last executing test programs: 24.303099362s ago: executing program 3 (id=821): epoll_create(0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 24.294260152s ago: executing program 3 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffff9, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x41000, 0x4, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xfec00000, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe, 0x9}, {0xf000, 0x0, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0x8, 0x9e, 0xb1, 0xc, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xc, 0x5, 0x7, 0x5, 0x7, 0x8, 0x3, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0xd, 0x9, 0x7, 0xc, 0xb0, 0x99}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000) 24.185275345s ago: executing program 3 (id=823): setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) 24.185028905s ago: executing program 3 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000340)={0x1, 0x2, 0x3ff, 0x2, 0x2}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd070010000000140bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000240)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x18d042, 0x15) pwrite64(r3, &(0x7f00000002c0)="ff", 0x582f5, 0xfb2200) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40e41, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000340)={0x1, 0x2, 0x3ff, 0x2, 0x2}) (async) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd070010000000140bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) (async) chdir(&(0x7f0000000240)='./mnt\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x18d042, 0x15) (async) pwrite64(r3, &(0x7f00000002c0)="ff", 0x582f5, 0xfb2200) (async) 24.144794336s ago: executing program 3 (id=827): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000280)="f20f3365f2a72e0fc7b2000000000f015a10c510c4e2fd307c0800f30f09f20f10a95d4e00006466f30fbcb30f000000b9800000c00f3235002000000f308ed0", 0x40}], 0x1, 0x2e, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x30000, 0x0, 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x4000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xe79c8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x7c2}) rmdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.21655515s ago: executing program 3 (id=844): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xa, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000001c0)=0x35}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6142, 0xbc) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d0) flock(r0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@verity_on}]}) unlink(&(0x7f0000000080)='./file0/file1\x00') 23.178637311s ago: executing program 32 (id=844): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xa, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000001c0)=0x35}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6142, 0xbc) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d0) flock(r0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@verity_on}]}) unlink(&(0x7f0000000080)='./file0/file1\x00') 9.851678259s ago: executing program 2 (id=904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x30, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getae={0x40, 0x1f, 0x21, 0x70bd2d, 0x25dfdbf9, {{@in6=@local, 0x404d4, 0xa, 0x3c}, @in6=@mcast1, 0xffff, 0x3506}}, 0x40}, 0x1, 0x0, 0x0, 0x808}, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000640)={0x4, 0xa78a, 0x5}) r3 = dup3(r1, r0, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f00000002c0)={0x18, 0x2, {0x1, @local}}, 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8001, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x200040e0}, 0x44000) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000010000000000000000ee78", @ANYRES32=r0, @ANYBLOB="000000000100"/28, @ANYRES32=r1, @ANYBLOB="000000000300"/28, @ANYRES32=r1, @ANYBLOB="00000000feffffffffffffff00"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r0, @ANYBLOB="0000000000000000c000"/28, @ANYRES32=r2, @ANYBLOB="0000000000000080ffffffff00"/28, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00@\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000f00"/28]) r7 = openat(r3, &(0x7f0000000440)='./proc\x00', 0x42, 0x0) write$binfmt_elf64(r7, &(0x7f0000000480)=ANY=[], 0x78) getrandom(&(0x7f0000000680)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.775210451s ago: executing program 4 (id=845): unshare(0x62020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="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"], 0x18}}, 0x40c4) 8.097618013s ago: executing program 2 (id=907): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000580)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r2, 0x0, r1, 0x0, 0x25a5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x30580000000000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x6, 0x2}, 0x8) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x0, 0x0) read(r7, &(0x7f0000000380)=""/100, 0x64) getsockname$tipc(r5, &(0x7f00000000c0), &(0x7f0000000440)=0x10) syz_usb_connect(0x2, 0xb3, 0x0, 0x0) 7.964431587s ago: executing program 4 (id=845): unshare(0x62020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="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"], 0x18}}, 0x40c4) 6.2487848s ago: executing program 0 (id=914): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x1501) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000003480)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000003540)=""/4091, &(0x7f0000004540)=0xffb) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001200)=@urb_type_iso={0x0, {0x3}, 0xfffffff8, 0x60, &(0x7f0000000040)="9b74f4faf9b338da0671c09f91c6effa7c71556931cd3d2417e27b917fed672cbf0ff46228693d3f2fdc8a2c66337123543b6d10ea3c7843dcd6175859f22d478c466d5b398219ec86f48b50783306c9414ab4004f7265d2074766448155a815d34cb14eeebcfaa31e507a0c", 0x6c, 0x5, 0xc95e, 0x18, 0x0, 0x9, &(0x7f0000000200)="e5230a161b879606c34048845cb4bd3ea9e3537c79168c6d2339e17f6b3bdf9f871ea123daaec7cba3c93bedcb4629cf5b5d99dd57179adac0c1668513150c3c4a9c16ab73a0fba161c95c23e518a017c340d81c53563c059b6e61957c52990b286ca3323f83cbfcfc8458abe9102318efb3c77758bc0aa98b504e4e67eef71af763ccc52d8d6589612880b1dfd7ce9f28acaed7654e5b39e3514a9aff9034161a9b39e0843dce71d66c598f937ea24780c04917fcffdddfe82f5e3b7d8dd2f36089223c360bdfbf035f987efba8ee75c63f08aefe28d7aab83b56a059e1d3224f504e16c3b9d927f47db242edf612dccf44bba43792e05c2b61e8c880f779bef675713dc9240772176accd6349ce94f088b53cc82f3b266e08a14c46b454ce830dc3f98e60cfc9bf6e5d21d1c0f348ed304ac9d71863bd18d7437279c443dc4e81fcdad9b73b66b2d8816ca6c8a93543654b9046ab6efe76d283b30e3a58bd211b7f6a20e0cfeae3b494a3f3adc7ed43dc80345c71ca5c5596ab2cd3a2652a1dec475ccb71a143de29b98d65e40fa61391b083940f5db4f577fa9604a6ff511ef1f975744e9417e674be03ed9394466e821549256489aaa0ed778268e16156a10d251fef40a6f5e086fc5ec87c2b549671b88c7f8e3f1c29c616c051a709de86e7a78e2b56fe8763c7e2b511cca363c531c8d722ea6356aa7e2e4de01fceb75053981fad4131d0cc25ed30b1cbb658aa832eeb419a03b5fcc099713637b0a45898ba54052777f03df1391de06b6f94d37a242129f2e72411d4c8ee8f068c0827c8fff50bbc20047ae6c8ff397d14d8db542f2be8483ccc581fdac2beac4047977416bd58b01bcb328b5ac97e5a1e434b6643470b99b7a21e81cc9b57a1a7c06f3dfebdef48fe7488f95587d1463f5aeff77a1cde352f5d4ff4921acec6a7d44fe50c77bd93c973d18b4a28f79ea86b952c73cebae80eedcecc9e15c9073456cd38c5394162145962e67826237b22f051dd749a9bafeb4faaf57bd2dda7fddadac33e1b6545e6c52eb1d124cdde80fc6941d51dd3110a9cbc886182ae251e151d88dfc11affd170cd70071785da4446c354e517efab2f3053c219a5099eeafc513cb6f24bff8603ebe648892bc51f0d0859139a3682922373f36b3eabfd9d8499d86b905cc795667bfcf8e7bdf034590c7373437e39b1e2ba996340feb118f4402267fbce28cf6e32f4dd4e0c8d3130d05cb0eeec93e679c3d3c7918dc31891510f5fd1a7cb6367107bb3ae5c5aea84f0b9f7c5d642f6175bdc6bcf4c25127ddcdcc253c409abe235d15138d367fbfb499b7543231c923046553e4863504bd9871486a4bf7ac2f292636081c380e488234d7d11bb0bbe79e01e034bd8889540dc993a301c3cf3b9696472d1c6dd5e017c8b56d21ac30adc4d2957e5cbbd2faffe62c7496c6728e1117a8c5f26326b8c9722d1f535a49a726e34f27008e720e543e864c45886911fc75020d22134f3716e19c936807b0bbfca02b6aa2035a395f4bfd74ee1351a05fb56a87d0b5f6162b662bf8e8ab01e4fe49a3ae9078ca784ac94932094b00a8e18a7ca251cb519b3877f0da985d1eebc2edc661375cd2199c98aa0c6065484246b0ce1b7fced67fc1b753089d49eff754be95a42b4e853125df0af0371f657710e14cba53c60fdedd20c08aaac00c5f3f210940fe513bf936f5048de033ee7c4bba12eac9271a3873fca5b923e672cd1846f0ec8236b4153b6120b5c5ab98047633595e49217d3754856b618753b9a43ae0b8f31a87eb19de679031465d436dc6787525f747428b4cc623172216b54f7bdaf8045565a9928b55c5c136759fe0d68d66b25fb3be782c2b882f07433c64c053322fe8a2f0fce44ac252e7c67403a61ab277478b1320ce7c9cdaa5ffbc1c68e5ce9569229647eeb8633da8e5c30ebbffbb1c0b35bc37ad991ac72cbb3e06e50225cc3c407a17af03e6159a91be5caa2775591d884ca39e2ed24d758a8880817d64b9db59a71f1c477158d4169f57b6244c11832e9415f85d1342d3d33d9120a7165ca6645553e0049f7d6d36b6f08f8df5ea09d26549fe0204f2561e9b8bba88332bc7fbb12f4968fac035da1de4d5d481d5b131df0420dadd7d1af40c0dc13df04e209a485b0520aba7a12111dd0150f4452a99469fb396bbc2630f8148d3195dfb5afc04dafc95306e0fce46df75b2e2153d64ad2bc66227e072f15c3de2b6c2243ae807cc41c0cf89f3d67ed3fb08814e9dbd8207c499b7e4fe187339d53c980f3219851207fbf032a1188ecd3311aac1f990da5fb91cd8b697f28ce9f10b26bcab7e43107534e55f5096cc3a7be80f47e08b7890f84b974e1c4a4cbafcd691175d77c1abee9ba2c160c62be735eb04346ed16fd28548405a04d6fa9da15ad2dd894ea6dedf418f1d8dd37c1e1c9c496827f7008ecad1de38da8b2279dd56ee2c46dbeb01e1a80e64589e61e23b89a4b3fa9d7a73e79c71970925d271a26a79ad24376305e32bcb159c7f6c1cef0ef743142f79267bc5ab5568ae8151fe0b91f29766937d95b7239bf6528ccd02e5042723743577d7a24e5455829c5f26669e654cf27ae98de618ec8b0af6d3713b140b45b8205b51ac2157ddad7ab9b3b3fc9bd589d7616f55cbfd4242863ab24a61905675a5d2d92a131349576709a72c150026a22266b57fdd0e2c36d3637658bd866f69f6703cfd64eda28dfa8d8ead18f8e9d0885cdabb9e7e15914df3d5af4dd9a2719890278b7648c01de293cd04806e5705195e8be885e83fc7e4b59c5d76de1245855477f909bcd8ccd96221416986a8a10faf92b1e679c998e8cda152b00bb4937e8930b4f683efe11fe25fa0437f0ca1bc97ba59f545ada97c8996ef7bfcdbb84d5b62f76d9ee8da118cc3066a9da86a83592a1b42198c1f9f11def3f69ac4fcaf917f99aa79ba91dd46563610cb23d5a37ee0d163842e72667234a73b50962bf69ac36a6332e19817b710618935a68e13257cfc54c378ef8a7c0aa7f826351b298af82a172e0dc38a59530f46bc8c5a4fa2680a9922e29036ddbb89415365d4cde9c8dc604f008873b519387cf76e773538310b8758c32160f5950ffcb6b66cd84df6919f9d9789ca23306ebe80f32883a08c18be17604eea16a478c579fe3264d27a649f1cdbccb1d6c1c319215c5656fb895d595952a507554a31894912203108fb29ff03c31653e4a4336a0e83763f6d25d37557491ac855ce63d4b1517b7442dffab3f91ca8461ee368cc044b82972c9df114fb7265f92d280d6e9195a8f84e2b09531ca4ae987c68cc203c76affe91398efe02181b7319d0fae90a699e488a1b51686caa01e409dcad546087fa30dac58f8000b24db507c608a49d641fb48eea2852bd72fa4089889b9a908dc899bf421bc60d8099918d3f58376930c1d22645b65eeea57ff05d435aef8d45dfbd5bcfe1c8ec5af65ce4f12e44c1af8fd387e4526264063edb14a991aad23f8dce47a2c18ee1df1dc37c6d91fe15f698fb5dca9f2c086fc8589142ba79ec1c21981a515873cb52ae2f272f7e49898b53c692f9ed4afbe64d329503632973199a7d0cc399a81594110a2994f20c0d7f1c0767f89b1b36742cae95594fd22cb66adaff2b65e3f3c1005de37b5a47df4ad0d60f26a7aeedc84cc71a6e91941733a5588a0011821db58c7c3acf18d8d4d0f4392e452f12ede338fed3b91379f5ac263503e311971516278a7af858a93018d55693d1332e68dbc3d9790d30a54d08e878dea92c41dedc110c1f7d7e365e8c3c591959ec95809e5ee0e7c34f245b3fd440b3f7a83b8d610bf124057fab86b93c7981c53314aa8471ae6c467a63ea4fc3b450833916db5490bbe5bca2b8dfee6918c672b9ef9ca56a76168cb34d8a70453b636764c20e98a6a5141b840edec1e90a61f6b1a77354c6644960ab76b801c08bf89e80460e1d4743c8a4ff19dfdff2e7739d62363f9e5f343a975372ff3502bc9380b6b37c855e43520e1ec9d15e1b3c5464cb81bfbf72d71fa6957ca335a0cc606c7f000192cfa1124cf8daa63764ad53b4001545340971206d39265c4b0f625e01bb865c08ac8dcc378ec5cb71206815fd970bb3be5d456de3c45df5b3af01f384e52ea0ced5f102867cc23bf60037a4e7fd49e68d758e74ec9dbbac0e8ace92a757eeae9c1278b0e2ac5a8df9875f5c046015e58e4614ced15adf3380ea163f114634c6f739797474eb18c80904519f78d6f688d6941a4381563245a787285ae238c7703536f7b56fc41d7e4c426c8019c653678e8903e96f0a1254be7e44d942bf9e016ab0aa5578a56d2647d448704a00e54c4df85bec594fd2596dad398a342c43165d61dba2cc9569699831608732acbf2245ddf0860d870be5f2f7368eadd797d36eef9a069df01e08f7fc33c54db77be74ec565a576756bf441b47170ec5c15aa573e3206127946a57952775af91cf1fa88b642e61c09bb7c354c1f947ae18accb41b40c0c82aa3a8c68abe279b33d3f7ed95f060941b93f5e04e8b37b6691aff7209af5d8dc5728ba147b814c2b945d2e69be532c35ca206b32f8a436d9c762b0c18c10d267b8af708d67de8733faf0f8ad1b386a51a3820b182e2fbccbab4d29ae3b497c2b7b4be8201a0814778b966ce151ebb05931f5c528cf663285553b4737fad08681a90cc9038000a0d566a2273191df1d0dc8fbde9fc24cca961dc3add08dd178e112ec0c28674ac4324c8e980d37768561a1fd9aed394c7ecf5bb57c8ebf10b0a1b65cccffc582d40544aeb99d239fbb214a81fc982f4d14694c5982e928d09a58f554ae729280ed3239cb3098c78c95985797ca836e6f711ac997659cb095005e5da1a9772a0835ffba0493f8c3be75545ced94892ea2ba69b3465c68fa83c586fc2cb5a8ea13f37cbaf4f08e4291c96b421be9b03a5bacf49154d7e74671cc1882714261c4488da785034885186a4d284703da709ca02cea2df7de47cd4390367562e21e926caf916a041482857a0347d64c249509348d93627567847c60068602018e3b2e8fac43d3be2fb874d7f62484d11b6a7771151411d625cec8e91dce9a598c13b9b9da2a0eab3cff74c5e6ec157d648ebe156e40b94fe207889e72c73986b1c1a53ae8d3f5c49e0cbd461161d70234a14d69bedde56b59b4428b1a0203af0f411f33fd22ce013908a7fe75977e9c3f821b35c3a1739f914e52f455ec2ee11ad08be19a3d0cede54495116d710cacd11ce014e5bf6cf0e39da92d8d7744dc5d57b5838e32283832b2b341eb2c3640380cbfe8e9c4d75078d3aea3c96dd5a9b10125e9fd7c1449e03c05a84267c045c6046b1bf6964450550c8124fcf762c36c866316535a199cd13d4dc6855965d367cac20dc331315134bf785e566a709050a026456011e080ef15e798a5d0a67d4486ef556973a6948fbbc9574faed3f55e7348fea500050a8330f7334ab1409561aa436675756738496838e0e162280d9d7e86c28ce9d7163143e338f7a4cd0ebf8127e7c03e1f4cfc88ed43d7ba7e9005b4b1fe4f25701cacfb835f88e2fdd24ec18dd9da0ae66bd1b6ea10ef98838ac4a6ccdf7810300bacd8c4d855f7e9c9ce442d0aa0e5e2897c946555c323ddc9aca6afb41a2a5e269e172d645ed7f941648c94d9ecca9bab115b935d9ae070e4b2da8dad2b238007f93060444c10f5a02d1f70a6f4c70379d6a0c115f6901969cce01ca11bb0aae85918baf68949d4f75c9b292d701", [{0x1, 