last executing test programs: 17.846659311s ago: executing program 3 (id=8): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) r7 = syz_open_procfs(0x0, 0x0) getdents(r7, 0x0, 0x51) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000001500)={0x2, 0x0, @ioapic={0xf000, 0x5, 0x9, 0x10000, 0x0, [{0x3, 0x10, 0x1, '\x00', 0xc2}, {0x3, 0x7f, 0x2, '\x00', 0x20}, {0x24, 0xff, 0xf7, '\x00', 0xf5}, {0x2, 0x59, 0xca, '\x00', 0x5}, {0x7, 0x7, 0x5, '\x00', 0x1}, {0x0, 0x0, 0x40, '\x00', 0xff}, {0x9, 0x77, 0x3, '\x00', 0x1}, {0x5, 0x2, 0x40, '\x00', 0x3f}, {0x3, 0x1, 0x0, '\x00', 0x5}, {0xf, 0x9, 0x8, '\x00', 0x2}, {0x76, 0xf4, 0x0, '\x00', 0x2}, {0x64, 0x4, 0x0, '\x00', 0x4}, {0x8, 0x7, 0xfd, '\x00', 0x90}, {0x9, 0x80, 0x6, '\x00', 0x8}, {0x2, 0xd, 0x4, '\x00', 0xec}, {0x0, 0x3, 0x8, '\x00', 0x22}, {0x8, 0x6, 0x6, '\x00', 0x4}, {0xfa, 0x0, 0xa5, '\x00', 0x9}, {0x2, 0x8, 0x4, '\x00', 0x6c}, {0x2, 0x2, 0x5, '\x00', 0xfd}, {0x9, 0x1, 0x9, '\x00', 0xc}, {0x7, 0x6, 0x40, '\x00', 0xd9}, {0x2, 0x81, 0x8, '\x00', 0x4}, {0xf, 0x3, 0x8, '\x00', 0xfc}]}}) 17.314748945s ago: executing program 3 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000340)={0xffffffffffffffff, 0x82}) 17.263819066s ago: executing program 3 (id=12): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000002380)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xee00}], {0x4, 0x5}, [], {0x10, 0x6}}, 0x2c, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) syz_genetlink_get_family_id$devlink(&(0x7f0000001200), r4) syz_usb_connect$uac2(0x5, 0x80, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb0825f2010305f9ff090402000001022000090400010101022000090582e1"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 16.00616927s ago: executing program 3 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0/../file0/file0\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 15.962884622s ago: executing program 3 (id=19): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000200)={0xffffff56, 0x1801, 0x6, 0x9, 0x59, "766f0000000000110b8e230900000000000005", 0x800, 0x8001}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xd) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x68100f4f, 0xd, 0xe000, 0x10, 0x2, 0x0, 0x0, 0x80, 0x5}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x2) r8 = socket$pptp(0x18, 0x1, 0x2) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r9 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x0, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r14, 0x2) ioctl$UBLK_U_CMD_START_DEV(r9, 0xc0207506, &(0x7f0000000000)={r14, 0xffff, 0x0, 0x0, 0x0}) fcntl$lock(r8, 0x24, &(0x7f0000000080)={0x0, 0x4, 0x1ff, 0x8, r15}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x60, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x11, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x6, 0x30, {0xa, 0x25, 0x25, 0x6dd8, 0x8, 0x12}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x1, 0x2, {0xa, 0x25, 0x25, 0x10001, 0xe, 0x3}}}}}}}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 15.500361954s ago: executing program 3 (id=20): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup(r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xd, 0x10) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x2012}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x10, 0x9, 0x200, {{0x11, 0x4, 0x2, 0x34, 0xffffffffffffff69, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @local, {[@rr={0x7, 0x13, 0xc2, [@private=0xa010102, @multicast1, @local, @rand_addr=0x64010100]}, @timestamp={0x44, 0x1c, 0x27, 0x0, 0x6, [0x9, 0x5, 0x5, 0x6, 0x5, 0x57]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', r7, 0x10, 0x8, 0x2, 0x2c35, {{0xb, 0x4, 0x2, 0x35, 0x2c, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@rr={0x7, 0x17, 0x5d, [@remote, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @local]}]}}}}}) 15.415065976s ago: executing program 32 (id=20): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup(r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xd, 0x10) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x2012}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x10, 0x9, 0x200, {{0x11, 0x4, 0x2, 0x34, 0xffffffffffffff69, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @local, {[@rr={0x7, 0x13, 0xc2, [@private=0xa010102, @multicast1, @local, @rand_addr=0x64010100]}, @timestamp={0x44, 0x1c, 0x27, 0x0, 0x6, [0x9, 0x5, 0x5, 0x6, 0x5, 0x57]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', r7, 0x10, 0x8, 0x2, 0x2c35, {{0xb, 0x4, 0x2, 0x35, 0x2c, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@rr={0x7, 0x17, 0x5d, [@remote, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @local]}]}}}}}) 3.75387931s ago: executing program 1 (id=107): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f00000000c0)={0x9, 0x1f1, 0x1, 0xfffffffa, 0x101}) fcntl$setlease(r1, 0x400, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 3.693960951s ago: executing program 1 (id=108): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x24008010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) (async) r0 = socket(0x1f, 0x0, 0xfffffffc) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) socket$inet6(0xa, 0x6, 0x1ff) (async, rerun: 64) mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000300)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000400)=ANY=[]) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2b14a083a143ea93be6715a97b351cb73c416937b3ed089fe2ee98f50dd264d83a3266eff2dd5ea62c6cef6427318377626a00"], 0x8) (async) r3 = open(&(0x7f00009e1000)='./file1\x00', 0x68861, 0xb) fcntl$setlease(r3, 0x400, 0x0) (async) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000480)=[{&(0x7f00000002c0)="462e3e1c", 0x4}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001440)={0x34, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}]}, 0x34}, 0x1, 0x0, 0x0, 0x18}, 0x80) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r7, 0x0) (async, rerun: 32) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) (rerun: 32) ioctl(r8, 0x541b, 0x0) (async) ioctl(r8, 0x5451, 0x0) (async) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000400)=@x86={0x2, 0x3, 0x7, 0x0, 0x9, 0x6, 0x98, 0x7, 0x0, 0x1, 0x7, 0x7, 0x0, 0x40, 0x1000, 0x6, 0x7, 0x5, 0x10, '\x00', 0x2, 0x8}) 3.580667504s ago: executing program 1 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x95) (fail_nth: 1) 3.525188316s ago: executing program 1 (id=112): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (fail_nth: 1) 2.98557131s ago: executing program 1 (id=114): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f00000004c0)={0xfe, 0x9}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$lock(r8, 0x24, &(0x7f0000000640)={0x1, 0x4, 0xa5, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) futex_waitv(&(0x7f0000000ec0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f00000000c0)=""/142, &(0x7f0000000180)=""/236, &(0x7f0000000300)=""/251, 0xf7ea7fff}) 2.842505364s ago: executing program 1 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xb, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0xffffff80, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x6, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x100, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x36, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1c, 0x1, 0x200, 0xffbf243f, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e001030005240600000524"], 0x0) 2.59803619s ago: executing program 4 (id=122): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x180001) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) write(r0, 0x0, 0x0) gettimeofday(0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x20000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000200)={0x4, 0x31, 0x1, 0x7, 0xe8, 0x2, &(0x7f0000000100)="b58a7a7a6ea3fe592a9829d7be08dbffe1009574122624c3e27ae8c3e64f14494639fc8edd61ecd8145d140b3cd7fb10d824b18e1f2d998dc81e2094ba06a2640381f1f99042055a090840f7cae38f4811f2ffdc70c5db7d0bcf0dbc9a39daabe077a2c8f709b78a2152e2fefa81466bcc77d56a07ff7cf137068ee8f3e7b6b9842e02fb7b3b34dd10f1ace6e79fe07d4321e4a2fdea2ca9a3730808a607ce3adae663accea1a80f47b3419745c9be09cd973ea69b7c74db9029d6f95224fdea5c8d65e04b444228664bd6dbc6e2344bdf3bc053c382b3d6555166ccf73824762b6232ce76d12cf9"}) 2.581525591s ago: executing program 4 (id=123): r0 = socket(0x8000000010, 0x3, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.510755323s ago: executing program 4 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.320676175s ago: executing program 2 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) (fail_nth: 1) 1.204373678s ago: executing program 2 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x4}]}) (fail_nth: 1) 633.782933ms ago: executing program 2 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x4}]}) 590.746855ms ago: executing program 0 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181300, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000100), &(0x7f0000000380)={[&(0x7f0000000300)='/dev/kvm\x00', &(0x7f0000000340)='{:(:\\\x00']}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) write(r3, &(0x7f0000000180)="01010101", 0x4) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) execveat$binfmt(r4, r1, &(0x7f0000000280), &(0x7f0000000540)={[&(0x7f0000000140)='/!!]({\x00', &(0x7f00000003c0)='+\x00', &(0x7f0000000400)='/dev/kvm\x00', &(0x7f0000000440)='//$\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='/dev/kvm\x00', &(0x7f0000000500)='{:(:\\\x00']}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xfffc, 0x1}, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 542.877046ms ago: executing program 2 (id=146): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) socket$inet6(0xa, 0x2, 0x6) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1490000320f01d9660ff7e31bf7f30f09ec05000000b90000c0fe0fae41dcb50400000000b9800000c00f320908663dc7b20a0000000f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x5e}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r4, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4004c080) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r5, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x0}, r5) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xe, 0x5, 0x6}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1c, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x30a000, 0x100}, 0x18) mknodat$loop(r7, &(0x7f0000000300)='./file0/../file0\x00', 0x20, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000180)={@local}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 489.335527ms ago: executing program 0 (id=147): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000012ed"], 0x18}}], 0x1, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x10000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x9, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x40000000, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 374.36063ms ago: executing program 0 (id=148): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 359.278351ms ago: executing program 0 (id=149): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5385, &(0x7f0000000100)=0x3) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000003, 0x12, r2, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0xa82, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 93.755317ms ago: executing program 0 (id=150): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (fail_nth: 1) 93.300697ms ago: executing program 2 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1, async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x7}) 89.571518ms ago: executing program 0 (id=152): unshare(0x20000000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x82900, 0x8f) r3 = socket$inet(0x2, 0x3, 0x2) getsockopt(r3, 0xff, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000280)="1f", 0x1}], 0x1) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x12) getsockname$unix(r4, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) wait4(0x0, 0x0, 0x80000000, 0x0) 88.948478ms ago: executing program 4 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x12100, 0x110) rmdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') 64.264399ms ago: executing program 4 (id=154): iopl(0x3) prctl$PR_GET_SECCOMP(0x15) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x0, 0x900, 0x1, 0x2000008}) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x802}, 0x0, 0x0, 0x0, 0x0}, 0x58) iopl(0x3) 140.8µs ago: executing program 4 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg$unix(r1, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x102) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x12100, 0x110) rmdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') 0s ago: executing program 2 (id=156): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000012ed"], 0x18}}], 0x1, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x10000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x9, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x40000000, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 30.371780][ T36] audit: type=1400 audit(1786032522.450:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.375243][ T286] cgroup: Unknown subsys name 'net' [ 30.394467][ T36] audit: type=1400 audit(1786032522.450:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.421847][ T36] audit: type=1400 audit(1786032522.480:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.422351][ T286] cgroup: Unknown subsys name 'devices' [ 30.547910][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.553582][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.699826][ T36] audit: type=1400 audit(1786032522.780:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.725722][ T36] audit: type=1400 audit(1786032522.780:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.750480][ T36] audit: type=1400 audit(1786032522.780:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.803958][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.812958][ T36] audit: type=1400 audit(1786032522.900:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 30.838482][ T36] audit: type=1400 audit(1786032522.900:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.876708][ T36] audit: type=1400 audit(1786032522.960:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.902318][ T36] audit: type=1400 audit(1786032522.960:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.903063][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.809255][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.816385][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.823471][ T293] bridge_slave_0: entered allmulticast mode [ 31.829977][ T293] bridge_slave_0: entered promiscuous mode [ 31.838306][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.845374][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.852549][ T293] bridge_slave_1: entered allmulticast mode [ 31.858937][ T293] bridge_slave_1: entered promiscuous mode [ 31.869067][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.876209][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.883314][ T294] bridge_slave_0: entered allmulticast mode [ 31.889719][ T294] bridge_slave_0: entered promiscuous mode [ 31.897274][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.904330][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.911467][ T294] bridge_slave_1: entered allmulticast mode [ 31.917815][ T294] bridge_slave_1: entered promiscuous mode [ 31.987833][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.995016][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.002194][ T296] bridge_slave_0: entered allmulticast mode [ 32.008555][ T296] bridge_slave_0: entered promiscuous mode [ 32.015047][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.022171][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.029363][ T296] bridge_slave_1: entered allmulticast mode [ 32.035863][ T296] bridge_slave_1: entered promiscuous mode [ 32.089126][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.096271][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.103419][ T295] bridge_slave_0: entered allmulticast mode [ 32.109793][ T295] bridge_slave_0: entered promiscuous mode [ 32.119132][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.126262][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.133351][ T295] bridge_slave_1: entered allmulticast mode [ 32.139765][ T295] bridge_slave_1: entered promiscuous mode [ 32.248904][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.256022][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.263365][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.270442][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.285944][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.293034][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.300359][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.307514][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.317341][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.324409][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.331761][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.338819][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.366320][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.373409][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.380737][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.387804][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.430732][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.438212][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.445402][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.452696][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.461648][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.468911][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.477066][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.484430][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.497722][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.504827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.512745][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.519833][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.529645][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.536732][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.568144][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.575225][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.583872][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.590968][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.599544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.606623][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.638560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.645642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.653170][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.660251][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.670165][ T293] veth0_vlan: entered promiscuous mode [ 32.699191][ T294] veth0_vlan: entered promiscuous mode [ 32.707471][ T293] veth1_macvtap: entered promiscuous mode [ 32.724698][ T296] veth0_vlan: entered promiscuous mode [ 32.748305][ T294] veth1_macvtap: entered promiscuous mode [ 32.756785][ T295] veth0_vlan: entered promiscuous mode [ 32.776608][ T296] veth1_macvtap: entered promiscuous mode [ 32.787602][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.812800][ T295] veth1_macvtap: entered promiscuous mode [ 32.912744][ T321] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 32.929905][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.109073][ T318] rust_binder: 317:318 FDA parent offset not aligned correctly [ 33.127411][ T318] rust_binder: 317:318 error while translating object: EINVAL [ 33.139031][ T318] rust_binder: Failure in copy_transaction_data: EINVAL [ 33.139094][ T318] rust_binder: 317:318 transaction call to 317:0 failed EINVAL, code 0 size 112-24 [ 33.160428][ T318] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.160451][ T318] rust_binder: Read failure Err(EFAULT) in pid:4 [ 33.173263][ T31] rust_binder: 317: undelivered TRANSACTION_ERROR: 29201 [ 33.215644][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.386958][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.395561][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 33.408300][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 33.418087][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.426348][ T10] usb 3-1: Product: syz [ 33.430618][ T10] usb 3-1: Manufacturer: syz [ 33.435241][ T10] usb 3-1: SerialNumber: syz [ 33.505587][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.649015][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.655955][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 33.662550][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.671012][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 33.687579][ T9] usb 2-1: string descriptor 0 read error: -22 [ 33.694063][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 33.703255][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.856302][ T10] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 33.864829][ T10] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 33.885508][ T341] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.927173][ T31] usb 2-1: USB disconnect, device number 2 [ 33.975653][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.036996][ T341] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.045629][ T341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.056183][ T341] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.067138][ T341] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 34.078568][ T341] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 34.087897][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.095990][ T341] usb 4-1: Product: syz [ 34.100200][ T341] usb 4-1: Manufacturer: syz [ 34.104812][ T341] usb 4-1: SerialNumber: syz [ 34.139656][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.148296][ T9] usb 1-1: config 160 has an invalid interface number: 187 but max is 0 [ 34.156797][ T9] usb 1-1: config 160 has no interface number 0 [ 34.163145][ T9] usb 1-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 34.175142][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 34.186753][ T9] usb 1-1: config 160 interface 187 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 34.197419][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 34.208634][ T9] usb 1-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 34.219943][ T9] usb 1-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 34.231139][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 34.242596][ T9] usb 1-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 34.254644][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 34.266468][ T9] usb 1-1: config 160 interface 187 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 34.278046][ T10] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 34.288283][ T9] usb 1-1: config 160 interface 187 altsetting 8 bulk endpoint 0xD has invalid maxpacket 64 [ 34.298527][ T9] usb 1-1: config 160 interface 187 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 34.312874][ T9] usb 1-1: config 160 interface 187 has no altsetting 0 [ 34.321995][ T10] usb 3-1: USB disconnect, device number 2 [ 34.332374][ T341] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.343412][ T9] usb 1-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 34.353801][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.362462][ T9] usb 1-1: Product: syz [ 34.367017][ T341] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 34.370567][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.377137][ T9] usb 1-1: Manufacturer: syz [ 34.399462][ T9] usb 1-1: SerialNumber: syz [ 34.407358][ T348] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 34.415858][ T341] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 34.416703][ T348] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 34.429418][ T341] usb 4-1: USB disconnect, device number 2 [ 34.442449][ T348] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 34.464369][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.484210][ T348] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 34.695105][ T348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.704176][ T348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.765540][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.772262][ T354] usb usb7: usbfs: process 354 (syz.0.13) did not claim interface 0 before use [ 34.874323][ T361] ======================================================= [ 34.874323][ T361] WARNING: The mand mount option has been deprecated and [ 34.874323][ T361] and is ignored by this kernel. Remove the mand [ 34.874323][ T361] option from the mount to silence this warning. [ 34.874323][ T361] ======================================================= [ 34.937499][ T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 34.965511][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 34.985545][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 34.995667][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 35.004778][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.018541][ T309] bridge_slave_1: left allmulticast mode [ 35.024383][ T309] bridge_slave_1: left promiscuous mode [ 35.031757][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.043621][ T309] bridge_slave_0: left allmulticast mode [ 35.049550][ T309] bridge_slave_0: left promiscuous mode [ 35.055326][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.177167][ T309] veth1_macvtap: left promiscuous mode [ 35.182848][ T309] veth0_vlan: left promiscuous mode [ 35.218272][ T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 35.235374][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input4 [ 35.282749][ T31] usb 2-1: USB disconnect, device number 3 [ 35.659294][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.672990][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.685541][ T365] bridge_slave_0: entered allmulticast mode [ 35.695966][ T365] bridge_slave_0: entered promiscuous mode [ 35.702842][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.710254][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.717610][ T365] bridge_slave_1: entered allmulticast mode [ 35.724054][ T365] bridge_slave_1: entered promiscuous mode [ 35.819195][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.826332][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.833661][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.840748][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.849647][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 35.849664][ T36] audit: type=1400 audit(1786032527.930:158): avc: denied { block_suspend } for pid=371 comm="syz.1.23" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.904448][ T36] audit: type=1400 audit(1786032527.970:159): avc: denied { watch watch_reads } for pid=373 comm="syz.2.24" path="/4" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.937478][ T36] audit: type=1400 audit(1786032527.970:160): avc: denied { read write } for pid=373 comm="syz.2.24" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.965959][ T36] audit: type=1400 audit(1786032527.970:161): avc: denied { open } for pid=373 comm="syz.2.24" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.993599][ T36] audit: type=1400 audit(1786032527.980:162): avc: denied { create } for pid=371 comm="syz.1.23" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.023552][ T36] audit: type=1400 audit(1786032527.980:163): avc: denied { map } for pid=371 comm="syz.1.