last executing test programs: 7.08142627s ago: executing program 1 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000002c0)=@can={0x1d, r2}, 0x80, 0x0, 0x0, &(0x7f0000004100)=ANY=[@ANYBLOB="00000100000000008003000000000000"], 0x10}}], 0x1, 0x6406c801) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0f94825e7000fbdbdf2515000000400001800d0001007564703a73797a320040"], 0x54}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 7.081171881s ago: executing program 1 (id=34): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x93a, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, r1}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xea3493d67e392594, 0x11, r1, 0x100000000) syz_usb_control_io$hid(r0, 0x0, 0x0) io_setup(0x4, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010fd07010040000102030109026900030180e007080b0101010a20000904000000010120000924010200080900c909040100000102200009040101010102200009050109400005041e082501810909020009040200000102200009040201010102200009058209100005041008250183330a0200eec4d7b3a034d142c64e5ecf8452c66129db26e6ed85a3466f8727c450ba25644ab23dedffe30699473d1711a344d6"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002218000000872f000000a7ec8de2b186865b2b92e9fb61589394df9e2d"], 0x0}, 0x0) 5.473943551s ago: executing program 0 (id=39): r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000003c0)={@void, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x6000, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0xfff, 0x7}}}}}}}, 0x3e) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2008c058) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 5.446405392s ago: executing program 1 (id=40): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48d, 0x0, 0xffff}]}) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x62040200) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x122) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) 5.365360954s ago: executing program 0 (id=42): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x0, 0xf, 0x1e, "01ba7e2254084783cadb93f0c5e67aa567fdddbce48322261636f3d06aab"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x3, "f43fb8"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48c82, 0x0) pwrite64(r1, &(0x7f00000003c0)=']', 0x1, 0x1bc8) 4.675826131s ago: executing program 3 (id=49): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x6, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000002280)={0x18, 0x2, {0xfffa, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) close(0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3", 0x1, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@chain) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r4, 0x58b) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x100800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="70a9c341bbb4c31d6f40c0d3cc18edda2dc12adba3d737b1a548a62b62f7a43c726a73e15cbfd802393771ad2d740da141649b7e9584844ea9e8f17a1c1d1dd7d69dff24426c8d6dde5588aae6e9598aeeec2dd606c8113c3f497d68996b914584c7cba7bed63147ed0e21055ae24fabed1f47dd4ff3a6a40e67dc30771c2dd14a42dac193ebbfe7bd29913f694808428c78b667e1d3c3cb350c39864fbd235a41c38e80223b157491b7b526470090ccd9540e24d5f02962a5bd56b5923dd8", 0xbf, 0x400c010, &(0x7f0000000340)={0x11, 0xf8, r6, 0x1, 0xa6, 0x6, @local}, 0x14) r7 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r4, 0x8) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="c80000000002"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000201e04483040000102030109027e0003010080020904000000010100000a2401020028000201020924030501030303000924060301010700800c240201"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) keyctl$clear(0x7, r7) 4.231979953s ago: executing program 1 (id=50): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x5, 0x0, 0x401, 0xfffffffffffffffa, 0x100000001, 0x3, 0x4, 0x4}, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setitimer(0x2, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a7a0083"], 0x0}, 0x0) 2.857465867s ago: executing program 2 (id=58): socket(0x9, 0x800, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xfbff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000680)=0x7, 0x2) 2.857150587s ago: executing program 2 (id=59): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r2, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}], 0x1) r3 = socket(0xa, 0x2400000001, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000380)=0xc, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) getsockopt$sock_buf(r3, 0x1, 0x3d, 0x0, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f00000002c0), &(0x7f0000000200)=0x14) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000240)={{&(0x7f0000000000)=[{0x8, 0x3, 0x6, {0x3, 0x9}, 0x1, 0x8, 0x9}], 0x1, 0x40, 0x401, 0x1}, {&(0x7f00000000c0)=[{0x10, 0x5}], 0x1, 0x10, 0x94, 0x100000000}, {&(0x7f0000000140)=[0x3, 0x401, 0x81], 0x3, 0x8, 0x2}, {&(0x7f0000000180)=[{0xffffffffffffffff, 0x8, 0x3, 0x7, 0xd}], 0x1, 0x28, 0x3, 0x9}, {&(0x7f00000001c0)=[0x9, 0x7, 0x3955, 0x2, 0x8], 0x5, 0x8, 0xdbf, 0x2}}) 2.821526608s ago: executing program 2 (id=60): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x99, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)=0x0) syz_ublk_setup_queues(r1, r2, &(0x7f00000003c0)={0x0, 0xcd5e, 0x10000, 0x1, 0x257}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffa000/0x3000)=nil) 2.809533129s ago: executing program 2 (id=61): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000002b00)={0x2020}, 0x2020) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x3, 0x2}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='f2fs\x00', 0x52080, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 2.725354251s ago: executing program 2 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@phonet={0x23, 0x41, 0x9, 0xfd}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@phonet={0x23, 0x41, 0x9, 0xfd}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) 2.724955091s ago: executing program 2 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000105e04dc0000000000000109022400010000a002090400050203000200092100004001221800090581032001001587"], 0x0) syz_usb_connect$uac3(0x4, 0xdd, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0xf, 0x40, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2a, 0x81f}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x202, 0x2, 0xa2, 0x1, 0x8001, 0x1000, 0x3f2, 0x5}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x2, 0x4d8d, 0x6, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x917, 0x3, 0x7f, 0xbc}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5e, 0x5, 0x5, {0xa, 0x25, 0x25, 0x40, 0x0, 0x47}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x0, 0x8, "a060"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x0, 0x0, 0x6, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x10, 0x4, 0x7, 0x5}, @as_header={0x17, 0x24, 0x1, 0x23, 0xfffffff0, 0x6, 0x1001, 0xf, 0x0, 0x8, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0xe2, 0x4, {0xa, 0x25, 0x25, 0x1, 0x6, 0x7}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x8, 0x8, 0x8, 0x10, 0x6}, 0xb1, &(0x7f0000000440)={0x5, 0xf, 0xb1, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0x3}, @generic={0x83, 0x10, 0x4, "b4ca57dec3af910dae8e341b355d3f9dde2cad5ed3c4eedc3bedf1712128108e9255902989c921d9ba2f71e5285c66a2ae8a8e72909ca162659ab61e2cfc741d3b04f7cfd36f72e6bae91a8c85c4df53237d691067899885244b343dd4eaae7e11fd47a44d7162e3a14089df5cebae71fc18533ae70cac897f076bc5eadff53f"}, @ssp_cap={0x18, 0x10, 0xa, 0xe9, 0x3, 0x0, 0xf000, 0x6, [0xc000, 0xff3fc0, 0xc000]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x7, 0x7}]}, 0x2, [{0xd, &(0x7f0000000500)=@string={0xd, 0x3, "5971ecde772b5e0e5ef285"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r5, 0x1, 0xe, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480d0}, 0x8c0) r6 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x200013) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[], 0x30}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) remap_file_pages(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002, 0x8, 0x100) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x1bf61000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000002080)={0x1f, 0xf, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x1, 0x3f, r10, &(0x7f0000000240)='\x00j', 0x2, 0x10000000005971}]) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) 2.697969671s ago: executing program 0 (id=64): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001400050024bd70007bdbdf250a8831000100edb7e5a88ce15e9a5f810094ef288b474691b52f78e388f0b26517ecf607040000000000000000000000000000000000000000122ca2d1850ff9fdecd96a00cf511d7cc69b8ccdd55a8a3d193e137aad08d1d772fd7f80918bf73a87b1e815632b025cdbe9b181e4e93766d05e72a11669ab63fd1af5ffe11a28cdbd771b2440c55c8231e38d916795f53f774b66fc4798199db6625b861ed9fc7b6fd5a9bd1249d45be708d6b106bcb3405fe93b8b35c5426ce2ef6f58595acdc537d482630a6b0da34c981fbe"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001c00010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="02010102aeeeae20030490eaa1270102030109021b00010007c0010904b90501389938050905040010000050d0"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 1.699561137s ago: executing program 3 (id=65): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (fail_nth: 6) 1.625084838s ago: executing program 3 (id=66): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[]) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote, r4}, 0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000180)={0x1d, r6}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r7, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/46, 0x2e}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40010163, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) (async) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[]) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote, r4}, 