0x6, 0x18}, {0x800, 0x7, 0x1}, {0x4, 0x1000}, {0x6, 0x8, 0x6}, {0x1, 0x9, 0x3}, {0x2000000, 0x5, 0x1ff}, {0x0, 0x0, 0x4}, {0x3, 0xf83b, 0x2}, {0x0, 0x6, 0x9}, {0x40, 0x0, 0x3ff8000}, {0x9, 0x3, 0x1}, {0x4d87, 0x6, 0xc8}, {0x7, 0xa9, 0x35fe1484}, {0x5, 0x8, 0x6}, {0x200, 0x0, 0xc5}, {0x3, 0xc, 0x8194190}, {0x8001, 0x4, 0x1}, {0x7, 0x2, 0x6}, {0x8, 0x5, 0xffff8d7a}, {0x2, 0x4, 0x1ff}, {0x80, 0x21, 0x413e}, {0x6, 0x1, 0x3}, {0x9, 0xb0, 0x101}, {0x3, 0x8, 0x80000000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r2) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000180)='coredump_filter\x00') exit(0xffff) syz_fuse_handle_req(r4, &(0x7f0000001380)="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", 0x2000, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)={0x18, 0x0, 0x2, {0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 6.245953361s ago: executing program 2 (id=916): syz_usb_connect$hid(0x2, 0x7c, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000206a051e4000000000000109022400010000a0200904000d020300050009210110060122060009058103"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r0 = fsopen(&(0x7f0000000480)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsmount(r0, 0x0, 0xa) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x40110) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000005c0)={0x0, 0x64, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 6.193478992s ago: executing program 4 (id=845): unshare(0x62020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="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"], 0x18}}, 0x40c4) 4.365202828s ago: executing program 0 (id=917): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}}) 4.364619368s ago: executing program 2 (id=918): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x60, 0x12, 0x301, 0x0, 0xff0f0000, {0x2, 0x0, 0x0, 0x0, {0x0, 0x0, [], [], 0x0, [0x0, 0x2]}, 0xffffffff, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0) 4.30725777s ago: executing program 2 (id=919): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x2, 0xffffdffc, 0x3}}) getrandom(&(0x7f00000002c0)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.30656755s ago: executing program 0 (id=920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0c000000d37288e26f17baaea6af747d8f311fdd003dd603db50ca5da09057cb1ece7e1d38addf60457ca7c3e5846d0c14b13dbddfb0b0eac85fb63e5303d4308541ac637b63c51cc83e1cec4d3619fd75027443909ba7bba8fa878723a4d5a60dd14426a9b4271550df0f963881d6735a832811f11ecff6449daf66ccbe9e14c65827f90c434912e39cdb0a773e46612c3bfdbd83e414dc230f84a86bc850652ddd556c8119e97e10f1c291cb0c3a3e21128781c5f1b46c0a4dbd4ea4f032dba0a80e0899c2a200c5b834e080d8ca54c9"], 0xe3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x807, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x8, 0xc3, 0x0, 0x6, 0xca, 0x4, 0x6, 0x8, 0xd8, 0x0, 0x2, 0x0, 0x3, 0xfffffffc, 0x9, 0x33, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000000)={r2, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.200861903s ago: executing program 4 (id=845): unshare(0x62020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0100feffffff000000000c000000040003806fffd96d8795a01f9026b47977aa2c3aac17a35c0dc2619ff2016b97fbe8176174ac6ef3858fc41189eca663c7b979c553862eb4e2034a384b77f267b8aaef4fd64ee9466f4b1a3bc165b6549571fae19beb67a401fdfe266d61b7bc1b67b74017ca8ca610f118de6fefc43d71acbb805580571f6b8c925e0fda3ab105e9e30b3d33943e7c927c698c393bacf3d1233257aee7df37c68333eb333c080e67d2c3ea5c560267c604a3ba6ef4e400128889d9a1a910c51105f8fc60f7fe1744807b4ac13346339fb14da96006f66b5c41d9d79434df07b731ef33a7918fb9416a77f9902007fe662923d0cf1ab7a641225b88e42321063033d347b96b753994aa6db01cc0a5cfe844b5dfeb786949586ae9fd352ec6e210d585ecff25a06eede21b0838f10c8b04bfc2bad177f2671907bb8a79985ad35e208fe473d704b2b82cff044430f0f09d404093e14fcaaff55e30d2ba9e18b02fee22fba2e3d0391319aac410f1f1a0f61da90d7824d46b42489176dd03689f1f64a7ecb9bcfead7795d36f09024c7bb4ffb2b92be9b84dc189b7c2f7cd"], 0x18}}, 0x40c4) 2.220623703s ago: executing program 0 (id=921): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@reply_sg={0x40486312, {0x3, 0x20, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.216706483s ago: executing program 1 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0xfff0, &(0x7f0000000240)={&(0x7f0000000500)={0x68, r1, 0x1, 0x70bd26, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0) 2.215882853s ago: executing program 2 (id=923): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2e4300, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000000)=0x8, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 2.199651614s ago: executing program 0 (id=924): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "62966124"}, @global=@item_012={0x0, 0x1, 0x8}, @global=@item_012={0x0, 0x1, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) 2.192104374s ago: executing program 1 (id=925): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x223, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.104560926s ago: executing program 1 (id=926): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="080029004101"], 0x28}], 0x1}, 0x0) (async) sendmmsg(r0, &(0x7f0000000240), 0x4000000000001f2, 0x0) (async) r1 = userfaultfd(0x801) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x202, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f0000000080)=0xf160, 0x4, 0x0) (async) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000100)={0x2, 0xffffffff, 0x9}) (async, rerun: 64) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) (async, rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r4, 0x408) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f00003b3000/0x3000)=nil, 0x3000, 0x8) 2.104286386s ago: executing program 1 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='1\x00', 0x2) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000680)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) memfd_create(&(0x7f0000000140)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.104169396s ago: executing program 4 (id=845): unshare(0x62020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="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"], 0x18}}, 0x40c4) 83.627207ms ago: executing program 0 (id=928): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000240)=0x42d2, 0x4) sendmmsg(r2, &(0x7f0000000280)=[{{&(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000003c0)=0x4, 0x4) recvmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/111, 0x6f}], 0x1, &(0x7f0000000540)=""/93, 0x5d}, 0xfffffff3}], 0x1, 0x10020, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204440, 0x10a) getdents64(r3, &(0x7f00000000c0)=""/49, 0x31) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000100)='/dev/sda1\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r6], 0x20}}, 0x40816) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) 83.208997ms ago: executing program 1 (id=929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.force_empty\x00', 0x501002, 0xd2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x3}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r9 = socket(0x2d, 0x2, 0x0) setsockopt(r9, 0x11d, 0x1, 0x0, 0x0) sendmsg(r9, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r10 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000280)=ANY=[@ANYBLOB="050000eb00"]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)) ioctl$TUNGETVNETLE(r2, 0x4010744d, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x6, 0x7, 0xcf, 0x3, 0x1, 0x2, 0x80, 0x9, 0x98, 0x2, 0x8, 0x2, 0x4e}, {0x100e, 0x100f, 0x40, 0x10, 0x9, 0xff, 0x8, 0x4, 0x4a, 0x13, 0x6, 0x46, 0x400522f533d}, {0x1ff, 0x6, 0x9b, 0x0, 0x2d, 0x1, 0xee, 0xfb, 0x4, 0x4, 0xfe, 0x4}], 0x10}) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) 25.517999ms ago: executing program 4 (id=845): unshare(0x62020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="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"], 0x18}}, 0x40c4) 0s ago: executing program 1 (id=930): syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 28.547215][ T36] audit: type=1400 audit(1791930151.540:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.548309][ T286] cgroup: Unknown subsys name 'net' [ 28.571030][ T36] audit: type=1400 audit(1791930151.540:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.598770][ T36] audit: type=1400 audit(1791930151.580:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.598986][ T286] cgroup: Unknown subsys name 'devices' [ 28.727370][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.733202][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.825275][ T36] audit: type=1400 audit(1791930151.810:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.849464][ T36] audit: type=1400 audit(1791930151.820:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.876404][ T36] audit: type=1400 audit(1791930151.820:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.891716][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.909512][ T36] audit: type=1400 audit(1791930151.900:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.936778][ T36] audit: type=1400 audit(1791930151.900:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.944896][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.965194][ T36] audit: type=1400 audit(1791930151.940:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.000159][ T36] audit: type=1400 audit(1791930151.940:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.874116][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.881306][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.888646][ T293] bridge_slave_0: entered allmulticast mode [ 29.894893][ T293] bridge_slave_0: entered promiscuous mode [ 29.902779][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.909863][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.917007][ T293] bridge_slave_1: entered allmulticast mode [ 29.923459][ T293] bridge_slave_1: entered promiscuous mode [ 30.004744][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.011835][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.019140][ T294] bridge_slave_0: entered allmulticast mode [ 30.025619][ T294] bridge_slave_0: entered promiscuous mode [ 30.032026][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.039104][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.046329][ T296] bridge_slave_0: entered allmulticast mode [ 30.052529][ T296] bridge_slave_0: entered promiscuous mode [ 30.059280][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.066492][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.073736][ T296] bridge_slave_1: entered allmulticast mode [ 30.080063][ T296] bridge_slave_1: entered promiscuous mode [ 30.086285][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.093331][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.100454][ T294] bridge_slave_1: entered allmulticast mode [ 30.106730][ T294] bridge_slave_1: entered promiscuous mode [ 30.159354][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.166629][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.174145][ T295] bridge_slave_0: entered allmulticast mode [ 30.180587][ T295] bridge_slave_0: entered promiscuous mode [ 30.188639][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.195871][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.203086][ T295] bridge_slave_1: entered allmulticast mode [ 30.209705][ T295] bridge_slave_1: entered promiscuous mode [ 30.308162][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.315266][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.322578][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.329632][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.365992][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.373105][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.380769][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.387905][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.421237][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.428823][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.436662][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.443866][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.453305][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.460388][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.468163][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.475304][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.516295][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.523867][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.531654][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.539777][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.547118][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.554463][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.562151][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.569422][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.587037][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.594474][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.609282][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.617227][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.624872][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.631960][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.639681][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.646849][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.661027][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.668554][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.680837][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.688052][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.699060][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.706146][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.718861][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.726893][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.786924][ T293] veth0_vlan: entered promiscuous mode [ 30.804088][ T295] veth0_vlan: entered promiscuous mode [ 30.811284][ T294] veth0_vlan: entered promiscuous mode [ 30.823532][ T296] veth0_vlan: entered promiscuous mode [ 30.842277][ T293] veth1_macvtap: entered promiscuous mode [ 30.849400][ T296] veth1_macvtap: entered promiscuous mode [ 30.864001][ T294] veth1_macvtap: entered promiscuous mode [ 30.896139][ T295] veth1_macvtap: entered promiscuous mode [ 30.943101][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.012407][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.093516][ T335] capability: warning: `syz.0.8' uses 32-bit capabilities (legacy support in use) [ 31.121295][ T338] FAULT_INJECTION: forcing a failure. [ 31.121295][ T338] name failslab, interval 1, probability 0, space 0, times 1 [ 31.135090][ T338] CPU: 0 UID: 0 PID: 338 Comm: syz.1.9 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 31.135131][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.135149][ T338] Call Trace: [ 31.135156][ T338] [ 31.135164][ T338] __dump_stack+0x21/0x30 [ 31.135203][ T338] dump_stack_lvl+0x140/0x1c0 [ 31.135228][ T338] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.135255][ T338] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 31.135276][ T338] dump_stack+0x19/0x20 [ 31.135301][ T338] should_fail_ex+0x3c2/0x510 [ 31.135322][ T338] should_failslab+0xac/0x100 [ 31.135343][ T338] kmem_cache_alloc_noprof+0x42/0x410 [ 31.135369][ T338] ? __pte_alloc+0x1ae/0x440 [ 31.135392][ T338] ? __anon_vma_prepare+0xa5/0x590 [ 31.135417][ T338] __anon_vma_prepare+0xa5/0x590 [ 31.135444][ T338] do_pte_missing+0x2bbf/0x4440 [ 31.135466][ T338] ? pte_marker_clear+0x1b0/0x1b0 [ 31.135486][ T338] ? vma_modify_flags+0x182/0x1c0 [ 31.135512][ T338] ? vma_wants_writenotify+0xca/0x2e0 [ 31.135533][ T338] ? vma_set_page_prot+0xcc/0x110 [ 31.135560][ T338] handle_mm_fault+0x1189/0x1ba0 [ 31.135583][ T338] ? __cfi_handle_mm_fault+0x10/0x10 [ 31.135601][ T338] ? lock_vma_under_rcu+0x4cf/0x590 [ 31.135624][ T338] do_user_addr_fault+0x951/0x1230 [ 31.135646][ T338] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 31.135673][ T338] exc_page_fault+0x58/0xc0 [ 31.135699][ T338] asm_exc_page_fault+0x2b/0x30 [ 31.135722][ T338] RIP: 0033:0x7fb370760202 [ 31.135741][ T338] Code: 8d 15 16 22 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 4b 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 31.135757][ T338] RSP: 002b:00007fb3715e8d20 EFLAGS: 00010286 [ 31.135777][ T338] RAX: ffffffffffffffff RBX: 00007fb368000000 RCX: 00007fb37079e0d7 [ 31.135794][ T338] RDX: 00007fb3708523f4 RSI: 0000000000021000 RDI: 00007fb368000000 [ 31.135810][ T338] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 31.135824][ T338] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 31.135838][ T338] R13: 0000000000001000 R14: 00007fb36c000000 R15: 0000000001000000 [ 31.135855][ T338] [ 31.152147][ T339] netlink: 'syz.0.10': attribute type 63 has an invalid length. [ 31.169197][ T338] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 31.170668][ T339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 31.445368][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.568127][ T357] ./dev/sda1: Can't lookup blockdev [ 31.575314][ T65] usb 2-1: device descriptor read/64, error -71 [ 31.668235][ T365] netlink: 'syz.0.18': attribute type 335 has an invalid length. [ 31.825169][ T65] usb 2-1: device descriptor read/64, error -71 [ 31.955189][ T312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.075243][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.116389][ T312] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 32.128364][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 32.139516][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 32.149891][ T312] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.163455][ T312] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.173349][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.182998][ T312] usb 1-1: config 0 descriptor?? [ 32.215226][ T65] usb 2-1: device descriptor read/64, error -71 [ 32.366188][ T402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 32.455446][ T65] usb 2-1: device descriptor read/64, error -71 [ 32.537752][ T419] ./dev/sda1: Can't lookup blockdev [ 32.575529][ T65] usb usb2-port1: attempt power cycle [ 32.598952][ T312] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 32.608596][ T312] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 32.617775][ T312] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.775481][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.925260][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.955196][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 32.961602][ T65] usb 2-1: device descriptor read/8, error -71 [ 32.968661][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.979581][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 32.988993][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.997122][ T10] usb 4-1: Product: syz [ 33.001404][ T10] usb 4-1: Manufacturer: syz [ 33.006193][ T10] usb 4-1: SerialNumber: syz [ 33.116251][ T65] usb 2-1: device descriptor read/8, error -71 [ 33.355183][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.376249][ T65] usb 2-1: device descriptor read/8, error -71 [ 33.415492][ T430] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 33.422928][ T430] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.506213][ T65] usb 2-1: device descriptor read/8, error -71 [ 33.569388][ T446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 33.577091][ T446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.615304][ T65] usb usb2-port1: unable to enumerate USB device [ 33.909705][ T36] kauditd_printk_skb: 202 callbacks suppressed [ 33.909722][ T36] audit: type=1400 audit(1791930156.900:276): avc: denied { read write } for pid=459 comm="syz.2.52" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 33.941158][ T36] audit: type=1400 audit(1791930156.900:277): avc: denied { open } for pid=459 comm="syz.2.52" path="/22/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 33.965016][ T36] audit: type=1400 audit(1791930156.900:278): avc: denied { create } for pid=459 comm="syz.2.52" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.986737][ T36] audit: type=1400 audit(1791930156.900:279): avc: denied { write } for pid=459 comm="syz.2.52" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.009077][ T36] audit: type=1400 audit(1791930156.900:280): avc: denied { open } for pid=459 comm="syz.2.52" path="/22/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.031574][ T36] audit: type=1400 audit(1791930156.900:281): avc: denied { ioctl } for pid=459 comm="syz.2.52" path="/22/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 34.060607][ T36] audit: type=1400 audit(1791930157.060:282): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.092272][ T36] audit: type=1400 audit(1791930157.080:283): avc: denied { mount } for pid=462 comm="syz.2.53" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.114352][ T36] audit: type=1400 audit(1791930157.080:284): avc: denied { create } for pid=462 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 34.298523][ T36] audit: type=1400 audit(1791930157.290:285): avc: denied { setopt } for pid=473 comm="syz.1.58" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.298737][ T474] raw_sendmsg: syz.1.58 forgot to set AF_INET. Fix it! [ 34.451885][ T480] netlink: 'syz.0.61': attribute type 22 has an invalid length. [ 34.531487][ T495] SELinux: policydb string length 2097160 does not match expected length 8 [ 34.540443][ T495] SELinux: failed to load policy [ 34.686000][ T311] usb 1-1: USB disconnect, device number 2 [ 35.430448][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.437717][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 35.451240][ T10] usb 4-1: USB disconnect, device number 2 [ 35.471037][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.529957][ T531] FAULT_INJECTION: forcing a failure. [ 35.529957][ T531] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.543175][ T531] CPU: 0 UID: 0 PID: 531 Comm: syz.3.80 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 35.543201][ T531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.543209][ T531] Call Trace: [ 35.543213][ T531] [ 35.543219][ T531] __dump_stack+0x21/0x30 [ 35.543241][ T531] dump_stack_lvl+0x140/0x1c0 [ 35.543258][ T531] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.543276][ T531] ? __kmalloc_node_noprof+0x252/0x500 [ 35.543293][ T531] ? __kvmalloc_node_noprof+0x128/0x300 [ 35.543309][ T531] ? check_stack_object+0x81/0x150 [ 35.543326][ T531] dump_stack+0x19/0x20 [ 35.543343][ T531] should_fail_ex+0x3c2/0x510 [ 35.543355][ T531] should_fail+0xf/0x20 [ 35.543365][ T531] should_fail_usercopy+0x1e/0x30 [ 35.543377][ T531] _copy_from_user+0x20/0xa0 [ 35.543391][ T531] __se_sys_add_key+0x2be/0x4b0 [ 35.543409][ T531] ? __x64_sys_add_key+0xf0/0xf0 [ 35.543425][ T531] ? __kasan_check_write+0x18/0x20 [ 35.543440][ T531] ? fpregs_restore_userregs+0x11c/0x260 [ 35.543456][ T531] __x64_sys_add_key+0xc3/0xf0 [ 35.543472][ T531] x64_sys_call+0x195f/0x2ee0 [ 35.543484][ T531] do_syscall_64+0x57/0xf0 [ 35.543498][ T531] ? clear_bhb_loop+0x50/0xa0 [ 35.543513][ T531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.543528][ T531] RIP: 0033:0x7f528c79e2d9 [ 35.543539][ T531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.543549][ T531] RSP: 002b:00007f528d6ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 35.543564][ T531] RAX: ffffffffffffffda RBX: 00007f528ca25fa0 RCX: 00007f528c79e2d9 [ 35.543573][ T531] RDX: 0000200000000640 RSI: 0000000000000000 RDI: 0000200000000600 [ 35.543581][ T531] RBP: 00007f528c835888 R08: 000000002af69aa8 R09: 0000000000000000 [ 35.543589][ T531] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 35.543596][ T531] R13: 00007f528ca26038 R14: 00007f528ca25fa0 R15: 00007ffe6fbf8ec8 [ 35.543606][ T531] [ 36.035193][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.185179][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 36.191974][ T311] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 36.200352][ T311] usb 3-1: config 0 has no interface number 0 [ 36.207610][ T311] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 36.217853][ T311] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 36.229469][ T311] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 36.238830][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.247035][ T311] usb 3-1: Product: syz [ 36.251214][ T311] usb 3-1: Manufacturer: syz [ 36.255859][ T311] usb 3-1: SerialNumber: syz [ 36.261042][ T311] usb 3-1: config 0 descriptor?? [ 36.266352][ T537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.273630][ T537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.482205][ T537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.489535][ T537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.630370][ T542] netlink: 9 bytes leftover after parsing attributes in process `syz.3.85'. [ 36.640424][ T542] gretap0: entered promiscuous mode [ 36.697700][ T311] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 36.920280][ T564] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 36.928401][ T564] SELinux: failed to load policy [ 36.969626][ T311] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.981580][ T311] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 36.981960][ T572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 36.992763][ T311] asix 3-1:0.34: probe with driver asix failed with error -71 [ 37.004887][ T572] Zero length message leads to an empty skb [ 37.010900][ T311] usb 3-1: USB disconnect, device number 2 [ 37.058056][ T578] netlink: 72 bytes leftover after parsing attributes in process `syz.3.101'. [ 37.134592][ T580] netlink: 'syz.3.102': attribute type 64 has an invalid length. [ 37.385203][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.536783][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 37.543104][ T10] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 37.551407][ T10] usb 4-1: config 0 has no interface number 0 [ 37.557566][ T10] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 37.569704][ T10] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.580500][ T10] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 37.592288][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 37.602184][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.610991][ T10] usb 4-1: Product: syz [ 37.615912][ T10] usb 4-1: Manufacturer: syz [ 37.620979][ T10] usb 4-1: SerialNumber: syz [ 37.635447][ T10] usb 4-1: config 0 descriptor?? [ 37.641405][ T582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 