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.048803][ T36] audit: type=1400 audit(1786032527.980:164): avc: denied { read write } for pid=371 comm="syz.1.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.072406][ T365] veth0_vlan: entered promiscuous mode [ 36.079729][ T36] audit: type=1400 audit(1786032527.980:165): avc: denied { ioctl } for pid=373 comm="syz.2.24" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.104908][ T365] veth1_macvtap: entered promiscuous mode [ 36.155084][ T36] audit: type=1400 audit(1786032528.230:166): avc: denied { append } for pid=381 comm="syz.4.21" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 36.255589][ T341] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.406856][ T341] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.415356][ T341] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 36.428004][ T341] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 36.437218][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.445258][ T341] usb 3-1: Product: syz [ 36.449740][ T341] usb 3-1: Manufacturer: syz [ 36.454388][ T341] usb 3-1: SerialNumber: syz [ 36.662796][ T341] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.712427][ T388] FAULT_INJECTION: forcing a failure. [ 36.712427][ T388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.725802][ T388] CPU: 0 UID: 0 PID: 388 Comm: syz.1.27 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 36.725837][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.725862][ T388] Call Trace: [ 36.725870][ T388] [ 36.725878][ T388] __dump_stack+0x21/0x30 [ 36.725919][ T388] dump_stack_lvl+0x140/0x1c0 [ 36.725951][ T388] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.725983][ T388] ? check_stack_object+0x138/0x150 [ 36.726009][ T388] dump_stack+0x19/0x20 [ 36.726039][ T388] should_fail_ex+0x3c2/0x510 [ 36.726065][ T388] should_fail+0xf/0x20 [ 36.726089][ T388] should_fail_usercopy+0x1e/0x30 [ 36.726116][ T388] _copy_to_user+0x24/0xa0 [ 36.726146][ T388] simple_read_from_buffer+0xed/0x160 [ 36.726179][ T388] proc_fail_nth_read+0x1aa/0x220 [ 36.726213][ T388] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.726246][ T388] ? bpf_lsm_file_permission+0xd/0x20 [ 36.726276][ T388] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.726307][ T388] vfs_read+0x288/0xc70 [ 36.726331][ T388] ? __cfi_vfs_read+0x10/0x10 [ 36.726353][ T388] ? __kasan_check_write+0x18/0x20 [ 36.726375][ T388] ? mutex_lock+0x97/0x1d0 [ 36.726407][ T388] ? __cfi_mutex_lock+0x10/0x10 [ 36.726440][ T388] ksys_read+0x145/0x260 [ 36.726463][ T388] ? __cfi_ksys_read+0x10/0x10 [ 36.726486][ T388] ? fdget+0x188/0x1e0 [ 36.726513][ T388] ? __kasan_check_read+0x15/0x20 [ 36.726543][ T388] __x64_sys_read+0x7f/0x90 [ 36.726567][ T388] x64_sys_call+0x2638/0x2ee0 [ 36.726588][ T388] do_syscall_64+0x57/0xf0 [ 36.726613][ T388] ? clear_bhb_loop+0x50/0xa0 [ 36.726645][ T388] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.726674][ T388] RIP: 0033:0x7f7cdad5e90e [ 36.726693][ T388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.726712][ T388] RSP: 002b:00007f7cdbd0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.726745][ T388] RAX: ffffffffffffffda RBX: 00007f7cdbd0f6c0 RCX: 00007f7cdad5e90e [ 36.726762][ T388] RDX: 000000000000000f RSI: 00007f7cdbd0f0a0 RDI: 0000000000000004 [ 36.726777][ T388] RBP: 00007f7cdbd0f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.726792][ T388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.726806][ T388] R13: 00007f7cdb026128 R14: 00007f7cdb026090 R15: 00007fffefc14208 [ 36.726825][ T388] [ 36.973802][ T9] pl2303 1-1:160.187: pl2303 converter detected [ 36.980197][ T9] pl2303 1-1:160.187: unknown device type, please report to linux-usb@vger.kernel.org [ 36.994022][ T341] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 37.002565][ T341] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 37.011104][ T9] usb 1-1: USB disconnect, device number 2 [ 37.011814][ T36] audit: type=1400 audit(1786032529.090:167): avc: denied { read } for pid=389 comm="syz.0.28" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.045129][ T390] FAULT_INJECTION: forcing a failure. [ 37.045129][ T390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.058448][ T390] CPU: 1 UID: 0 PID: 390 Comm: syz.0.28 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 37.058481][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.058494][ T390] Call Trace: [ 37.058502][ T390] [ 37.058511][ T390] __dump_stack+0x21/0x30 [ 37.058557][ T390] dump_stack_lvl+0x140/0x1c0 [ 37.058589][ T390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.058622][ T390] ? unwind_get_return_address+0x51/0x90 [ 37.058652][ T390] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 37.058683][ T390] dump_stack+0x19/0x20 [ 37.058713][ T390] should_fail_ex+0x3c2/0x510 [ 37.058741][ T390] should_fail+0xf/0x20 [ 37.058764][ T390] should_fail_usercopy+0x1e/0x30 [ 37.058793][ T390] _copy_from_user+0x20/0xa0 [ 37.058825][ T390] ___sys_recvmsg+0x174/0x590 [ 37.058851][ T390] ? __sys_recvmsg+0x2a0/0x2a0 [ 37.058875][ T390] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 37.058898][ T390] ? selinux_file_permission+0x318/0xb60 [ 37.058936][ T390] do_recvmmsg+0x36d/0x7f0 [ 37.058962][ T390] ? __sys_recvmmsg+0x2a0/0x2a0 [ 37.058987][ T390] ? __cfi_vfs_write+0x10/0x10 [ 37.059014][ T390] ? fput+0x1a4/0x230 [ 37.059045][ T390] __x64_sys_recvmmsg+0x199/0x250 [ 37.059071][ T390] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 37.059096][ T390] ? __kasan_check_read+0x15/0x20 [ 37.059121][ T390] x64_sys_call+0x292c/0x2ee0 [ 37.059141][ T390] do_syscall_64+0x57/0xf0 [ 37.059167][ T390] ? clear_bhb_loop+0x50/0xa0 [ 37.059199][ T390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.059229][ T390] RIP: 0033:0x7f253ff9e0d9 [ 37.059250][ T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.059269][ T390] RSP: 002b:00007f2540f46028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 37.059295][ T390] RAX: ffffffffffffffda RBX: 00007f2540225fa0 RCX: 00007f253ff9e0d9 [ 37.059313][ T390] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000004 [ 37.059328][ T390] RBP: 00007f2540f46090 R08: 0000000000000000 R09: 0000000000000000 [ 37.059343][ T390] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 37.059358][ T390] R13: 00007f2540226038 R14: 00007f2540225fa0 R15: 00007ffe639c8e88 [ 37.059380][ T390] [ 37.303893][ T394] netlink: 'syz.1.29': attribute type 11 has an invalid length. [ 37.336383][ T394] incfs: Error accessing: ./file0. [ 37.341736][ T394] incfs: mount failed -20 [ 37.494975][ T341] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 37.503708][ T341] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 37.565610][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.573218][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.605612][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.695080][ T341] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 37.709390][ T341] usb 3-1: USB disconnect, device number 3 [ 37.724253][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.740919][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 37.746158][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 37.753287][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.764358][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.775854][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 37.782545][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 37.791683][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.801627][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.810912][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.819743][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 37.829531][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.838676][ T9] usb 5-1: config 0 descriptor?? [ 37.844274][ T10] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 37.853655][ T311] usb 1-1: config 0 descriptor?? [ 37.859148][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.868088][ T311] hub 1-1:0.0: USB hub found [ 37.873903][ T10] usb 2-1: Product: syz [ 37.878185][ T10] usb 2-1: Manufacturer: syz [ 37.882835][ T10] usb 2-1: SerialNumber: syz [ 38.094324][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 38.101483][ T10] usb 2-1: too many endpoints [ 38.110195][ T10] usb 2-1: USB disconnect, device number 4 [ 38.122814][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.269631][ T311] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 38.280021][ T9] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 38.287602][ T9] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 38.295101][ T9] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 38.302560][ T9] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 38.310110][ T9] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 38.318463][ T9] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 38.465504][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.486620][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 38.492631][ T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.515935][ T311] usb 1-1: USB disconnect, device number 3 [ 38.531070][ C1] usb 5-1: input irq status -75 received [ 38.614342][ T408] FAULT_INJECTION: forcing a failure. [ 38.614342][ T408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.627535][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 38.629168][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.633505][ T408] CPU: 0 UID: 0 PID: 408 Comm: syz.1.34 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 38.633586][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.633617][ T408] Call Trace: [ 38.633636][ T408] [ 38.633657][ T408] __dump_stack+0x21/0x30 [ 38.633749][ T408] dump_stack_lvl+0x140/0x1c0 [ 38.633842][ T408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.633924][ T408] ? check_stack_object+0x138/0x150 [ 38.633987][ T408] dump_stack+0x19/0x20 [ 38.634061][ T408] should_fail_ex+0x3c2/0x510 [ 38.634125][ T408] should_fail+0xf/0x20 [ 38.634187][ T408] should_fail_usercopy+0x1e/0x30 [ 38.634255][ T408] _copy_to_user+0x24/0xa0 [ 38.634322][ T408] simple_read_from_buffer+0xed/0x160 [ 38.634422][ T408] proc_fail_nth_read+0x1aa/0x220 [ 38.634533][ T408] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.634618][ T408] ? bpf_lsm_file_permission+0xd/0x20 [ 38.634693][ T408] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.634781][ T408] vfs_read+0x288/0xc70 [ 38.634840][ T408] ? __kasan_check_write+0x18/0x20 [ 38.634916][ T408] ? mutex_unlock+0x90/0x240 [ 38.635001][ T408] ? __cfi_vfs_read+0x10/0x10 [ 38.635067][ T408] ? __kasan_check_write+0x18/0x20 [ 38.635126][ T408] ? mutex_lock+0x97/0x1d0 [ 38.635195][ T408] ? __cfi_mutex_lock+0x10/0x10 [ 38.635277][ T408] ksys_read+0x145/0x260 [ 38.635338][ T408] ? __cfi_ksys_read+0x10/0x10 [ 38.635395][ T408] ? __kasan_check_read+0x15/0x20 [ 38.635451][ T408] __x64_sys_read+0x7f/0x90 [ 38.635511][ T408] x64_sys_call+0x2638/0x2ee0 [ 38.635564][ T408] do_syscall_64+0x57/0xf0 [ 38.635624][ T408] ? clear_bhb_loop+0x50/0xa0 [ 38.635702][ T408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.635787][ T408] RIP: 0033:0x7f7cdad5e90e [ 38.635850][ T408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.635927][ T408] RSP: 002b:00007f7cdbd2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.635983][ T408] RAX: ffffffffffffffda RBX: 00007f7cdbd306c0 RCX: 00007f7cdad5e90e [ 38.636054][ T408] RDX: 000000000000000f RSI: 00007f7cdbd300a0 RDI: 0000000000000004 [ 38.636087][ T408] RBP: 00007f7cdbd30090 R08: 0000000000000000 R09: 0000000000000000 [ 38.636147][ T408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.636181][ T408] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 38.636231][ T408] [ 38.741442][ T311] usb 