20 [ 43.286047][ T937] should_fail_ex+0x3c2/0x510 [ 43.286070][ T937] should_fail+0xf/0x20 [ 43.286089][ T937] should_fail_usercopy+0x1e/0x30 [ 43.286111][ T937] _copy_from_user+0x20/0xa0 [ 43.286134][ T937] __se_sys_io_uring_setup+0x170/0x2b0 [ 43.286161][ T937] ? __x64_sys_io_uring_setup+0x80/0x80 [ 43.286187][ T937] ? __secure_computing+0xee/0x2b0 [ 43.286217][ T937] __x64_sys_io_uring_setup+0x5f/0x80 [ 43.286242][ T937] x64_sys_call+0x22c0/0x2ee0 [ 43.286259][ T937] do_syscall_64+0x57/0xf0 [ 43.286277][ T937] ? clear_bhb_loop+0x50/0xa0 [ 43.286300][ T937] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.286320][ T937] RIP: 0033:0x7f900e79e159 [ 43.286336][ T937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.286351][ T937] RSP: 002b:00007f900f6dbee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 43.286371][ T937] RAX: ffffffffffffffda RBX: 0000200000000b28 RCX: 00007f900e79e159 [ 43.286385][ T937] RDX: 0000200000000ba8 RSI: 0000200000000b28 RDI: 00000000000003c9 [ 43.286397][ T937] RBP: 0000200000000b20 R08: 0000000000000008 R09: 0000000000000000 [ 43.286408][ T937] R10: 0000200000000bb0 R11: 0000000000000206 R12: 0000200000000ba8 [ 43.286420][ T937] R13: 0000200000000bb0 R14: 00007f900f6dbfd8 R15: 0000000000000001 [ 43.286434][ T937] [ 43.347671][ T31] usb 4-1: USB disconnect, device number 14 [ 43.575297][ T36] audit: type=1400 audit(1790779786.999:273): avc: denied { append } for pid=943 comm="syz.1.192" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.579930][ T946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.606898][ T946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.615668][ T944] FAULT_INJECTION: forcing a failure. [ 43.615668][ T944] name fail_futex, interval 1, probability 0, space 0, times 1 [ 43.628580][ T944] CPU: 1 UID: 0 PID: 944 Comm: syz.1.192 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 43.628600][ T944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.628607][ T944] Call Trace: [ 43.628611][ T944] [ 43.628615][ T944] __dump_stack+0x21/0x30 [ 43.628655][ T944] dump_stack_lvl+0x140/0x1c0 [ 43.628668][ T944] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.628681][ T944] ? cred_has_capability+0x296/0x3a0 [ 43.628692][ T944] ? selinux_perf_event_alloc+0x110/0x110 [ 43.628703][ T944] ? _raw_spin_lock_bh+0x96/0x130 [ 43.628714][ T944] dump_stack+0x19/0x20 [ 43.628731][ T944] should_fail_ex+0x3c2/0x510 [ 43.628744][ T944] should_fail+0xf/0x20 [ 43.628754][ T944] get_futex_key+0x178/0x940 [ 43.628798][ T944] ? __cfi_get_futex_key+0x10/0x10 [ 43.628811][ T944] ? security_capable+0x44/0x130 [ 43.628823][ T944] futex_wake+0x150/0x950 [ 43.628832][ T944] ? do_tcp_setsockopt+0x157e/0x1f90 [ 43.628844][ T944] ? __cfi_futex_wake+0x10/0x10 [ 43.628853][ T944] ? selinux_socket_setsockopt+0x324/0x3d0 [ 43.628868][ T944] do_futex+0x37d/0x510 [ 43.628879][ T944] ? tcp_setsockopt+0x58/0x110 [ 43.628889][ T944] ? __cfi_do_futex+0x10/0x10 [ 43.628902][ T944] __se_sys_futex+0x13c/0x320 [ 43.628914][ T944] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 43.628928][ T944] ? __x64_sys_futex+0x110/0x110 [ 43.628940][ T944] ? __kasan_check_write+0x18/0x20 [ 43.628951][ T944] __x64_sys_futex+0xe9/0x110 [ 43.628964][ T944] x64_sys_call+0x227f/0x2ee0 [ 43.629005][ T944] do_syscall_64+0x57/0xf0 [ 43.629023][ T944] ? clear_bhb_loop+0x50/0xa0 [ 43.629045][ T944] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.629068][ T944] RIP: 0033:0x7f0de559e159 [ 43.629095][ T944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.629109][ T944] RSP: 002b:00007f0de64ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 43.629121][ T944] RAX: ffffffffffffffda RBX: 00007f0de5825fa8 RCX: 00007f0de559e159 [ 43.629129][ T944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0de5825fac [ 43.629136][ T944] RBP: 00007f0de5825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 43.629143][ T944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.629149][ T944] R13: 00007f0de5826038 R14: 00007ffea1e20370 R15: 00007ffea1e20458 [ 43.629158][ T944] [ 43.708792][ T36] audit: type=1400 audit(1790779787.129:274): avc: denied { write } for pid=943 comm="syz.1.192" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.767855][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.837470][ T63] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.846302][ T952] tipc: Enabled bearer , priority 10 [ 43.928421][ T951] tipc: Resetting bearer [ 43.936168][ T951] tipc: Disabling bearer [ 44.003246][ T956] FAULT_INJECTION: forcing a failure. [ 44.003246][ T956] name failslab, interval 1, probability 0, space 0, times 0 [ 44.016090][ T956] CPU: 1 UID: 0 PID: 956 Comm: syz.2.195 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 44.016133][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.016146][ T956] Call Trace: [ 44.016153][ T956] [ 44.016161][ T956] __dump_stack+0x21/0x30 [ 44.016195][ T956] dump_stack_lvl+0x140/0x1c0 [ 44.016222][ T956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.016250][ T956] dump_stack+0x19/0x20 [ 44.016274][ T956] should_fail_ex+0x3c2/0x510 [ 44.016297][ T956] should_failslab+0xac/0x100 [ 44.016320][ T956] kmem_cache_alloc_noprof+0x42/0x410 [ 44.016342][ T956] ? alloc_empty_file+0xbf/0x270 [ 44.016366][ T956] ? _raw_spin_unlock+0x45/0x60 [ 44.016388][ T956] alloc_empty_file+0xbf/0x270 [ 44.016412][ T956] ? _raw_spin_unlock+0x45/0x60 [ 44.016432][ T956] alloc_file_pseudo+0x142/0x1f0 [ 44.016457][ T956] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 44.016485][ T956] sock_alloc_file+0xbe/0x2b0 [ 44.016506][ T956] __sys_socket+0x14c/0x1c0 [ 44.016528][ T956] __x64_sys_socket+0x7e/0x90 [ 44.016550][ T956] x64_sys_call+0x2608/0x2ee0 [ 44.016568][ T956] do_syscall_64+0x57/0xf0 [ 44.016587][ T956] ? clear_bhb_loop+0x50/0xa0 [ 44.016611][ T956] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.016634][ T956] RIP: 0033:0x7f900e79e159 [ 44.016651][ T956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.016668][ T956] RSP: 002b:00007f900f6dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 44.016690][ T956] RAX: ffffffffffffffda RBX: 00007f900ea25fa0 RCX: 00007f900e79e159 [ 44.016705][ T956] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 44.016718][ T956] RBP: 00007f900e83506b R08: 0000000000000000 R09: 0000000000000000 [ 44.016731][ T956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.016742][ T956] R13: 00007f900ea26038 R14: 00007f900ea25fa0 R15: 00007ffdb2252e18 [ 44.016760][ T956] [ 44.219981][ T956] netlink: 104 bytes leftover after parsing attributes in process `syz.2.195'. [ 44.236020][ T36] audit: type=1400 audit(1790779787.429:275): avc: denied { getopt } for pid=955 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.287506][ T63] usb 2-1: device descriptor read/64, error -71 [ 44.527484][ T63] usb 2-1: device descriptor read/64, error -71 [ 44.571958][ T963] tipc: Enabled bearer , priority 10 [ 44.579175][ T962] tipc: Resetting bearer [ 44.585811][ T962] tipc: Disabling bearer [ 44.767549][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.819754][ T972] tipc: Enabled bearer , priority 10 [ 44.826816][ T972] tipc: Enabled bearer , priority 10 [ 44.834726][ T971] tipc: Resetting bearer [ 44.841646][ T971] tipc: Disabling bearer [ 44.878631][ T971] tipc: Disabling bearer [ 44.907536][ T63] usb 2-1: device descriptor read/64, error -71 [ 44.929390][ T974] FAULT_INJECTION: forcing a failure. [ 44.929390][ T974] name failslab, interval 1, probability 0, space 0, times 0 [ 44.942107][ T974] CPU: 1 UID: 0 PID: 974 Comm: syz.2.202 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 44.942138][ T974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.942149][ T974] Call Trace: [ 44.942155][ T974] [ 44.942160][ T974] __dump_stack+0x21/0x30 [ 44.942179][ T974] dump_stack_lvl+0x140/0x1c0 [ 44.942192][ T974] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.942206][ T974] dump_stack+0x19/0x20 [ 44.942218][ T974] should_fail_ex+0x3c2/0x510 [ 44.942230][ T974] ? io_alloc_hash_table+0x52/0x160 [ 44.942241][ T974] should_failslab+0xac/0x100 [ 44.942253][ T974] __kmalloc_noprof+0x69/0x510 [ 44.942264][ T974] ? io_alloc_hash_table+0x52/0x160 [ 44.942273][ T974] ? __kasan_kmalloc+0x96/0xb0 [ 44.942286][ T974] io_alloc_hash_table+0x52/0x160 [ 44.942296][ T974] io_ring_ctx_alloc+0xd1/0x1dc0 [ 44.942307][ T974] io_uring_create+0x2e0/0x13f0 [ 44.942317][ T974] ? __kasan_check_write+0x18/0x20 [ 44.942327][ T974] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 44.942342][ T974] ? __x64_sys_io_uring_setup+0x80/0x80 [ 44.942362][ T974] ? __secure_computing+0xee/0x2b0 [ 44.942375][ T974] __x64_sys_io_uring_setup+0x5f/0x80 [ 44.942388][ T974] x64_sys_call+0x22c0/0x2ee0 [ 44.942397][ T974] do_syscall_64+0x57/0xf0 [ 44.942408][ T974] ? clear_bhb_loop+0x50/0xa0 [ 44.942421][ T974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.942433][ T974] RIP: 0033:0x7f900e79e159 [ 44.942444][ T974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.942453][ T974] RSP: 002b:00007f900f6dbee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 44.942465][ T974] RAX: ffffffffffffffda RBX: 0000200000000b28 RCX: 00007f900e79e159 [ 44.942473][ T974] RDX: 0000200000000ba8 RSI: 0000200000000b28 RDI: 00000000000003c9 [ 44.942480][ T974] RBP: 0000200000000b20 R08: 0000000000000008 R09: 0000000000000000 [ 44.942487][ T974] R10: 0000200000000bb0 R11: 0000000000000206 R12: 0000200000000ba8 [ 44.942494][ T974] R13: 0000200000000bb0 R14: 00007f900f6dbfd8 R15: 0000000000000001 [ 44.942502][ T974] [ 45.167522][ T63] usb 2-1: device descriptor read/64, error -71 [ 45.287657][ T63] usb usb2-port1: attempt power cycle [ 45.308168][ T979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=979 comm=syz.0.204 [ 45.490289][ T992] tipc: Enabled bearer , priority 10 [ 45.503769][ T991] tipc: Resetting bearer [ 45.519667][ T991] tipc: Disabling bearer [ 45.627486][ T63] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.656643][ T998] syz.0.208: attempt to access beyond end of device [ 45.656643][ T998] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.671069][ T63] usb 2-1: device descriptor read/8, error -71 [ 45.715465][ T1002] tipc: Enabled bearer , priority 10 [ 45.723354][ T1002] tipc: Enabled bearer , priority 10 [ 45.730920][ T1001] tipc: Resetting bearer [ 45.737403][ T1001] tipc: Disabling bearer [ 45.777485][ T774] Bluetooth: hci0: command 0x1003 tx timeout [ 45.777782][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.789828][ T950] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 45.800284][ T1005] capability: warning: `syz.0.211' uses 32-bit capabilities (legacy support in use) [ 45.811054][ T1001] tipc: Disabling bearer [ 45.820358][ T63] usb 2-1: device descriptor read/8, error -71 [ 45.935050][ T1010] FAULT_INJECTION: forcing a failure. [ 45.935050][ T1010] name failslab, interval 1, probability 0, space 0, times 0 [ 45.947751][ T1010] CPU: 1 UID: 0 PID: 1010 Comm: syz.0.213 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 45.947781][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.947793][ T1010] Call Trace: [ 45.947800][ T1010] [ 45.947808][ T1010] __dump_stack+0x21/0x30 [ 45.947835][ T1010] dump_stack_lvl+0x140/0x1c0 [ 45.947848][ T1010] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.947862][ T1010] dump_stack+0x19/0x20 [ 45.947874][ T1010] should_fail_ex+0x3c2/0x510 [ 45.947887][ T1010] ? io_alloc_hash_table+0x52/0x160 [ 45.947897][ T1010] should_failslab+0xac/0x100 [ 45.947910][ T1010] __kmalloc_noprof+0x69/0x510 [ 45.947922][ T1010] ? io_alloc_hash_table+0x52/0x160 [ 45.947932][ T1010] ? init_hash_table+0x1ae/0x270 [ 45.947942][ T1010] io_alloc_hash_table+0x52/0x160 [ 45.947951][ T1010] io_ring_ctx_alloc+0x10b/0x1dc0 [ 45.947962][ T1010] ? ktime_get+0x1df/0x210 [ 45.947973][ T1010] io_uring_create+0x2e0/0x13f0 [ 45.947982][ T1010] ? __kasan_check_write+0x18/0x20 [ 45.947993][ T1010] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 45.948007][ T1010] ? __x64_sys_io_uring_setup+0x80/0x80 [ 45.948025][ T1010] ? __secure_computing+0xee/0x2b0 [ 45.948038][ T1010] __x64_sys_io_uring_setup+0x5f/0x80 [ 45.948051][ T1010] x64_sys_call+0x22c0/0x2ee0 [ 45.948060][ T1010] do_syscall_64+0x57/0xf0 [ 45.948071][ T1010] ? clear_bhb_loop+0x50/0xa0 [ 45.948084][ T1010] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.948097][ T1010] RIP: 0033:0x7f5b9c19e159 [ 45.948110][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.948120][ T1010] RSP: 002b:00007f5b9cfe0ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 45.948133][ T1010] RAX: ffffffffffffffda RBX: 0000200000000b28 RCX: 00007f5b9c19e159 [ 45.948140][ T1010] RDX: 0000200000000ba8 RSI: 0000200000000b28 RDI: 00000000000003c9 [ 45.948147][ T1010] RBP: 0000200000000b20 R08: 0000000000000008 R09: 0000000000000000 [ 45.948154][ T1010] R10: 0000200000000bb0 R11: 0000000000000206 R12: 0000200000000ba8 [ 45.948161][ T1010] R13: 0000200000000bb0 R14: 00007f5b9cfe0fd8 R15: 0000000000000001 [ 45.948169][ T1010] [ 46.057524][ T63] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.209080][ T63] usb 2-1: device descriptor read/8, error -71 [ 46.340837][ T1018] tipc: Enabled bearer , priority 10 [ 46.348209][ T63] usb 2-1: device descriptor read/8, error -71 [ 46.354838][ T1017] tipc: Disabling bearer [ 46.401332][ T1020] netlink: 'syz.2.217': attribute type 3 has an invalid length. [ 46.409363][ T1020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 46.457770][ T63] usb usb2-port1: unable to enumerate USB device [ 46.490961][ T1033] tipc: Enabled bearer , priority 10 [ 46.498075][ T1033] tipc: Enabled bearer , priority 10 [ 46.505547][ T1032] tipc: Resetting bearer [ 46.516483][ T1032] tipc: Disabling bearer [ 46.569251][ T1032] tipc: Disabling bearer [ 46.717505][ T63] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 46.717510][ T313] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.788375][ T1044] raw_sendmsg: syz.1.224 forgot to set AF_INET. Fix it! [ 46.810560][ T1039] kvm: vcpu 0: requested 140 ns lapic timer period limited to 200000 ns [ 46.867553][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 46.874309][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.882765][ T63] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 46.891531][ T63] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 46.901235][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 46.902087][ T63] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 46.908159][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.926977][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.936763][ T313] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.945895][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.946058][ T63] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 46.963302][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.966239][ T313] usb 4-1: config 0 descriptor?? [ 46.971551][ T63] usb 3-1: Product: syz [ 46.980687][ T63] usb 3-1: Manufacturer: syz [ 46.985289][ T63] usb 3-1: SerialNumber: syz [ 47.033448][ T1063] FAULT_INJECTION: forcing a failure. [ 47.033448][ T1063] name failslab, interval 1, probability 0, space 0, times 0 [ 47.046168][ T1063] CPU: 0 UID: 0 PID: 1063 Comm: syz.0.228 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 47.046196][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.046210][ T1063] Call Trace: [ 47.046216][ T1063] [ 47.046223][ T1063] __dump_stack+0x21/0x30 [ 47.046250][ T1063] dump_stack_lvl+0x140/0x1c0 [ 47.046273][ T1063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.046298][ T1063] dump_stack+0x19/0x20 [ 47.046320][ T1063] should_fail_ex+0x3c2/0x510 [ 47.046340][ T1063] ? io_alloc_hash_table+0x52/0x160 [ 47.046364][ T1063] should_failslab+0xac/0x100 [ 47.046385][ T1063] __kmalloc_noprof+0x69/0x510 [ 47.046405][ T1063] ? io_alloc_hash_table+0x52/0x160 [ 47.046423][ T1063] ? init_hash_table+0x1ae/0x270 [ 47.046439][ T1063] io_alloc_hash_table+0x52/0x160 [ 47.046455][ T1063] io_ring_ctx_alloc+0x10b/0x1dc0 [ 47.046473][ T1063] ? sched_clock+0x44/0x60 [ 47.046498][ T1063] io_uring_create+0x2e0/0x13f0 [ 47.046515][ T1063] ? __kasan_check_write+0x18/0x20 [ 47.046534][ T1063] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 47.046551][ T1063] ? __x64_sys_io_uring_setup+0x80/0x80 [ 47.046565][ T1063] ? __secure_computing+0xee/0x2b0 [ 47.046578][ T1063] __x64_sys_io_uring_setup+0x5f/0x80 [ 47.046591][ T1063] x64_sys_call+0x22c0/0x2ee0 [ 47.046603][ T1063] do_syscall_64+0x57/0xf0 [ 47.046622][ T1063] ? clear_bhb_loop+0x50/0xa0 [ 47.046653][ T1063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.046675][ T1063] RIP: 0033:0x7f5b9c19e159 [ 47.046687][ T1063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.046697][ T1063] RSP: 002b:00007f5b9cfe0ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 47.046709][ T1063] RAX: ffffffffffffffda RBX: 0000200000000b28 RCX: 00007f5b9c19e159 [ 47.046718][ T1063] RDX: 0000200000000ba8 RSI: 0000200000000b28 RDI: 00000000000003c9 [ 47.046725][ T1063] RBP: 0000200000000b20 R08: 0000000000000008 R09: 0000000000000000 [ 47.046732][ T1063] R10: 0000200000000bb0 R11: 0000000000000206 R12: 0000200000000ba8 [ 47.046739][ T1063] R13: 0000200000000bb0 R14: 00007f5b9cfe0fd8 R15: 0000000000000001 [ 47.046752][ T1063] [ 47.107651][ T31] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 47.193001][ T63] usb 3-1: unit 0 not found! [ 47.202842][ T313] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 47.215409][ T63] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.298587][ T63] usb 3-1: unit 0 not found! [ 47.306266][ T63] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 47.317556][ T63] usb 3-1: USB disconnect, device number 15 [ 47.324715][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.341896][ T31] usb 2-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 47.352179][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 103, using maximum allowed: 30 [ 47.363055][ T31] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 103 [ 47.376165][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 47.382785][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.20 [ 47.391842][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.400873][ T31] usb 2-1: config 0 descriptor?? [ 47.576413][ T1069] tipc: Enabled bearer , priority 10 [ 47.583519][ T1069] tipc: Enabled bearer , priority 10 [ 47.591330][ T1068] tipc: Resetting bearer [ 47.601370][ T1068] tipc: Disabling bearer [ 47.617785][ T31] usb 2-1: string descriptor 0 read error: -71 [ 47.625846][ T31] usb 2-1: USB disconnect, device number 11 [ 47.640012][ T1068] tipc: Disabling bearer [ 47.705436][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 47.705452][ T36] audit: type=1400 audit(1790779791.129:289): avc: denied { nlmsg_write } for pid=1070 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 47.846191][ T36] audit: type=1400 audit(1790779791.269:290): avc: denied { connect } for pid=1083 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.986714][ T1089] process 'syz.0.235' launched './file0' with NULL argv: empty string added [ 48.016365][ T1093] FAULT_INJECTION: forcing a failure. [ 48.016365][ T1093] name failslab, interval 1, probability 0, space 0, times 0 [ 48.029135][ T1093] CPU: 1 UID: 0 PID: 1093 Comm: syz.0.237 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 48.029169][ T1093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.029180][ T1093] Call Trace: [ 48.029186][ T1093] [ 48.029193][ T1093] __dump_stack+0x21/0x30 [ 48.029220][ T1093] dump_stack_lvl+0x140/0x1c0 [ 48.029242][ T1093] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.029266][ T1093] dump_stack+0x19/0x20 [ 48.029286][ T1093] should_fail_ex+0x3c2/0x510 [ 48.029308][ T1093] should_failslab+0xac/0x100 [ 48.029328][ T1093] __kmalloc_node_noprof+0x69/0x500 [ 48.029344][ T1093] ? __kvmalloc_node_noprof+0x128/0x300 [ 48.029360][ T1093] ? __kasan_kmalloc+0x96/0xb0 [ 48.029382][ T1093] __kvmalloc_node_noprof+0x128/0x300 [ 48.029396][ T1093] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 48.029412][ T1093] ? percpu_ref_init+0x160/0x4d0 [ 48.029432][ T1093] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 48.029450][ T1093] io_ring_ctx_alloc+0x28c/0x1dc0 [ 48.029468][ T1093] io_uring_create+0x2e0/0x13f0 [ 48.029485][ T1093] ? __kasan_check_write+0x18/0x20 [ 48.029502][ T1093] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 48.029526][ T1093] ? __x64_sys_io_uring_setup+0x80/0x80 [ 48.029551][ T1093] ? __secure_computing+0xee/0x2b0 [ 48.029571][ T1093] __x64_sys_io_uring_setup+0x5f/0x80 [ 48.029595][ T1093] x64_sys_call+0x22c0/0x2ee0 [ 48.029611][ T1093] do_syscall_64+0x57/0xf0 [ 48.029628][ T1093] ? clear_bhb_loop+0x50/0xa0 [ 48.029649][ T1093] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.029670][ T1093] RIP: 0033:0x7f5b9c19e159 [ 48.029685][ T1093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.029699][ T1093] RSP: 002b:00007f5b9cfe0ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 48.029719][ T1093] RAX: ffffffffffffffda RBX: 0000200000000b28 RCX: 00007f5b9c19e159 [ 48.029732][ T1093] RDX: 0000200000000ba8 RSI: 0000200000000b28 RDI: 00000000000003c9 [ 48.029744][ T1093] RBP: 0000200000000b20 R08: 0000000000000008 R09: 0000000000000000 [ 48.029755][ T1093] R10: 0000200000000bb0 R11: 0000000000000206 R12: 0000200000000ba8 [ 48.029767][ T1093] R13: 0000200000000bb0 R14: 00007f5b9cfe0fd8 R15: 0000000000000001 [ 48.029781][ T1093] [ 48.329548][ T1096] tipc: Enabled bearer , priority 10 [ 48.336540][ T1096] tipc: Enabled bearer , priority 10 [ 48.344358][ T1095] tipc: Resetting bearer [ 48.351010][ T1095] tipc: Disabling bearer [ 48.376910][ T1100] tipc: Enabling of bearer rejected, failed to enable media [ 48.388637][ T1095] tipc: Disabling bearer [ 48.488277][ T36] audit: type=1400 audit(1790779791.919:291): avc: denied { write } for pid=1101 comm="syz.1.241" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.496323][ T1111] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 48.523686][ T36] audit: type=1400 audit(1790779791.949:292): avc: denied { map } for pid=1101 comm="syz.1.241" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.656735][ T36] audit: type=1400 audit(1790779792.079:293): avc: denied { mount } for pid=1113 comm="syz.2.245" name="/" dev="ramfs" ino=13080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.689434][ T36] audit: type=1400 audit(1790779792.119:294): avc: denied { mounton } for pid=1113 comm="syz.2.245" path="/file0" dev="ramfs" ino=12106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 48.757512][ T31] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 48.937496][ T548] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.088497][ T548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.099504][ T548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.109278][ T548] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.122208][ T548] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.131259][ T548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.139763][ T548] usb 1-1: config 0 descriptor?? [ 49.392488][ T1126] tipc: Enabled bearer , priority 10 [ 49.399614][ T1126] tipc: Enabled bearer , priority 10 [ 49.407209][ T1125] tipc: Resetting bearer [ 49.414118][ T1125] tipc: Disabling bearer [ 49.448622][ T1125] tipc: Disabling bearer [ 49.478967][ T1128] tipc: Enabling of bearer rejected, failed to enable media [ 49.527513][ T600] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.550262][ T548] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 49.558640][ T548] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.566214][ T548] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.573806][ T548] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.581416][ T548] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.589097][ T548] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.597628][ T548] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 49.600948][ T1134] FAULT_INJECTION: forcing a failure. [ 49.600948][ T1134] name failslab, interval 1, probability 0, space 0, times 0 [ 49.610899][ T548] plantronics 0003:047F:FFFF.0008: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 49.635841][ T1134] CPU: 1 UID: 0 PID: 1134 Comm: syz.3.254 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 49.635869][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.635879][ T1134] Call Trace: [ 49.635896][ T1134] [ 49.635904][ T1134] __dump_stack+0x21/0x30 [ 49.635933][ T1134] dump_stack_lvl+0x140/0x1c0 [ 49.635957][ T1134] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.635981][ T1134] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 49.636005][ T1134] ? mutex_unlock+0x90/0x240 [ 49.636026][ T1134] ? pcpu_alloc_noprof+0x1440/0x1440 [ 49.636044][ T1134] dump_stack+0x19/0x20 [ 49.636064][ T1134] should_fail_ex+0x3c2/0x510 [ 49.636086][ T1134] should_failslab+0xac/0x100 [ 49.636108][ T1134] __kmalloc_cache_noprof+0x41/0x470 [ 49.636129][ T1134] ? percpu_ref_init+0xe3/0x4d0 [ 49.636152][ T1134] percpu_ref_init+0xe3/0x4d0 [ 49.636174][ T1134] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 49.636191][ T1134] io_ring_ctx_alloc+0x141/0x1dc0 [ 49.636206][ T1134] io_uring_create+0x2e0/0x13f0 [ 49.636223][ T1134] ? __kasan_check_write+0x18/0x20 [ 49.636238][ T1134] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 49.636262][ T1134] ? __x64_sys_io_uring_setup+0x80/0x80 [ 49.636285][ T1134] ? __secure_computing+0xee/0x2b0 [ 49.636307][ T1134] __x64_sys_io_uring_setup+0x5f/0x80 [ 49.636330][ T1134] x64_sys_call+0x22c0/0x2ee0 [ 49.636346][ T1134] do_syscall_64+0x57/0xf0 [ 49.636362][ T1134] ? clear_bhb_loop+0x50/0xa0 [ 49.636386][ T1134] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.636408][ T1134] RIP: 0033:0x7f2fd8b9e159 [ 49.636424][ T1134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.636441][ T1134] RSP: 002b:00007f2fd9a2bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 49.636463][ T1134] RAX: ffffffffffffffda RBX: 0000200000000b28 RCX: 00007f2fd8b9e159 [ 49.636477][ T1134] RDX: 0000200000000ba8 RSI: 0000200000000b28 RDI: 00000000000003c9 [ 49.636489][ T1134] RBP: 0000200000000b20 R08: 0000000000000008 R09: 0000000000000000 [ 49.636501][ T1134] R10: 0000200000000bb0 R11: 0000000000000206 R12: 0000200000000ba8 [ 49.636512][ T1134] R13: 0000200000000bb0 R14: 00007f2fd9a2bfd8 R15: 0000000000000001 [ 49.636525][ T1134] [ 49.878517][ T600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.889007][ T600] usb 2-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.903219][ T600] usb 2-1: config 1 interface 0 has no altsetting 0 [ 49.911943][ T600] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.921112][ T600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.929200][ T600] usb 2-1: SerialNumber: syz [ 49.940072][ T600] usb 2-1: bad CDC descriptors [ 49.949838][ T1116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.959429][ T1116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.976664][ T63] usb 1-1: USB disconnect, device number 7 [ 50.208540][ T63] usb 2-1: USB disconnect, device number 12 [ 50.280796][ T1147] ./dev/sda1: Can't lookup blockdev [ 50.508926][ T1149] tipc: Enabled bearer , priority 10 [ 50.516533][ T1148] tipc: Resetting bearer [ 50.745173][ T36] audit: type=1400 audit(1790779794.169:295): avc: denied { read } for pid=1150 comm="syz.1.258" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.784928][ T36] audit: type=1400 audit(1790779794.169:296): avc: denied { open } for pid=1150 comm="syz.1.258" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.811492][ T1148] tipc: Disabling bearer [ 50.823955][ T1154] tipc: Enabled bearer , priority 10 [ 50.832489][ T1154] tipc: Enabled bearer , priority 10 [ 50.840240][ T1153] tipc: Resetting bearer [ 50.846782][ T1153] tipc: Disabling bearer [ 50.875389][ T36] audit: type=1400 audit(1790779794.299:297): avc: denied { connect } for pid=1155 comm="syz.0.260" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.895745][ T36] audit: type=1400 audit(1790779794.299:298): avc: denied { execute } for pid=1155 comm="syz.0.260" name="file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.938684][ T1153] tipc: Disabling bearer [ 50.963469][ T1160] bridge_slave_0: default FDB implementation only supports local addresses [ 51.010178][ T1162] tipc: Enabling of bearer rejected, failed to enable media [ 51.087471][ T31] usb 4-1: device descriptor read/64, error -71 [ 51.207516][ T600] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 51.287611][ T1177] tipc: Enabled bearer , priority 10 [ 51.295253][ T1176] tipc: Resetting bearer [ 51.301925][ T1176] tipc: Disabling bearer [ 51.337594][ T31] usb 4-1: device descriptor read/64, error -71 [ 51.359504][ T528] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.368543][ T600] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 51.379750][ T600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 51.391095][ T600] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 51.397527][ T406] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.404153][ T600] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 51.420702][ T600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.432848][ T600] usb 3-1: config 0 descriptor?? [ 51.578504][ T406] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.587753][ T31] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 51.588698][ T406] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 51.605371][ T406] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 51.617740][ T406] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.626868][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.634910][ T406] usb 1-1: Product: syz [ 51.639246][ T406] usb 1-1: Manufacturer: syz [ 51.643900][ T406] usb 1-1: SerialNumber: syz [ 51.717475][ T50] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 51.727600][ T31] usb 4-1: device descriptor read/64, error -71 [ 51.841322][ T600] wacom 0003:056A:00B3.0009: unknown main item tag 0x0 [ 51.848256][ T50] usb 2-1: device descriptor read/64, error -71 [ 51.854833][ T600] wacom 0003:056A:00B3.0009: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 51.862685][ T1174] netlink: 'syz.0.267': attribute type 58 has an invalid length. [ 51.868405][ T600] wacom 0003:056A:00B3.0009: hidraw1: USB HID v0.05 Device [HID 056a:00b3] on usb-dummy_hcd.2-1/input0 [ 51.884708][ T600] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B3.0009/input/input13 [ 51.963181][ T406] usb 1-1: 1:1 : invalid UAC_AS_GENERAL desc [ 51.969546][ T406] usb 1-1: 0:2 : does not exist [ 51.977536][ T31] usb 4-1: device descriptor read/64, error -71 [ 51.979035][ T406] usb 1-1: USB disconnect, device number 8 [ 52.047454][ T600] usb 3-1: USB disconnect, device number 16 [ 52.117532][ T50] usb 2-1: device descriptor read/64, error -71 [ 52.217485][ T31] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 52.238502][ T31] usb 4-1: device descriptor read/8, error -71 [ 52.357491][ T50] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 52.368425][ T31] usb 4-1: device descriptor read/8, error -71 [ 52.487469][ T50] usb 2-1: device descriptor read/64, error -71 [ 52.490172][ T1193] tipc: Enabled bearer , priority 10 [ 52.501737][ T1193] tipc: Enabled bearer , priority 10 [ 52.509259][ T1192] tipc: Resetting bearer [ 52.517898][ T1192] tipc: Disabling bearer [ 52.549347][ T1192] tipc: Disabling bearer [ 52.560013][ T1195] tipc: Enabling of bearer rejected, failed to enable media [ 52.581014][ T1199] rust_binder: 1197:1199 no such ref 0 [ 52.607599][ T31] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 52.628484][ T31] usb 4-1: device descriptor read/8, error -71 [ 52.737482][ T50] usb 2-1: device descriptor read/64, error -71 [ 52.751394][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 52.751408][ T36] audit: type=1400 audit(1790779796.179:301): avc: denied { map } for pid=1203 comm="syz.0.276" path="/85/dev/ttyS0" dev="devtmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 52.781490][ T31] usb 4-1: device descriptor read/8, error -71 [ 52.794064][ T1206] tipc: Enabled bearer , priority 10 [ 52.801822][ T1205] tipc: Resetting bearer [ 52.811697][ T1205] tipc: Disabling bearer [ 52.837517][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 52.848324][ T50] usb usb2-port1: attempt power cycle [ 52.898437][ T313] usb 4-1: USB disconnect, device number 15 [ 52.987854][ T1214] FAULT_INJECTION: forcing a failure. [ 52.987854][ T1214] name failslab, interval 1, probability 0, space 0, times 0 [ 52.988623][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 53.000599][ T1214] CPU: 1 UID: 0 PID: 1214 Comm: syz.0.279 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 53.000629][ T1214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.000641][ T1214] Call Trace: [ 53.000649][ T1214] [ 53.000657][ T1214] __dump_stack+0x21/0x30 [ 53.000689][ T1214] dump_stack_lvl+0x140/0x1c0 [ 53.000714][ T1214] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.000742][ T1214] dump_stack+0x19/0x20 [ 53.000767][ T1214] should_fail_ex+0x3c2/0x510 [ 53.000791][ T1214] should_failslab+0xac/0x100 [ 53.000814][ T1214] kmem_cache_alloc_noprof+0x42/0x410 [ 53.000834][ T1214] ? fcntl_setlk+0xb4/0x10a0 [ 53.000855][ T1214] ? __cfi_futex_wake_mark+0x10/0x10 [ 53.000873][ T1214] fcntl_setlk+0xb4/0x10a0 [ 53.000892][ T1214] ? avc_has_perm_noaudit+0x26b/0x360 [ 53.000915][ T1214] ? __asan_memcpy+0x5a/0x80 [ 53.000934][ T1214] ? avc_has_perm_noaudit+0x289/0x360 [ 53.000957][ T1214] ? avc_has_perm+0x155/0x240 [ 53.000978][ T1214] ? __cfi_fcntl_setlk+0x10/0x10 [ 53.000998][ T1214] ? __cfi_avc_has_perm+0x10/0x10 [ 53.001021][ T1214] ? __kasan_check_write+0x18/0x20 [ 53.001040][ T1214] do_fcntl+0x8c2/0x1580 [ 53.001069][ T1214] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 53.001091][ T1214] ? check_fcntl_cmd+0xb0/0xb0 [ 53.001116][ T1214] ? bpf_lsm_file_fcntl+0xd/0x20 [ 53.001141][ T1214] ? security_file_fcntl+0x3e/0x110 [ 53.001162][ T1214] __se_sys_fcntl+0xe4/0x180 [ 53.001183][ T1214] __x64_sys_fcntl+0x7f/0xa0 [ 53.001204][ T1214] x64_sys_call+0x1cb3/0x2ee0 [ 53.001221][ T1214] do_syscall_64+0x57/0xf0 [ 53.001240][ T1214] ? clear_bhb_loop+0x50/0xa0 [ 53.001264][ T1214] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.001287][ T1214] RIP: 0033:0x7f5b9c19e159 [ 53.001303][ T1214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.001318][ T1214] RSP: 002b:00007f5b9cfe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 53.001338][ T1214] RAX: ffffffffffffffda RBX: 00007f5b9c425fa0 RCX: 00007f5b9c19e159 [ 53.001352][ T1214] RDX: 00002000000002c0 RSI: 0000000000000007 RDI: 0000000000000003 [ 53.001365][ T1214] RBP: 00007f5b9c23506b R08: 0000000000000000 R09: 0000000000000000 [ 53.001377][ T1214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.001389][ T1214] R13: 00007f5b9c426038 R14: 00007f5b9c425fa0 R15: 00007ffef0e519c8 [ 53.001406][ T1214] [ 53.057480][ T313] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 53.062136][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.062166][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.062187][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 53.062217][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 53.207486][ T313] usb 4-1: device descriptor read/64, error -71 [ 53.215737][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.223556][ T50] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 53.234075][ T9] usb 3-1: config 0 descriptor?? [ 53.268560][ T50] usb 2-1: device descriptor read/8, error -71 [ 53.295961][ T1218] syz.3.281: vmalloc error: size 24576, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 53.351327][ T1218] CPU: 0 UID: 0 PID: 1218 Comm: syz.3.281 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 53.351357][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.351370][ T1218] Call Trace: [ 53.351377][ T1218] [ 53.351383][ T1218] __dump_stack+0x21/0x30 [ 53.351413][ T1218] dump_stack_lvl+0x140/0x1c0 [ 53.351439][ T1218] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.351476][ T1218] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 53.351498][ T1218] dump_stack+0x19/0x20 [ 53.351524][ T1218] warn_alloc+0x1e7/0x2c0 [ 53.351553][ T1218] ? __cfi_warn_alloc+0x10/0x10 [ 53.351580][ T1218] ? __kmalloc_node_noprof+0x252/0x500 [ 53.351600][ T1218] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 53.351619][ T1218] __vmalloc_node_range_noprof+0x100b/0x1300 [ 53.351642][ T1218] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 53.351661][ T1218] ? vsnprintf+0x19ef/0x1ad0 [ 53.351681][ T1218] ? kvm_dev_ioctl+0x12a/0x14c0 [ 53.351698][ T1218] __vmalloc_noprof+0x104/0x1d0 [ 53.351714][ T1218] ? kvm_dev_ioctl+0x12a/0x14c0 [ 53.351730][ T1218] ? alloc_fd+0x4c1/0x570 [ 53.351751][ T1218] ? __cfi___vmalloc_noprof+0x10/0x10 [ 53.351769][ T1218] kvm_dev_ioctl+0x12a/0x14c0 [ 53.351785][ T1218] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 53.351801][ T1218] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.351831][ T1218] ? security_file_ioctl+0x3e/0x110 [ 53.351851][ T1218] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 53.351868][ T1218] __se_sys_ioctl+0x126/0x1b0 [ 53.351892][ T1218] __x64_sys_ioctl+0x7f/0xa0 [ 53.351914][ T1218] x64_sys_call+0x1878/0x2ee0 [ 53.351932][ T1218] do_syscall_64+0x57/0xf0 [ 53.351951][ T1218] ? clear_bhb_loop+0x50/0xa0 [ 53.351977][ T1218] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.352001][ T1218] RIP: 0033:0x7f2fd8b9e159 [ 53.352019][ T1218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.352036][ T1218] RSP: 002b:00007f2fd9a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.352057][ T1218] RAX: ffffffffffffffda RBX: 00007f2fd8e25fa0 RCX: 00007f2fd8b9e159 [ 53.352084][ T1218] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 53.352097][ T1218] RBP: 00007f2fd8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 53.352110][ T1218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.352122][ T1218] R13: 00007f2fd8e26038 R14: 00007f2fd8e25fa0 R15: 00007ffd24a4c1a8 [ 53.352140][ T1218] [ 53.352177][ T1218] Mem-Info: [ 53.380082][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 53.384966][ T1218] active_anon:39241 inactive_anon:523 isolated_anon:0 [ 53.384966][ T1218] active_file:21290 inactive_file:2731 isolated_file:0 [ 53.384966][ T1218] unevictable:17 dirty:199 writeback:0 [ 53.384966][ T1218] slab_reclaimable:6644 slab_unreclaimable:68410 [ 53.384966][ T1218] mapped:24637 shmem:32088 pagetables:964 [ 53.384966][ T1218] sec_pagetables:0 bounce:0 [ 53.384966][ T1218] kernel_misc_reclaimable:0 [ 53.384966][ T1218] free:1460523 free_pcp:679 free_cma:0 [ 53.389197][ T774] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.395090][ T1218] Node 0 active_anon:156964kB inactive_anon:2092kB active_file:85160kB inactive_file:10924kB unevictable:68kB isolated(anon):0kB isolated(file):0kB mapped:98548kB dirty:796kB writeback:0kB shmem:128352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5024kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no [ 53.401631][ T1183] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 53.404357][ T1218] DMA32 free:2832300kB boost:0kB min:18632kB low:23288kB high:27944kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3014252kB managed:2832300kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.409068][ T1182] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 53.413695][ T1218] lowmem_reserve[]: [ 53.438510][ T50] usb 2-1: device descriptor read/8, error -71 [ 53.442359][ T1218] 0 [ 53.467898][ T1221] tipc: Enabled bearer , priority 10 [ 53.472209][ T1218] 3921 [ 53.478175][ T1221] tipc: Enabled bearer , priority 10 [ 53.481595][ T1218] 3921 [ 53.727535][ T50] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 53.731676][ T9] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 53.734539][ T1218] [ 53.742536][ T9] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 53.743237][ T1220] tipc: Resetting bearer [ 53.749882][ T9] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 