37.767472][ T608] netlink: 220 bytes leftover after parsing attributes in process `syz.0.115'. [ 37.939034][ T623] fuse: Bad value for 'fd' [ 37.975175][ T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.012921][ T10] usb-storage 4-1:0.20: USB Mass Storage device detected [ 38.021876][ T10] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 38.030943][ T10] scsi host1: usb-storage 4-1:0.20 [ 38.039885][ T10] usb 4-1: USB disconnect, device number 3 [ 38.049087][ T638] FAULT_INJECTION: forcing a failure. [ 38.049087][ T638] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.062457][ T638] CPU: 0 UID: 0 PID: 638 Comm: syz.0.123 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 38.062491][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.062504][ T638] Call Trace: [ 38.062512][ T638] [ 38.062521][ T638] __dump_stack+0x21/0x30 [ 38.062559][ T638] dump_stack_lvl+0x140/0x1c0 [ 38.062590][ T638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.062622][ T638] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 38.062647][ T638] dump_stack+0x19/0x20 [ 38.062673][ T638] should_fail_ex+0x3c2/0x510 [ 38.062693][ T638] should_fail_alloc_page+0xec/0x110 [ 38.062714][ T638] __alloc_pages_noprof+0x1c0/0x7e0 [ 38.062739][ T638] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.062764][ T638] ? kasan_save_track+0x4f/0x80 [ 38.062794][ T638] ? kasan_save_alloc_info+0x3a/0x50 [ 38.062827][ T638] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 38.062855][ T638] ? alloc_vmap_area+0x76a/0x26f0 [ 38.062874][ T638] ? __get_vm_area_node+0x1f8/0x390 [ 38.062895][ T638] ? _raw_spin_lock+0x92/0x120 [ 38.062920][ T638] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.062946][ T638] get_free_pages_noprof+0x14/0x40 [ 38.062967][ T638] kasan_populate_vmalloc_pte+0x4c/0x170 [ 38.062993][ T638] __apply_to_page_range+0x7bf/0xd00 [ 38.063024][ T638] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 38.063051][ T638] ? apply_to_page_range+0x60/0x60 [ 38.063076][ T638] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 38.063101][ T638] apply_to_page_range+0x3f/0x60 [ 38.063125][ T638] kasan_populate_vmalloc+0x64/0x80 [ 38.063149][ T638] alloc_vmap_area+0x1e8e/0x26f0 [ 38.063169][ T638] ? kasan_save_alloc_info+0x3a/0x50 [ 38.063189][ T638] ? vm_map_ram+0xdd0/0xdd0 [ 38.063208][ T638] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 38.063236][ T638] ? __get_vm_area_node+0x150/0x390 [ 38.063257][ T638] __get_vm_area_node+0x1f8/0x390 [ 38.063279][ T638] __vmalloc_node_range_noprof+0x340/0x1300 [ 38.063303][ T638] ? packet_set_ring+0x74b/0x2890 [ 38.063328][ T638] ? packet_set_ring+0x687/0x2890 [ 38.063351][ T638] ? packet_setsockopt+0xdb5/0x1510 [ 38.063377][ T638] ? do_sock_setsockopt+0x27c/0x410 [ 38.063399][ T638] ? __x64_sys_setsockopt+0x18c/0x220 [ 38.063422][ T638] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.063448][ T638] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 38.063472][ T638] ? __asan_memset+0x39/0x50 [ 38.063497][ T638] ? __alloc_pages_noprof+0xe0/0x7e0 [ 38.063520][ T638] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.063542][ T638] ? packet_set_ring+0x74b/0x2890 [ 38.063568][ T638] vzalloc_noprof+0x103/0x1d0 [ 38.063591][ T638] ? packet_set_ring+0x74b/0x2890 [ 38.063618][ T638] ? __cfi_vzalloc_noprof+0x10/0x10 [ 38.063640][ T638] ? packet_set_ring+0x687/0x2890 [ 38.063665][ T638] packet_set_ring+0x74b/0x2890 [ 38.063690][ T638] ? __kasan_check_write+0x18/0x20 [ 38.063714][ T638] ? futex_unqueue+0x136/0x160 [ 38.063734][ T638] ? packet_mmap+0x590/0x590 [ 38.063758][ T638] ? __check_object_size+0xdc/0x870 [ 38.063775][ T638] ? __asan_memcpy+0x5a/0x80 [ 38.063791][ T638] ? __cfi___check_object_size+0x10/0x10 [ 38.063816][ T638] ? avc_has_perm_noaudit+0x289/0x360 [ 38.063829][ T638] ? __kasan_check_write+0x18/0x20 [ 38.063845][ T638] packet_setsockopt+0xdb5/0x1510 [ 38.063861][ T638] ? __cfi_packet_setsockopt+0x10/0x10 [ 38.063877][ T638] ? selinux_socket_setsockopt+0x324/0x3d0 [ 38.063891][ T638] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 38.063906][ T638] ? do_futex+0x32a/0x510 [ 38.063918][ T638] ? errseq_sample+0x48/0x70 [ 38.063932][ T638] ? file_init_path+0x434/0x590 [ 38.063947][ T638] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 38.063964][ T638] ? security_socket_setsockopt+0x3d/0x100 [ 38.063978][ T638] ? __cfi_packet_setsockopt+0x10/0x10 [ 38.063995][ T638] do_sock_setsockopt+0x27c/0x410 [ 38.064009][ T638] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 38.064022][ T638] ? __fget_files+0x2bc/0x330 [ 38.064034][ T638] __x64_sys_setsockopt+0x18c/0x220 [ 38.064048][ T638] x64_sys_call+0x2adc/0x2ee0 [ 38.064060][ T638] do_syscall_64+0x57/0xf0 [ 38.064077][ T638] ? clear_bhb_loop+0x50/0xa0 [ 38.064091][ T638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.064104][ T638] RIP: 0033:0x7feda799e2d9 [ 38.064116][ T638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.064126][ T638] RSP: 002b:00007feda88e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 38.064141][ T638] RAX: ffffffffffffffda RBX: 00007feda7c25fa0 RCX: 00007feda799e2d9 [ 38.064150][ T638] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 38.064158][ T638] RBP: 00007feda7a35888 R08: 000000000000001c R09: 0000000000000000 [ 38.064166][ T638] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 38.064174][ T638] R13: 00007feda7c26038 R14: 00007feda7c25fa0 R15: 00007ffcb485f1b8 [ 38.064184][ T638] [ 38.064201][ T638] syz.0.123: vmalloc error: size 16777216, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 38.571373][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 38.579383][ T638] CPU: 1 UID: 0 PID: 638 Comm: syz.0.123 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 38.579417][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.579430][ T638] Call Trace: [ 38.579437][ T638] [ 38.579444][ T638] __dump_stack+0x21/0x30 [ 38.579481][ T638] dump_stack_lvl+0x140/0x1c0 [ 38.579508][ T638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.579537][ T638] dump_stack+0x19/0x20 [ 38.579564][ T638] warn_alloc+0x1e7/0x2c0 [ 38.579587][ T638] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.579610][ T638] ? __cfi_warn_alloc+0x10/0x10 [ 38.579630][ T638] ? __get_vm_area_node+0x211/0x390 [ 38.579654][ T638] ? __get_vm_area_node+0x211/0x390 [ 38.579675][ T638] __vmalloc_node_range_noprof+0x365/0x1300 [ 38.579698][ T638] ? packet_set_ring+0x687/0x2890 [ 38.579724][ T638] ? packet_setsockopt+0xdb5/0x1510 [ 38.579749][ T638] ? do_sock_setsockopt+0x27c/0x410 [ 38.579772][ T638] ? __x64_sys_setsockopt+0x18c/0x220 [ 38.579795][ T638] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.579819][ T638] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 38.579842][ T638] ? __asan_memset+0x39/0x50 [ 38.579869][ T638] ? __alloc_pages_noprof+0xe0/0x7e0 [ 38.579890][ T638] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.579914][ T638] ? packet_set_ring+0x74b/0x2890 [ 38.579939][ T638] vzalloc_noprof+0x103/0x1d0 [ 38.579973][ T638] ? packet_set_ring+0x74b/0x2890 [ 38.579998][ T638] ? __cfi_vzalloc_noprof+0x10/0x10 [ 38.580022][ T638] ? packet_set_ring+0x687/0x2890 [ 38.580049][ T638] packet_set_ring+0x74b/0x2890 [ 38.580077][ T638] ? __kasan_check_write+0x18/0x20 [ 38.580103][ T638] ? futex_unqueue+0x136/0x160 [ 38.580123][ T638] ? packet_mmap+0x590/0x590 [ 38.580148][ T638] ? __check_object_size+0xdc/0x870 [ 38.580173][ T638] ? __asan_memcpy+0x5a/0x80 [ 38.580199][ T638] ? __cfi___check_object_size+0x10/0x10 [ 38.580224][ T638] ? avc_has_perm_noaudit+0x289/0x360 [ 38.580245][ T638] ? __kasan_check_write+0x18/0x20 [ 38.580271][ T638] packet_setsockopt+0xdb5/0x1510 [ 38.580296][ T638] ? __cfi_packet_setsockopt+0x10/0x10 [ 38.580321][ T638] ? selinux_socket_setsockopt+0x324/0x3d0 [ 38.580343][ T638] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 38.580366][ T638] ? do_futex+0x32a/0x510 [ 38.580385][ T638] ? errseq_sample+0x48/0x70 [ 38.580414][ T638] ? file_init_path+0x434/0x590 [ 38.580435][ T638] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 38.580463][ T638] ? security_socket_setsockopt+0x3d/0x100 [ 38.580485][ T638] ? __cfi_packet_setsockopt+0x10/0x10 [ 38.580510][ T638] do_sock_setsockopt+0x27c/0x410 [ 38.580532][ T638] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 38.580556][ T638] ? __fget_files+0x2bc/0x330 [ 38.580574][ T638] __x64_sys_setsockopt+0x18c/0x220 [ 38.580597][ T638] x64_sys_call+0x2adc/0x2ee0 [ 38.580618][ T638] do_syscall_64+0x57/0xf0 [ 38.580635][ T638] ? clear_bhb_loop+0x50/0xa0 [ 38.580659][ T638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.580682][ T638] RIP: 0033:0x7feda799e2d9 [ 38.580700][ T638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.580716][ T638] RSP: 002b:00007feda88e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 38.580740][ T638] RAX: ffffffffffffffda RBX: 00007feda7c25fa0 RCX: 00007feda799e2d9 [ 38.580755][ T638] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 38.580767][ T638] RBP: 00007feda7a35888 R08: 000000000000001c R09: 0000000000000000 [ 38.580781][ T638] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 38.580793][ T638] R13: 00007feda7c26038 R14: 00007feda7c25fa0 R15: 00007ffcb485f1b8 [ 38.580810][ T638] [ 38.580867][ T638] Mem-Info: [ 38.583153][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.596180][ T638] active_anon:5912 inactive_anon:0 isolated_anon:0 [ 38.596180][ T638] active_file:5509 inactive_file:12536 isolated_file:0 [ 38.596180][ T638] unevictable:0 dirty:1493 writeback:0 [ 38.596180][ T638] slab_reclaimable:4695 slab_unreclaimable:70473 [ 38.596180][ T638] mapped:24404 shmem:166 pagetables:887 [ 38.596180][ T638] sec_pagetables:0 bounce:0 [ 38.596180][ T638] kernel_misc_reclaimable:0 [ 38.596180][ T638] free:1531800 free_pcp:1851 free_cma:0 [ 38.635720][ T312] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 38.638547][ T638] Node 0 active_anon:23748kB inactive_anon:0kB active_file:22036kB inactive_file:50144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97616kB dirty:5972kB writeback:0kB shmem:664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4372kB pagetables:3548kB sec_pagetables:0kB all_unreclaimable? no [ 38.642662][ T312] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 38.642686][ T312] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 38.642707][ T312] usb 3-1: config 128 has no interface number 0 [ 38.642733][ T312] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 38.648410][ T638] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955048kB mlocked:0kB bounce:0kB free_pcp:5076kB local_pcp:5008kB free_cma:0kB [ 38.654111][ T312] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 38.659385][ T638] lowmem_reserve[]: [ 38.669979][ T312] usb 3-1: config 128 interface 127 has no altsetting 0 [ 38.678833][ T638] 0 [ 38.688250][ T312] usb 3-1: language id specifier not provided by device, defaulting to English [ 38.693718][ T638] 3920 [ 38.698601][ T312] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 38.702972][ T638] 3920 [ 38.708517][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.713799][ T638] [ 38.718290][ T312] usb 3-1: Product: syz [ 38.723384][ T638] Normal free:3178584kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23748kB inactive_anon:0kB active_file:22036kB inactive_file:50144kB unevictable:0kB writepending:5972kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:1864kB local_pcp:1208kB free_cma:0kB [ 38.731817][ T312] usb 3-1: Manufacturer: syz [ 38.733918][ T638] lowmem_reserve[]: [ 38.738778][ T312] usb 3-1: SerialNumber: syz [ 38.743927][ T638] 0 [ 38.974772][ T312] usb 3-1: USB disconnect, device number 3 [ 39.011168][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.016473][ T638] 0 0 [ 39.257005][ T638] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 39.261690][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 39.261705][ T36] audit: type=1400 audit(1791930162.260:319): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.272886][ T638] Normal: 15*4kB (UM) 1*8kB (M) 5*16kB (UME) 42*32kB (UM) 29*64kB (UME) 19*128kB (UME) 25*256kB (UME) 16*512kB (UME) 9*1024kB (UM) 9*2048kB (UM) 764*4096kB (UM) = 3177364kB [ 39.318982][ T638] 18229 total pagecache pages [ 39.323779][ T638] 0 pages in swap cache [ 39.330171][ T638] Free swap = 124996kB [ 39.334436][ T638] Total swap = 124996kB [ 39.339139][ T638] 2097051 pages RAM [ 39.348860][ T638] 0 pages HighMem/MovableOnly [ 39.353632][ T638] 354579 pages reserved [ 39.358089][ T638] 0 pages cma reserved [ 39.364295][ T638] Memory allocations: [ 39.368602][ T638] 0 B 0 init/main.c:1477 func:do_initcalls [ 39.377983][ T638] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 39.386249][ T638] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 39.394089][ T638] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 39.402353][ T638] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 39.412038][ T638] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 39.422287][ T638] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 39.431112][ T638] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 39.439193][ T638] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 39.447502][ T638] 0 B 0 init/initramfs.c:101 func:find_link [ 39.451574][ T669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 39.515545][ T680] ======================================================= [ 39.515545][ T680] WARNING: The mand mount option has been deprecated and [ 39.515545][ T680] and is ignored by this kernel. Remove the mand [ 39.515545][ T680] option from the mount to silence this