5-1: USB disconnect, device number 2 [ 38.746181][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.904142][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.913307][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.923175][ T45] usb 3-1: config 0 descriptor?? [ 38.929325][ T45] hub 3-1:0.0: USB hub found [ 39.005465][ T413] FAULT_INJECTION: forcing a failure. [ 39.005465][ T413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.018842][ T413] CPU: 0 UID: 0 PID: 413 Comm: syz.0.36 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 39.018872][ T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.018884][ T413] Call Trace: [ 39.018897][ T413] [ 39.018904][ T413] __dump_stack+0x21/0x30 [ 39.018937][ T413] dump_stack_lvl+0x140/0x1c0 [ 39.018967][ T413] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.018996][ T413] ? check_stack_object+0x138/0x150 [ 39.019018][ T413] dump_stack+0x19/0x20 [ 39.019043][ T413] should_fail_ex+0x3c2/0x510 [ 39.019066][ T413] should_fail+0xf/0x20 [ 39.019087][ T413] should_fail_usercopy+0x1e/0x30 [ 39.019113][ T413] _copy_to_user+0x24/0xa0 [ 39.019140][ T413] simple_read_from_buffer+0xed/0x160 [ 39.019167][ T413] proc_fail_nth_read+0x1aa/0x220 [ 39.019196][ T413] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 39.019223][ T413] ? selinux_socket_setsockopt+0x324/0x3d0 [ 39.019254][ T413] ? bpf_lsm_file_permission+0xd/0x20 [ 39.019279][ T413] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 39.019307][ T413] vfs_read+0x288/0xc70 [ 39.019333][ T413] ? __cfi_vfs_read+0x10/0x10 [ 39.019352][ T413] ? __kasan_check_write+0x18/0x20 [ 39.019375][ T413] ? mutex_lock+0x97/0x1d0 [ 39.019402][ T413] ? __cfi_mutex_lock+0x10/0x10 [ 39.019430][ T413] ksys_read+0x145/0x260 [ 39.019450][ T413] ? __fget_files+0x2bc/0x330 [ 39.019472][ T413] ? __cfi_ksys_read+0x10/0x10 [ 39.019492][ T413] ? __kasan_check_write+0x18/0x20 [ 39.019514][ T413] ? __kasan_check_read+0x15/0x20 [ 39.019533][ T413] __x64_sys_read+0x7f/0x90 [ 39.019553][ T413] x64_sys_call+0x2638/0x2ee0 [ 39.019571][ T413] do_syscall_64+0x57/0xf0 [ 39.019592][ T413] ? clear_bhb_loop+0x50/0xa0 [ 39.019619][ T413] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.019648][ T413] RIP: 0033:0x7f253ff5e90e [ 39.019664][ T413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 39.019680][ T413] RSP: 002b:00007f2540f45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.019701][ T413] RAX: ffffffffffffffda RBX: 00007f2540f466c0 RCX: 00007f253ff5e90e [ 39.019716][ T413] RDX: 000000000000000f RSI: 00007f2540f460a0 RDI: 0000000000000004 [ 39.019728][ T413] RBP: 00007f2540f46090 R08: 0000000000000000 R09: 0000000000000000 [ 39.019740][ T413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.019752][ T413] R13: 00007f2540226038 R14: 00007f2540225fa0 R15: 00007ffe639c8e88 [ 39.019771][ T413] [ 39.149112][ T45] hub 3-1:0.0: 1 port detected [ 39.353557][ T420] Zero length message leads to an empty skb [ 39.442867][ T426] syzkaller1: entered promiscuous mode [ 39.448447][ T426] syzkaller1: entered allmulticast mode [ 39.470508][ T433] FAULT_INJECTION: forcing a failure. [ 39.470508][ T433] name failslab, interval 1, probability 0, space 0, times 0 [ 39.483278][ T433] CPU: 1 UID: 0 PID: 433 Comm: syz.0.43 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 39.483331][ T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.483342][ T433] Call Trace: [ 39.483347][ T433] [ 39.483356][ T433] __dump_stack+0x21/0x30 [ 39.483383][ T433] dump_stack_lvl+0x140/0x1c0 [ 39.483405][ T433] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.483428][ T433] ? proc_pident_instantiate+0x6d/0x2c0 [ 39.483449][ T433] dump_stack+0x19/0x20 [ 39.483470][ T433] should_fail_ex+0x3c2/0x510 [ 39.483489][ T433] should_failslab+0xac/0x100 [ 39.483509][ T433] __kmalloc_cache_noprof+0x41/0x470 [ 39.483526][ T433] ? kvm_arch_vcpu_ioctl+0x16f0/0x3120 [ 39.483544][ T433] kvm_arch_vcpu_ioctl+0x16f0/0x3120 [ 39.483560][ T433] ? avc_has_perm+0x155/0x240 [ 39.483578][ T433] ? __cfi_avc_has_perm+0x10/0x10 [ 39.483596][ T433] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 39.483613][ T433] ? selinux_file_open+0x46c/0x630 [ 39.483628][ T433] ? __cfi_selinux_file_open+0x10/0x10 [ 39.483647][ T433] ? is_bpf_text_address+0x17b/0x1a0 [ 39.483671][ T433] ? kernel_text_address+0xa9/0xe0 [ 39.483693][ T433] ? __kernel_text_address+0x11/0x40 [ 39.483715][ T433] ? __asan_set_shadow_00+0x12/0x20 [ 39.483738][ T433] ? do_vfs_ioctl+0x182d/0x2010 [ 39.483757][ T433] ? arch_stack_walk+0x10a/0x170 [ 39.483773][ T433] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 39.483796][ T433] ? _parse_integer_limit+0x195/0x1e0 [ 39.483813][ T433] ? _parse_integer+0x2e/0x40 [ 39.483828][ T433] ? kstrtoull+0x13b/0x1e0 [ 39.483843][ T433] ? kstrtouint+0x78/0xf0 [ 39.483858][ T433] ? ioctl_has_perm+0x1bc/0x500 [ 39.483873][ T433] ? __asan_memcpy+0x5a/0x80 [ 39.483888][ T433] ? ioctl_has_perm+0x408/0x500 [ 39.483902][ T433] ? has_cap_mac_admin+0xd0/0xd0 [ 39.483917][ T433] ? __kasan_check_write+0x18/0x20 [ 39.483932][ T433] ? mutex_lock_killable+0x97/0x1d0 [ 39.483955][ T433] ? __cfi_mutex_lock_killable+0x10/0x10 [ 39.483977][ T433] ? proc_fail_nth_write+0x184/0x220 [ 39.484000][ T433] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 39.484023][ T433] kvm_vcpu_ioctl+0x7da/0x1000 [ 39.484038][ T433] ? generic_set_mtrr+0x3fc/0x570 [ 39.484058][ T433] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 39.484073][ T433] ? __cfi_vfs_write+0x10/0x10 [ 39.484096][ T433] ? __kasan_check_write+0x18/0x20 [ 39.484111][ T433] ? mutex_unlock+0x90/0x240 [ 39.484132][ T433] ? __cfi_mutex_unlock+0x10/0x10 [ 39.484161][ T433] ? bpf_lsm_file_ioctl+0xd/0x20 [ 39.484187][ T433] ? security_file_ioctl+0x3e/0x110 [ 39.484211][ T433] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 39.484225][ T433] __se_sys_ioctl+0x135/0x1b0 [ 39.484250][ T433] __x64_sys_ioctl+0x7f/0xa0 [ 39.484269][ T433] x64_sys_call+0x1878/0x2ee0 [ 39.484283][ T433] do_syscall_64+0x57/0xf0 [ 39.484306][ T433] ? clear_bhb_loop+0x50/0xa0 [ 39.484329][ T433] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.484349][ T433] RIP: 0033:0x7f253ff9e0d9 [ 39.484362][ T433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.484375][ T433] RSP: 002b:00007f2540f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.484392][ T433] RAX: ffffffffffffffda RBX: 00007f2540225fa0 RCX: 00007f253ff9e0d9 [ 39.484411][ T433] RDX: 0000000000000000 RSI: 000000008140aecc RDI: 0000000000000005 [ 39.484421][ T433] RBP: 00007f2540f46090 R08: 0000000000000000 R09: 0000000000000000 [ 39.484430][ T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.484440][ T433] R13: 00007f2540226038 R14: 00007f2540225fa0 R15: 00007ffe639c8e88 [ 39.484453][ T433] [ 39.955097][ T441] netlink: 188 bytes leftover after parsing attributes in process `syz.1.47'. [ 40.041475][ T444] SELinux: truncated policydb string identifier [ 40.047981][ T444] SELinux: failed to load policy [ 40.067484][ T45] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 40.099732][ T448] FAULT_INJECTION: forcing a failure. [ 40.099732][ T448] name failslab, interval 1, probability 0, space 0, times 0 [ 40.112420][ T448] CPU: 0 UID: 0 PID: 448 Comm: syz.1.50 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 40.112456][ T448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.112466][ T448] Call Trace: [ 40.112473][ T448] [ 40.112479][ T448] __dump_stack+0x21/0x30 [ 40.112506][ T448] dump_stack_lvl+0x140/0x1c0 [ 40.112528][ T448] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.112552][ T448] dump_stack+0x19/0x20 [ 40.112572][ T448] should_fail_ex+0x3c2/0x510 [ 40.112591][ T448] should_failslab+0xac/0x100 [ 40.112611][ T448] __kmalloc_cache_node_noprof+0x46/0x430 [ 40.112629][ T448] ? __get_vm_area_node+0x150/0x390 [ 40.112653][ T448] __get_vm_area_node+0x150/0x390 [ 40.112676][ T448] __vmalloc_node_range_noprof+0x340/0x1300 [ 40.112700][ T448] ? sel_write_load+0x1ce/0x600 [ 40.112716][ T448] ? kernel_text_address+0xa9/0xe0 [ 40.112739][ T448] ? unwind_get_return_address+0x51/0x90 [ 40.112761][ T448] ? _parse_integer_limit+0x195/0x1e0 [ 40.112790][ T448] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 40.112814][ T448] ? avc_has_perm_noaudit+0x26b/0x360 [ 40.112832][ T448] ? __asan_memcpy+0x5a/0x80 [ 40.112847][ T448] ? avc_has_perm_noaudit+0x289/0x360 [ 40.112866][ T448] ? sel_write_load+0x1ce/0x600 [ 40.112881][ T448] vmalloc_noprof+0x103/0x1d0 [ 40.112903][ T448] ? sel_write_load+0x1ce/0x600 [ 40.112918][ T448] ? __cfi_avc_has_perm+0x10/0x10 [ 40.112935][ T448] ? selinux_file_permission+0x318/0xb60 [ 40.112950][ T448] ? __cfi_vmalloc_noprof+0x10/0x10 [ 40.112975][ T448] sel_write_load+0x1ce/0x600 [ 40.112990][ T448] ? __cfi_sel_write_load+0x10/0x10 [ 40.113006][ T448] ? bpf_lsm_file_permission+0xd/0x20 [ 40.113027][ T448] ? __cfi_sel_write_load+0x10/0x10 [ 40.113042][ T448] vfs_write+0x3c1/0xfd0 [ 40.113059][ T448] ? __cfi_vfs_write+0x10/0x10 [ 40.113074][ T448] ? __kasan_check_write+0x18/0x20 [ 40.113089][ T448] ? mutex_lock+0x97/0x1d0 [ 40.113110][ T448] ? __cfi_mutex_lock+0x10/0x10 [ 40.113133][ T448] ksys_write+0x145/0x260 [ 40.113148][ T448] ? xfd_validate_state+0x68/0x140 [ 40.113170][ T448] ? __cfi_ksys_write+0x10/0x10 [ 40.113187][ T448] ? __kasan_check_read+0x15/0x20 [ 40.113202][ T448] __x64_sys_write+0x7f/0x90 [ 40.113217][ T448] x64_sys_call+0x271c/0x2ee0 [ 40.113231][ T448] do_syscall_64+0x57/0xf0 [ 40.113250][ T448] ? clear_bhb_loop+0x50/0xa0 [ 40.113272][ T448] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.113294][ T448] RIP: 0033:0x7f7cdad9e0d9 [ 40.113307][ T448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.113320][ T448] RSP: 002b:00007f7cdbd30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.113337][ T448] RAX: ffffffffffffffda RBX: 00007f7cdb025fa0 RCX: 00007f7cdad9e0d9 [ 40.113349][ T448] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 40.113359][ T448] RBP: 00007f7cdbd30090 R08: 0000000000000000 R09: 0000000000000000 [ 40.113369][ T448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.113378][ T448] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 40.113391][ T448] [ 40.113399][ T448] syz.1.50: vmalloc error: size 8, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 40.395929][ T45] usb 3-1: USB disconnect, device number 4 [ 40.404085][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.409334][ T448] ,cpuset= [ 40.417020][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.433959][ T448] syz1,mems_allowed=0 [ 40.468589][ T448] CPU: 0 UID: 0 PID: 448 Comm: syz.1.50 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 40.468620][ T448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.468634][ T448] Call Trace: [ 40.468641][ T448] [ 40.468650][ T448] __dump_stack+0x21/0x30 [ 40.468687][ T448] dump_stack_lvl+0x140/0x1c0 [ 40.468718][ T448] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.468752][ T448] dump_stack+0x19/0x20 [ 40.468782][ T448] warn_alloc+0x1e7/0x2c0 [ 40.468836][ T448] ? __kasan_kmalloc+0x28/0xb0 [ 40.468865][ T448] ? __cfi_warn_alloc+0x10/0x10 [ 40.468907][ T448] ? __get_vm_area_node+0x150/0x390 [ 40.468941][ T448] ? __get_vm_area_node+0x382/0x390 [ 40.468975][ T448] __vmalloc_node_range_noprof+0x365/0x1300 [ 40.469010][ T448] ? kernel_text_address+0xa9/0xe0 [ 40.469041][ T448] ? unwind_get_return_address+0x51/0x90 [ 40.469073][ T448] ? _parse_integer_limit+0x195/0x1e0 [ 40.469099][ T448] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 40.469131][ T448] ? avc_has_perm_noaudit+0x26b/0x360 [ 40.469160][ T448] ? __asan_memcpy+0x5a/0x80 [ 40.469176][ T448] ? avc_has_perm_noaudit+0x289/0x360 [ 40.469195][ T448] ? sel_write_load+0x1ce/0x600 [ 40.469211][ T448] vmalloc_noprof+0x103/0x1d0 [ 40.469233][ T448] ? sel_write_load+0x1ce/0x600 [ 40.469248][ T448] ? __cfi_avc_has_perm+0x10/0x10 [ 40.469272][ T448] ? selinux_file_permission+0x318/0xb60 [ 40.469287][ T448] ? __cfi_vmalloc_noprof+0x10/0x10 [ 40.469311][ T448] sel_write_load+0x1ce/0x600 [ 40.469327][ T448] ? __cfi_sel_write_load+0x10/0x10 [ 40.469343][ T448] ? bpf_lsm_file_permission+0xd/0x20 [ 40.469364][ T448] ? __cfi_sel_write_load+0x10/0x10 [ 40.469381][ T448] vfs_write+0x3c1/0xfd0 [ 40.469398][ T448] ? __cfi_vfs_write+0x10/0x10 [ 40.469413][ T448] ? __kasan_check_write+0x18/0x20 [ 40.469428][ T448] ? mutex_lock+0x97/0x1d0 [ 40.469450][ T448] ? __cfi_mutex_lock+0x10/0x10 [ 40.469473][ T448] ksys_write+0x145/0x260 [ 40.469489][ T448] ? xfd_validate_state+0x68/0x140 [ 40.469511][ T448] ? __cfi_ksys_write+0x10/0x10 [ 40.469527][ T448] ? __kasan_check_read+0x15/0x20 [ 40.469542][ T448] __x64_sys_write+0x7f/0x90 [ 40.469558][ T448] x64_sys_call+0x271c/0x2ee0 [ 40.469578][ T448] do_syscall_64+0x57/0xf0 [ 40.469596][ T448] ? clear_bhb_loop+0x50/0xa0 [ 40.469617][ T448] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.469644][ T448] RIP: 0033:0x7f7cdad9e0d9 [ 40.469658][ T448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.469675][ T448] RSP: 002b:00007f7cdbd30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.469692][ T448] RAX: ffffffffffffffda RBX: 00007f7cdb025fa0 RCX: 00007f7cdad9e0d9 [ 40.469704][ T448] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 