53.753002][ T1218] Normal free:3011484kB boost:0kB min:26420kB low:33024kB high:39628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156964kB inactive_anon:2092kB active_file:85160kB inactive_file:10924kB unevictable:68kB writepending:796kB present:5242880kB managed:4015864kB mlocked:68kB bounce:0kB free_pcp:1028kB local_pcp:900kB free_cma:0kB [ 53.759407][ T9] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 53.762427][ T1218] lowmem_reserve[]: [ 53.777555][ T9] holtek_kbd 0003:04D9:A055.000A: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 53.784889][ T1218] 0 0 0 [ 53.854582][ T1220] tipc: Disabling bearer [ 53.856995][ T1218] DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 6*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) [ 53.862938][ T50] usb 2-1: device descriptor read/8, error -71 [ 53.879016][ T1218] 5*512kB (M) 5*1024kB (UM) 4*2048kB (M) 687*4096kB (M) = 2832300kB [ 53.887091][ T1218] Normal: 5*4kB (UE) 4*8kB (UME) 13*16kB (UME) 10*32kB (UE) 117*64kB (UME) 108*128kB (UME) 33*256kB (UM) 13*512kB (UME) 10*1024kB (ME) 3*2048kB (ME) 721*4096kB (UM) = 3006596kB [ 53.904784][ T1218] 56661 total pagecache pages [ 53.909538][ T1218] 521 pages in swap cache [ 53.913867][ T1218] Free swap = 122380kB [ 53.918197][ T1218] Total swap = 124996kB [ 53.922354][ T1218] 2064283 pages RAM [ 53.926179][ T1218] 0 pages HighMem/MovableOnly [ 53.931258][ T1218] 352242 pages reserved [ 53.935416][ T1218] 0 pages cma reserved [ 53.942307][ T1218] Memory allocations: [ 53.946327][ T1218] 0 B 0 init/main.c:1477 func:do_initcalls [ 53.954568][ T1218] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 53.962848][ T1218] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 53.963108][ T1220] tipc: Disabling bearer [ 53.970711][ T1218] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 53.991506][ T1218] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 53.998409][ T50] usb 2-1: device descriptor read/8, error -71 [ 53.999744][ T1218] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 54.014725][ T1218] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 54.022806][ T1218] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 54.025886][ T1210] usb 3-1: USB disconnect, device number 17 [ 54.033783][ T1225] tipc: Enabling of bearer rejected, failed to enable media [ 54.039898][ T1218] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 54.054557][ T1218] 0 B 0 init/initramfs.c:101 func:find_link [ 54.077699][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 54.088651][ T36] audit: type=1400 audit(1790779797.509:302): avc: denied { bind } for pid=1228 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.108166][ T36] audit: type=1400 audit(1790779797.519:303): avc: denied { write } for pid=1228 comm="syz.3.285" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.130872][ T36] audit: type=1400 audit(1790779797.519:304): avc: denied { open } for pid=1228 comm="syz.3.285" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.130883][ T50] usb usb2-port1: unable to enumerate USB device [ 54.138078][ T1231] tipc: Enabled bearer , priority 10 [ 54.157538][ T36] audit: type=1400 audit(1790779797.519:305): avc: denied { ioctl } for pid=1228 comm="syz.3.285" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.191296][ T1230] tipc: Resetting bearer [ 54.198077][ T1230] tipc: Disabling bearer [ 54.236181][ T36] audit: type=1400 audit(1790779797.659:306): avc: denied { create } for pid=1232 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 54.260526][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.267786][ T1233] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 54.275417][ T1233] netlink: 9 bytes leftover after parsing attributes in process `syz.3.287'. [ 54.317911][ T388] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.477602][ T388] usb 1-1: Using ep0 maxpacket: 32 [ 54.483968][ T388] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.494178][ T388] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.506695][ T1248] tipc: Enabled bearer , priority 10 [ 54.508583][ T388] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 54.514499][ T1248] tipc: Enabled bearer , priority 10 [ 54.523145][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.537743][ T388] usb 1-1: Product: syz [ 54.537772][ T1247] tipc: Resetting bearer [ 54.541896][ T388] usb 1-1: Manufacturer: syz [ 54.541910][ T388] usb 1-1: SerialNumber: syz [ 54.558404][ T1247] tipc: Disabling bearer [ 54.599314][ T1247] tipc: Disabling bearer [ 54.647105][ T1252] tipc: Enabling of bearer rejected, failed to enable media [ 54.667487][ T313] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 54.673578][ T1256] tipc: Enabled bearer , priority 10 [ 54.684939][ T1255] tipc: Resetting bearer [ 54.692208][ T1255] tipc: Disabling bearer [ 54.743665][ T36] audit: type=1326 audit(1790779798.169:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1226 comm="syz.0.284" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b9c19e159 code=0x0 [ 54.795254][ T36] audit: type=1400 audit(1790779798.219:308): avc: denied { getattr } for pid=1226 comm="syz.0.284" path="cgroup:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.838804][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.847249][ T313] usb 4-1: config 161 has an invalid interface number: 149 but max is 0 [ 54.855662][ T313] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 54.866275][ T313] usb 4-1: config 161 has no interface number 0 [ 54.872651][ T313] usb 4-1: config 161 interface 149 altsetting 134 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 54.886057][ T313] usb 4-1: config 161 interface 149 has no altsetting 0 [ 54.895017][ T313] usb 4-1: string descriptor 0 read error: -22 [ 54.901269][ T313] usb 4-1: New USB device found, idVendor=f649, idProduct=559f, bcdDevice=54.93 [ 54.910327][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.922839][ T313] usb-storage 4-1:161.149: USB Mass Storage device detected [ 54.987472][ T1210] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 55.117477][ T1210] usb 3-1: device descriptor read/64, error -71 [ 55.244558][ T36] audit: type=1400 audit(1790779798.669:309): avc: denied { append } for pid=1245 comm="syz.3.290" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 55.268614][ T36] audit: type=1400 audit(1790779798.669:310): avc: denied { open } for pid=1245 comm="syz.3.290" path="/42/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 55.357473][ T1210] usb 3-1: device descriptor read/64, error -71 [ 55.597474][ T1210] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 55.727473][ T1210] usb 3-1: device descriptor read/64, error -71 [ 55.817471][ T313] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 55.967523][ T1210] usb 3-1: device descriptor read/64, error -71 [ 55.974750][ T313] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 55.982899][ T313] usb 2-1: config 0 has no interface number 0 [ 55.989019][ T313] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 55.999912][ T313] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 56.013072][ T313] usb 2-1: config 0 interface 49 has no altsetting 0 [ 56.021252][ T313] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 56.030355][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.038381][ T313] usb 2-1: Product: syz [ 56.042553][ T313] usb 2-1: Manufacturer: syz [ 56.047148][ T313] usb 2-1: SerialNumber: syz [ 56.052489][ T313] usb 2-1: config 0 descriptor?? [ 56.077607][ T1210] usb usb3-port1: attempt power cycle [ 56.260510][ T313] ftdi_sio 2-1:0.49: FTDI USB Serial Device converter detected [ 56.268577][ T313] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 56.275740][ T313] usb 2-1: USB disconnect, device number 17 [ 56.282606][ T313] ftdi_sio 2-1:0.49: device disconnected [ 56.417473][ T1210] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 56.438489][ T1210] usb 3-1: device descriptor read/8, error -71 [ 56.568508][ T1210] usb 3-1: device descriptor