warning. [ 39.515545][ T680] ======================================================= [ 39.529041][ T36] audit: type=1400 audit(1791930162.510:320): avc: denied { read } for pid=681 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.559342][ T680] overlay: ./sys/module/usb_storage/parameters/delay_use is not a directory [ 39.610022][ T690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'. [ 39.626722][ T690] netlink: 'syz.1.143': attribute type 27 has an invalid length. [ 39.654671][ T690] netlink: 224 bytes leftover after parsing attributes in process `syz.1.143'. [ 39.720469][ T36] audit: type=1400 audit(1791930162.710:321): avc: denied { mount } for pid=699 comm="syz.3.148" name="/" dev="configfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.732563][ T701] FAULT_INJECTION: forcing a failure. [ 39.732563][ T701] name failslab, interval 1, probability 0, space 0, times 0 [ 39.743230][ T36] audit: type=1400 audit(1791930162.710:322): avc: denied { search } for pid=699 comm="syz.3.148" name="/" dev="configfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.761265][ T701] CPU: 1 UID: 0 PID: 701 Comm: syz.1.147 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 39.761297][ T701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.761320][ T701] Call Trace: [ 39.761326][ T701] [ 39.761333][ T701] __dump_stack+0x21/0x30 [ 39.761366][ T701] dump_stack_lvl+0x140/0x1c0 [ 39.761395][ T701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.761423][ T701] ? __kasan_check_write+0x18/0x20 [ 39.761449][ T701] ? _raw_spin_lock_irq+0x93/0x120 [ 39.761477][ T701] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 39.761503][ T701] dump_stack+0x19/0x20 [ 39.761528][ T701] should_fail_ex+0x3c2/0x510 [ 39.761546][ T701] ? copy_net_ns+0x122/0xa20 [ 39.761571][ T701] should_failslab+0xac/0x100 [ 39.761588][ T701] __kmalloc_noprof+0x69/0x510 [ 39.761615][ T701] ? __kasan_check_write+0x18/0x20 [ 39.761639][ T701] ? copy_net_ns+0x122/0xa20 [ 39.761662][ T701] ? inc_ucount+0x1c3/0x2c0 [ 39.761681][ T701] copy_net_ns+0x122/0xa20 [ 39.761703][ T701] ? copy_cgroup_ns+0x97/0x590 [ 39.761729][ T701] create_new_namespaces+0x390/0x6f0 [ 39.761749][ T701] unshare_nsproxy_namespaces+0x124/0x180 [ 39.761767][ T701] ksys_unshare+0x4f9/0x920 [ 39.761793][ T701] ? __cfi_ksys_unshare+0x10/0x10 [ 39.761819][ T701] ? __kasan_check_write+0x18/0x20 [ 39.761843][ T701] __x64_sys_unshare+0x3c/0x50 [ 39.761868][ T701] x64_sys_call+0x2998/0x2ee0 [ 39.761886][ T701] do_syscall_64+0x57/0xf0 [ 39.761902][ T701] ? clear_bhb_loop+0x50/0xa0 [ 39.761924][ T701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.761944][ T701] RIP: 0033:0x7fb37079e2d9 [ 39.761961][ T701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.761976][ T701] RSP: 002b:00007fb3715ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 39.761997][ T701] RAX: ffffffffffffffda RBX: 00007fb370a25fa0 RCX: 00007fb37079e2d9 [ 39.762011][ T701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 39.762024][ T701] RBP: 00007fb370835888 R08: 0000000000000000 R09: 0000000000000000 [ 39.762036][ T701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.762047][ T701] R13: 00007fb370a26038 R14: 00007fb370a25fa0 R15: 00007ffecba3cd88 [ 39.762063][ T701] [ 39.845232][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.846226][ T36] audit: type=1400 audit(1791930162.710:323): avc: denied { write } for pid=699 comm="syz.3.148" name="usb_gadget" dev="configfs" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.968705][ T708] FAULT_INJECTION: forcing a failure. [ 39.968705][ T708] name failslab, interval 1, probability 0, space 0, times 0 [ 39.978041][ T36] audit: type=1400 audit(1791930162.710:324): avc: denied { add_name } for pid=699 comm="syz.3.148" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.990050][ T708] CPU: 1 UID: 0 PID: 708 Comm: syz.2.152 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 39.990085][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.990097][ T708] Call Trace: [ 39.990103][ T708] [ 39.990110][ T708] __dump_stack+0x21/0x30 [ 39.990145][ T708] dump_stack_lvl+0x140/0x1c0 [ 39.990172][ T708] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.990200][ T708] ? slow_avc_audit+0x19f/0x220 [ 39.990220][ T708] ? __cfi_slow_avc_audit+0x10/0x10 [ 39.990237][ T708] dump_stack+0x19/0x20 [ 39.990265][ T708] should_fail_ex+0x3c2/0x510 [ 39.990285][ T708] should_failslab+0xac/0x100 [ 39.990304][ T708] kmem_cache_alloc_noprof+0x42/0x410 [ 39.990329][ T708] ? cred_has_capability+0x224/0x3a0 [ 39.990354][ T708] ? ep_insert+0x21c/0x1600 [ 39.990373][ T708] ep_insert+0x21c/0x1600 [ 39.990390][ T708] ? vfs_write+0xbcf/0xfd0 [ 39.990416][ T708] ? ep_loop_check+0xa0/0xa0 [ 39.990433][ T708] ? mutex_lock+0x97/0x1d0 [ 39.990454][ T708] ? security_capable+0x44/0x130 [ 39.990480][ T708] do_epoll_ctl+0x955/0xcf0 [ 39.990500][ T708] __x64_sys_epoll_ctl+0x166/0x1b0 [ 39.990520][ T708] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 39.990541][ T708] ? switch_fpu_return+0x12/0x20 [ 39.990567][ T708] x64_sys_call+0x2c44/0x2ee0 [ 39.990587][ T708] do_syscall_64+0x57/0xf0 [ 39.990603][ T708] ? clear_bhb_loop+0x50/0xa0 [ 39.990626][ T708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.990648][ T708] RIP: 0033:0x7f6546f9e2d9 [ 39.990664][ T708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.990680][ T708] RSP: 002b:00007f6547eea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 39.990702][ T708] RAX: ffffffffffffffda RBX: 00007f6547225fa0 RCX: 00007f6546f9e2d9 [ 39.990716][ T708] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 39.990728][ T708] RBP: 00007f6547035888 R08: 0000000000000000 R09: 0000000000000000 [ 39.990740][ T708] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 39.990752][ T708] R13: 00007f6547226038 R14: 00007f6547225fa0 R15: 00007fffc97e14e8 [ 39.990768][ T708] [ 40.005165][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 40.040747][ T36] audit: type=1400 audit(1791930162.710:325): avc: denied { create } for pid=699 comm="syz.3.148" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 40.046352][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.069008][ T36] audit: type=1400 audit(1791930162.710:326): avc: denied { read } for pid=699 comm="syz.3.148" name="g1" dev="configfs" ino=7586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.075934][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.089244][ T36] audit: type=1400 audit(1791930162.710:327): avc: denied { open } for pid=699 comm="syz.3.148" path="/52/config/usb_gadget/g1" dev="configfs" ino=7586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.105167][ T311] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 40.108532][ T36] audit: type=1400 audit(1791930162.710:328): avc: denied { setattr } for pid=699 comm="syz.3.148" name="g1" dev="configfs" ino=7586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.125191][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.431213][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.441539][ T311] usb 1-1: config 0 descriptor?? [ 40.586422][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.596653][ T46] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 40.606273][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 40.615887][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.853296][ T311] apple 0003:05AC:024B.0002: unknown global tag 0xe [ 40.860534][ T311] apple 0003:05AC:024B.0002: item 0 1 1 14 parsing failed [ 40.868240][ T311] apple 0003:05AC:024B.0002: parse failed [ 40.874178][ T311] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22 [ 40.956444][ T10] usb 4-1: USB disconnect, device number 4 [ 41.064118][ T420] usb 1-1: USB disconnect, device number 3 [ 41.145282][ T312] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.295178][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 41.301762][ T312] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.310018][ T312] usb 2-1: config 0 has no interface number 0 [ 41.317792][ T312] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.327492][ T312] usb 2-1: New USB device strings: Mfr=1, Product=35, SerialNumber=3 [ 41.336042][ T312] usb 2-1: Product: syz [ 41.340236][ T312] usb 2-1: Manufacturer: syz [ 41.344858][ T312] usb 2-1: SerialNumber: syz [ 41.350197][ T312] usb 2-1: config 0 descriptor?? [ 41.356371][ T312] smsc95xx v2.0.0 [ 41.760239][ T312] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.773738][ T312] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 42.165229][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.316294][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.327538][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.337729][ T46] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 42.346974][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.358413][ T46] usb 1-1: config 0 descriptor?? [ 42.568245][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 42.574223][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 42.583043][ T46] usb 1-1: USB disconnect, device number 4 [ 42.586290][ T312] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 42.599741][ T312] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 42.609264][ T312] usb 2-1: USB disconnect, device number 6 [ 43.005218][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.103967][ T759] rust_binder: 758:759 no such ref 3 [ 43.109389][ T759] rust_binder: Write failure EINVAL in pid:66 [ 43.138184][ T311] rust_binder: 760: undelivered TRANSACTION_ERROR: 29189 [ 43.155168][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 43.165834][ T46] usb 1-1: config index 0 descriptor too short (expected 36, got 27) [ 43.174172][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.187937][ T46] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 43.197607][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.208846][ T46] usb 1-1: config 0 descriptor?? [ 43.215533][ T46] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 43.325271][ T728] Bluetooth: hci0: command 0x1003 tx timeout [ 43.325487][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.399618][ T772] FAULT_INJECTION: forcing a failure. [ 43.399618][ T772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.412985][ T772] CPU: 1 UID: 0 PID: 772 Comm: syz.2.171 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 43.413009][ T772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 43.413017][ T772] Call Trace: [ 43.413021][ T772] [ 43.413027][ T772] __dump_stack+0x21/0x30 [ 43.413050][ T772] dump_stack_lvl+0x140/0x1c0 [ 43.413067][ T772] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.413084][ T772] ? check_stack_object+0x138/0x150 [ 43.413100][ T772] dump_stack+0x19/0x20 [ 43.413115][ T772] should_fail_ex+0x3c2/0x510 [ 43.413126][ T772] should_fail+0xf/0x20 [ 43.413136][ T772] should_fail_usercopy+0x1e/0x30 [ 43.413147][ T772] _copy_to_user+0x24/0xa0 [ 43.413161][ T772] simple_read_from_buffer+0xed/0x160 [ 43.413174][ T772] proc_fail_nth_read+0x1aa/0x220 [ 43.413188][ T772] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 43.413201][ T772] ? bpf_lsm_file_permission+0xd/0x20 [ 43.413213][ T772] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 43.413225][ T772] vfs_read+0x28b/0xc70 [ 43.413241][ T772] ? __cfi_vfs_read+0x10/0x10 [ 43.413255][ T772] ? __kasan_check_write+0x18/0x20 [ 43.413278][ T772] ? mutex_lock+0x97/0x1d0 [ 43.413290][ T772] ? __cfi_mutex_lock+0x10/0x10 [ 43.413307][ T772] ksys_read+0x145/0x260 [ 43.413322][ T772] ? __cfi_ksys_read+0x10/0x10 [ 43.413337][ T772] ? __kasan_check_read+0x15/0x20 [ 43.413351][ T772] __x64_sys_read+0x7f/0x90 [ 43.413366][ T772] x64_sys_call+0x2638/0x2ee0 [ 43.413378][ T772] do_syscall_64+0x57/0xf0 [ 43.413388][ T772] ? clear_bhb_loop+0x50/0xa0 [ 43.413402][ T772] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.413415][ T772] RIP: 0033:0x7f6546f5eb0e [ 43.413427][ T772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.413437][ T772] RSP: 002b:00007f6547ec8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.413452][ T772] RAX: ffffffffffffffda RBX: 00007f6547ec96c0 RCX: 00007f6546f5eb0e [ 43.413461][ T772] RDX: 000000000000000f RSI: 00007f6547ec90a0 RDI: 0000000000000004 [ 43.413468][ T772] RBP: 00007f6547ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 43.413476][ T772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.413483][ T772] R13: 00007f6547226128 R14: 00007f6547226090 R15: 00007fffc97e14e8 [ 43.413492][ T772] [ 43.652524][ T46] usb 1-1: USB disconnect, device number 5 [ 43.681740][ T777] netlink: 220 bytes leftover after parsing attributes in process `syz.2.174'. [ 43.742910][ T786] fuse: Bad value for 'rootmode' [ 43.822023][ T791] syz.1.178 uses obsolete (PF_INET,SOCK_PACKET) [ 43.888038][ T795] cgroup: fork rejected by pids controller in /syz2 [ 43.901974][ T793] clocksource: Switched to clocksource kvm-clock [ 44.075157][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.213785][ T944] netlink: 220 bytes leftover after parsing attributes in process `syz.0.185'. [ 44.235231][ T948] FAULT_INJECTION: forcing a failure. [ 44.235231][ T948] name failslab, interval 1, probability 0, space 0, times 0 [ 44.248152][ T948] CPU: 0 UID: 0 PID: 948 Comm: syz.0.186 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 44.248185][ T948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.248197][ T948] Call Trace: [ 44.248204][ T948] [ 44.248204][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 44.248212][ T948] __dump_stack+0x21/0x30 [ 44.248247][ T948] dump_stack_lvl+0x140/0x1c0 [ 44.248275][ T948] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.248303][ T948] ? keyring_search_iterator+0x4e0/0x4e0 [ 44.248350][ T948] ? stack_trace_save+0xaa/0x100 [ 44.248379][ T948] dump_stack+0x19/0x20 [ 44.248405][ T948] should_fail_ex+0x3c2/0x510 [ 44.248424][ T948] should_failslab+0xac/0x100 [ 44.248444][ T948] __kmalloc_cache_noprof+0x41/0x470 [ 44.248472][ T948] ? x509_cert_parse+0x68/0xbd0 [ 44.248495][ T948] ? downgrade_write+0x470/0x470 [ 44.248519][ T948] x509_cert_parse+0x68/0xbd0 [ 44.248543][ T948] x509_key_preparse+0x6a/0x880 [ 44.248567][ T948] ? __cfi_down_read+0x10/0x10 [ 44.248590][ T948] asymmetric_key_preparse+0xb6/0x100 [ 44.248617][ T948] __key_create_or_update+0x430/0xa90 [ 44.248639][ T948] ? security_key_permission+0x3d/0x100 [ 44.248664][ T948] ? key_create_or_update+0x70/0x70 [ 44.248687][ T948] ? __kasan_kmalloc+0x96/0xb0 [ 44.248706][ T948] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 44.248726][ T948] ? __cfi_keyring_search_iterator+0x10/0x10 [ 44.248750][ T948] key_create_or_update+0x47/0x70 [ 44.248772][ T948] __se_sys_add_key+0x355/0x4b0 [ 44.248798][ T948] ? __x64_sys_add_key+0xf0/0xf0 [ 44.248823][ T948] ? __kasan_check_write+0x18/0x20 [ 44.248846][ T948] ? fpregs_restore_userregs+0x11c/0x260 [ 44.248869][ T948] __x64_sys_add_key+0xc3/0xf0 [ 44.248894][ T948] x64_sys_call+0x195f/0x2ee0 [ 44.248913][ T948] do_syscall_64+0x57/0xf0 [ 44.248929][ T948] ? clear_bhb_loop+0x50/0xa0 [ 44.248951][ T948] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.248973][ T948] RIP: 0033:0x7feda799e2d9 [ 44.248989][ T948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.249003][ T948] RSP: 002b:00007feda88e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 44.249025][ T948] RAX: ffffffffffffffda RBX: 00007feda7c25fa0 RCX: 00007feda799e2d9 [ 44.249039][ T948] RDX: 0000200000000640 RSI: 0000000000000000 RDI: 0000200000000600 [ 44.249051][ T948] RBP: 00007feda7a35888 R08: 000000002a1d27c9 R09: 0000000000000000 [ 44.249064][ T948] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 44.249075][ T948] R13: 00007feda7c26038 R14: 00007feda7c25fa0 R15: 00007ffcb485f1b8 [ 44.249091][ T948] [ 44.521193][ T46] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 44.529068][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 44.529086][ T36] audit: type=1400 audit(1791930167.516:355): avc: denied { cmd } for pid=952 comm="iou-wrk-953" path="socket:[9505]" dev="sockfs" ino=9505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.532777][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.570678][ T46] usb 2-1: Product: syz [ 44.574924][ T46] usb 2-1: Manufacturer: syz [ 44.579893][ T46] usb 2-1: SerialNumber: syz [ 44.601619][ T46] usb 2-1: config 0 descriptor?? [ 44.614781][ T46] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 44.624435][ T46] usb 2-1: Detected FT-X [ 44.629870][ T969] FAULT_INJECTION: forcing a failure. [ 44.629870][ T969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.653710][ T969] CPU: 0 UID: 0 PID: 969 Comm: syz.0.193 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 44.653740][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.653751][ T969] Call Trace: [ 44.653757][ T969] [ 44.653764][ T969] __dump_stack+0x21/0x30 [ 44.653795][ T969] dump_stack_lvl+0x140/0x1c0 [ 44.653819][ T969] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.653845][ T969] ? check_stack_object+0x138/0x150 [ 44.653870][ T969] dump_stack+0x19/0x20 [ 44.653894][ T969] should_fail_ex+0x3c2/0x510 [ 44.653911][ T969] should_fail+0xf/0x20 [ 44.653926][ T969] should_fail_usercopy+0x1e/0x30 [ 44.653944][ T969] _copy_to_user+0x24/0xa0 [ 44.653965][ T969] simple_read_from_buffer+0xed/0x160 [ 44.653985][ T969] proc_fail_nth_read+0x1aa/0x220 [ 44.654006][ T969] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 44.654027][ T969] ? bpf_lsm_file_permission+0xd/0x20 [ 44.654046][ T969] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 44.654066][ T969] vfs_read+0x28b/0xc70 [ 44.654089][ T969] ? __cfi_vfs_read+0x10/0x10 [ 44.654111][ T969] ? __kasan_check_write+0x18/0x20 [ 44.654133][ T969] ? mutex_lock+0x97/0x1d0 [ 44.654154][ T969] ? __cfi_mutex_lock+0x10/0x10 [ 44.654174][ T969] ksys_read+0x145/0x260 [ 44.654197][ T969] ? __cfi_ksys_read+0x10/0x10 [ 44.654219][ T969] ? __cfi_task_work_run+0x10/0x10 [ 44.654244][ T969] ? __kasan_check_read+0x15/0x20 [ 44.654265][ T969] __x64_sys_read+0x7f/0x90 [ 44.654289][ T969] x64_sys_call+0x2638/0x2ee0 [ 44.654307][ T969] do_syscall_64+0x57/0xf0 [ 44.654322][ T969] ? clear_bhb_loop+0x50/0xa0 [ 44.654343][ T969] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.654371][ T969] RIP: 0033:0x7feda795eb0e [ 44.654387][ T969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.654400][ T969] RSP: 002b:00007feda88e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.654421][ T969] RAX: ffffffffffffffda RBX: 00007feda88e66c0 RCX: 00007feda795eb0e [ 44.654435][ T969] RDX: 000000000000000f RSI: 00007feda88e60a0 RDI: 0000000000000005 [ 44.654446][ T969] RBP: 00007feda88e6090 R08: 0000000000000000 R09: 0000000000000000 [ 44.654458][ T969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.654469][ T969] R13: 00007feda7c26038 R14: 00007feda7c25fa0 R15: 00007ffcb485f1b8 [ 44.654483][ T969] [ 44.933271][ T36] audit: type=1400 audit(1791930167.926:356): avc: denied { nlmsg_read } for pid=980 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.977525][ T987] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 44.985271][ T987] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 44.994086][ T36] audit: type=1400 audit(1791930167.986:357): avc: denied { create } for pid=986 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.007303][ T989] FAULT_INJECTION: forcing a failure. [ 45.007303][ T989] name failslab, interval 1, probability 0, space 0, times 0 [ 45.027280][ T989] CPU: 1 UID: 0 PID: 989 Comm: syz.0.200 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 45.027301][ T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.027312][ T989] Call Trace: [ 45.027316][ T989] [ 45.027321][ T989] __dump_stack+0x21/0x30 [ 45.027348][ T989] dump_stack_lvl+0x140/0x1c0 [ 45.027365][ T989] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.027384][ T989] ? __cfi_selinux_file_open+0x10/0x10 [ 45.027401][ T989] dump_stack+0x19/0x20 [ 45.027417][ T989] should_fail_ex+0x3c2/0x510 [ 45.027428][ T989] should_failslab+0xac/0x100 [ 45.027440][ T989] kmem_cache_alloc_node_noprof+0x45/0x420 [ 45.027455][ T989] ? hrtimer_reprogram+0x242/0x3d0 [ 45.027469][ T989] ? __alloc_skb+0x10c/0x360 [ 45.027487][ T989] __alloc_skb+0x10c/0x360 [ 45.027505][ T989] ? tcp_current_mss+0x539/0x8b0 [ 45.027529][ T989] tcp_stream_alloc_skb+0x43/0x370 [ 45.027560][ T989] tcp_sendmsg_locked+0xcbc/0x4ac0 [ 45.027578][ T989] ? avc_has_perm_noaudit+0x289/0x360 [ 45.027591][ T989] ? __kasan_check_write+0x18/0x20 [ 45.027606][ T989] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 45.027624][ T989] ? kstrtouint_from_user+0x117/0x170 [ 45.027636][ T989] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 45.027651][ T989] ? __kasan_check_write+0x18/0x20 [ 45.027665][ T989] ? proc_fail_nth_write+0x184/0x220 [ 45.027681][ T989] ? __cfi_tcp_sendmsg+0x10/0x10 [ 45.027695][ T989] tcp_sendmsg+0x3e/0xd0 [ 45.027708][ T989] ? __cfi_tcp_sendmsg+0x10/0x10 [ 45.027722][ T989] inet_sendmsg+0xb7/0x120 [ 45.027738][ T989] ? __cfi_inet_sendmsg+0x10/0x10 [ 45.027754][ T989] __sys_sendto+0x5d8/0x6e0 [ 45.027773][ T989] ? __cfi___sys_sendto+0x10/0x10 [ 45.027800][ T989] ? __kasan_check_write+0x18/0x20 [ 45.027815][ T989] ? __cfi_ksys_write+0x10/0x10 [ 45.027831][ T989] ? handle_softirqs+0x4f9/0x5b0 [ 45.027845][ T989] __x64_sys_sendto+0xe9/0x100 [ 45.027858][ T989] x64_sys_call+0x2c2c/0x2ee0 [ 45.027869][ T989] do_syscall_64+0x57/0xf0 [ 45.027885][ T989] ? clear_bhb_loop+0x50/0xa0 [ 45.027900][ T989] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.027913][ T989] RIP: 0033:0x7feda799e2d9 [ 45.027924][ T989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.027933][ T989] RSP: 002b:00007feda88e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 45.027948][ T989] RAX: ffffffffffffffda RBX: 00007feda7c25fa0 RCX: 00007feda799e2d9 [ 45.027957][ T989] RDX: ffffffffffffff94 RSI: 0000200000000140 RDI: 0000000000000003 [ 45.027965][ T989] RBP: 00007feda88e6090 R08: 0000000000000000 R09: 0000000000000000 [ 45.027973][ T989] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 45.027980][ T989] R13: 00007feda7c26038 R14: 00007feda7c25fa0 R15: 00007ffcb485f1b8 [ 45.027990][ T989] [ 45.255623][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.331206][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 45.338313][ T46] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 45.345581][ T46] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 45.352953][ T46] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 45.364135][ T46] usb 2-1: USB disconnect, device number 7 [ 45.370912][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 45.380557][ T46] ftdi_sio 2-1:0.0: device disconnected [ 45.485319][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 45.491775][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.502967][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.512742][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.525669][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.535288][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.544731][ T10] usb 4-1: config 0 descriptor?? [ 45.918989][ T1002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=275 sclass=netlink_route_socket pid=1002 comm=syz.2.205 [ 45.933285][ T1002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1002 comm=syz.2.205 [ 45.950566][ T36] audit: type=1400 audit(1791930168.946:358): avc: denied { read } for pid=1001 comm="syz.2.205" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.973980][ T36] audit: type=1400 audit(1791930168.946:359): avc: denied { open } for pid=1001 comm="syz.2.205" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.974818][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 46.006207][ T10] microsoft 0003:045E:07DA.0003: collection stack underflow [ 46.013536][ T10] microsoft 0003:045E:07DA.0003: item 0 2 0 12 parsing failed [ 46.021289][ T10] microsoft 0003:045E:07DA.0003: parse failed [ 46.027558][ T10] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 46.042277][ T1004] FAULT_INJECTION: forcing a failure. [ 46.042277][ T1004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.056498][ T1004] CPU: 0 UID: 0 PID: 1004 Comm: syz.2.206 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 46.056527][ T1004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.056538][ T1004] Call Trace: [ 46.056544][ T1004] [ 46.056550][ T1004] __dump_stack+0x21/0x30 [ 46.056581][ T1004] dump_stack_lvl+0x140/0x1c0 [ 46.056607][ T1004] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.056634][ T1004] ? _parse_integer+0x2e/0x40 [ 46.056663][ T1004] ? kstrtoull+0x13b/0x1e0 [ 46.056690][ T1004] dump_stack+0x19/0x20 [ 46.056716][ T1004] should_fail_ex+0x3c2/0x510 [ 46.056736][ T1004] should_fail+0xf/0x20 [ 46.056752][ T1004] should_fail_usercopy+0x1e/0x30 [ 46.056771][ T1004] _copy_from_user+0x20/0xa0 [ 46.056792][ T1004] ___sys_sendmsg+0x1c7/0x370 [ 46.056816][ T1004] ? __sys_sendmsg+0x260/0x260 [ 46.056838][ T1004] ? proc_fail_nth_write+0x184/0x220 [ 46.056861][ T1004] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.056886][ T1004] ? __fget_files+0x2bc/0x330 [ 46.056915][ T1004] __x64_sys_sendmsg+0x1be/0x2a0 [ 46.056937][ T1004] ? fput+0x1a4/0x230 [ 46.056958][ T1004] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 46.056983][ T1004] ? ksys_write+0x1f3/0x260 [ 46.057012][ T1004] ? __kasan_check_read+0x15/0x20 [ 46.057039][ T1004] x64_sys_call+0x2a4c/0x2ee0 [ 46.057060][ T1004] do_syscall_64+0x57/0xf0 [ 46.057079][ T1004] ? clear_bhb_loop+0x50/0xa0 [ 46.057103][ T1004] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.057123][ T1004] RIP: 0033:0x7f6546f9e2d9 [ 46.057140][ T1004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.057154][ T1004] RSP: 002b:00007f6547eea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.057174][ T1004] RAX: ffffffffffffffda RBX: 00007f6547225fa0 RCX: 00007f6546f9e2d9 [ 46.057188][ T1004] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 46.057201][ T1004] RBP: 00007f6547eea090 R08: 0000000000000000 R09: 0000000000000000 [ 46.057213][ T1004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.057224][ T1004] R13: 00007f6547226038 R14: 00007f6547225fa0 R15: 00007fffc97e14e8 [ 46.057240][ T1004] [ 46.066085][ T36] audit: type=1326 audit(1791930169.066:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.2.207" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546f9e2d9 code=0x7ffc0000 [ 46.135188][ T312] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.136359][ T36] audit: type=1326 audit(1791930169.086:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.2.207" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6546f9e2d9 code=0x7ffc0000 [ 46.232523][ T1008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.236409][ T36] audit: type=1326 audit(1791930169.086:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.2.207" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546f9e2d9 code=0x7ffc0000 [ 46.250652][ T1008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.253522][ T36] audit: type=1326 audit(1791930169.086:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.2.207" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546f9e2d9 code=0x7ffc0000 [ 46.296710][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.314460][ T36] audit: type=1326 audit(1791930169.086:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.2.207" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6546f9e2d9 code=0x7ffc0000 [ 46.323691][ T312] usb 1-1: config 1 has an invalid interface number: 156 but max is 2 [ 46.456399][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.466626][ T312] usb 1-1: config 1 has no interface number 2 [ 46.472716][ T312] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 46.483541][ T312] usb 1-1: config 1 interface 1 has no altsetting 0 [ 46.492235][ T312] usb 1-1: string descriptor 0 read error: -22 [ 46.498513][ T312] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 46.507655][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.518376][ T312] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 46.526308][ T312] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 46.533605][ T312] usb 1-1: 1:1 : unsupported format bits 0x7b6c0006 [ 46.540286][ T312] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 46.549862][ T312] usb 1-1: selecting invalid altsetting 0 [ 46.766591][ T312] usb 1-1: selecting invalid altsetting 0 [ 46.772473][ T312] usb 1-1: unit 2 not found! [ 46.777277][ T312] usb 1-1: unit 236 not found! [ 46.787662][ T312] usb 1-1: USB disconnect, device number 6 [ 46.875207][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 47.025167][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 47.031527][ T46] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.039720][ T46] usb 3-1: config 0 has no interface number 0 [ 47.047355][ T46] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.056674][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.064675][ T46] usb 3-1: Product: syz [ 47.068986][ T46] usb 3-1: Manufacturer: syz [ 47.073586][ T46] usb 3-1: SerialNumber: syz [ 47.079049][ T46] usb 3-1: config 0 descriptor?? [ 47.085569][ T46] smsc95xx v2.0.0 [ 47.331881][ T1034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.342201][ T1034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.390237][ T1041] FAULT_INJECTION: forcing a failure. [ 47.390237][ T1041] name failslab, interval 1, probability 0, space 0, times 0 [ 47.404353][ T1041] CPU: 0 UID: 0 PID: 1041 Comm: syz.0.215 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 47.404387][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.404401][ T1041] Call Trace: [ 47.404408][ T1041] [ 47.404416][ T1041] __dump_stack+0x21/0x30 [ 47.404452][ T1041] dump_stack_lvl+0x140/0x1c0 [ 47.404481][ T1041] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.404524][ T1041] dump_stack+0x19/0x20 [ 47.404552][ T1041] should_fail_ex+0x3c2/0x510 [ 47.404573][ T1041] should_failslab+0xac/0x100 [ 47.404593][ T1041] __kmalloc_cache_noprof+0x41/0x470 [ 47.404623][ T1041] ? __asan_memset+0x39/0x50 [ 47.404651][ T1041] ? kvm_dev_ioctl+0x85d/0x14c0 [ 47.404672][ T1041] kvm_dev_ioctl+0x85d/0x14c0 [ 47.404693][ T1041] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 47.404714][ T1041] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.404735][ T1041] ? security_file_ioctl+0x3e/0x110 [ 47.404760][ T1041] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 47.404780][ T1041] __se_sys_ioctl+0x126/0x1b0 [ 47.404809][ T1041] __x64_sys_ioctl+0x7f/0xa0 [ 47.404829][ T1041] x64_sys_call+0x1878/0x2ee0 [ 47.404851][ T1041] do_syscall_64+0x57/0xf0 [ 47.404868][ T1041] ? clear_bhb_loop+0x50/0xa0 [ 47.404890][ T1041] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.404910][ T1041] RIP: 0033:0x7feda799e2d9 [ 47.404926][ T1041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.404943][ T1041] RSP: 002b:00007feda88e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.404966][ T1041] RAX: ffffffffffffffda RBX: 00007feda7c25fa0 RCX: 00007feda799e2d9 [ 47.404982][ T1041] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 47.404995][ T1041] RBP: 00007feda7a35888 R08: 0000000000000000 R09: 0000000000000000 [ 47.405009][ T1041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.405022][ T1041] R13: 00007feda7c26038 R14: 00007feda7c25fa0 R15: 00007ffcb485f1b8 [ 47.405040][ T1041] [ 47.727300][ T1054] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 47.734998][ T1054] SELinux: failed to load policy [ 47.741164][ T1054] SELinux: policydb version -1910050649 does not match my version range 15-33 [ 47.750292][ T1054] SELinux: failed to load policy [ 47.843429][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 47.854220][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 47.865178][ T312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.944130][ T311] usb 4-1: USB disconnect, device number 5 [ 47.995159][ T312] usb 2-1: device descriptor read/64, error -71 [ 48.127179][ T1087] 9pnet_virtio: no channels available for device /dev/sr0 [ 48.136303][ T1087] FAULT_INJECTION: forcing a failure. [ 48.136303][ T1087] name failslab, interval 1, probability 0, space 0, times 0 [ 48.149106][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: syz.3.230 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 48.149131][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.149139][ T1087] Call Trace: [ 48.149143][ T1087] [ 48.149150][ T1087] __dump_stack+0x21/0x30 [ 48.149179][ T1087] dump_stack_lvl+0x140/0x1c0 [ 48.149197][ T1087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.149215][ T1087] ? kasan_save_track+0x4f/0x80 [ 48.149234][ T1087] ? kasan_save_alloc_info+0x3a/0x50 [ 48.149249][ T1087] dump_stack+0x19/0x20 [ 48.149266][ T1087] should_fail_ex+0x3c2/0x510 [ 48.149278][ T1087] should_failslab+0xac/0x100 [ 48.149290][ T1087] kmem_cache_alloc_noprof+0x42/0x410 [ 48.149306][ T1087] ? mas_wr_store_type+0x13f3/0x1b40 [ 48.149320][ T1087] ? mas_alloc_nodes+0x254/0x9d0 [ 48.149336][ T1087] mas_alloc_nodes+0x254/0x9d0 [ 48.149351][ T1087] mas_preallocate+0x79b/0xc90 [ 48.149373][ T1087] ? __cfi_mas_preallocate+0x10/0x10 [ 48.149388][ T1087] ? __asan_memset+0x39/0x50 [ 48.149403][ T1087] ? vm_area_alloc+0x5f/0x190 [ 48.149417][ T1087] mmap_region+0x1409/0x1d10 [ 48.149434][ T1087] ? __cfi_mmap_region+0x10/0x10 [ 48.149451][ T1087] ? mm_get_unmapped_area_vmflags+0xbe/0xe0 [ 48.149470][ T1087] ? __get_unmapped_area+0x406/0x470 [ 48.149485][ T1087] do_mmap+0xa47/0x1370 [ 48.149500][ T1087] ? __cfi_selinux_mmap_file+0x10/0x10 [ 48.149516][ T1087] ? __cfi_do_mmap+0x10/0x10 [ 48.149532][ T1087] ? __kasan_check_write+0x18/0x20 [ 48.149548][ T1087] ? down_write_killable+0xee/0x2d0 [ 48.149564][ T1087] ? __cfi_down_write_killable+0x10/0x10 [ 48.149579][ T1087] ? lock_vma_under_rcu+0x4cf/0x590 [ 48.149591][ T1087] vm_mmap_pgoff+0x367/0x4b0 [ 48.149607][ T1087] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 48.149622][ T1087] ? __kasan_check_write+0x18/0x20 [ 48.149636][ T1087] ? do_user_addr_fault+0xbf5/0x1230 [ 48.149649][ T1087] ksys_mmap_pgoff+0xfa/0x1e0 [ 48.149664][ T1087] ? __kasan_check_read+0x15/0x20 [ 48.149679][ T1087] __x64_sys_mmap+0x121/0x140 [ 48.149691][ T1087] x64_sys_call+0x13bf/0x2ee0 [ 48.149703][ T1087] do_syscall_64+0x57/0xf0 [ 48.149714][ T1087] ? clear_bhb_loop+0x50/0xa0 [ 48.149736][ T1087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.149757][ T1087] RIP: 0033:0x7f528c79e042 [ 48.149774][ T1087] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 48.149792][ T1087] RSP: 002b:00007f528d6c8d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 48.149813][ T1087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f528c79e042 [ 48.149822][ T1087] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 48.149830][ T1087] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 48.149838][ T1087] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 48.149847][ T1087] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f528c832fb8 [ 48.149863][ T1087] [ 48.185200][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 48.456555][ T312] usb 2-1: device descriptor read/64, error -71 [ 48.695192][ T312] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 48.702808][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 48.845232][ T312] usb 2-1: device descriptor read/64, error -71 [ 48.866279][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.876202][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 48.885333][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.894125][ T9] usb 4-1: config 0 descriptor?? [ 49.085327][ T312] usb 2-1: device descriptor read/64, error -71 [ 49.102564][ T1089] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 4. macoff=68 [ 49.111396][ T1094] rust_binder: 1093:1094 no such ref 3 [ 49.111422][ T1094] rust_binder: Write failure EINVAL in pid:175 [ 49.195353][ T312] usb usb2-port1: attempt power cycle [ 49.320191][ T9] wacom 0003:056A:0303.0004: unknown main item tag 0x2 [ 49.327373][ T9] wacom 0003:056A:0303.0004: unknown main item tag 0x0 [ 49.334267][ T9] wacom 0003:056A:0303.0004: unknown main item tag 0x0 [ 49.341185][ T9] wacom 0003:056A:0303.0004: unknown main item tag 0x0 [ 49.348159][ T9] wacom 0003:056A:0303.0004: unknown main item tag 0x0 [ 49.355474][ T9] wacom 0003:056A:0303.0004: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 49.365700][ T9] wacom 0003:056A:0303.0004: hidraw0: USB HID v0.00 Device [HID 056a:0303] on usb-dummy_hcd.3-1/input0 [ 49.386080][ T9] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0303.0004/input/input5 [ 49.521619][ T9] usb 4-1: USB disconnect, device number 6 [ 49.545173][ T312] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 49.566842][ T312] usb 2-1: device descriptor read/8, error -71 [ 49.640614][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 49.654910][ T46] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 49.665441][ T46] usb 3-1: USB disconnect, device number 4 [ 49.696217][ T312] usb 2-1: device descriptor read/8, error -71 [ 49.758681][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 49.758698][ T36] audit: type=1400 audit(1791930172.756:468): avc: denied { bind } for pid=1121 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.784121][ T36] audit: type=1400 audit(1791930172.756:469): avc: denied { name_bind } for pid=1121 comm="syz.2.242" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 49.807369][ T36] audit: type=1400 audit(1791930172.756:470): avc: denied { node_bind } for pid=1121 comm="syz.2.242" saddr=ff02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 49.829280][ T36] audit: type=1400 audit(1791930172.756:471): avc: denied { accept } for pid=1121 comm="syz.2.242" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.849617][ T36] audit: type=1400 audit(1791930172.786:472): avc: denied { write } for pid=1130 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.869206][ T36] audit: type=1400 audit(1791930172.806:473): avc: denied { mounton } for pid=1130 comm="syz.2.245" path="/65/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 49.955203][ T312] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 49.976231][ T312] usb 2-1: device descriptor read/8, error -71 [ 50.106492][ T312] usb 2-1: device descriptor read/8, error -71 [ 50.178313][ T1147] FAULT_INJECTION: forcing a failure. [ 50.178313][ T1147] name failslab, interval 1, probability 0, space 0, times 0 [ 50.191150][ T1147] CPU: 1 UID: 0 PID: 1147 Comm: syz.0.250 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 50.191184][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.191197][ T1147] Call Trace: [ 50.191205][ T1147] [ 50.191214][ T1147] __dump_stack+0x21/0x30 [ 50.191240][ T1147] dump_stack_lvl+0x140/0x1c0 [ 50.191258][ T1147] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.191276][ T1147] ? keyring_search_iterator+0x4e0/0x4e0 [ 50.191292][ T1147] ? stack_trace_save+0xaa/0x100 [ 50.191311][ T1147] dump_stack+0x19/0x20 [ 50.191328][ T1147] should_fail_ex+0x3c2/0x510 [ 50.191339][ T1147] should_failslab+0xac/0x100 [ 50.191351][ T1147] __kmalloc_cache_noprof+0x41/0x470 [ 50.191367][ T1147] ? x509_cert_parse+0x68/0xbd0 [ 50.191381][ T1147] ? downgrade_write+0x470/0x470 [ 50.191395][ T1147] x509_cert_parse+0x68/0xbd0 [ 50.191408][ T1147] x509_key_preparse+0x6a/0x880 [ 50.191423][ T1147] ? __cfi_down_read+0x10/0x10 [ 50.191441][ T1147] asymmetric_key_preparse+0xb6/0x100 [ 50.191453][ T1147] __key_create_or_update+0x430/0xa90 [ 50.191467][ T1147] ? security_key_permission+0x3d/0x100 [ 50.191483][ T1147] ? key_create_or_update+0x70/0x70 [ 50.191496][ T1147] ? __kasan_kmalloc+0x96/0xb0 [ 50.191516][ T1147] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 50.191532][ T1147] ? __cfi_keyring_search_iterator+0x10/0x10 [ 50.191547][ T1147] key_create_or_update+0x47/0x70 [ 50.191561][ T1147] __se_sys_add_key+0x355/0x4b0 [ 50.191578][ T1147] ? __x64_sys_add_key+0xf0/0xf0 [ 50.191594][ T1147] ? __kasan_check_write+0x18/0x20 [ 50.191610][ T1147] ? fpregs_restore_userregs+0x11c/0x260 [ 50.191625][ T1147] __x64_sys_add_key+0xc3/0xf0 [ 50.191645][ T1147] x64_sys_call+0x195f/0x2ee0 [ 50.191657][ T1147] do_syscall_64+0x57/0xf0 [ 50.191668][ T1147] ? clear_bhb_loop+0x50/0xa0 [ 50.191682][ T1147] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.191695][ T1147] RIP: 0033:0x7feda799e2d9 [ 50.191707][ T1147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.191717][ T1147] RSP: 002b:00007feda88e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 50.191731][ T1147] RAX: ffffffffffffffda RBX: 00007feda7c25fa0 RCX: 00007feda799e2d9 [ 50.191740][ T1147] RDX: 0000200000000640 RSI: 0000000000000000 RDI: 0000200000000600 [ 50.191749][ T1147] RBP: 00007feda7a35888 R08: 0000000038c67600 R09: 0000000000000000 [ 50.191757][ T1147] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 50.191764][ T1147] R13: 