0x14) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r7, &(0x7f0000000180)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) (async) sendmsg$sock(r7, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) (async) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/46, 0x2e}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40010163, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) (async) 1.508340021s ago: executing program 0 (id=67): mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x801404, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000000)='*$\x00') r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000180)=0xffffffff, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)={0x200000, 0x100}, 0x18) r1 = openat(0xffffffffffffffff, &(0x7f0000000500)='./debug\x00', 0x20182, 0x0) write(r1, &(0x7f0000000080)="2d2086aecdbed2faad65c98c0e3120302030", 0x12) 1.498115251s ago: executing program 0 (id=68): r0 = socket(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, [{{r0}, 0x8}, {{r0}, 0x2}]}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/5, 0x5, 0x7fffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x10, 0x64, 0xa1, 0x20, 0x1608, 0x21b, 0x627, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xf0, 0x7, "", [{{0x9, 0x4, 0xf7, 0x8, 0x0, 0x1d, 0xd9, 0xa3, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0xfffffffffffffc99, 0x0}) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)}, 0x0) 1.17710723s ago: executing program 1 (id=69): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="38374854afe62c220c0da78fb77bf59688fb3762fc168549e842e2bd8304a41fc073a00019c90a7b78", 0x29}, {&(0x7f0000000200)="a61f1af46cc92a8bae1ae7f338f89c04ff68873ff1961fa9cef1de554b32f51adfe2af0c6016abe8c723a1cfad553e96d7df872f502b", 0x36}], 0x2, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsopen(&(0x7f0000004600)='bdev\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e24, @local}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000)=0x9, 0x4) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3080", 0x2, r6) r7 = epoll_create1(0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7a, 0x60, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf7ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x7f, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xb, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x7, 0x3}}}}}}}}]}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmmsg(r8, &(0x7f0000001d40)=[{{&(0x7f00000002c0)=@ax25={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default, @default]}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000340)="c266f5a87b2587d6c6106ae0bd8ca61bc89334a15c1425639a2c790d6804dd104d551f2ea651dbe3b7fbd5edb693ad1c76acbdb6e1481bc8fccee8515a7a7038b98968b626b4189822cbc6597ef78bd1403b01bedab810df52d31d53f4ca091cb0ef6728003d34363d4487348e64d554ecb71fde33a275c9c9fad49e60f0f4819b3b2d9b97943e2130bfcba2564e738b447d5a7d7b1a1db55d", 0x99}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000001400)="897834180b9c8aabbaab9e1fe2fff84cd813670a2be465586132b10187042c20f5a4bf143c45ee3168be38302a2fc27f51df1ea651094ae794f70bbff2e934f1e8ecd37ec14928f7498eb0e6364a563f8cd98f9b688b866027c906ada4636faa0c53e19c22740da25f23ce076906d921e0b7fabb6776664f1dbd2c1904c7c60cfcfe89751c7346671296261c53609a24e0c0561fa6e49af28fa2a7215892cacba4cf3249172450ff3ae814b43cd4afb2a877b47b6f55c31cc3", 0xb9}, {&(0x7f00000016c0)="b9792f0836abd1ac1eb8bfd63e29ef99354ec6dde4a7fccd7a0212f34050e1bfcd677a955bce29268769c764e2713d57ec108521b364ce5092bb2923204364ea87f33b769758219f2c51de061a91502c8e5ac85e258e066331335ae3da328575db7c53403d88a57cd40ffc513e0cafa406", 0x71}, {&(0x7f0000001840)="a7f9140551d8849ead457eafb7f7de6c3ed75bfe46b8d1ba86234473ccca9b0e5fffc8a69a276cff0815851487ebd7769d6b6cf258fe2ad6a915d0a9b90464dfe87b85e0969bbe9a88f87144757a060923b52ddd3aad721b4896bc88d36f5cffe198e4215f072cb3d7bdc7a6de19cfc4a852bb83ee9597da424f1868bb6dbe0d3aa6421ea67d3b7a8c16c90a136e790c827456e9", 0x94}, {&(0x7f0000001600)="e1431c875b03045d433551d5881642cca258045dcc31538a5ce10b7b88f7d744e123ddc64a09cb0226bf27bfe88f899e786fec89221c9971b4b74d32fd784add7433067ef39c351be267f411e592605dcebe4c43774a89c421d80b22d42d4f3f31901fde9abe", 0x66}, {&(0x7f0000001e00)="e21d589ec12d9bd1c43b7c6922a9a2080b5936689ebd5867f4d2a9da20a014d58d1bf4c28b456f778c4c3353b0a6fe447d2addaf9d8fbfcd706a8fabf5e957824e01d83464ec8a6f0d639e49ded20f016a9335317fb57ebd93d5d185ac7fa6eb6f7c165f8f3b347648698c6147e7aba1ed1300a25a90325b75570ea6c5846ad80e8fe7b38fad87810f3338043c392f083632f00900000085d0cca3a399afd60593e39c20f0d2fac951ee28da3ca027d250d8b0f9561dabd37b7ae515c6ecba01c2302839b410db0ca730dac4d47fe7756d263a550eacddff1394cd4a793b3f564eaadcd4a49aa370", 0xe8}], 0x7, &(0x7f0000001800)=ANY=[@ANYRESOCT=r9], 0x530}}], 0x29, 0x24000000) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r10 = epoll_create1(0x0) epoll_wait(r10, &(0x7f0000001680)=[{}], 0x1, 0x1c) close_range(r0, 0xffffffffffffffff, 0x400000000000000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) 366.94849ms ago: executing program 1 (id=70): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000400)=0x3fd, 0x4) eventfd(0x7fff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002fb00"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827a57000fbdbdf356a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990004000000080000000500d2000e0000000500d2000e0000000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4a21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20000022}, 0x1c) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4b, 0x1800005, 0x81, 0x7fffffff, 0xfff8, 0x0, 0x10000, 0x0, 0x4bfb, 0x4, 0x200000000042, 0x20000000000004, 0x3, 0x5, 0x9, 0x100000090], 0x0, 0x108e55}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000002c0)=""/232, &(0x7f00000003c0)=0xe8) ptrace(0x10, r4) wait4(r4, 0x0, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000001c0)=0x3ff, 0x4) socket$key(0xf, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000080)={0xe000, 0x1000}) 317.456721ms ago: executing program 0 (id=71): mkdir(0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0xfffffffffffffdb7) listen(r2, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6(0xa, 0x5, 0xc) accept$inet(r2, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x1, 0x0, {0xa, 0x0, 0x4, @local}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x32) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mprotect(&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x9) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 972.64µs ago: executing program 3 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_ublk_setup_io_uring(0x2393, &(0x7f0000000040)={0x0, 0x5cc3, 0x20000, 0x3, 0xce}, &(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000180)) syz_ublk_add_dev(0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0xf, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x4, 0xffffffff}}], 0x1, 0x0, 0x0) 268.12µs ago: executing program 3 (id=73): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xa004) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x88) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0xa004) (async) 0s ago: executing program 3 (id=74): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (fail_nth: 7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 21.778317][ T36] audit: type=1400 audit(1788005410.209:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.779549][ T287] cgroup: Unknown subsys name 'net' [ 21.800969][ T36] audit: type=1400 audit(1788005410.209:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.828566][ T36] audit: type=1400 audit(1788005410.239:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.828652][ T287] cgroup: Unknown subsys name 'devices' [ 21.951171][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.956764][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.048994][ T36] audit: type=1400 audit(1788005410.479:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.072162][ T36] audit: type=1400 audit(1788005410.479:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.096219][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.097008][ T36] audit: type=1400 audit(1788005410.479:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.128528][ T36] audit: type=1400 audit(1788005410.539:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.136155][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.154286][ T36] audit: type=1400 audit(1788005410.539:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.188337][ T36] audit: type=1400 audit(1788005410.569:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.213847][ T36] audit: type=1400 audit(1788005410.569:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.362184][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.369241][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.376542][ T294] bridge_slave_0: entered allmulticast mode [ 23.382776][ T294] bridge_slave_0: entered promiscuous mode [ 23.391793][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.398832][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.406137][ T296] bridge_slave_0: entered allmulticast mode [ 23.412469][ T296] bridge_slave_0: entered promiscuous mode [ 23.418715][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.425899][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.433037][ T294] bridge_slave_1: entered allmulticast mode [ 23.439222][ T294] bridge_slave_1: entered promiscuous mode [ 23.450996][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.458050][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.465240][ T296] bridge_slave_1: entered allmulticast mode [ 23.471404][ T296] bridge_slave_1: entered promiscuous mode [ 23.511532][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.518581][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.525715][ T295] bridge_slave_0: entered allmulticast mode [ 23.532007][ T295] bridge_slave_0: entered promiscuous mode [ 23.550070][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.557121][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.564235][ T295] bridge_slave_1: entered allmulticast mode [ 23.570420][ T295] bridge_slave_1: entered promiscuous mode [ 23.581594][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.588646][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.595841][ T297] bridge_slave_0: entered allmulticast mode [ 23.602053][ T297] bridge_slave_0: entered promiscuous mode [ 23.611128][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.618262][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.625355][ T297] bridge_slave_1: entered allmulticast mode [ 23.631658][ T297] bridge_slave_1: entered promiscuous mode [ 23.769610][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.776670][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.784078][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.791134][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.803368][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.810437][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.817699][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.824787][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.845650][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.852747][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.860054][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.867074][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.875494][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.882562][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.889835][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.896852][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.941898][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.949206][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.957126][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.964328][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.972117][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.979500][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.986689][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.994034][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.007058][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.014134][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.021790][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028807][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.038400][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.045459][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.072009][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.079050][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.086635][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.093676][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.101428][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.108486][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.124189][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.131253][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.144723][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.151802][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.160934][ T294] veth0_vlan: entered promiscuous mode [ 24.184514][ T294] veth1_macvtap: entered promiscuous mode [ 24.224370][ T296] veth0_vlan: entered promiscuous mode [ 24.232078][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.235176][ T295] veth0_vlan: entered promiscuous mode [ 24.264138][ T296] veth1_macvtap: entered promiscuous mode [ 24.278506][ T297] veth0_vlan: entered promiscuous mode [ 24.304252][ T297] veth1_macvtap: entered promiscuous mode [ 24.311791][ T295] veth1_macvtap: entered promiscuous mode [ 24.420672][ T312] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 24.444057][ T329] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.461478][ T312] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 24.659346][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.831971][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.850128][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.869624][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.891646][ T31] usb 3-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 24.902541][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.913598][ T31] usb 3-1: config 0 descriptor?? [ 25.169317][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.199327][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.323122][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 25.329556][ T67] usb 1-1: device descriptor read/64, error -71 [ 25.331913][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 25.335863][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 25.353908][ T31] usb 3-1: USB disconnect, device number 2 [ 25.380041][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.401125][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 25.423084][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.431600][ T10] usb 2-1: Product: syz [ 25.435772][ T10] usb 2-1: Manufacturer: syz [ 25.449152][ T10] usb 2-1: SerialNumber: syz [ 25.569360][ T67] usb 1-1: device descriptor read/64, error -71 [ 25.659697][ T399] tipc: Started in network mode [ 25.664629][ T399] tipc: Node identity 6a1fff64147a, cluster identity 4711 [ 25.672177][ T399] tipc: Enabled bearer , priority 0 [ 25.713892][ T10] usb 2-1: selecting invalid altsetting 1 [ 25.721878][ T398] tipc: Disabling bearer [ 25.723176][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.738913][ T10] usb 2-1: USB disconnect, device number 2 [ 25.805550][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.809336][ T67] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.879617][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 25.959404][ T67] usb 1-1: device descriptor read/64, error -71 [ 26.030492][ T31] usb 4-1: config index 0 descriptor too short (expected 161, got 108) [ 26.038846][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.049060][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.058127][ T31] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.072529][ T31] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 26.081729][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.089896][ T31] usb 4-1: Product: syz [ 26.094108][ T31] usb 4-1: Manufacturer: syz [ 26.098694][ T31] usb 4-1: SerialNumber: syz [ 26.149379][ T403] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.199609][ T67] usb 1-1: device descriptor read/64, error -71 [ 26.299688][ T403] usb 3-1: Using ep0 maxpacket: 8 [ 26.305860][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.317050][ T403] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.319463][ T67] usb usb1-port1: attempt power cycle [ 26.330451][ T403] usb 3-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 26.344941][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.353676][ T403] usb 3-1: config 0 descriptor?? [ 26.360064][ T403] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 26.519337][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.669394][ T67] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.690391][ T67] usb 1-1: device descriptor read/8, error -71 [ 26.699284][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 26.705490][ T310] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 26.716568][ T310] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.729368][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.735976][ T310] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 26.745138][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.753749][ T310] usb 2-1: config 0 descriptor?? [ 26.820356][ T67] usb 1-1: device descriptor read/8, error -71 [ 27.059316][ T67] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.073948][ T403] usbhid 3-1:0.0: can't add hid device: -71 [ 27.084008][ T403] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.091855][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 27.091872][ T36] audit: type=1400 audit(1788005415.519:146): avc: denied { read } for pid=418 comm="syz.2.16" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 27.093047][ T67] usb 1-1: device descriptor read/8, error -71 [ 27.098028][ T36] audit: type=1400 audit(1788005415.519:147): avc: denied { open } for pid=418 comm="syz.2.16" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 27.151193][ T403] usb 3-1: USB disconnect, device number 3 [ 27.158131][ T36] audit: type=1400 audit(1788005415.589:148): avc: denied { read } for pid=418 comm="syz.2.16" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.181518][ T36] audit: type=1400 audit(1788005415.589:149): avc: denied { open } for pid=418 comm="syz.2.16" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.181866][ T421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.208464][ T36] audit: type=1400 audit(1788005415.609:150): avc: denied { ioctl } for pid=418 comm="syz.2.16" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.212929][ T421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.246512][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 27.257459][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 27.257632][ T36] audit: type=1400 audit(1788005415.689:151): avc: denied { mount } for pid=423 comm="syz.2.17" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 27.268974][ T310] usb 2-1: USB disconnect, device number 3 [ 27.293270][ T67] usb 1-1: device descriptor read/8, error -71 [ 27.303566][ T36] audit: type=1400 audit(1788005415.739:152): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 27.409437][ T67] usb usb1-port1: unable to enumerate USB device [ 27.569309][ T403] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.720685][ T403] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.729057][ T403] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.739184][ T403] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.749637][ T403] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 27.759590][ T431] FAULT_INJECTION: forcing a failure. [ 27.759590][ T431] name failslab, interval 1, probability 0, space 0, times 0 [ 27.761510][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.774745][ T431] CPU: 0 UID: 0 PID: 431 Comm: syz.1.19 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 27.774776][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.774803][ T431] Call Trace: [ 27.774809][ T431] [ 27.774816][ T431] __dump_stack+0x21/0x30 [ 27.774852][ T431] dump_stack_lvl+0x140/0x1c0 [ 27.774875][ T431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.774899][ T431] ? __cfi_vfs_write+0x10/0x10 [ 27.774922][ T431] dump_stack+0x19/0x20 [ 27.774944][ T431] should_fail_ex+0x3c2/0x510 [ 27.774965][ T431] should_failslab+0xac/0x100 [ 27.774987][ T431] kmem_cache_alloc_noprof+0x42/0x410 [ 27.775006][ T431] ? ksys_write+0x1f3/0x260 [ 27.775023][ T431] ? getname_flags+0xcc/0x6b0 [ 27.775043][ T431] getname_flags+0xcc/0x6b0 [ 27.775062][ T431] ? __kasan_check_read+0x15/0x20 [ 27.775080][ T431] __x64_sys_mkdirat+0x7e/0xa0 [ 27.775104][ T431] x64_sys_call+0x2ba8/0x2ee0 [ 27.775120][ T431] do_syscall_64+0x57/0xf0 [ 27.775145][ T431] ? clear_bhb_loop+0x50/0xa0 [ 27.775165][ T431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.775184][ T431] RIP: 0033:0x7f5fa3f9e159 [ 27.775204][ T431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.775218][ T431] RSP: 002b:00007f5fa4eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 27.775242][ T431] RAX: ffffffffffffffda RBX: 00007f5fa4225fa0 RCX: 00007f5fa3f9e159 [ 27.775255][ T431] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 27.775268][ T431] RBP: 00007f5fa4eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 27.775279][ T431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.775290][ T431] R13: 00007f5fa4226038 R14: 00007f5fa4225fa0 R15: 00007ffdf02827a8 [ 27.775306][ T431] [ 27.965251][ T403] usb 3-1: Product: syz [ 27.969496][ T403] usb 3-1: Manufacturer: syz [ 27.974130][ T403] usb 3-1: SerialNumber: syz [ 27.983846][ T403] usb 3-1: selecting invalid altsetting 1 [ 27.984252][ T36] audit: type=1400 audit(1788005416.419:153): avc: denied { ioctl } for pid=432 comm="syz.0.21" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4355 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.991223][ T403] usb 3-1: unit 6 not found! [ 28.018635][ T434] FAULT_INJECTION: forcing a failure. [ 28.018635][ T434] name failslab, interval 1, probability 0, space 0, times 0 [ 28.032621][ T434] CPU: 0 UID: 0 PID: 434 Comm: syz.1.20 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 28.032659][ T434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.032672][ T434] Call Trace: [ 28.032676][ T434] [ 28.032684][ T434] __dump_stack+0x21/0x30 [ 28.032720][ T434] dump_stack_lvl+0x140/0x1c0 [ 28.032752][ T434] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.032784][ T434] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 28.032809][ T434] dump_stack+0x19/0x20 [ 28.032825][ T434] should_fail_ex+0x3c2/0x510 [ 28.032840][ T434] should_failslab+0xac/0x100 [ 28.032856][ T434] kmem_cache_alloc_noprof+0x42/0x410 [ 28.032872][ T434] ? __kernfs_new_node+0xf1/0x740 [ 28.032902][ T434] __kernfs_new_node+0xf1/0x740 [ 28.032941][ T434] ? kernfs_new_node+0x280/0x280 [ 28.032964][ T434] ? snprintf+0xe9/0x140 [ 28.032981][ T434] kernfs_new_node+0x154/0x280 [ 28.032998][ T434] __kernfs_create_file+0x52/0x280 [ 28.033018][ T434] cgroup_addrm_files+0x775/0xac0 [ 28.033051][ T434] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 28.033083][ T434] ? delete_node+0x3df/0xa60 [ 28.033107][ T434] ? __kasan_check_write+0x18/0x20 [ 28.033122][ T434] css_populate_dir+0x12d/0x3d0 [ 28.033136][ T434] cgroup_apply_control_enable+0x62f/0xce0 [ 28.033153][ T434] cgroup_mkdir+0x1274/0x1600 [ 28.033180][ T434] ? __cfi_cgroup_mkdir+0x10/0x10 [ 28.033207][ T434] kernfs_iop_mkdir+0x1bb/0x2d0 [ 28.033238][ T434] vfs_mkdir+0x591/0x810 [ 28.033256][ T434] do_mkdirat+0x240/0x530 [ 28.033273][ T434] ? __cfi_do_mkdirat+0x10/0x10 [ 28.033289][ T434] ? __kasan_check_write+0x18/0x20 [ 28.033305][ T434] ? getname_flags+0x203/0x6b0 [ 28.033330][ T434] ? __kasan_check_write+0x18/0x20 [ 28.033354][ T434] __x64_sys_mkdirat+0x8b/0xa0 [ 28.033384][ T434] x64_sys_call+0x2ba8/0x2ee0 [ 28.033397][ T434] do_syscall_64+0x57/0xf0 [ 28.033418][ T434] ? clear_bhb_loop+0x50/0xa0 [ 28.033433][ T434] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.033450][ T434] RIP: 0033:0x7f5fa3f9e159 [ 28.033470][ T434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.033489][ T434] RSP: 002b:00007f5fa4eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 28.033515][ T434] RAX: ffffffffffffffda RBX: 00007f5fa4225fa0 RCX: 00007f5fa3f9e159 [ 28.033530][ T434] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 28.033539][ T434] RBP: 00007f5fa4035024 R08: 0000000000000000 R09: 0000000000000000 [ 28.033548][ T434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.033556][ T434] R13: 00007f5fa4226038 R14: 00007f5fa4225fa0 R15: 00007ffdf02827a8 [ 28.033567][ T434] [ 28.033578][ T434] cgroup: cgroup_addrm_files: failed to add cpu_exclusive, err=-12 [ 28.184352][ T36] audit: type=1400 audit(1788005416.619:154): avc: denied { setattr } for pid=427 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 28.347882][ T36] audit: type=1400 audit(1788005416.779:155): avc: denied { create } for pid=436 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.419674][ T403] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 28.429746][ T403] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.443872][ T403] usb 3-1: USB disconnect, device number 4 [ 28.458812][ T417] udevd[417]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.541935][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.556092][ T31] usb 4-1: USB disconnect, device number 2 [ 28.590718][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.819318][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.909338][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.959329][ T310] usb 1-1: device descriptor read/64, error -71 [ 29.010480][ T452] FAULT_INJECTION: forcing a failure. [ 29.010480][ T452] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.023554][ T452] CPU: 0 UID: 0 PID: 452 Comm: syz.2.28 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 29.023584][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.023595][ T452] Call Trace: [ 29.023602][ T452] [ 29.023609][ T452] __dump_stack+0x21/0x30 [ 29.023638][ T452] dump_stack_lvl+0x140/0x1c0 [ 29.023660][ T452] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.023689][ T452] dump_stack+0x19/0x20 [ 29.023714][ T452] should_fail_ex+0x3c2/0x510 [ 29.023739][ T452] should_fail+0xf/0x20 [ 29.023760][ T452] should_fail_usercopy+0x1e/0x30 [ 29.023784][ T452] strncpy_from_user+0x29/0x280 [ 29.023807][ T452] getname_flags+0x106/0x6b0 [ 29.023831][ T452] ? __kasan_check_read+0x15/0x20 [ 29.023852][ T452] __x64_sys_mkdirat+0x7e/0xa0 [ 29.023878][ T452] x64_sys_call+0x2ba8/0x2ee0 [ 29.023899][ T452] do_syscall_64+0x57/0xf0 [ 29.023926][ T452] ? clear_bhb_loop+0x50/0xa0 [ 29.023949][ T452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.023971][ T452] RIP: 0033:0x7ff2d859e159 [ 29.023990][ T452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.024007][ T452] RSP: 002b:00007ff2d9521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 29.024029][ T452] RAX: ffffffffffffffda RBX: 00007ff2d8825fa0 RCX: 00007ff2d859e159 [ 29.024045][ T452] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 29.024059][ T452] RBP: 00007ff2d9521090 R08: 0000000000000000 R09: 0000000000000000 [ 29.024072][ T452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.024085][ T452] R13: 00007ff2d8826038 R14: 00007ff2d8825fa0 R15: 00007ffcb75764a8 [ 29.024107][ T452] [ 29.079349][ T31] usb 4-1: device descriptor read/64, error -71 [ 29.300835][ T459] FAULT_INJECTION: forcing a failure. [ 29.300835][ T459] name failslab, interval 1, probability 0, space 0, times 0 [ 29.313573][ T459] CPU: 1 UID: 0 PID: 459 Comm: syz.1.31 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 29.313606][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.313614][ T459] Call Trace: [ 29.313618][ T459] [ 29.313624][ T459] __dump_stack+0x21/0x30 [ 29.313648][ T459] dump_stack_lvl+0x140/0x1c0 [ 29.313666][ T459] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.313684][ T459] dump_stack+0x19/0x20 [ 29.313700][ T459] should_fail_ex+0x3c2/0x510 [ 29.313716][ T459] should_failslab+0xac/0x100 [ 29.313731][ T459] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 29.313747][ T459] ? kstrdup_const+0x45/0x60 [ 29.313758][ T459] ? __kasan_check_write+0x18/0x20 [ 29.313771][ T459] ? _raw_spin_lock+0x92/0x120 [ 29.313789][ T459] kstrdup+0x4d/0x130 [ 29.313809][ T459] ? kstrdup_const+0x3a/0x60 [ 29.313820][ T459] kstrdup_const+0x45/0x60 [ 29.313831][ T459] __kernfs_new_node+0xaa/0x740 [ 29.313848][ T459] ? kernfs_new_node+0x280/0x280 [ 29.313863][ T459] ? snprintf+0xe9/0x140 [ 29.313880][ T459] kernfs_new_node+0x154/0x280 [ 29.313896][ T459] __kernfs_create_file+0x52/0x280 [ 29.313914][ T459] cgroup_addrm_files+0x775/0xac0 [ 29.313932][ T459] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 29.313949][ T459] ? delete_node+0x3df/0xa60 [ 29.313968][ T459] ? __kasan_check_write+0x18/0x20 [ 29.313982][ T459] css_populate_dir+0x12d/0x3d0 [ 29.313997][ T459] cgroup_apply_control_enable+0x62f/0xce0 [ 29.314014][ T459] cgroup_mkdir+0x1274/0x1600 [ 29.314031][ T459] ? __cfi_cgroup_mkdir+0x10/0x10 [ 29.314046][ T459] kernfs_iop_mkdir+0x1bb/0x2d0 [ 29.314063][ T459] vfs_mkdir+0x591/0x810 [ 29.314080][ T459] do_mkdirat+0x240/0x530 [ 29.314096][ T459] ? __cfi_do_mkdirat+0x10/0x10 [ 29.314113][ T459] ? __kasan_check_write+0x18/0x20 [ 29.314125][ T459] ? getname_flags+0x203/0x6b0 [ 29.314139][ T459] ? __kasan_check_write+0x18/0x20 [ 29.314152][ T459] __x64_sys_mkdirat+0x8b/0xa0 [ 29.314169][ T459] x64_sys_call+0x2ba8/0x2ee0 [ 29.314182][ T459] do_syscall_64+0x57/0xf0 [ 29.314200][ T459] ? clear_bhb_loop+0x50/0xa0 [ 29.314215][ T459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.314229][ T459] RIP: 0033:0x7f5fa3f9e159 [ 29.314243][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.314253][ T459] RSP: 002b:00007f5fa4eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 29.314269][ T459] RAX: ffffffffffffffda RBX: 00007f5fa4225fa0 RCX: 00007f5fa3f9e159 [ 29.314279][ T459] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 29.314288][ T459] RBP: 00007f5fa4035024 R08: 0000000000000000 R09: 0000000000000000 [ 29.314331][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.314342][ T459] R13: 00007f5fa4226038 R14: 00007f5fa4225fa0 R15: 00007ffdf02827a8 [ 29.314355][ T459] [ 29.314363][ T459] cgroup: cgroup_addrm_files: failed to add effective_mems, err=-12 [ 29.611522][ T310] usb 1-1: device descriptor read/64, error -71 [ 29.633301][ T462] FAULT_INJECTION: forcing a failure. [ 29.633301][ T462] name failslab, interval 1, probability 0, space 0, times 0 [ 29.645947][ T462] CPU: 1 UID: 0 PID: 462 Comm: syz.1.32 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 29.645977][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.645988][ T462] Call Trace: [ 29.645995][ T462] [ 29.646003][ T462] __dump_stack+0x21/0x30 [ 29.646030][ T462] dump_stack_lvl+0x140/0x1c0 [ 29.646045][ T462] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.646060][ T462] ? pcpu_block_update+0x1ce/0x8f0 [ 29.646074][ T462] ? pcpu_block_update+0x1ce/0x8f0 [ 29.646086][ T462] dump_stack+0x19/0x20 [ 29.646099][ T462] should_fail_ex+0x3c2/0x510 [ 29.646110][ T462] should_failslab+0xac/0x100 [ 29.646124][ T462] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 29.646137][ T462] ? kstrdup_const+0x45/0x60 [ 29.646146][ T462] ? pcpu_block_update_hint_alloc+0x899/0xc50 [ 29.646159][ T462] kstrdup+0x4d/0x130 [ 29.646172][ T462] ? kstrdup_const+0x3a/0x60 [ 29.646181][ T462] kstrdup_const+0x45/0x60 [ 29.646189][ T462] __kernfs_new_node+0xaa/0x740 [ 29.646202][ T462] ? mutex_unlock+0x90/0x240 [ 29.646214][ T462] ? pcpu_alloc_noprof+0x1440/0x1440 [ 29.646225][ T462] ? kernfs_new_node+0x280/0x280 [ 29.646238][ T462] ? pcpu_alloc_noprof+0xd93/0x1440 [ 29.646258][ T462] kernfs_new_node+0x154/0x280 [ 29.646272][ T462] kernfs_create_dir_ns+0x4b/0x130 [ 29.646286][ T462] cgroup_mkdir+0x396/0x1600 [ 29.646301][ T462] ? __kasan_check_write+0x18/0x20 [ 29.646312][ T462] ? __cfi_cgroup_mkdir+0x10/0x10 [ 29.646325][ T462] kernfs_iop_mkdir+0x1bb/0x2d0 [ 29.646338][ T462] vfs_mkdir+0x591/0x810 [ 29.646352][ T462] do_mkdirat+0x240/0x530 [ 29.646365][ T462] ? __cfi_do_mkdirat+0x10/0x10 [ 29.646379][ T462] ? __kasan_check_write+0x18/0x20 [ 29.646389][ T462] ? getname_flags+0x203/0x6b0 [ 29.646400][ T462] ? __kasan_check_write+0x18/0x20 [ 29.646411][ T462] __x64_sys_mkdirat+0x8b/0xa0 [ 29.646425][ T462] x64_sys_call+0x2ba8/0x2ee0 [ 29.646435][ T462] do_syscall_64+0x57/0xf0 [ 29.646449][ T462] ? clear_bhb_loop+0x50/0xa0 [ 29.646460][ T462] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.646471][ T462] RIP: 0033:0x7f5fa3f9e159 [ 29.646481][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.646490][ T462] RSP: 002b:00007f5fa4eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 29.646502][ T462] RAX: ffffffffffffffda RBX: 00007f5fa4225fa0 RCX: 00007f5fa3f9e159 [ 29.646510][ T462] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 29.646517][ T462] RBP: 00007f5fa4035024 R08: 0000000000000000 R09: 0000000000000000 [ 29.646523][ T462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.646529][ T462] R13: 00007f5fa4226038 R14: 00007f5fa4225fa0 R15: 00007ffdf02827a8 [ 29.646538][ T462] [ 29.937254][ T464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.979398][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.049343][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 30.179345][ T310] usb 1-1: device descriptor read/64, error -71 [ 30.189363][ T403] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 30.219318][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.242692][ T468] ======================================================= [ 30.242692][ T468] WARNING: The mand mount option has been deprecated and [ 30.242692][ T468] and is ignored by this kernel. Remove the mand [ 30.242692][ T468] option from the mount to silence this warning. [ 30.242692][ T468] ======================================================= [ 30.278004][ T468] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 30.286312][ T468] overlayfs: missing 'lowerdir' [ 30.302870][ T470] devpts: called with bogus options [ 30.323917][ T470] devpts: called with bogus options [ 30.340565][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.357534][ T477] FAULT_INJECTION: forcing a failure. [ 30.357534][ T477] name failslab, interval 1, probability 0, space 0, times 0 [ 30.358704][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.370233][ T477] CPU: 0 UID: 0 PID: 477 Comm: syz.2.37 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 30.370267][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.370277][ T477] Call Trace: [ 30.370283][ T477] [ 30.370291][ T477] __dump_stack+0x21/0x30 [ 30.370321][ T477] dump_stack_lvl+0x140/0x1c0 [ 30.370345][ T477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.370377][ T477] ? __filename_parentat+0x458/0x660 [ 30.370398][ T477] dump_stack+0x19/0x20 [ 30.370420][ T477] should_fail_ex+0x3c2/0x510 [ 30.370441][ T477] should_failslab+0xac/0x100 [ 30.370463][ T477] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 30.370482][ T477] ? __d_alloc+0x42/0x8c0 [ 30.370498][ T477] ? __d_lookup+0x4e8/0x550 [ 30.370517][ T477] __d_alloc+0x42/0x8c0 [ 30.370534][ T477] d_alloc+0x4c/0x1c0 [ 30.370549][ T477] ? lookup_one_qstr_excl+0xba/0x280 [ 30.370570][ T477] lookup_one_qstr_excl+0xcf/0x280 [ 30.370591][ T477] filename_create+0x241/0x450 [ 30.370614][ T477] ? kern_path_create+0x70/0x70 [ 30.370636][ T477] ? __cfi___check_object_size+0x10/0x10 [ 30.370655][ T477] do_mkdirat+0xa9/0x530 [ 30.370678][ T477] ? __cfi_do_mkdirat+0x10/0x10 [ 30.370708][ T477] ? __kasan_check_write+0x18/0x20 [ 30.370726][ T477] ? getname_flags+0x203/0x6b0 [ 30.370745][ T477] ? __kasan_check_read+0x15/0x20 [ 30.370762][ T477] __x64_sys_mkdirat+0x8b/0xa0 [ 30.370786][ T477] x64_sys_call+0x2ba8/0x2ee0 [ 30.370802][ T477] do_syscall_64+0x57/0xf0 [ 30.370826][ T477] ? clear_bhb_loop+0x50/0xa0 [ 30.370846][ T477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.370865][ T477] RIP: 0033:0x7ff2d859e159 [ 30.370885][ T477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.370899][ T477] RSP: 002b:00007ff2d9521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 30.370919][ T477] RAX: ffffffffffffffda RBX: 00007ff2d8825fa0 RCX: 00007ff2d859e159 [ 30.370933][ T477] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 30.370946][ T477] RBP: 00007ff2d9521090 R08: 0000000000000000 R09: 0000000000000000 [ 30.370961][ T477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.370972][ T477] R13: 00007ff2d8826038 R14: 00007ff2d8825fa0 R15: 00007ffcb75764a8 [ 30.370988][ T477] [ 30.613310][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.622591][ T403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.636207][ T403] usb 2-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 30.645314][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.653843][ T403] usb 2-1: config 0 descriptor?? [ 30.679334][ T310] usb 1-1: device descriptor read/64, error -71 [ 30.789478][ T310] usb usb1-port1: attempt power cycle [ 30.859331][ T67] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.859409][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.979398][ T31] usb usb4-port1: attempt power cycle [ 31.009299][ T67] usb 3-1: Using ep0 maxpacket: 8 [ 31.015497][ T67] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.026437][ T67] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.039374][ T67] usb 3-1: config 0 interface 0 has no altsetting 0 [ 31.045966][ T67] usb 3-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 31.055012][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.063628][ T67] usb 3-1: config 0 descriptor?? [ 31.073821][ T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.082380][ T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.091584][ T403] usbhid 2-1:0.0: can't add hid device: -71 [ 31.097578][ T403] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.107605][ T403] usb 2-1: USB disconnect, device number 4 [ 31.139320][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.160352][ T310] usb 1-1: device descriptor read/8, error -71 [ 31.290340][ T310] usb 1-1: device descriptor read/8, error -71 [ 31.319323][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.332553][ T67] usbhid 3-1:0.0: can't add hid device: -71 [ 31.338572][ T67] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 31.340353][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.349518][ T67] usb 3-1: USB disconnect, device number 5 [ 31.480396][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.529338][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 31.550261][ T310] usb 1-1: device descriptor read/8, error -71 [ 31.647925][ T493] FAULT_INJECTION: forcing a failure. [ 31.647925][ T493] name failslab, interval 1, probability 0, space 0, times 0 [ 31.660900][ T493] CPU: 1 UID: 0 PID: 493 Comm: syz.3.41 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 31.660942][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.660956][ T493] Call Trace: [ 31.660964][ T493] [ 31.660972][ T493] __dump_stack+0x21/0x30 [ 31.661009][ T493] dump_stack_lvl+0x140/0x1c0 [ 31.661039][ T493] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.661069][ T493] dump_stack+0x19/0x20 [ 31.661112][ T493] should_fail_ex+0x3c2/0x510 [ 31.661140][ T493] should_failslab+0xac/0x100 [ 31.661167][ T493] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 31.661193][ T493] ? kstrdup_const+0x45/0x60 [ 31.661213][ T493] ? __kasan_check_write+0x18/0x20 [ 31.661235][ T493] ? _raw_spin_lock+0x92/0x120 [ 31.661267][ T493] kstrdup+0x4d/0x130 [ 31.661297][ T493] ? kstrdup_const+0x3a/0x60 [ 31.661317][ T493] kstrdup_const+0x45/0x60 [ 31.661338][ T493] __kernfs_new_node+0xaa/0x740 [ 31.661368][ T493] ? kernfs_new_node+0x280/0x280 [ 31.661399][ T493] ? snprintf+0xe9/0x140 [ 31.661431][ T493] kernfs_new_node+0x154/0x280 [ 31.661460][ T493] __kernfs_create_file+0x52/0x280 [ 31.661493][ T493] cgroup_addrm_files+0x775/0xac0 [ 31.661528][ T493] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 31.661560][ T493] ? delete_node+0x3df/0xa60 [ 31.661591][ T493] ? __kasan_check_write+0x18/0x20 [ 31.661619][ T493] css_populate_dir+0x12d/0x3d0 [ 31.661645][ T493] cgroup_apply_control_enable+0x62f/0xce0 [ 31.661677][ T493] cgroup_mkdir+0x1274/0x1600 [ 31.661708][ T493] ? __cfi_cgroup_mkdir+0x10/0x10 [ 31.661736][ T493] kernfs_iop_mkdir+0x1bb/0x2d0 [ 31.661768][ T493] vfs_mkdir+0x591/0x810 [ 31.661801][ T493] do_mkdirat+0x240/0x530 [ 31.661832][ T493] ? __cfi_do_mkdirat+0x10/0x10 [ 31.661863][ T493] ? __kasan_check_write+0x18/0x20 [ 31.661887][ T493] ? getname_flags+0x203/0x6b0 [ 31.661913][ T493] ? __kasan_check_write+0x18/0x20 [ 31.661938][ T493] __x64_sys_mkdirat+0x8b/0xa0 [ 31.661969][ T493] x64_sys_call+0x2ba8/0x2ee0 [ 31.661992][ T493] do_syscall_64+0x57/0xf0 [ 31.662025][ T493] ? clear_bhb_loop+0x50/0xa0 [ 31.662052][ T493] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.662078][ T493] RIP: 0033:0x7fa96499e159 [ 31.662109][ T493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.662130][ T493] RSP: 002b:00007fa9633e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 31.662156][ T493] RAX: ffffffffffffffda RBX: 00007fa964c25fa0 RCX: 00007fa96499e159 [ 31.662177][ T493] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 31.662195][ T493] RBP: 00007fa964a35024 R08: 0000000000000000 R09: 0000000000000000 [ 31.662211][ T493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.662225][ T493] R13: 00007fa964c26038 R14: 00007fa964c25fa0 R15: 00007fff36e93d48 [ 31.662246][ T493] [ 31.662256][ T493] cgroup: cgroup_addrm_files: failed to add effective_mems, err=-12 [ 31.960307][ T310] usb 1-1: device descriptor read/8, error -71 [ 32.069388][ T310] usb usb1-port1: unable to enumerate USB device [ 32.099326][ T67] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.163563][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 32.163580][ T36] audit: type=1400 audit(1788005420.599:183): avc: denied { read write } for pid=503 comm="syz.3.45" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.170016][ T505] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.192756][ T36] audit: type=1400 audit(1788005420.599:184): avc: denied { open } for pid=503 comm="syz.3.45" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.223000][ T36] audit: type=1400 audit(1788005420.609:185): avc: denied { ioctl } for pid=503 comm="syz.3.45" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.248180][ T36] audit: type=1400 audit(1788005420.609:186): avc: denied { set_context_mgr } for pid=503 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.268887][ T36] audit: type=1400 audit(1788005420.629:187): avc: denied { unlink } for pid=503 comm="syz.3.45" name="file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.282505][ T510] FAULT_INJECTION: forcing a failure. [ 32.282505][ T510] name failslab, interval 1, probability 0, space 0, times 0 [ 32.303616][ T510] CPU: 0 UID: 0 PID: 510 Comm: syz.3.47 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 32.303647][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.303659][ T510] Call Trace: [ 32.303665][ T510] [ 32.303672][ T510] __dump_stack+0x21/0x30 [ 32.303710][ T510] dump_stack_lvl+0x140/0x1c0 [ 32.303732][ T510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.303748][ T510] ? __call_rcu_common+0x53c/0x710 [ 32.303759][ T510] dump_stack+0x19/0x20 [ 32.303772][ T510] should_fail_ex+0x3c2/0x510 [ 32.303784][ T510] should_failslab+0xac/0x100 [ 32.303798][ T510] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 32.303809][ T510] ? __d_alloc+0x42/0x8c0 [ 32.303820][ T510] __d_alloc+0x42/0x8c0 [ 32.303828][ T510] ? __dentry_kill+0x4bb/0x5f0 [ 32.303843][ T510] d_alloc+0x4c/0x1c0 [ 32.303852][ T510] ? lookup_one_qstr_excl+0xba/0x280 [ 32.303865][ T510] lookup_one_qstr_excl+0xcf/0x280 [ 32.303876][ T510] filename_create+0x241/0x450 [ 32.303890][ T510] ? kern_path_create+0x70/0x70 [ 32.303903][ T510] ? __cfi___check_object_size+0x10/0x10 [ 32.303914][ T510] do_mkdirat+0xa9/0x530 [ 32.303927][ T510] ? __cfi_do_mkdirat+0x10/0x10 [ 32.303940][ T510] ? __kasan_check_write+0x18/0x20 [ 32.303950][ T510] ? getname_flags+0x203/0x6b0 [ 32.303961][ T510] ? __kasan_check_read+0x15/0x20 [ 32.303971][ T510] __x64_sys_mkdirat+0x8b/0xa0 [ 32.303984][ T510] x64_sys_call+0x2ba8/0x2ee0 [ 32.303993][ T510] do_syscall_64+0x57/0xf0 [ 32.304008][ T510] ? clear_bhb_loop+0x50/0xa0 [ 32.304020][ T510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.304031][ T510] RIP: 0033:0x7fa96499e159 [ 32.304044][ T510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.304053][ T510] RSP: 002b:00007fa9633e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 32.304065][ T510] RAX: ffffffffffffffda RBX: 00007fa964c25fa0 RCX: 00007fa96499e159 [ 32.304073][ T510] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 32.304080][ T510] RBP: 00007fa9633e3090 R08: 0000000000000000 R09: 0000000000000000 [ 32.304086][ T510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.304093][ T510] R13: 00007fa964c26038 R14: 00007fa964c25fa0 R15: 00007fff36e93d48 [ 32.304101][ T510] [ 32.343944][ T517] program syz.3.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.346248][ T36] audit: type=1400 audit(1788005420.749:188): avc: denied { create } for pid=511 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.351571][ T517] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 32.356476][ T36] audit: type=1400 audit(1788005420.749:189): avc: denied { accept } for pid=511 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.360685][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 32.365307][ T36] audit: type=1400 audit(1788005420.759:190): avc: denied { ioctl } for pid=511 comm="syz.3.48" path="socket:[5246]" dev="sockfs" ino=5246 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.375589][ T517] Zero length message leads to an empty skb [ 32.375688][ T36] audit: type=1400 audit(1788005420.809:191): avc: denied { create } for pid=516 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.570225][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 32.578540][ T67] usb 3-1: Using ep0 maxpacket: 32 [ 32.598052][ T36] audit: type=1400 audit(1788005420.809:192): avc: denied { bind } for pid=516 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.606356][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 32.630653][ T310] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 32.654471][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 32.654509][ T67] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 32.659754][ T310] usb 1-1: config 0 has no interface number 0 [ 32.683897][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.703422][ T67] usb 3-1: config 0 descriptor?? [ 32.715586][ T310] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 32.722728][ T67] hub 3-1:0.0: bad descriptor, ignoring hub [ 32.732152][ T310] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 32.735838][ T67] hub 3-1:0.0: probe with driver hub failed with error -5 [ 32.740509][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.750958][ T67] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 32.757069][ T310] usb 1-1: Product: syz [ 32.791870][ T310] usb 1-1: Manufacturer: syz [ 32.797643][ T310] usb 1-1: SerialNumber: syz [ 32.811310][ T310] usb 1-1: config 0 descriptor?? [ 32.816618][ T495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.859339][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.880298][ T31] usb 4-1: device descriptor read/8, error -71 [ 33.010388][ T31] usb 4-1: device descriptor read/8, error -71 [ 33.030573][ T495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.119393][ T31] usb usb4-port1: unable to enumerate USB device [ 33.169309][ T403] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.269451][ T31] usb 3-1: USB disconnect, device number 6 [ 33.319307][ T403] usb 2-1: Using ep0 maxpacket: 16 [ 33.325487][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.336467][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.346234][ T403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.359093][ T403] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.368162][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.376864][ T403] usb 2-1: config 0 descriptor?? [ 33.639858][ T310] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 33.650085][ T310] asix 1-1:0.188: probe with driver asix failed with error -71 [ 33.660264][ T310] usb 1-1: USB disconnect, device number 10 [ 33.865036][ T542] FAULT_INJECTION: forcing a failure. [ 33.865036][ T542] name failslab, interval 1, probability 0, space 0, times 0 [ 33.877712][ T542] CPU: 0 UID: 0 PID: 542 Comm: syz.2.56 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 33.877744][ T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.877755][ T542] Call Trace: [ 33.877762][ T542] [ 33.877770][ T542] __dump_stack+0x21/0x30 [ 33.877798][ T542] dump_stack_lvl+0x140/0x1c0 [ 33.877812][ T542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.877827][ T542] dump_stack+0x19/0x20 [ 33.877840][ T542] should_fail_ex+0x3c2/0x510 [ 33.877852][ T542] should_failslab+0xac/0x100 [ 33.877873][ T542] kmem_cache_alloc_noprof+0x42/0x410 [ 33.877893][ T542] ? security_inode_alloc+0x51/0x230 [ 33.877915][ T542] ? kasan_save_alloc_info+0x3a/0x50 [ 33.877934][ T542] security_inode_alloc+0x51/0x230 [ 33.877949][ T542] inode_init_always_gfp+0x756/0x9e0 [ 33.877962][ T542] alloc_inode+0xc5/0x270 [ 33.877975][ T542] iget_locked+0x198/0x9a0 [ 33.877988][ T542] ? __cfi_iget_locked+0x10/0x10 [ 33.878001][ T542] ? __kasan_check_write+0x18/0x20 [ 33.878019][ T542] ? rwsem_read_trylock+0x275/0x5a0 [ 33.878046][ T542] ? downgrade_write+0x470/0x470 [ 33.878072][ T542] ? kasan_save_alloc_info+0x3a/0x50 [ 33.878086][ T542] ? __kasan_slab_alloc+0x73/0x90 [ 33.878099][ T542] kernfs_get_inode+0x50/0x830 [ 33.878111][ T542] kernfs_iop_lookup+0x213/0x320 [ 33.878124][ T542] lookup_one_qstr_excl+0x129/0x280 [ 33.878137][ T542] filename_create+0x241/0x450 [ 33.878154][ T542] ? kern_path_create+0x70/0x70 [ 33.878178][ T542] ? __cfi___check_object_size+0x10/0x10 [ 33.878199][ T542] do_mkdirat+0xa9/0x530 [ 33.878223][ T542] ? __cfi_do_mkdirat+0x10/0x10 [ 33.878238][ T542] ? __kasan_check_write+0x18/0x20 [ 33.878248][ T542] ? getname_flags+0x203/0x6b0 [ 33.878258][ T542] ? __kasan_check_read+0x15/0x20 [ 33.878268][ T542] __x64_sys_mkdirat+0x8b/0xa0 [ 33.878282][ T542] x64_sys_call+0x2ba8/0x2ee0 [ 33.878293][ T542] do_syscall_64+0x57/0xf0 [ 33.878319][ T542] ? clear_bhb_loop+0x50/0xa0 [ 33.878340][ T542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.878361][ T542] RIP: 0033:0x7ff2d859e159 [ 33.878374][ T542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.878382][ T542] RSP: 002b:00007ff2d9521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 33.878394][ T542] RAX: ffffffffffffffda RBX: 00007ff2d8825fa0 RCX: 00007ff2d859e159 [ 33.878402][ T542] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 33.878409][ T542] RBP: 00007ff2d9521090 R08: 0000000000000000 R09: 0000000000000000 [ 33.878421][ T542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.878427][ T542] R13: 00007ff2d8826038 R14: 00007ff2d8825fa0 R15: 00007ffcb75764a8 [ 33.878440][ T542] [ 34.539324][ T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.599363][ T67] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 34.669316][ T310] usb 3-1: device descriptor read/64, error -71 [ 34.749325][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 34.756464][ T67] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.765037][ T67] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 34.773247][ T67] usb 1-1: config 0 has no interface number 0 [ 34.779411][ T67] usb 1-1: config 0 interface 185 has no altsetting 0 [ 34.787570][ T67] usb 1-1: New USB device found, idVendor=0403, idProduct=ea90, bcdDevice=27.a1 [ 34.796736][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.804753][ T67] usb 1-1: Product: syz [ 34.808926][ T67] usb 1-1: Manufacturer: syz [ 34.813568][ T67] usb 1-1: SerialNumber: syz [ 34.818778][ T67] usb 1-1: config 0 descriptor?? [ 34.919304][ T310] usb 3-1: device descriptor read/64, error -71 [ 35.027011][ T67] ftdi_sio 1-1:0.185: FTDI USB Serial Device converter detected [ 35.035085][ T67] ftdi_sio ttyUSB0: unknown device type: 0x27a1 [ 35.042747][ T67] usb 1-1: USB disconnect, device number 11 [ 35.049594][ T67] ftdi_sio 1-1:0.185: device disconnected [ 35.159326][ T310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.289320][ T310] usb 3-1: device descriptor read/64, error -71 [ 35.361905][ T568] FAULT_INJECTION: forcing a failure. [ 35.361905][ T568] name failslab, interval 1, probability 0, space 0, times 0 [ 35.374638][ T568] CPU: 0 UID: 0 PID: 568 Comm: syz.3.65 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 35.374669][ T568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.374680][ T568] Call Trace: [ 35.374689][ T568] [ 35.374697][ T568] __dump_stack+0x21/0x30 [ 35.374726][ T568] dump_stack_lvl+0x140/0x1c0 [ 35.374749][ T568] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.374784][ T568] dump_stack+0x19/0x20 [ 35.374811][ T568] should_fail_ex+0x3c2/0x510 [ 35.374825][ T568] should_failslab+0xac/0x100 [ 35.374839][ T568] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 35.374851][ T568] ? pcpu_block_refresh_hint+0x201/0x320 [ 35.374865][ T568] ? kstrdup_const+0x45/0x60 [ 35.374873][ T568] ? pcpu_block_update_hint_alloc+0x8a0/0xc50 [ 35.374895][ T568] kstrdup+0x4d/0x130 [ 35.374920][ T568] ? kstrdup_const+0x3a/0x60 [ 35.374933][ T568] kstrdup_const+0x45/0x60 [ 35.374948][ T568] __kernfs_new_node+0xaa/0x740 [ 35.374964][ T568] ? mutex_unlock+0x90/0x240 [ 35.374975][ T568] ? pcpu_alloc_noprof+0x1440/0x1440 [ 35.374986][ T568] ? kernfs_new_node+0x280/0x280 [ 35.374999][ T568] ? pcpu_alloc_noprof+0xd93/0x1440 [ 35.375011][ T568] kernfs_new_node+0x154/0x280 [ 35.375027][ T568] kernfs_create_dir_ns+0x4b/0x130 [ 35.375051][ T568] cgroup_mkdir+0x396/0x1600 [ 35.375075][ T568] ? __kasan_check_write+0x18/0x20 [ 35.375095][ T568] ? __cfi_cgroup_mkdir+0x10/0x10 [ 35.375110][ T568] kernfs_iop_mkdir+0x1bb/0x2d0 [ 35.375123][ T568] vfs_mkdir+0x591/0x810 [ 35.375138][ T568] do_mkdirat+0x240/0x530 [ 35.375151][ T568] ? __cfi_do_mkdirat+0x10/0x10 [ 35.375166][ T568] ? __kasan_check_write+0x18/0x20 [ 35.375184][ T568] ? getname_flags+0x203/0x6b0 [ 35.375205][ T568] ? __kasan_check_read+0x15/0x20 [ 35.375223][ T568] __x64_sys_mkdirat+0x8b/0xa0 [ 35.375246][ T568] x64_sys_call+0x2ba8/0x2ee0 [ 35.375255][ T568] do_syscall_64+0x57/0xf0 [ 35.375270][ T568] ? clear_bhb_loop+0x50/0xa0 [ 35.375282][ T568] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.375293][ T568] RIP: 0033:0x7fa96499e159 [ 35.375303][ T568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.375317][ T568] RSP: 002b:00007fa9633e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 35.375346][ T568] RAX: ffffffffffffffda RBX: 00007fa964c25fa0 RCX: 00007fa96499e159 [ 35.375360][ T568] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 35.375374][ T568] RBP: 00007fa9633e3090 R08: 0000000000000000 R09: 0000000000000000 [ 35.375386][ T568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.375393][ T568] R13: 00007fa964c26038 R14: 00007fa964c25fa0 R15: 00007fff36e93d48 [ 35.375401][ T568] [ 35.533977][ T310] usb 3-1: device descriptor read/64, error -71 [ 35.769455][ T310] usb usb3-port1: attempt power cycle [ 35.799341][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 35.830118][ T403] usbhid 2-1:0.0: can't add hid device: -71 [ 35.836113][ T403] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.845507][ T403] usb 2-1: USB disconnect, device number 5 [ 35.899363][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 35.959338][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 35.965593][ T10] usb 1-1: config 7 has an invalid interface number: 247 but max is 0 [ 35.973880][ T10] usb 1-1: config 7 has no interface number 0 [ 35.980049][ T10] usb 1-1: config 7 interface 247 has no altsetting 0 [ 35.988246][ T10] usb 1-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice= 6.27 [ 35.997574][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.005724][ T10] usb 1-1: Product: syz [ 36.009992][ T10] usb 1-1: Manufacturer: syz [ 36.016258][ T10] usb 1-1: SerialNumber: syz [ 36.050602][ T45] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 36.058732][ T45] usb 4-1: config 0 has no interface number 0 [ 36.064871][ T45] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 36.075627][ T45] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 36.086770][ T45] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 36.097736][ T45] usb 4-1: config 0 interface 2 has no altsetting 0 [ 36.106516][ T45] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 36.115735][ T310] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.123259][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.131398][ T45] usb 4-1: Product: syz [ 36.135625][ T45] usb 4-1: Manufacturer: syz [ 36.140253][ T45] usb 4-1: SerialNumber: syz [ 36.145505][ T45] usb 4-1: config 0 descriptor?? [ 36.150536][ T403] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.158980][ T574] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 36.159669][ T310] usb 3-1: device descriptor read/8, error -71 [ 36.166356][ T574] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 36.226273][ T10] usb 1-1: USB disconnect, device number 12 [ 36.299384][ T403] usb 2-1: Using ep0 maxpacket: 8 [ 36.305295][ T310] usb 3-1: device descriptor read/8, error -71 [ 36.313207][ T403] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 36.322334][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.330356][ T403] usb 2-1: Product: syz [ 36.334538][ T403] usb 2-1: Manufacturer: syz [ 36.339135][ T403] usb 2-1: SerialNumber: syz [ 36.381694][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.390235][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.403654][ T45] usb 4-1: USB disconnect, device number 7 [ 36.414695][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.551268][ T310] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.570298][ T310] usb 3-1: device descriptor read/8, error -71 [ 36.642740][ T403] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 36.652447][ T403] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 36.662406][ T403] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 36.672486][ T403] usb 2-1: USB disconnect, device number 6 [ 36.696508][ T584] FAULT_INJECTION: forcing a failure. [ 36.696508][ T584] name failslab, interval 1, probability 0, space 0, times 0 [ 36.700350][ T310] usb 3-1: device descriptor read/8, error -71 [ 36.709329][ T584] CPU: 0 UID: 0 PID: 584 Comm: syz.1.70 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 36.709358][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.709370][ T584] Call Trace: [ 36.709378][ T584] [ 36.709387][ T584] __dump_stack+0x21/0x30 [ 36.709427][ T584] dump_stack_lvl+0x140/0x1c0 [ 36.709452][ T584] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.709478][ T584] dump_stack+0x19/0x20 [ 36.709501][ T584] should_fail_ex+0x3c2/0x510 [ 36.709522][ T584] should_failslab+0xac/0x100 [ 36.709544][ T584] kmem_cache_alloc_noprof+0x42/0x410 [ 36.709563][ T584] ? vm_area_dup+0x3f/0x560 [ 36.709583][ T584] ? __kasan_check_read+0x15/0x20 [ 36.709601][ T584] vm_area_dup+0x3f/0x560 [ 36.709620][ T584] ? copy_mm+0xb0e/0x1da0 [ 36.709641][ T584] copy_mm+0xb16/0x1da0 [ 36.709663][ T584] ? copy_signal+0x6a0/0x6a0 [ 36.709684][ T584] ? _raw_spin_lock+0x92/0x120 [ 36.709711][ T584] ? __asan_memset+0x39/0x50 [ 36.709729][ T584] ? __init_rwsem+0x110/0x1f0 [ 36.709753][ T584] ? copy_signal+0x4d5/0x6a0 [ 36.709774][ T584] copy_process+0x12a4/0x3350 [ 36.709809][ T584] ? __cfi_copy_process+0x10/0x10 [ 36.709834][ T584] kernel_clone+0x233/0x810 [ 36.709858][ T584] ? __cfi_kernel_clone+0x10/0x10 [ 36.709881][ T584] ? do_futex+0x32a/0x510 [ 36.709908][ T584] __x64_sys_clone+0x1b7/0x230 [ 36.709932][ T584] ? __cfi___x64_sys_clone+0x10/0x10 [ 36.709958][ T584] ? __kasan_check_write+0x18/0x20 [ 36.709976][ T584] ? fpregs_restore_userregs+0x11c/0x260 [ 36.709998][ T584] ? switch_fpu_return+0x12/0x20 [ 36.710020][ T584] x64_sys_call+0x2b3c/0x2ee0 [ 36.710037][ T584] do_syscall_64+0x57/0xf0 [ 36.710062][ T584] ? clear_bhb_loop+0x50/0xa0 [ 36.710082][ T584] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.710102][ T584] RIP: 0033:0x7f5fa3f9e159 [ 36.710118][ T584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.710133][ T584] RSP: 002b:00007f5fa4eaefd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 36.710153][ T584] RAX: ffffffffffffffda RBX: 00007f5fa4225fa0 RCX: 00007f5fa3f9e159 [ 36.710166][ T584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.710177][ T584] RBP: 00007f5fa4035024 R08: 0000000000000000 R09: 0000000000000000 [ 36.710189][ T584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.710203][ T584] R13: 00007f5fa4226038 R14: 00007f5fa4225fa0 R15: 00007ffdf02827a8 [ 36.710219][ T584] [ 36.715560][ T584] futex_wake_op: syz.1.70 tries to shift op by 144; fix this program [ 36.829396][ T310] usb usb3-port1: unable to enumerate USB device [ 36.831826][ T584] futex_wake_op: syz.1.70 tries to shift op by 144; fix this program [ 37.042008][ T600] FAULT_INJECTION: forcing a failure. [ 37.042008][ T600] name failslab, interval 1, probability 0, space 0, times 0 [ 37.054868][ T600] CPU: 1 UID: 0 PID: 600 Comm: syz.3.74 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 37.054899][ T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.054911][ T600] Call Trace: [ 37.054918][ T600] [ 37.054926][ T600] __dump_stack+0x21/0x30 [ 37.054957][ T600] dump_stack_lvl+0x140/0x1c0 [ 37.054982][ T600] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.055007][ T600] ? __kasan_check_write+0x18/0x20 [ 37.055025][ T600] ? down_write+0xee/0x2b0 [ 37.055047][ T600] dump_stack+0x19/0x20 [ 37.055094][ T600] should_fail_ex+0x3c2/0x510 [ 37.055116][ T600] should_failslab+0xac/0x100 [ 37.055139][ T600] __kmalloc_cache_noprof+0x41/0x470 [ 37.055159][ T600] ? cgroup_mkdir+0xbe2/0x1600 [ 37.055183][ T600] cgroup_mkdir+0xbe2/0x1600 [ 37.055215][ T600] ? __cfi_cgroup_mkdir+0x10/0x10 [ 37.055236][ T600] kernfs_iop_mkdir+0x1bb/0x2d0 [ 37.055260][ T600] vfs_mkdir+0x591/0x810 [ 37.055285][ T600] do_mkdirat+0x240/0x530 [ 37.055308][ T600] ? __cfi_do_mkdirat+0x10/0x10 [ 37.055333][ T600] ? __kasan_check_write+0x18/0x20 [ 37.055350][ T600] ? getname_flags+0x203/0x6b0 [ 37.055370][ T600] ? __kasan_check_read+0x15/0x20 [ 37.055389][ T600] __x64_sys_mkdirat+0x8b/0xa0 [ 37.055414][ T600] x64_sys_call+0x2ba8/0x2ee0 [ 37.055432][ T600] do_syscall_64+0x57/0xf0 [ 37.055457][ T600] ? clear_bhb_loop+0x50/0xa0 [ 37.055477][ T600] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.055495][ T600] RIP: 0033:0x7fa96499e159 [ 37.055512][ T600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.055527][ T600] RSP: 002b:00007fa9633e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 37.055548][ T600] RAX: ffffffffffffffda RBX: 00007fa964c25fa0 RCX: 00007fa96499e159 [ 37.055563][ T600] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 37.055580][ T600] RBP: 00007fa9633e3090 R08: 0000000000000000 R09: 0000000000000000 [ 37.055593][ T600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.055605][ T600] R13: 00007fa964c26038 R14: 00007fa964c25fa0 R15: 00007fff36e93d48 [ 37.055621][ T600] [ 37.055871][ T600] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 37.285493][ T600] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 37.294000][ T600] CPU: 1 UID: 0 PID: 600 Comm: syz.3.74 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 37.305267][ T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.315354][ T600] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 37.320840][ T600] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 b7 27 61 00 48 8b bb 08 01 00 00 [ 37.340458][ T600] RSP: 0018:ffffc9000e267c88 EFLAGS: 00010206 [ 37.346537][ T600] RAX: 15cf423e47f2cd00 RBX: 0000000000000000 RCX: ffff8881f6f3acc0 [ 37.354522][ T600] RDX: ffff88811ba7ee80 RSI: ffff88811bd98000 RDI: ffff888100042000 [ 37.362485][ T600] RBP: ffffc9000e267d38 R08: 00000000ddf6dbc5 R09: 00000000983ad90b [ 37.370448][ T600] R10: 000000000000000c R11: ffffffff81759fc0 R12: 0000000000000021 [ 37.378422][ T600] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88811bd98010 [ 37.386381][ T600] FS: 00007fa9633e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.395298][ T600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.401886][ T600] CR2: 00007fa9633e2ff8 CR3: 000000011b486000 CR4: 00000000003526b0 [ 37.409850][ T600] Call Trace: [ 37.413126][ T600] [ 37.416057][ T600] ? __cfi_cgroup_mkdir+0x10/0x10 [ 37.421070][ T600] kernfs_iop_mkdir+0x1bb/0x2d0 [ 37.426000][ T600] vfs_mkdir+0x591/0x810 [ 37.430241][ T600] do_mkdirat+0x240/0x530 [ 37.434567][ T600] ? __cfi_do_mkdirat+0x10/0x10 [ 37.439424][ T600] ? __kasan_check_write+0x18/0x20 [ 37.444523][ T600] ? getname_flags+0x203/0x6b0 [ 37.449282][ T600] ? __kasan_check_read+0x15/0x20 [ 37.454306][ T600] __x64_sys_mkdirat+0x8b/0xa0 [ 37.459057][ T600] x64_sys_call+0x2ba8/0x2ee0 [ 37.463755][ T600] do_syscall_64+0x57/0xf0 [ 37.468160][ T600] ? clear_bhb_loop+0x50/0xa0 [ 37.472825][ T600] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.478704][ T600] RIP: 0033:0x7fa96499e159 [ 37.483109][ T600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.502708][ T600] RSP: 002b:00007fa9633e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 37.511119][ T600] RAX: ffffffffffffffda RBX: 00007fa964c25fa0 RCX: 00007fa96499e159 [ 37.519081][ T600] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 37.527052][ T600] RBP: 00007fa9633e3090 R08: 0000000000000000 R09: 0000000000000000 [ 37.535035][ T600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.543003][ T600] R13: 00007fa964c26038 R14: 00007fa964c25fa0 R15: 00007fff36e93d48 [ 37.551079][ T600] [ 37.554093][ T600] Modules linked in: [ 37.559041][ T600] ---[ end trace 0000000000000000 ]--- [ 37.562811][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 37.562826][ T36] audit: type=1400 audit(1788005425.989:220): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.587289][ T600] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 37.594676][ T36] audit: type=1400 audit(1788005425.989:221): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.598116][ T600] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 b7 27 61 00 48 8b bb 08 01 00 00 [ 37.619371][ T36] audit: type=1400 audit(1788005425.989:222): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.656144][ T600] RSP: 0018:ffffc9000e267c88 EFLAGS: 00010206 [ 37.661838][ T36] audit: type=1400 audit(1788005425.989:223): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.666318][ T600] [ 37.667948][ T36] audit: type=1400 audit(1788005425.989:224): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.708044][ T600] RAX: 15cf423e47f2cd00 RBX: 0000000000000000 RCX: ffff8881f6f3acc0 [ 37.711323][ T36] audit: type=1400 audit(1788005425.989:225): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.729192][ T600] RDX: ffff88811ba7ee80 RSI: ffff88811bd98000 RDI: ffff888100042000 [ 37.742445][ T36] audit: type=1400 audit(1788005425.989:226): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.769069][ T600] RBP: ffffc9000e267d38 R08: 00000000ddf6dbc5 R09: 00000000983ad90b [ 37.780872][ T600] R10: 000000000000000c R11: ffffffff81759fc0 R12: 0000000000000021 [ 37.788948][ T600] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88811bd98010 [ 37.797081][ T600] FS: 00007fa9633e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.806198][ T600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.809310][ T9] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 37.830116][ T600] CR2: 00007ffdf027cfe4 CR3: 000000011b486000 CR4: 00000000003526b0 [ 37.838214][ T600] Kernel panic - not syncing: Fatal exception [ 37.844518][ T600] Kernel Offset: disabled [ 37.848832][ T600] Rebooting in 86400 seconds..