read/8, error -71 [ 56.807474][ T1210] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 56.828520][ T1210] usb 3-1: device descriptor read/8, error -71 [ 56.958505][ T1210] usb 3-1: device descriptor read/8, error -71 [ 57.007474][ T313] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 57.067546][ T1210] usb usb3-port1: unable to enumerate USB device [ 57.081102][ T388] usb 1-1: MIDIStreaming interface descriptor not found [ 57.092396][ T388] usb 1-1: USB disconnect, device number 9 [ 57.128829][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.160677][ T313] usb 2-1: config 7 has an invalid interface number: 58 but max is 0 [ 57.168968][ T313] usb 2-1: config 7 has no interface number 0 [ 57.175142][ T313] usb 2-1: config 7 interface 58 altsetting 129 endpoint 0xE has invalid maxpacket 46937, setting to 64 [ 57.186683][ T313] usb 2-1: config 7 interface 58 has no altsetting 0 [ 57.194998][ T313] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=f8.5e [ 57.204209][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.212224][ T313] usb 2-1: Product: syz [ 57.216395][ T313] usb 2-1: Manufacturer: syz [ 57.221065][ T313] usb 2-1: SerialNumber: syz [ 57.396958][ T1285] tipc: Enabling of bearer rejected, failed to enable media [ 57.406567][ T1210] usb 4-1: USB disconnect, device number 17 [ 57.429816][ T313] usb 2-1: unknown interface protocol 0xa1, assuming v1 [ 57.436823][ T313] usb 2-1: 58:1 : does not exist [ 57.442421][ T313] usb 2-1: 58:2 : does not exist [ 57.443085][ T1289] tipc: Enabled bearer , priority 10 [ 57.452017][ T313] usb 2-1: USB disconnect, device number 18 [ 57.464041][ T1288] tipc: Resetting bearer [ 57.483697][ T1288] tipc: Disabling bearer [ 57.596935][ T1299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 57.796272][ T1307] tipc: Enabling of bearer rejected, failed to enable media [ 57.807509][ T1210] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 57.820917][ T36] audit: type=1400 audit(1790779801.249:311): avc: denied { map } for pid=1308 comm="syz.2.312" path="socket:[14210]" dev="sockfs" ino=14210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.839221][ T1314] usb usb8: usbfs: process 1314 (syz.0.313) did not claim interface 0 before use [ 57.844694][ T36] audit: type=1400 audit(1790779801.249:312): avc: denied { read } for pid=1308 comm="syz.2.312" path="socket:[14210]" dev="sockfs" ino=14210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.881577][ T1314] usb usb8: usbfs: process 1314 (syz.0.313) did not claim interface 0 before use [ 57.887550][ T1310] support for cryptoloop has been removed. Use dm-crypt instead. [ 57.928157][ T1323] tipc: Enabled bearer , priority 10 [ 57.935565][ T1322] tipc: Resetting bearer [ 57.943013][ T1322] tipc: Disabling bearer [ 57.992360][ T36] audit: type=1400 audit(1790779801.419:313): avc: denied { create } for pid=1328 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 58.012985][ T1210] usb 4-1: device descriptor read/64, error -71 [ 58.013444][ T36] audit: type=1400 audit(1790779801.419:314): avc: denied { write } for pid=1328 comm="syz.2.317" path="socket:[15128]" dev="sockfs" ino=15128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 58.043739][ T36] audit: type=1400 audit(1790779801.449:315): avc: denied { mount } for pid=1330 comm="syz.0.318" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 58.067755][ T36] audit: type=1400 audit(1790779801.499:316): avc: denied { connect } for pid=1330 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.142349][ T36] audit: type=1400 audit(1790779801.569:317): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 58.214645][ T36] audit: type=1400 audit(1790779801.639:318): avc: denied { create } for pid=1336 comm="syz.0.320" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.215958][ T1337] fuse: Bad value for 'user_id' [ 58.235254][ T388] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 58.240204][ T1337] fuse: Bad value for 'user_id' [ 58.247748][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 58.260237][ T36] audit: type=1400 audit(1790779801.639:319): avc: denied { write } for pid=1336 comm="syz.0.320" name="file2" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.274479][ T1339] tipc: Enabled bearer , priority 10 [ 58.282727][ T36] audit: type=1400 audit(1790779801.639:320): avc: denied { open } for pid=1336 comm="syz.0.320" path="/107/file2" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.289286][ T1210] usb 4-1: device descriptor read/64, error -71 [ 58.315563][ T1339] tipc: Enabled bearer , priority 10 [ 58.326210][ T1338] tipc: Resetting bearer [ 58.335527][ T1338] tipc: Disabling bearer [ 58.358741][ T1338] tipc: Disabling bearer [ 58.385502][ T1341] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 58.396555][ T1341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=1341 comm=syz.0.322 [ 58.438803][ T1341] netlink: 'syz.0.322': attribute type 16 has an invalid length. [ 58.446557][ T1341] netlink: 'syz.0.322': attribute type 4 has an invalid length. [ 58.447510][ T9] usb 3-1: device descriptor read/64, error -71 [ 58.454283][ T1341] netlink: 64114 bytes leftover after parsing attributes in process `syz.0.322'. [ 58.460816][ T388] usb 2-1: Using ep0 maxpacket: 32 [ 58.478144][ T388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.486612][ T388] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.496875][ T388] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.508602][ T388] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 58.517710][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.523472][ T1345] rust_binder: 1344:1345 no such ref 3 [ 58.525838][ T388] usb 2-1: Product: syz [ 58.531724][ T1345] rust_binder: Write failure EFAULT in pid:363 [ 58.535605][ T388] usb 2-1: Manufacturer: syz [ 58.538066][ T1345] netlink: 5892 bytes leftover after parsing attributes in process `syz.0.324'. [ 58.542192][ T388] usb 2-1: SerialNumber: syz [ 58.567633][ T1210] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 58.620087][ T1350] tipc: Enabled bearer , priority 10 [ 58.627514][ T1349] tipc: Resetting bearer [ 58.636664][ T1349] tipc: Disabling bearer [ 58.687753][ T1352] EXT4-fs: dax option not supported [ 58.707485][ T1210] usb 4-1: device descriptor read/64, error -71 [ 58.721566][ T9] usb 3-1: device descriptor read/64, error -71 [ 58.749357][ T388] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 58.757667][ T388] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 58.765568][ T388] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 58.773238][ T388] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 58.781091][ T388] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 58.788649][ T388] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 58.800685][ T388] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 58.813511][ T388] usb 2-1: USB disconnect, device number 19 [ 58.821161][ T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.870655][ T1360] tipc: Enabled bearer , priority 10 [ 58.877765][ T1360] tipc: Enabled bearer , priority 10 [ 58.885231][ T1359] tipc: Resetting bearer [ 58.894678][ T1359] tipc: Disabling bearer [ 58.919177][ T1359] tipc: Disabling bearer [ 58.967468][ T1210] usb 4-1: device descriptor read/64, error -71 [ 58.967468][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 59.087613][ T1210] usb usb4-port1: attempt power cycle [ 59.117522][ T9] usb 3-1: device descriptor read/64, error -71 [ 59.268736][ T1373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1373 comm=syz.1.334 [ 59.365201][ T9] usb 3-1: device descriptor read/64, error -71 [ 59.427513][ T1210] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.449006][ T1210] usb 4-1: device descriptor read/8, error -71 [ 59.477612][ T9] usb usb3-port1: attempt power cycle [ 59.588757][ T1210] usb 4-1: device descriptor read/8, error -71 [ 59.817498][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 59.838541][ T9] usb 3-1: device descriptor read/8, error -71 [ 