00007feda7c26038 R14: 00007feda7c25fa0 R15: 00007ffcb485f1b8 [ 50.191774][ T1147] [ 50.215295][ T312] usb usb2-port1: unable to enumerate USB device [ 50.305169][ T46] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 50.626422][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 50.633311][ T46] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 50.655253][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.659997][ T1159] netlink: 220 bytes leftover after parsing attributes in process `syz.2.256'. [ 50.670928][ T46] usb 4-1: config 0 descriptor?? [ 50.678709][ T36] audit: type=1400 audit(1791930173.676:474): avc: denied { mounton } for pid=1154 comm="syz.0.254" path="/78/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 50.704366][ T36] audit: type=1400 audit(1791930173.676:475): avc: denied { create } for pid=1158 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 50.748400][ T36] audit: type=1400 audit(1791930173.746:476): avc: denied { mounton } for pid=1154 comm="syz.0.254" path="/78/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 50.799641][ T36] audit: type=1400 audit(1791930173.796:477): avc: denied { getopt } for pid=1178 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.015238][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.165357][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 51.171723][ T311] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 51.180290][ T311] usb 2-1: config 1 has no interface number 0 [ 51.186867][ T311] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 51.200243][ T311] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 51.210716][ T311] usb 2-1: config 1 interface 105 has no altsetting 0 [ 51.220007][ T311] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 51.234708][ T311] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 51.243185][ T311] usb 2-1: Product: syz [ 51.247751][ T311] usb 2-1: Manufacturer: syz [ 51.252436][ T311] usb 2-1: SerialNumber: syz [ 51.260794][ T1162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.268170][ T1162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.301513][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 51.307658][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 51.319633][ T46] usb 4-1: USB disconnect, device number 7 [ 51.346372][ T1205] FAULT_INJECTION: forcing a failure. [ 51.346372][ T1205] name failslab, interval 1, probability 0, space 0, times 0 [ 51.359083][ T1205] CPU: 0 UID: 0 PID: 1205 Comm: syz.2.269 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 51.359118][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.359130][ T1205] Call Trace: [ 51.359137][ T1205] [ 51.359146][ T1205] __dump_stack+0x21/0x30 [ 51.359174][ T1205] dump_stack_lvl+0x140/0x1c0 [ 51.359191][ T1205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.359219][ T1205] dump_stack+0x19/0x20 [ 51.359246][ T1205] should_fail_ex+0x3c2/0x510 [ 51.359264][ T1205] should_failslab+0xac/0x100 [ 51.359284][ T1205] kmem_cache_alloc_node_noprof+0x45/0x420 [ 51.359301][ T1205] ? dup_task_struct+0xc1/0xd80 [ 51.359317][ T1205] ? kasan_save_alloc_info+0x3a/0x50 [ 51.359330][ T1205] ? __kasan_kmalloc+0x96/0xb0 [ 51.359342][ T1205] ? __kmalloc_cache_noprof+0x23c/0x470 [ 51.359368][ T1205] dup_task_struct+0xc1/0xd80 [ 51.359392][ T1205] ? __kasan_check_write+0x18/0x20 [ 51.359416][ T1205] ? _raw_spin_lock_irq+0x93/0x120 [ 51.359443][ T1205] ? copy_process+0x3350/0x3350 [ 51.359467][ T1205] ? __kasan_check_write+0x18/0x20 [ 51.359492][ T1205] copy_process+0x57c/0x3350 [ 51.359517][ T1205] ? kasan_save_alloc_info+0x3a/0x50 [ 51.359539][ T1205] ? __cfi_copy_process+0x10/0x10 [ 51.359560][ T1205] ? __kmalloc_cache_noprof+0x23c/0x470 [ 51.359584][ T1205] ? __kasan_check_write+0x18/0x20 [ 51.359606][ T1205] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 51.359629][ T1205] vhost_task_create+0x1f7/0x3f0 [ 51.359650][ T1205] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 51.359673][ T1205] ? __cfi_vhost_task_create+0x10/0x10 [ 51.359693][ T1205] ? __cfi_vhost_task_fn+0x10/0x10 [ 51.359714][ T1205] ? __kasan_check_write+0x18/0x20 [ 51.359738][ T1205] ? mutex_lock+0x97/0x1d0 [ 51.359757][ T1205] ? __cfi_mutex_lock+0x10/0x10 [ 51.359776][ T1205] ? kernel_text_address+0xa9/0xe0 [ 51.359803][ T1205] kvm_mmu_post_init_vm+0x161/0x300 [ 51.359834][ T1205] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 51.359872][ T1205] ? _parse_integer_limit+0x195/0x1e0 [ 51.359900][ T1205] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 51.359923][ T1205] ? kstrtoull+0x13b/0x1e0 [ 51.359946][ T1205] ? kstrtouint+0x78/0xf0 [ 51.359971][ T1205] ? ioctl_has_perm+0x1bc/0x500 [ 51.359996][ T1205] ? __asan_memcpy+0x5a/0x80 [ 51.360020][ T1205] ? ioctl_has_perm+0x408/0x500 [ 51.360036][ T1205] ? has_cap_mac_admin+0xd0/0xd0 [ 51.360052][ T1205] ? __kasan_check_write+0x18/0x20 [ 51.360066][ T1205] ? mutex_lock_killable+0x97/0x1d0 [ 51.360080][ T1205] ? __cfi_mutex_lock_killable+0x10/0x10 [ 51.360100][ T1205] ? proc_fail_nth_write+0x184/0x220 [ 51.360124][ T1205] kvm_vcpu_ioctl+0xa43/0x1000 [ 51.360145][ T1205] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 51.360165][ T1205] ? __cfi_vfs_write+0x10/0x10 [ 51.360183][ T1205] ? __kasan_check_write+0x18/0x20 [ 51.360204][ T1205] ? mutex_unlock+0x90/0x240 [ 51.360217][ T1205] ? __cfi_mutex_unlock+0x10/0x10 [ 51.360231][ T1205] ? __fget_files+0x2bc/0x330 [ 51.360249][ T1205] ? bpf_lsm_file_ioctl+0xd/0x20 [ 51.360269][ T1205] ? security_file_ioctl+0x3e/0x110 [ 51.360293][ T1205] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 51.360321][ T1205] __se_sys_ioctl+0x126/0x1b0 [ 51.360333][ T1205] __x64_sys_ioctl+0x7f/0xa0 [ 51.360347][ T1205] x64_sys_call+0x1878/0x2ee0 [ 51.360359][ T1205] do_syscall_64+0x57/0xf0 [ 51.360369][ T1205] ? clear_bhb_loop+0x50/0xa0 [ 51.360385][ T1205] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.360407][ T1205] RIP: 0033:0x7f6546f9e2d9 [ 51.360424][ T1205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.360440][ T1205] RSP: 002b:00007f6547eea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.360463][ T1205] RAX: ffffffffffffffda RBX: 00007f6547225fa0 RCX: 00007f6546f9e2d9 [ 51.360475][ T1205] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 51.360483][ T1205] RBP: 00007f6547eea090 R08: 0000000000000000 R09: 0000000000000000 [ 51.360491][ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.360498][ T1205] R13: 00007f6547226038 R14: 00007f6547225fa0 R15: 00007fffc97e14e8 [ 51.360508][ T1205] [ 51.799512][ T311] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 51.810566][ T311] usb 2-1: USB disconnect, device number 12 [ 51.820933][ T1211] netlink: 68 bytes leftover after parsing attributes in process `syz.2.271'. [ 51.833203][ T1213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.271'. [ 52.059709][ T1229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 52.548835][ T1239] FAULT_INJECTION: forcing a failure. [ 52.548835][ T1239] name failslab, interval 1, probability 0, space 0, times 0 [ 52.561713][ T1239] CPU: 0 UID: 0 PID: 1239 Comm: syz.1.278 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 52.561746][ T1239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.561759][ T1239] Call Trace: [ 52.561766][ T1239] [ 52.561773][ T1239] __dump_stack+0x21/0x30 [ 52.561807][ T1239] dump_stack_lvl+0x140/0x1c0 [ 52.561835][ T1239] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.561864][ T1239] ? release_sock+0x171/0x1f0 [ 52.561886][ T1239] dump_stack+0x19/0x20 [ 52.561913][ T1239] should_fail_ex+0x3c2/0x510 [ 52.561933][ T1239] should_failslab+0xac/0x100 [ 52.561961][ T1239] kmem_cache_alloc_node_noprof+0x45/0x420 [ 52.561989][ T1239] ? netlink_data_ready+0x20/0x20 [ 52.562013][ T1239] ? __alloc_skb+0x10c/0x360 [ 52.562033][ T1239] __alloc_skb+0x10c/0x360 [ 52.562052][ T1239] netlink_alloc_large_skb+0xf7/0x1b0 [ 52.562074][ T1239] netlink_sendmsg+0x576/0xad0 [ 52.562099][ T1239] ? __cfi_netlink_sendmsg+0x10/0x10 [ 52.562124][ T1239] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 52.562152][ T1239] ? security_socket_sendmsg+0x3d/0x100 [ 52.562176][ T1239] ____sys_sendmsg+0x99e/0xa00 [ 52.562200][ T1239] ? __import_iovec+0x5b9/0x7d0 [ 52.562224][ T1239] ? __sys_sendmsg_sock+0x50/0x50 [ 52.562249][ T1239] ? import_iovec+0x80/0xb0 [ 52.562273][ T1239] ___sys_sendmsg+0x2a6/0x370 [ 52.562298][ T1239] ? __sys_sendmsg+0x260/0x260 [ 52.562322][ T1239] ? proc_fail_nth_write+0x184/0x220 [ 52.562346][ T1239] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.562374][ T1239] ? __fget_files+0x2bc/0x330 [ 52.562394][ T1239] __x64_sys_sendmsg+0x1be/0x2a0 [ 52.562418][ T1239] ? fput+0x1a4/0x230 [ 52.562437][ T1239] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 52.562461][ T1239] ? ksys_write+0x1f3/0x260 [ 52.562489][ T1239] ? __kasan_check_read+0x15/0x20 [ 52.562515][ T1239] x64_sys_call+0x2a4c/0x2ee0 [ 52.562535][ T1239] do_syscall_64+0x57/0xf0 [ 52.562554][ T1239] ? clear_bhb_loop+0x50/0xa0 [ 52.562578][ T1239] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.562601][ T1239] RIP: 0033:0x7fb37079e2d9 [ 52.562619][ T1239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.562641][ T1239] RSP: 002b:00007fb3715ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.562664][ T1239] RAX: ffffffffffffffda RBX: 00007fb370a25fa0 RCX: 00007fb37079e2d9 [ 52.562680][ T1239] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 52.562693][ T1239] RBP: 00007fb3715ea090 R08: 0000000000000000 R09: 0000000000000000 [ 52.562707][ T1239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.562719][ T1239] R13: 00007fb370a26038 R14: 00007fb370a25fa0 R15: 00007ffecba3cd88 [ 52.562737][ T1239] [ 52.835772][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.933532][ T1257] process 'syz.0.286' launched './file0' with NULL argv: empty string added [ 52.995316][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 53.002513][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.011185][ T31] usb 4-1: config 8 has an invalid interface number: 65 but max is 0 [ 53.020032][ T31] usb 4-1: config 8 has no interface number 0 [ 53.026528][ T31] usb 4-1: config 8 interface 65 has no altsetting 0 [ 53.034865][ T31] usb 4-1: New USB device found, idVendor=e64d, idProduct=092c, bcdDevice=c0.86 [ 53.046176][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.054268][ T31] usb 4-1: Product: syz [ 53.059828][ T31] usb 4-1: Manufacturer: syz [ 53.064452][ T31] usb 4-1: SerialNumber: syz [ 53.097662][ T1268] capability: warning: `syz.0.290' uses deprecated v2 capabilities in a way that may be insecure [ 53.182370][ T1277] FAULT_INJECTION: forcing a failure. [ 53.182370][ T1277] name failslab, interval 1, probability 0, space 0, times 0 [ 53.195177][ T1277] CPU: 0 UID: 0 PID: 1277 Comm: syz.2.291 Not tainted syzkaller #0 f2e3546bd5cd9c2c62fe243d57d118fc828de9da [ 53.195211][ T1277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 53.195224][ T1277] Call Trace: [ 53.195231][ T1277] [ 53.195238][ T1277] __dump_stack+0x21/0x30 [ 53.195275][ T1277] dump_stack_lvl+0x140/0x1c0 [ 53.195305][ T1277] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.195333][ T1277] dump_stack+0x19/0x20 [ 53.195358][ T1277] should_fail_ex+0x3c2/0x510 [ 53.195387][ T1277] should_failslab+0xac/0x100 [ 53.195406][ T1277] __kmalloc_cache_noprof+0x41/0x470 [ 53.195434][ T1277] ? device_add+0xc1/0xbf0 [ 53.195464][ T1277] device_add+0xc1/0xbf0 [ 53.195487][ T1277] ? wakeup_source_sysfs_add+0x1c9/0x380 [ 53.195509][ T1277] wakeup_source_sysfs_add+0x1e0/0x380 [ 53.195530][ T1277] ? wakeup_source_create+0xca/0x1e0 [ 53.195557][ T1277] ? wakeup_source_register+0x1c/0x2b0 [ 53.195583][ T1277] wakeup_source_register+0x9b/0x2b0 [ 53.195610][ T1277] ep_create_wakeup_source+0x161/0x5b0 [ 53.195633][ T1277] ? ep_get_upwards_depth_proc+0x1c0/0x1c0 [ 53.195669][ T1277] ? ep_insert+0x46c/0x1600 [ 53.195690][ T1277] ep_insert+0xbe2/0x1600 [ 53.195711][ T1277] ? ep_loop_check+0xa0/0xa0 [ 53.195724][ T1277] ? mutex_lock+0x97/0x1d0 [ 53.195738][ T1277] ? security_capable+0x44/0x130 [ 53.195757][ T1277] do_epoll_ctl+0x955/0xcf0 [ 53.195771][ T1277] __x64_sys_epoll_ctl+0x166/0x1b0 [ 53.195791][ T1277] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 53.195812][ T1277] ? switch_fpu_return+0x12/0x20 [ 53.195837][ T1277] x64_sys_call+0x2c44/0x2ee0 [ 53.195858][ T1277] do_syscall_64+0x57/0xf0 [ 53.195872][ T1277] ? clear_bhb_loop+0x50/0xa0 [ 53.195889][ T1277] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.195902][ T1277] RIP: 0033:0x7f6546f9e2d9 [ 53.195915][ T1277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.195927][ T1277] RSP: 002b:00007f6547eea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 53.195951][ T1277] RAX: ffffffffffffffda RBX: 00007f6547225fa0 RCX: 00007f6546f9e2d9 [ 53.195967][ T1277] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 53.195979][ T1277] RBP: 00007f6547035888 R08: 0000000000000000 R09: 0000000000000000 [ 53.195993][ T1277] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 53.196006][ T1277] R13: 00007f6547226038 R14: 00007f6547225fa0 R15: 00007fffc97e14e8 [ 53.196020][ T1277] [ 53.274210][ T1241] 9pnet_fd: Insufficient options for proto=fd [ 53.417559][ T1281] SELinux: policydb magic number 0xa00 does not match expected magic number 0xf97cff8c [ 53.468060][ T1281] SELinux: failed to load policy [ 53.503249][ T1283] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 53.511002][ T1283] SELinux: failed to load policy [ 53.621403][ T1290] printk: legacy console [ttyS0] disabled SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=845 state=3 status=67 (errno 9: Bad file descriptor)