59.851012][ T1210] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 59.889429][ T1210] usb 4-1: device descriptor read/8, error -71 [ 59.968549][ T9] usb 3-1: device descriptor read/8, error -71 [ 60.018509][ T1210] usb 4-1: device descriptor read/8, error -71 [ 60.127588][ T1210] usb usb4-port1: unable to enumerate USB device [ 60.207521][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 60.228541][ T9] usb 3-1: device descriptor read/8, error -71 [ 60.358539][ T9] usb 3-1: device descriptor read/8, error -71 [ 60.467925][ T9] usb usb3-port1: unable to enumerate USB device [ 61.387475][ T313] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 61.457517][ T1210] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 61.517485][ T313] usb 3-1: device descriptor read/64, error -71 [ 61.597532][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 61.607467][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 61.614064][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.625881][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.636008][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 61.649192][ T1210] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 61.658361][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.667150][ T1210] usb 2-1: config 0 descriptor?? [ 61.758715][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 61.770193][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 61.776942][ T1445] tipc: Enabled bearer , priority 10 [ 61.787802][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1297, setting to 64 [ 61.789222][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 61.798671][ T313] usb 3-1: device descriptor read/64, error -71 [ 61.808067][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.815998][ T1445] tipc: Enabled bearer , priority 10 [ 61.828753][ T9] usb 1-1: Product: syz [ 61.833092][ T1444] tipc: Resetting bearer [ 61.833092][ T9] usb 1-1: Manufacturer: syz [ 61.833109][ T9] usb 1-1: SerialNumber: syz [ 61.849032][ T9] usb 1-1: config 0 descriptor?? [ 61.849672][ T1444] tipc: Disabling bearer [ 61.855901][ T1427] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.875198][ T1210] hid (null): invalid report_size 6778482 [ 61.891375][ T1210] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000B/input/input17 [ 61.904235][ T1210] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000B/input/input18 [ 61.917007][ T1444] tipc: Disabling bearer [ 61.926813][ T1210] kye 0003:0458:5011.000B: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 62.067493][ T313] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 62.078728][ T9] usb 1-1: USB disconnect, device number 10 [ 62.095032][ T388] usb 2-1: USB disconnect, device number 20 [ 62.217489][ T313] usb 3-1: device descriptor read/64, error -71 [ 62.457480][ T313] usb 3-1: device descriptor read/64, error -71 [ 62.531216][ T1463] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 62.543828][ T1463] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 62.552238][ T1463] CPU: 1 UID: 0 PID: 1463 Comm: syz.3.368 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 62.563694][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.573749][ T1463] RIP: 0010:vsscanf+0x18c/0x24b0 [ 62.578780][ T1463] Code: 48 c7 c6 50 d2 e3 87 e8 92 3a e5 fb 41 83 fe 25 74 4d 45 85 f6 0f 84 a4 21 00 00 48 ff c3 48 89 5c 24 58 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 8e 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 62.598394][ T1463] RSP: 0018:ffffc900082375a0 EFLAGS: 00010246 [ 62.604446][ T1463] RAX: 0000000000000000 RBX: ffffffff86364f61 RCX: 0000000000000001 [ 62.612405][ T1463] RDX: ffffffff85a2445e RSI: ffffffff87e3d250 RDI: 0000000000000030 [ 62.620369][ T1463] RBP: ffffc900082376b0 R08: ffff88810e3f5f00 R09: 0000000000000002 [ 62.628329][ T1463] R10: 0000000000000025 R11: 0000000000000000 R12: ffffffff86364f60 [ 62.636283][ T1463] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 62.644241][ T1463] FS: 00007f2fd9a0b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.653157][ T1463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.659745][ T1463] CR2: 000000000000000b CR3: 00000001192ac000 CR4: 00000000003526b0 [ 62.667732][ T1463] Call Trace: [ 62.671015][ T1463] [ 62.673953][ T1463] ? __cfi_vsscanf+0x10/0x10 [ 62.678553][ T1463] ? update_curr+0xf1/0x9c0 [ 62.683068][ T1463] ? xfd_validate_state+0x68/0x140 [ 62.688204][ T1463] sscanf+0xe3/0x150 [ 62.692113][ T1463] ? __cfi_sscanf+0x10/0x10 [ 62.696621][ T1463] ? mutex_lock_interruptible+0x97/0x1d0 [ 62.702275][ T1463] ? __asan_memcpy+0x5a/0x80 [ 62.706879][ T1463] split_huge_pages_write+0x3c7/0x1220 [ 62.712351][ T1463] ? finish_task_switch+0x139/0x770 [ 62.717564][ T1463] ? __schedule+0x149e/0x20b0 [ 62.722248][ T1463] ? __cfi_split_huge_pages_write+0x10/0x10 [ 62.728155][ T1463] ? __cfi___futex_queue+0x10/0x10 [ 62.733281][ T1463] ? futex_unqueue+0x136/0x160 [ 62.738058][ T1463] ? __kasan_check_write+0x18/0x20 [ 62.743180][ T1463] ? debugfs_file_get+0x3be/0x590 [ 62.748220][ T1463] ? futex_wait+0x2b8/0x7c0 [ 62.752741][ T1463] ? __cfi_futex_wait+0x10/0x10 [ 62.757293][ T1471] tc_dump_action: action bad kind [ 62.757606][ T1463] full_proxy_write+0x128/0x1e0 [ 62.757636][ T1463] ? __cfi_full_proxy_write+0x10/0x10 [ 62.757665][ T1463] vfs_write+0x3c4/0xfd0 [ 62.777088][ T1463] ? __cfi_vfs_write+0x10/0x10 [ 62.781842][ T1463] ? __kasan_check_write+0x18/0x20 [ 62.786953][ T1463] ? mutex_lock+0x97/0x1d0 [ 62.791367][ T1463] ? __cfi_mutex_lock+0x10/0x10 [ 62.796202][ T1463] ksys_write+0x145/0x260 [ 62.800517][ T1463] ? xfd_validate_state+0x68/0x140 [ 62.805619][ T1463] ? __cfi_ksys_write+0x10/0x10 [ 62.810550][ T1463] ? __kasan_check_write+0x18/0x20 [ 62.815658][ T1463] ? fpregs_restore_userregs+0x11c/0x260 [ 62.821286][ T1463] __x64_sys_write+0x7f/0x90 [ 62.826039][ T1463] x64_sys_call+0x271c/0x2ee0 [ 62.830720][ T1463] do_syscall_64+0x57/0xf0 [ 62.835121][ T1463] ? clear_bhb_loop+0x50/0xa0 [ 62.839779][ T1463] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.845657][ T1463] RIP: 0033:0x7f2fd8b9e159 [ 62.850056][ T1463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.870985][ T1463] RSP: 002b:00007f2fd9a0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.879396][ T1463] RAX: ffffffffffffffda RBX: 00007f2fd8e26090 RCX: 00007f2fd8b9e159 [ 62.887357][ T1463] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 62.895317][ T1463] RBP: 00007f2fd8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 62.903280][ T1463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.911242][ T1463] R13: 00007f2fd8e26128 R14: 00007f2fd8e26090 R15: 00007ffd24a4c1a8 [ 62.919229][ T1463] [ 62.922235][ T1463] Modules linked in: [ 62.926321][ T1463] ---[ end trace 0000000000000000 ]--- [ 62.932578][ T313] usb usb3-port1: attempt power cycle [ 62.934753][ T1463] RIP: 0010:vsscanf+0x18c/0x24b0 [ 62.942977][ T1463] Code: 48 c7 c6 50 d2 e3 87 e8 92 3a e5 fb 41 83 fe 25 74 4d 45 85 f6 0f 84 a4 21 00 00 48 ff c3 48 89 5c 24 58 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 8e 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 62.962662][ T1463] RSP: 0018:ffffc900082375a0 EFLAGS: 00010246 [ 62.968793][ T1463] RAX: 0000000000000000 RBX: ffffffff86364f61 RCX: 0000000000000001 [ 62.976769][ T1463] RDX: ffffffff85a2445e RSI: ffffffff87e3d250 RDI: 0000000000000030 [ 62.984807][ T1463] RBP: ffffc900082376b0 R08: ffff88810e3f5f00 R09: 0000000000000002 [ 62.992827][ T1463] R10: 0000000000000025 R11: 0000000000000000 R12: ffffffff86364f60 [ 63.000845][ T1463] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 63.008873][ T1463] FS: 00007f2fd9a0b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 63.017848][ T1463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.024438][ T1463] CR2: 00007f0de57ef2f8 CR3: 00000001192ac000 CR4: 00000000003526b0 [ 63.032436][ T1463] Kernel panic - not syncing: Fatal exception [ 63.038652][ T1463] Kernel Offset: disabled [ 63.042968][ T1463] Rebooting in 86400 seconds..