40.469714][ T448] RBP: 00007f7cdbd30090 R08: 0000000000000000 R09: 0000000000000000 [ 40.469724][ T448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.469733][ T448] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 40.469747][ T448] [ 40.469810][ T448] Mem-Info: [ 40.781610][ T448] active_anon:6516 inactive_anon:0 isolated_anon:0 [ 40.781610][ T448] active_file:17979 inactive_file:2295 isolated_file:0 [ 40.781610][ T448] unevictable:0 dirty:460 writeback:0 [ 40.781610][ T448] slab_reclaimable:4195 slab_unreclaimable:70359 [ 40.781610][ T448] mapped:24561 shmem:163 pagetables:823 [ 40.781610][ T448] sec_pagetables:0 bounce:0 [ 40.781610][ T448] kernel_misc_reclaimable:0 [ 40.781610][ T448] free:1528619 free_pcp:2346 free_cma:0 [ 40.827271][ T448] Node 0 active_anon:26064kB inactive_anon:0kB active_file:71916kB inactive_file:9180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98044kB dirty:1840kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4388kB pagetables:3216kB sec_pagetables:0kB all_unreclaimable? no [ 40.866571][ T450] SELinux: policydb string length 84 does not match expected length 8 [ 40.868459][ T448] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:68kB free_cma:0kB [ 40.875330][ T450] SELinux: failed to load policy [ 40.904791][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 40.904856][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 40.920444][ T448] lowmem_reserve[]: 0 3921 3921 [ 40.925630][ T448] Normal free:3154904kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25964kB inactive_anon:0kB active_file:71916kB inactive_file:9180kB unevictable:0kB writepending:1840kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4804kB local_pcp:3360kB free_cma:0kB [ 40.957138][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.968434][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.973277][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 40.973321][ T36] audit: type=1400 audit(1786032533.050:198): avc: denied { create } for pid=451 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.978648][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.002805][ T36] audit: type=1400 audit(1786032533.060:199): avc: denied { mmap_zero } for pid=451 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 41.004271][ T448] lowmem_reserve[]: [ 41.032074][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.032155][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.052200][ T448] 0 0 [ 41.052872][ T311] usb 1-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 41.066097][ T9] usb 5-1: config 0 descriptor?? [ 41.071197][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 134, changing to 11 [ 41.082513][ T448] 0 [ 41.085097][ T448] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 41.101660][ T9] hub 5-1:0.0: USB hub found [ 41.105884][ T448] Normal: 7*4kB (ME) 39*8kB (UME) 67*16kB (ME) 331*32kB (ME) 338*64kB (UME) 30*128kB (UME) 28*256kB (UME) 16*512kB (UME) 12*1024kB (ME) 5*2048kB (UM) 752*4096kB (UM) = 3155556kB [ 41.108805][ T311] usb 1-1: New USB device found, idVendor=0582, idProduct=0052, bcdDevice= 0.40 [ 41.133618][ T311] usb 1-1: New USB device strings: Mfr=1, Product=13, SerialNumber=3 [ 41.137271][ T448] 20433 total pagecache pages [ 41.147714][ T311] usb 1-1: Product: syz [ 41.149538][ T448] 0 pages in swap cache [ 41.154075][ T311] usb 1-1: Manufacturer: syz [ 41.156617][ T448] Free swap = 124996kB [ 41.160784][ T311] usb 1-1: SerialNumber: syz [ 41.165055][ T448] Total swap = 124996kB [ 41.178310][ T448] 2097051 pages RAM [ 41.182255][ T448] 0 pages HighMem/MovableOnly [ 41.187033][ T448] 352233 pages reserved [ 41.191233][ T448] 0 pages cma reserved [ 41.198739][ T448] Memory allocations: [ 41.202802][ T448] 0 B 0 init/main.c:1477 func:do_initcalls [ 41.210143][ T448] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 41.218391][ T448] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 41.226195][ T448] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 41.234204][ T448] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 41.242220][ T448] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 41.250902][ T448] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 41.258918][ T448] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 41.266917][ T448] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 41.274970][ T448] 0 B 0 init/initramfs.c:101 func:find_link [ 41.307324][ T36] audit: type=1400 audit(1786032533.390:200): avc: denied { create } for pid=453 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.377266][ T311] usb 1-1: MIDIStreaming interface descriptor not found [ 41.388258][ T311] usb 1-1: USB disconnect, device number 4 [ 41.401355][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.503070][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 41.555568][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.675531][ T341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.705496][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 41.712211][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.721804][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 41.727832][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 41.736433][ T10] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 41.747047][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 41.759572][ T10] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 41.769048][ T9] usb 5-1: USB disconnect, device number 3 [ 41.775467][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.783483][ T10] usb 3-1: Product: syz [ 41.787986][ T10] usb 3-1: Manufacturer: syz [ 41.793144][ T10] usb 3-1: SerialNumber: syz [ 41.825575][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 41.831963][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.842965][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.852784][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.865740][ T341] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.874836][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.885748][ T341] usb 2-1: config 0 descriptor?? [ 42.001965][ T36] audit: type=1400 audit(1786032534.080:201): avc: denied { mounton } for pid=453 comm="syz.2.53" path="/9/file0" dev="incremental-fs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.025082][ T36] audit: type=1400 audit(1786032534.080:202): avc: denied { ioctl } for pid=453 comm="syz.2.53" path="/9/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.050910][ T36] audit: type=1400 audit(1786032534.080:203): avc: denied { ioctl } for pid=453 comm="syz.2.53" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.076620][ T36] audit: type=1400 audit(1786032534.080:204): avc: denied { setattr } for pid=453 comm="syz.2.53" name="/" dev="incremental-fs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.221196][ T464] IPv4: Oversized IP packet from 127.202.26.0 [ 42.253351][ T468] FAULT_INJECTION: forcing a failure. [ 42.253351][ T468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.281096][ T470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.289917][ T36] audit: type=1400 audit(1786032534.360:205): avc: denied { name_bind } for pid=469 comm="syz.0.61" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.295648][ T468] CPU: 1 UID: 0 PID: 468 Comm: syz.4.59 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 42.295771][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.295804][ T468] Call Trace: [ 42.295846][ T468] [ 42.295862][ T468] __dump_stack+0x21/0x30 [ 42.295951][ T468] dump_stack_lvl+0x140/0x1c0 [ 42.296065][ T468] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.296172][ T468] ? check_stack_object+0x138/0x150 [ 42.296233][ T468] dump_stack+0x19/0x20 [ 42.296308][ T468] should_fail_ex+0x3c2/0x510 [ 42.296372][ T468] should_fail+0xf/0x20 [ 42.296432][ T468] should_fail_usercopy+0x1e/0x30 [ 42.296494][ T468] _copy_to_user+0x24/0xa0 [ 42.296566][ T468] simple_read_from_buffer+0xed/0x160 [ 42.296651][ T468] proc_fail_nth_read+0x1aa/0x220 [ 42.296746][ T468] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 42.296828][ T468] ? bpf_lsm_file_permission+0xd/0x20 [ 42.296902][ T468] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 42.296996][ T468] vfs_read+0x288/0xc70 [ 42.297076][ T468] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 42.297132][ T468] ? __cfi_vfs_read+0x10/0x10 [ 42.297185][ T468] ? __kasan_check_write+0x18/0x20 [ 42.297246][ T468] ? mutex_lock+0x97/0x1d0 [ 42.297325][ T468] ? __cfi_mutex_lock+0x10/0x10 [ 42.297412][ T468] ksys_read+0x145/0x260 [ 42.297472][ T468] ? __cfi_ksys_read+0x10/0x10 [ 42.297525][ T468] ? __kasan_check_read+0x15/0x20 [ 42.297584][ T468] __x64_sys_read+0x7f/0x90 [ 42.297654][ T468] x64_sys_call+0x2638/0x2ee0 [ 42.297705][ T468] do_syscall_64+0x57/0xf0 [ 42.297767][ T468] ? clear_bhb_loop+0x50/0xa0 [ 42.297867][ T468] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.297937][ T468] RIP: 0033:0x7fdcfbd5e90e [ 42.297972][ T468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.298021][ T468] RSP: 002b:00007fdcfcce6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.298082][ T468] RAX: ffffffffffffffda RBX: 00007fdcfcce76c0 RCX: 00007fdcfbd5e90e [ 42.298122][ T468] RDX: 000000000000000f RSI: 00007fdcfcce70a0 RDI: 0000000000000004 [ 42.298154][ T468] RBP: 00007fdcfcce7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.298193][ T468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.298225][ T468] R13: 00007fdcfc026038 R14: 00007fdcfc025fa0 R15: 00007ffc6200a998 [ 42.298273][ T468] [ 42.553169][ T341] microsoft 0003:045E:07DA.0002: unexpected long global item [ 42.561921][ T341] microsoft 0003:045E:07DA.0002: parse failed [ 42.568287][ T341] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 42.581466][ T36] audit: type=1400 audit(1786032534.360:206): avc: denied { node_bind } for pid=469 comm="syz.0.61" saddr=fc02:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 42.599110][ T404] usb 2-1: USB disconnect, device number 5 [ 42.603653][ T36] audit: type=1400 audit(1786032534.470:207): avc: denied { create } for pid=469 comm="syz.0.61" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.667567][ T10] usb 3-1: USB disconnect, device number 5 [ 42.685996][ T478] FAULT_INJECTION: forcing a failure. [ 42.685996][ T478] name failslab, interval 1, probability 0, space 0, times 0 [ 42.686007][ T476] FAULT_INJECTION: forcing a failure. [ 42.686007][ T476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.686033][ T476] CPU: 1 UID: 0 PID: 476 Comm: syz.0.64 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 42.686134][ T476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.686180][ T476] Call Trace: [ 42.686193][ T476] [ 42.686202][ T476] __dump_stack+0x21/0x30 [ 42.686325][ T476] dump_stack_lvl+0x140/0x1c0 [ 42.686407][ T476] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.686484][ T476] ? proc_fail_nth_write+0x184/0x220 [ 42.686573][ T476] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 42.686656][ T476] dump_stack+0x19/0x20 [ 42.686740][ T476] should_fail_ex+0x3c2/0x510 [ 42.686804][ T476] should_fail+0xf/0x20 [ 42.686869][ T476] should_fail_usercopy+0x1e/0x30 [ 42.686933][ T476] _copy_from_user+0x20/0xa0 [ 42.687006][ T476] proc_drop_privileges+0x8f/0x160 [ 42.687066][ T476] ? proc_free_streams+0x450/0x450 [ 42.687139][ T476] ? __kasan_check_write+0x18/0x20 [ 42.687206][ T476] ? mutex_unlock+0x90/0x240 [ 42.687281][ T476] usbdev_ioctl+0xd70/0x2120 [ 42.687371][ T476] ? __cfi_usbdev_ioctl+0x10/0x10 [ 42.687462][ T476] ? bpf_lsm_file_ioctl+0xd/0x20 [ 42.687541][ T476] ? security_file_ioctl+0x3e/0x110 [ 42.687659][ T476] ? __cfi_usbdev_ioctl+0x10/0x10 [ 42.687762][ T476] __se_sys_ioctl+0x135/0x1b0 [ 42.687836][ T476] __x64_sys_ioctl+0x7f/0xa0 [ 42.687901][ T476] x64_sys_call+0x1878/0x2ee0 [ 42.687955][ T476] do_syscall_64+0x57/0xf0 [ 42.688019][ T476] ? clear_bhb_loop+0x50/0xa0 [ 42.688101][ T476] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.688173][ T476] RIP: 0033:0x7f253ff9e0d9 [ 42.688211][ T476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.688260][ T476] RSP: 002b:00007f2540f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.688322][ T476] RAX: ffffffffffffffda RBX: 00007f2540225fa0 RCX: 00007f253ff9e0d9 [ 42.688371][ T476] RDX: 0000000000000000 RSI: 000000004004551e RDI: 0000000000000003 [ 42.688404][ T476] RBP: 00007f2540f46090 R08: 0000000000000000 R09: 0000000000000000 [ 42.688445][ T476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.688479][ T476] R13: 00007f2540226038 R14: 00007f2540225fa0 R15: 00007ffe639c8e88 [ 42.688531][ T476] [ 42.939784][ T478] CPU: 0 UID: 0 PID: 478 Comm: syz.2.63 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 42.939817][ T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.939831][ T478] Call Trace: [ 42.939839][ T478] [ 42.939847][ T478] __dump_stack+0x21/0x30 [ 42.939882][ T478] dump_stack_lvl+0x140/0x1c0 [ 42.939910][ T478] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.939940][ T478] ? proc_pident_instantiate+0x6d/0x2c0 [ 42.939968][ T478] ? do_filp_open+0x1f2/0x440 [ 42.939996][ T478] ? __x64_sys_openat+0x13a/0x170 [ 42.940039][ T478] ? x64_sys_call+0xe69/0x2ee0 [ 42.940057][ T478] ? do_syscall_64+0x57/0xf0 [ 42.940082][ T478] dump_stack+0x19/0x20 [ 42.940110][ T478] should_fail_ex+0x3c2/0x510 [ 42.940134][ T478] should_failslab+0xac/0x100 [ 42.940160][ T478] kmem_cache_alloc_noprof+0x42/0x410 [ 42.940182][ T478] ? vm_area_dup+0x3f/0x560 [ 42.940206][ T478] vm_area_dup+0x3f/0x560 [ 42.940233][ T478] ? __split_vma+0x1b8/0xc10 [ 42.940255][ T478] __split_vma+0x1ce/0xc10 [ 42.940277][ T478] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 42.940301][ T478] ? mas_find+0x415/0x620 [ 42.940331][ T478] vms_gather_munmap_vmas+0x446/0xd90 [ 42.940357][ T478] mmap_region+0x621/0x1d10 [ 42.940378][ T478] ? __kernel_text_address+0x11/0x40 [ 42.940406][ T478] ? unwind_get_return_address+0x51/0x90 [ 42.940435][ T478] ? __cfi_mmap_region+0x10/0x10 [ 42.940458][ T478] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 42.940486][ T478] ? __kasan_check_read+0x15/0x20 [ 42.940510][ T478] ? __get_unmapped_area+0x406/0x470 [ 42.940533][ T478] do_mmap+0xb61/0x13b0 [ 42.940556][ T478] ? __cfi_do_mmap+0x10/0x10 [ 42.940576][ T478] ? down_write_killable+0xee/0x2d0 [ 42.940596][ T478] ? __cfi_down_write_killable+0x10/0x10 [ 42.940618][ T478] vm_mmap_pgoff+0x367/0x4b0 [ 42.940640][ T478] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 42.940661][ T478] ? ksys_write+0x1f3/0x260 [ 42.940684][ T478] ksys_mmap_pgoff+0xfa/0x1e0 [ 42.940706][ T478] __x64_sys_mmap+0x121/0x140 [ 42.940726][ T478] x64_sys_call+0x13bf/0x2ee0 [ 42.940745][ T478] do_syscall_64+0x57/0xf0 [ 42.940770][ T478] ? clear_bhb_loop+0x50/0xa0 [ 42.940800][ T478] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.940829][ T478] RIP: 0033:0x7f69ce79e0d9 [ 42.940847][ T478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.940866][ T478] RSP: 002b:00007f69cf5bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 42.940889][ T478] RAX: ffffffffffffffda RBX: 00007f69cea25fa0 RCX: 00007f69ce79e0d9 [ 42.940906][ T478] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 42.940921][ T478] RBP: 00007f69cf5bc090 R08: ffffffffffffffff R09: 0000000000000000 [ 42.940937][ T478] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 42.940952][ T478] R13: 00007f69cea26038 R14: 00007f69cea25fa0 R15: 00007ffc1bd0d3b8 [ 42.940972][ T478] [ 43.245478][ T404] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 43.297656][ T493] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.334772][ T496] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 43.372747][ T501] FAULT_INJECTION: forcing a failure. [ 43.372747][ T501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.386178][ T501] CPU: 1 UID: 0 PID: 501 Comm: syz.1.73 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 43.386210][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.386224][ T501] Call Trace: [ 43.386232][ T501] [ 43.386240][ T501] __dump_stack+0x21/0x30 [ 43.386277][ T501] dump_stack_lvl+0x140/0x1c0 [ 43.386309][ T501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.386340][ T501] ? _parse_integer+0x2e/0x40 [ 43.386362][ T501] ? kstrtoull+0x13b/0x1e0 [ 43.386383][ T501] dump_stack+0x19/0x20 [ 43.386412][ T501] should_fail_ex+0x3c2/0x510 [ 43.386438][ T501] should_fail+0xf/0x20 [ 43.386460][ T501] should_fail_usercopy+0x1e/0x30 [ 43.386487][ T501] _copy_from_user+0x20/0xa0 [ 43.386518][ T501] ___sys_sendmsg+0x1c7/0x370 [ 43.386541][ T501] ? __sys_sendmsg+0x2a0/0x2a0 [ 43.386564][ T501] ? proc_fail_nth_write+0x184/0x220 [ 43.386595][ T501] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.386635][ T501] ? __fget_files+0x2bc/0x330 [ 43.386656][ T501] __x64_sys_sendmsg+0x206/0x2e0 [ 43.386672][ T501] ? fput+0x1a4/0x230 [ 43.386692][ T501] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 43.386708][ T501] ? ksys_write+0x1f3/0x260 [ 43.386725][ T501] ? __kasan_check_read+0x15/0x20 [ 43.386741][ T501] x64_sys_call+0x2a4c/0x2ee0 [ 43.386755][ T501] do_syscall_64+0x57/0xf0 [ 43.386773][ T501] ? clear_bhb_loop+0x50/0xa0 [ 43.386795][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.386816][ T501] RIP: 0033:0x7f7cdad9e0d9 [ 43.386829][ T501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.386842][ T501] RSP: 002b:00007f7cdbd30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.386858][ T501] RAX: ffffffffffffffda RBX: 00007f7cdb025fa0 RCX: 00007f7cdad9e0d9 [ 43.386870][ T501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.386880][ T501] RBP: 00007f7cdbd30090 R08: 0000000000000000 R09: 0000000000000000 [ 43.386890][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.386900][ T501] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 43.386913][ T501] [ 43.525640][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.536385][ T404] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.631261][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.642255][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.652069][ T404] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 43.661166][ T404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.669914][ T404] usb 1-1: config 0 descriptor?? [ 43.695494][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 43.701856][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.712982][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.722883][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.732332][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.741242][ T10] usb 3-1: config 0 descriptor?? [ 43.748835][ T10] hub 3-1:0.0: USB hub found [ 43.855526][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 43.867090][ T509] FAULT_INJECTION: forcing a failure. [ 43.867090][ T509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.880432][ T509] CPU: 0 UID: 0 PID: 509 Comm: syz.4.77 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 43.880466][ T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.880479][ T509] Call Trace: [ 43.880486][ T509] [ 43.880494][ T509] __dump_stack+0x21/0x30 [ 43.880537][ T509] dump_stack_lvl+0x140/0x1c0 [ 43.880571][ T509] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.880603][ T509] ? _parse_integer+0x2e/0x40 [ 43.880626][ T509] ? kstrtoull+0x13b/0x1e0 [ 43.880647][ T509] dump_stack+0x19/0x20 [ 43.880682][ T509] should_fail_ex+0x3c2/0x510 [ 43.880701][ T509] should_fail+0xf/0x20 [ 43.880741][ T509] should_fail_usercopy+0x1e/0x30 [ 43.880768][ T509] _copy_from_user+0x20/0xa0 [ 43.880798][ T509] ___sys_sendmsg+0x1c7/0x370 [ 43.880824][ T509] ? __sys_sendmsg+0x2a0/0x2a0 [ 43.880846][ T509] ? proc_fail_nth_write+0x184/0x220 [ 43.880884][ T509] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.880910][ T509] ? __fget_files+0x2bc/0x330 [ 43.880953][ T509] __x64_sys_sendmsg+0x206/0x2e0 [ 43.880976][ T509] ? fput+0x1a4/0x230 [ 43.881003][ T509] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 43.881030][ T509] ? ksys_write+0x1f3/0x260 [ 43.881048][ T509] ? __kasan_check_read+0x15/0x20 [ 43.881070][ T509] x64_sys_call+0x2a4c/0x2ee0 [ 43.881102][ T509] do_syscall_64+0x57/0xf0 [ 43.881128][ T509] ? clear_bhb_loop+0x50/0xa0 [ 43.881157][ T509] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.881187][ T509] RIP: 0033:0x7fdcfbd9e0d9 [ 43.881201][ T509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.881216][ T509] RSP: 002b:00007fdcfcce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.881247][ T509] RAX: ffffffffffffffda RBX: 00007fdcfc025fa0 RCX: 00007fdcfbd9e0d9 [ 43.881265][ T509] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 43.881280][ T509] RBP: 00007fdcfcce7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.881293][ T509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.881306][ T509] R13: 00007fdcfc026038 R14: 00007fdcfc025fa0 R15: 00007ffc6200a998 [ 43.881330][ T509] [ 44.105653][ T404] usbhid 1-1:0.0: can't add hid device: -71 [ 44.111649][ T404] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.125293][ T404] usb 1-1: USB disconnect, device number 5 [ 44.176625][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 44.189602][ T9] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 44.198988][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.210470][ T9] usb 2-1: config 0 descriptor?? [ 44.305886][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 44.516355][ T401] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.524449][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 44.530585][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.555892][ T10] usb 3-1: USB disconnect, device number 6 [ 44.618447][ T9] betop 0003:11C2:2208.0003: item fetching failed at offset 2/6 [ 44.626354][ T9] betop 0003:11C2:2208.0003: parse failed [ 44.632172][ T9] betop 0003:11C2:2208.0003: probe with driver betop failed with error -22 [ 44.685483][ T401] usb 5-1: Using ep0 maxpacket: 32 [ 44.696257][ T401] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.706500][ T401] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 44.715666][ T401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.725027][ T401] usb 5-1: config 0 descriptor?? [ 44.732639][ T401] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 44.823504][ T404] usb 2-1: USB disconnect, device number 6 [ 45.315475][ T401] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.321986][ T544] FAULT_INJECTION: forcing a failure. [ 45.321986][ T544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.336278][ T544] CPU: 0 UID: 0 PID: 544 Comm: syz.0.90 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 45.336320][ T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.336338][ T544] Call Trace: [ 45.336349][ T544] [ 45.336357][ T544] __dump_stack+0x21/0x30 [ 45.336390][ T544] dump_stack_lvl+0x140/0x1c0 [ 45.336420][ T544] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.336452][ T544] ? selinux_file_ioctl+0x732/0x1480 [ 45.336475][ T544] dump_stack+0x19/0x20 [ 45.336506][ T544] should_fail_ex+0x3c2/0x510 [ 45.336532][ T544] should_fail+0xf/0x20 [ 45.336555][ T544] should_fail_usercopy+0x1e/0x30 [ 45.336583][ T544] _copy_from_user+0x20/0xa0 [ 45.336614][ T544] vhost_vsock_dev_ioctl+0x2db/0xdc0 [ 45.336648][ T544] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 45.336682][ T544] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.336711][ T544] ? security_file_ioctl+0x3e/0x110 [ 45.336746][ T544] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 45.336778][ T544] __se_sys_ioctl+0x135/0x1b0 [ 45.336807][ T544] __x64_sys_ioctl+0x7f/0xa0 [ 45.336834][ T544] x64_sys_call+0x1878/0x2ee0 [ 45.336855][ T544] do_syscall_64+0x57/0xf0 [ 45.336882][ T544] ? clear_bhb_loop+0x50/0xa0 [ 45.336914][ T544] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.336944][ T544] RIP: 0033:0x7f253ff9e0d9 [ 45.336964][ T544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.336984][ T544] RSP: 002b:00007f2540f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.337009][ T544] RAX: ffffffffffffffda RBX: 00007f2540225fa0 RCX: 00007f253ff9e0d9 [ 45.337028][ T544] RDX: 0000200000000100 RSI: 000000004008af25 RDI: 0000000000000003 [ 45.337044][ T544] RBP: 00007f2540f46090 R08: 0000000000000000 R09: 0000000000000000 [ 45.337060][ T544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.337075][ T544] R13: 00007f2540226038 R14: 00007f2540225fa0 R15: 00007ffe639c8e88 [ 45.337095][ T544] [ 45.631792][ T557] FAULT_INJECTION: forcing a failure. [ 45.631792][ T557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.644948][ T557] CPU: 0 UID: 0 PID: 557 Comm: syz.1.95 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 45.644972][ T557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.644983][ T557] Call Trace: [ 45.644989][ T557] [ 45.644995][ T557] __dump_stack+0x21/0x30 [ 45.645023][ T557] dump_stack_lvl+0x140/0x1c0 [ 45.645045][ T557] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.645068][ T557] ? __kasan_check_write+0x18/0x20 [ 45.645085][ T557] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 45.645101][ T557] dump_stack+0x19/0x20 [ 45.645122][ T557] should_fail_ex+0x3c2/0x510 [ 45.645140][ T557] should_fail+0xf/0x20 [ 45.645156][ T557] should_fail_usercopy+0x1e/0x30 [ 45.645176][ T557] _copy_from_user+0x20/0xa0 [ 45.645197][ T557] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 45.645213][ T557] ? avc_has_perm+0x155/0x240 [ 45.645232][ T557] ? __cfi_avc_has_perm+0x10/0x10 [ 45.645250][ T557] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 45.645267][ T557] ? selinux_file_open+0x46c/0x630 [ 45.645283][ T557] ? __cfi_selinux_file_open+0x10/0x10 [ 45.645302][ T557] ? is_bpf_text_address+0x17b/0x1a0 [ 45.645329][ T557] ? kernel_text_address+0xa9/0xe0 [ 45.645350][ T557] ? __kernel_text_address+0x11/0x40 [ 45.645371][ T557] ? __asan_set_shadow_00+0x12/0x20 [ 45.645393][ T557] ? do_vfs_ioctl+0x182d/0x2010 [ 45.645417][ T557] ? arch_stack_walk+0x10a/0x170 [ 45.645454][ T557] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 45.645488][ T557] ? _parse_integer_limit+0x195/0x1e0 [ 45.645505][ T557] ? _parse_integer+0x2e/0x40 [ 45.645521][ T557] ? kstrtoull+0x13b/0x1e0 [ 45.645536][ T557] ? kstrtouint+0x78/0xf0 [ 45.645551][ T557] ? ioctl_has_perm+0x1bc/0x500 [ 45.645566][ T557] ? __asan_memcpy+0x5a/0x80 [ 45.645582][ T557] ? ioctl_has_perm+0x408/0x500 [ 45.645596][ T557] ? has_cap_mac_admin+0xd0/0xd0 [ 45.645611][ T557] ? __kasan_check_write+0x18/0x20 [ 45.645626][ T557] ? mutex_lock_killable+0x97/0x1d0 [ 45.645650][ T557] ? __cfi_mutex_lock_killable+0x10/0x10 [ 45.645672][ T557] ? proc_fail_nth_write+0x184/0x220 [ 45.645695][ T557] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 45.645719][ T557] kvm_vcpu_ioctl+0x7da/0x1000 [ 45.645736][ T557] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.645750][ T557] ? __cfi_vfs_write+0x10/0x10 [ 45.645767][ T557] ? __kasan_check_write+0x18/0x20 [ 45.645782][ T557] ? mutex_unlock+0x90/0x240 [ 45.645803][ T557] ? __cfi_mutex_unlock+0x10/0x10 [ 45.645833][ T557] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.645854][ T557] ? security_file_ioctl+0x3e/0x110 [ 45.645877][ T557] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.645892][ T557] __se_sys_ioctl+0x135/0x1b0 [ 45.645912][ T557] __x64_sys_ioctl+0x7f/0xa0 [ 45.645930][ T557] x64_sys_call+0x1878/0x2ee0 [ 45.645962][ T557] do_syscall_64+0x57/0xf0 [ 45.645987][ T557] ? clear_bhb_loop+0x50/0xa0 [ 45.646016][ T557] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.646037][ T557] RIP: 0033:0x7f7cdad9e0d9 [ 45.646055][ T557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.646069][ T557] RSP: 002b:00007f7cdbd30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.646086][ T557] RAX: ffffffffffffffda RBX: 00007f7cdb025fa0 RCX: 00007f7cdad9e0d9 [ 45.646098][ T557] RDX: 00002000000000c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 45.646109][ T557] RBP: 00007f7cdbd30090 R08: 0000000000000000 R09: 0000000000000000 [ 45.646119][ T557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.646142][ T557] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 45.646156][ T557] [ 46.055473][ T401] usb 3-1: device descriptor read/64, error -71 [ 46.114724][ T561] kvm: kvm [560]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7f [ 46.125494][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.183356][ T566] FAULT_INJECTION: forcing a failure. [ 46.183356][ T566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.196734][ T566] CPU: 0 UID: 0 PID: 566 Comm: syz.1.98 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 46.196760][ T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.196786][ T566] Call Trace: [ 46.196791][ T566] [ 46.196797][ T566] __dump_stack+0x21/0x30 [ 46.196823][ T566] dump_stack_lvl+0x140/0x1c0 [ 46.196846][ T566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.196869][ T566] ? check_stack_object+0x138/0x150 [ 46.196886][ T566] dump_stack+0x19/0x20 [ 46.196907][ T566] should_fail_ex+0x3c2/0x510 [ 46.196926][ T566] should_fail+0xf/0x20 [ 46.196942][ T566] should_fail_usercopy+0x1e/0x30 [ 46.196961][ T566] _copy_to_user+0x24/0xa0 [ 46.196982][ T566] simple_read_from_buffer+0xed/0x160 [ 46.197006][ T566] proc_fail_nth_read+0x1aa/0x220 [ 46.197029][ T566] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.197053][ T566] ? bpf_lsm_file_permission+0xd/0x20 [ 46.197074][ T566] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.197097][ T566] vfs_read+0x288/0xc70 [ 46.197112][ T566] ? do_mprotect_pkey+0xbf0/0xe50 [ 46.197134][ T566] ? __cfi_vfs_read+0x10/0x10 [ 46.197150][ T566] ? __kasan_check_write+0x18/0x20 [ 46.197165][ T566] ? mutex_lock+0x97/0x1d0 [ 46.197188][ T566] ? __cfi_mutex_lock+0x10/0x10 [ 46.197211][ T566] ksys_read+0x145/0x260 [ 46.197227][ T566] ? __cfi_ksys_read+0x10/0x10 [ 46.197244][ T566] ? __kasan_check_read+0x15/0x20 [ 46.197266][ T566] __x64_sys_read+0x7f/0x90 [ 46.197282][ T566] x64_sys_call+0x2638/0x2ee0 [ 46.197297][ T566] do_syscall_64+0x57/0xf0 [ 46.197314][ T566] ? clear_bhb_loop+0x50/0xa0 [ 46.197336][ T566] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.197357][ T566] RIP: 0033:0x7f7cdad5e90e [ 46.197370][ T566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.197383][ T566] RSP: 002b:00007f7cdbd2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.197400][ T566] RAX: ffffffffffffffda RBX: 00007f7cdbd306c0 RCX: 00007f7cdad5e90e [ 46.197412][ T566] RDX: 000000000000000f RSI: 00007f7cdbd300a0 RDI: 0000000000000004 [ 46.197422][ T566] RBP: 00007f7cdbd30090 R08: 0000000000000000 R09: 0000000000000000 [ 46.197432][ T566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.197441][ T566] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 46.197454][ T566] [ 46.399927][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 46.399977][ T36] audit: type=1400 audit(1786032538.450:227): avc: denied { remount } for pid=571 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.415552][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 46.475755][ T9] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 46.492174][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 46.493358][ T574] batadv_slave_1: entered promiscuous mode [ 46.501322][ T9] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 46.510150][ T574] batadv_slave_1: left promiscuous mode [ 46.515523][ T9] usb 1-1: Product: syz [ 46.523533][ T574] capability: warning: `syz.1.102' uses deprecated v2 capabilities in a way that may be insecure [ 46.525243][ T9] usb 1-1: Manufacturer: syz [ 46.540838][ T401] usb 3-1: Using ep0 maxpacket: 32 [ 46.547387][ T401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.558327][ T401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.568107][ T401] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.577252][ T401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.586075][ T401] usb 3-1: config 0 descriptor?? [ 46.592162][ T401] hub 3-1:0.0: USB hub found [ 46.597218][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 46.603546][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 46.612655][ T36] audit: type=1400 audit(1786032538.690:228): avc: denied { map } for pid=576 comm="syz.1.103" path="socket:[6415]" dev="sockfs" ino=6415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 46.636394][ T36] audit: type=1400 audit(1786032538.700:229): avc: denied { cmd } for pid=576 comm="iou-wrk-577" path="socket:[6415]" dev="sockfs" ino=6415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.816250][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 46.824480][ T9] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 46.909300][ T588] FAULT_INJECTION: forcing a failure. [ 46.909300][ T588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.922734][ T588] CPU: 1 UID: 0 PID: 588 Comm: syz.1.106 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 46.922770][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.922786][ T588] Call Trace: [ 46.922794][ T588] [ 46.922803][ T588] __dump_stack+0x21/0x30 [ 46.922841][ T588] dump_stack_lvl+0x140/0x1c0 [ 46.922872][ T588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.922904][ T588] ? __kasan_check_write+0x18/0x20 [ 46.922929][ T588] ? check_stack_object+0x10f/0x150 [ 46.922953][ T588] dump_stack+0x19/0x20 [ 46.922982][ T588] should_fail_ex+0x3c2/0x510 [ 46.923009][ T588] should_fail+0xf/0x20 [ 46.923031][ T588] should_fail_usercopy+0x1e/0x30 [ 46.923059][ T588] _copy_from_user+0x20/0xa0 [ 46.923089][ T588] __sys_sendto+0x2f8/0x700 [ 46.923110][ T588] ? __cfi___sys_sendto+0x10/0x10 [ 46.923133][ T588] ? __kasan_check_write+0x18/0x20 [ 46.923162][ T588] ? __cfi_ksys_write+0x10/0x10 [ 46.923187][ T588] __x64_sys_sendto+0xe9/0x100 [ 46.923212][ T588] x64_sys_call+0x2c2c/0x2ee0 [ 46.923232][ T588] do_syscall_64+0x57/0xf0 [ 46.923261][ T588] ? clear_bhb_loop+0x50/0xa0 [ 46.923291][ T588] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.923320][ T588] RIP: 0033:0x7f7cdad9e0d9 [ 46.923339][ T588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.923360][ T588] RSP: 002b:00007f7cdbd30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 46.923384][ T588] RAX: ffffffffffffffda RBX: 00007f7cdb025fa0 RCX: 00007f7cdad9e0d9 [ 46.923400][ T588] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000003 [ 46.923415][ T588] RBP: 00007f7cdbd30090 R08: 0000200000000140 R09: 0000000000000014 [ 46.923430][ T588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.923444][ T588] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 46.923465][ T588] [ 47.121657][ T401] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 47.140114][ T36] audit: type=1400 audit(1786032539.220:230): avc: denied { read write } for pid=589 comm="syz.1.107" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.163469][ T36] audit: type=1400 audit(1786032539.220:231): avc: denied { open } for pid=589 comm="syz.1.107" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.196576][ T36] audit: type=1400 audit(1786032539.220:232): avc: denied { ioctl } for pid=589 comm="syz.1.107" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.222327][ T36] audit: type=1400 audit(1786032539.300:233): avc: denied { create } for pid=591 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.226897][ T593] 9pnet_virtio: no channels available for device 127.0.0.1 [ 47.256203][ T9] usb 5-1: USB disconnect, device number 4 [ 47.270127][ T36] audit: type=1400 audit(1786032539.350:234): avc: denied { bind } for pid=595 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.313686][ T601] FAULT_INJECTION: forcing a failure. [ 47.313686][ T601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.326958][ T601] CPU: 1 UID: 0 PID: 601 Comm: syz.1.111 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 47.326995][ T601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.327010][ T601] Call Trace: [ 47.327017][ T601] [ 47.327026][ T601] __dump_stack+0x21/0x30 [ 47.327063][ T601] dump_stack_lvl+0x140/0x1c0 [ 47.327095][ T601] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.327129][ T601] ? check_stack_object+0x138/0x150 [ 47.327154][ T601] dump_stack+0x19/0x20 [ 47.327185][ T601] should_fail_ex+0x3c2/0x510 [ 47.327212][ T601] should_fail+0xf/0x20 [ 47.327237][ T601] should_fail_usercopy+0x1e/0x30 [ 47.327265][ T601] _copy_to_user+0x24/0xa0 [ 47.327296][ T601] simple_read_from_buffer+0xed/0x160 [ 47.327329][ T601] proc_fail_nth_read+0x1aa/0x220 [ 47.327364][ T601] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 47.327400][ T601] ? bpf_lsm_file_permission+0xd/0x20 [ 47.327430][ T601] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 47.327464][ T601] vfs_read+0x288/0xc70 [ 47.327486][ T601] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 47.327509][ T601] ? __cfi_vfs_read+0x10/0x10 [ 47.327532][ T601] ? __kasan_check_write+0x18/0x20 [ 47.327555][ T601] ? mutex_lock+0x97/0x1d0 [ 47.327593][ T601] ? __cfi_mutex_lock+0x10/0x10 [ 47.327627][ T601] ksys_read+0x145/0x260 [ 47.327651][ T601] ? __cfi_ksys_read+0x10/0x10 [ 47.327683][ T601] ? __kasan_check_read+0x15/0x20 [ 47.327706][ T601] __x64_sys_read+0x7f/0x90 [ 47.327729][ T601] x64_sys_call+0x2638/0x2ee0 [ 47.327750][ T601] do_syscall_64+0x57/0xf0 [ 47.327778][ T601] ? clear_bhb_loop+0x50/0xa0 [ 47.327810][ T601] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.327840][ T601] RIP: 0033:0x7f7cdad5e90e [ 47.327860][ T601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 47.327880][ T601] RSP: 002b:00007f7cdbd2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.327906][ T601] RAX: ffffffffffffffda RBX: 00007f7cdbd306c0 RCX: 00007f7cdad5e90e [ 47.327925][ T601] RDX: 000000000000000f RSI: 00007f7cdbd300a0 RDI: 0000000000000004 [ 47.327941][ T601] RBP: 00007f7cdbd30090 R08: 0000000000000000 R09: 0000000000000000 [ 47.327956][ T601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.327970][ T601] R13: 00007f7cdb026038 R14: 00007f7cdb025fa0 R15: 00007fffefc14208 [ 47.327991][ T601] [ 47.333018][ T401] usbhid 3-1:0.0: can't add hid device: -71 [ 47.480375][ T604] FAULT_INJECTION: forcing a failure. [ 47.480375][ T604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.489363][ T401] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 47.508693][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 47.539340][ T604] CPU: 0 UID: 0 PID: 604 Comm: syz.1.112 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 47.539432][ T604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.539471][ T604] Call Trace: [ 47.539484][ T604] [ 47.539512][ T604] __dump_stack+0x21/0x30 [ 47.539604][ T604] dump_stack_lvl+0x140/0x1c0 [ 47.539694][ T604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.539811][ T604] ? check_stack_object+0x138/0x150 [ 47.539874][ T604] dump_stack+0x19/0x20 [ 47.539947][ T604] should_fail_ex+0x3c2/0x510 [ 47.540018][ T604] should_fail+0xf/0x20 [ 47.540078][ T604] should_fail_usercopy+0x1e/0x30 [ 47.540142][ T604] _copy_to_user+0x24/0xa0 [ 47.540227][ T604] simple_read_from_buffer+0xed/0x160 [ 47.540309][ T604] proc_fail_nth_read+0x1aa/0x220 [ 47.540392][ T604] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 47.540481][ T604] ? bpf_lsm_file_permission+0xd/0x20 [ 47.540555][ T604] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 47.540637][ T604] vfs_read+0x288/0xc70 [ 47.540710][ T604] ? __cfi_vfs_read+0x10/0x10 [ 47.540763][ T604] ? __kasan_check_write+0x18/0x20 [ 47.540824][ T604] ? mutex_lock+0x97/0x1d0 [ 47.540898][ T604] ? __cfi_mutex_lock+0x10/0x10 [ 47.540990][ T604] ksys_read+0x145/0x260 [ 47.541043][ T604] ? __cfi_ksys_read+0x10/0x10 [ 47.541115][ T604] ? fdget+0x188/0x1e0 [ 47.541209][ T604] ? __kasan_check_read+0x15/0x20 [ 47.541270][ T604] __x64_sys_read+0x7f/0x90 [ 47.541324][ T604] x64_sys_call+0x2638/0x2ee0 [ 47.541377][ T604] do_syscall_64+0x57/0xf0 [ 47.541447][ T604] ? clear_bhb_loop+0x50/0xa0 [ 47.541522][ T604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.541595][ T604] RIP: 0033:0x7f7cdad5e90e [ 47.541646][ T604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 47.541704][ T604] RSP: 002b:00007f7cdbd0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.541767][ T604] RAX: ffffffffffffffda RBX: 00007f7cdbd0f6c0 RCX: 00007f7cdad5e90e [ 47.541817][ T604] RDX: 000000000000000f RSI: 00007f7cdbd0f0a0 RDI: 0000000000000003 [ 47.541850][ T604] RBP: 00007f7cdbd0f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.541890][ T604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.541930][ T604] R13: 00007f7cdb026128 R14: 00007f7cdb026090 R15: 00007fffefc14208 [ 47.541982][ T604] [ 47.558432][ T401] usb 3-1: USB disconnect, device number 7 [ 47.631595][ T36] audit: type=1400 audit(1786032539.710:235): avc: denied { ioctl } for pid=598 comm="syz.4.110" path="socket:[6592]" dev="sockfs" ino=6592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.878804][ T36] audit: type=1400 audit(1786032539.720:236): avc: denied { mount } for pid=598 comm="syz.4.110" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 48.284452][ T642] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.305694][ T401] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.366978][ T646] kvm: pic: non byte write [ 48.465517][ T401] usb 2-1: Using ep0 maxpacket: 32 [ 48.471864][ T401] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.482672][ T401] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 48.491824][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.501300][ T401] usb 2-1: config 0 descriptor?? [ 48.510878][ T653] FAULT_INJECTION: forcing a failure. [ 48.510878][ T653] name failslab, interval 1, probability 0, space 0, times 0 [ 48.524080][ T401] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 48.533609][ T653] CPU: 0 UID: 0 PID: 653 Comm: syz.0.127 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 48.533642][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.533657][ T653] Call Trace: [ 48.533664][ T653] [ 48.533673][ T653] __dump_stack+0x21/0x30 [ 48.533710][ T653] dump_stack_lvl+0x140/0x1c0 [ 48.533741][ T653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.533773][ T653] ? avc_has_perm+0x155/0x240 [ 48.533800][ T653] ? __cfi_avc_has_perm+0x10/0x10 [ 48.533827][ T653] dump_stack+0x19/0x20 [ 48.533858][ T653] should_fail_ex+0x3c2/0x510 [ 48.533885][ T653] should_failslab+0xac/0x100 [ 48.533914][ T653] __kmalloc_cache_noprof+0x41/0x470 [ 48.533938][ T653] ? vhost_task_create+0x12c/0x3f0 [ 48.533963][ T653] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 48.533991][ T653] vhost_task_create+0x12c/0x3f0 [ 48.534015][ T653] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 48.534044][ T653] ? __cfi_vhost_task_create+0x10/0x10 [ 48.534083][ T653] ? __cfi_vhost_task_fn+0x10/0x10 [ 48.534107][ T653] ? __kasan_check_write+0x18/0x20 [ 48.534131][ T653] ? mutex_lock+0x97/0x1d0 [ 48.534162][ T653] ? __cfi_mutex_lock+0x10/0x10 [ 48.534193][ T653] ? kernel_text_address+0xa9/0xe0 [ 48.534226][ T653] kvm_mmu_post_init_vm+0x161/0x300 [ 48.534262][ T653] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 48.534293][ T653] ? _parse_integer_limit+0x195/0x1e0 [ 48.534319][ T653] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 48.534350][ T653] ? kstrtoull+0x13b/0x1e0 [ 48.534372][ T653] ? kstrtouint+0x78/0xf0 [ 48.534395][ T653] ? ioctl_has_perm+0x1bc/0x500 [ 48.534417][ T653] ? __asan_memcpy+0x5a/0x80 [ 48.534440][ T653] ? ioctl_has_perm+0x408/0x500 [ 48.534462][ T653] ? has_cap_mac_admin+0xd0/0xd0 [ 48.534485][ T653] ? __kasan_check_write+0x18/0x20 [ 48.534507][ T653] ? mutex_lock_killable+0x97/0x1d0 [ 48.534540][ T653] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.534571][ T653] ? proc_fail_nth_write+0x184/0x220 [ 48.534606][ T653] kvm_vcpu_ioctl+0xa43/0x1000 [ 48.534628][ T653] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.534651][ T653] ? __cfi_vfs_write+0x10/0x10 [ 48.534675][ T653] ? __kasan_check_write+0x18/0x20 [ 48.534698][ T653] ? mutex_unlock+0x90/0x240 [ 48.534727][ T653] ? __cfi_mutex_unlock+0x10/0x10 [ 48.534759][ T653] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.534786][ T653] ? security_file_ioctl+0x3e/0x110 [ 48.534819][ T653] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.534840][ T653] __se_sys_ioctl+0x135/0x1b0 [ 48.534869][ T653] __x64_sys_ioctl+0x7f/0xa0 [ 48.534903][ T653] x64_sys_call+0x1878/0x2ee0 [ 48.534925][ T653] do_syscall_64+0x57/0xf0 [ 48.534950][ T653] ? clear_bhb_loop+0x50/0xa0 [ 48.534981][ T653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.535015][ T653] RIP: 0033:0x7f253ff9e0d9 [ 48.535035][ T653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.535062][ T653] RSP: 002b:00007f2540f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.535086][ T653] RAX: ffffffffffffffda RBX: 00007f2540225fa0 RCX: 00007f253ff9e0d9 [ 48.535104][ T653] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 48.535119][ T653] RBP: 00007f2540f46090 R08: 0000000000000000 R09: 0000000000000000 [ 48.535134][ T653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.535148][ T653] R13: 00007f2540226038 R14: 00007f2540225fa0 R15: 00007ffe639c8e88 [ 48.535168][ T653] [ 48.880360][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.028795][ T655] mmap: syz.2.128 (655) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.035649][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 49.050064][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.061073][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.070900][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 49.079996][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.088863][ T9] usb 5-1: config 0 descriptor?? [ 49.094974][ T9] hub 5-1:0.0: USB hub found [ 49.190421][ T672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.249226][ T678] FAULT_INJECTION: forcing a failure. [ 49.249226][ T678] name failslab, interval 1, probability 0, space 0, times 0 [ 49.262532][ T678] CPU: 1 UID: 0 PID: 678 Comm: syz.2.137 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 49.262566][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.262580][ T678] Call Trace: [ 49.262588][ T678] [ 49.262597][ T678] __dump_stack+0x21/0x30 [ 49.262636][ T678] dump_stack_lvl+0x140/0x1c0 [ 49.262666][ T678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.262705][ T678] dump_stack+0x19/0x20 [ 49.262726][ T678] should_fail_ex+0x3c2/0x510 [ 49.262745][ T678] should_failslab+0xac/0x100 [ 49.262788][ T678] kmem_cache_alloc_node_noprof+0x45/0x420 [ 49.262812][ T678] ? dup_task_struct+0xc1/0xd80 [ 49.262843][ T678] dup_task_struct+0xc1/0xd80 [ 49.262868][ T678] ? __kasan_check_write+0x18/0x20 [ 49.262883][ T678] ? _raw_spin_lock_irq+0x93/0x120 [ 49.262902][ T678] ? copy_process+0x3350/0x3350 [ 49.262945][ T678] ? __kasan_check_write+0x18/0x20 [ 49.262966][ T678] copy_process+0x57c/0x3350 [ 49.263012][ T678] ? kstrtouint_from_user+0x117/0x170 [ 49.263038][ T678] ? selinux_file_permission+0x318/0xb60 [ 49.263072][ T678] ? __cfi_copy_process+0x10/0x10 [ 49.263098][ T678] ? proc_fail_nth_write+0x184/0x220 [ 49.263140][ T678] kernel_clone+0x233/0x810 [ 49.263162][ T678] ? __cfi_kernel_clone+0x10/0x10 [ 49.263189][ T678] __x64_sys_clone+0x1b7/0x230 [ 49.263233][ T678] ? __cfi___x64_sys_clone+0x10/0x10 [ 49.263265][ T678] ? __kasan_check_read+0x15/0x20 [ 49.263292][ T678] x64_sys_call+0x2b3c/0x2ee0 [ 49.263307][ T678] do_syscall_64+0x57/0xf0 [ 49.263325][ T678] ? clear_bhb_loop+0x50/0xa0 [ 49.263363][ T678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.263393][ T678] RIP: 0033:0x7f69ce79e0d9 [ 49.263411][ T678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.263437][ T678] RSP: 002b:00007f69cf5bbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 49.263455][ T678] RAX: ffffffffffffffda RBX: 00007f69cea25fa0 RCX: 00007f69ce79e0d9 [ 49.263467][ T678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040005000 [ 49.263477][ T678] RBP: 00007f69cf5bc090 R08: 0000000000000000 R09: 0000000000000000 [ 49.263488][ T678] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 49.263513][ T678] R13: 00007f69cea26038 R14: 00007f69cea25fa0 R15: 00007ffc1bd0d3b8 [ 49.263534][ T678] [ 49.504296][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 49.552240][ T684] FAULT_INJECTION: forcing a failure. [ 49.552240][ T684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.571107][ T684] CPU: 0 UID: 0 PID: 684 Comm: syz.2.140 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 49.571143][ T684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.571158][ T684] Call Trace: [ 49.571165][ T684] [ 49.571177][ T684] __dump_stack+0x21/0x30 [ 49.571214][ T684] dump_stack_lvl+0x140/0x1c0 [ 49.571246][ T684] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.571279][ T684] ? check_stack_object+0x138/0x150 [ 49.571305][ T684] dump_stack+0x19/0x20 [ 49.571335][ T684] should_fail_ex+0x3c2/0x510 [ 49.571362][ T684] should_fail+0xf/0x20 [ 49.571386][ T684] should_fail_usercopy+0x1e/0x30 [ 49.571414][ T684] _copy_to_user+0x24/0xa0 [ 49.571445][ T684] simple_read_from_buffer+0xed/0x160 [ 49.571478][ T684] proc_fail_nth_read+0x1aa/0x220 [ 49.571511][ T684] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.571559][ T684] ? bpf_lsm_file_permission+0xd/0x20 [ 49.571591][ T684] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.571624][ T684] vfs_read+0x288/0xc70 [ 49.571646][ T684] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 49.571671][ T684] ? __cfi_vfs_read+0x10/0x10 [ 49.571692][ T684] ? __kasan_check_write+0x18/0x20 [ 49.571714][ T684] ? mutex_lock+0x97/0x1d0 [ 49.571753][ T684] ? __cfi_mutex_lock+0x10/0x10 [ 49.571787][ T684] ksys_read+0x145/0x260 [ 49.571811][ T684] ? __cfi_ksys_read+0x10/0x10 [ 49.571834][ T684] ? __kasan_check_read+0x15/0x20 [ 49.571855][ T684] __x64_sys_read+0x7f/0x90 [ 49.571878][ T684] x64_sys_call+0x2638/0x2ee0 [ 49.571899][ T684] do_syscall_64+0x57/0xf0 [ 49.571930][ T684] ? clear_bhb_loop+0x50/0xa0 [ 49.571954][ T684] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.571974][ T684] RIP: 0033:0x7f69ce75e90e [ 49.571988][ T684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.572002][ T684] RSP: 002b:00007f69cf5bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.572019][ T684] RAX: ffffffffffffffda RBX: 00007f69cf5bc6c0 RCX: 00007f69ce75e90e [ 49.572033][ T684] RDX: 000000000000000f RSI: 00007f69cf5bc0a0 RDI: 0000000000000004 [ 49.572044][ T684] RBP: 00007f69cf5bc090 R08: 0000000000000000 R09: 0000000000000000 [ 49.572054][ T684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.572064][ T684] R13: 00007f69cea26038 R14: 00007f69cea25fa0 R15: 00007ffc1bd0d3b8 [ 49.572077][ T684] [ 49.598131][ T686] ÿÿÿÿÿÿ: renamed from veth0_vlan (while UP) [ 49.731920][ T689] FAULT_INJECTION: forcing a failure. [ 49.731920][ T689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.837116][ T689] CPU: 0 UID: 0 PID: 689 Comm: syz.2.142 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 49.837155][ T689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.837169][ T689] Call Trace: [ 49.837176][ T689] [ 49.837185][ T689] __dump_stack+0x21/0x30 [ 49.837218][ T689] dump_stack_lvl+0x140/0x1c0 [ 49.837246][ T689] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.837275][ T689] ? __kasan_check_write+0x18/0x20 [ 49.837297][ T689] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 49.837317][ T689] dump_stack+0x19/0x20 [ 49.837344][ T689] should_fail_ex+0x3c2/0x510 [ 49.837367][ T689] should_fail+0xf/0x20 [ 49.837387][ T689] should_fail_usercopy+0x1e/0x30 [ 49.837412][ T689] _copy_from_user+0x20/0xa0 [ 49.837439][ T689] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 49.837460][ T689] ? avc_has_perm+0x155/0x240 [ 49.837483][ T689] ? __cfi_avc_has_perm+0x10/0x10 [ 49.837506][ T689] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 49.837528][ T689] ? selinux_file_open+0x46c/0x630 [ 49.837548][ T689] ? __cfi_selinux_file_open+0x10/0x10 [ 49.837573][ T689] ? is_bpf_text_address+0x17b/0x1a0 [ 49.837607][ T689] ? kernel_text_address+0xa9/0xe0 [ 49.837637][ T689] ? __kernel_text_address+0x11/0x40 [ 49.837667][ T689] ? __asan_set_shadow_00+0x12/0x20 [ 49.837699][ T689] ? do_vfs_ioctl+0x182d/0x2010 [ 49.837726][ T689] ? arch_stack_walk+0x10a/0x170 [ 49.837749][ T689] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 49.837777][ T689] ? _parse_integer_limit+0x195/0x1e0 [ 49.837802][ T689] ? _parse_integer+0x2e/0x40 [ 49.837823][ T689] ? kstrtoull+0x13b/0x1e0 [ 49.837846][ T689] ? kstrtouint+0x78/0xf0 [ 49.837868][ T689] ? ioctl_has_perm+0x1bc/0x500 [ 49.837888][ T689] ? __asan_memcpy+0x5a/0x80 [ 49.837911][ T689] ? ioctl_has_perm+0x408/0x500 [ 49.837932][ T689] ? has_cap_mac_admin+0xd0/0xd0 [ 49.837953][ T689] ? __kasan_check_write+0x18/0x20 [ 49.837975][ T689] ? mutex_lock_killable+0x97/0x1d0 [ 49.838007][ T689] ? __cfi_mutex_lock_killable+0x10/0x10 [ 49.838038][ T689] ? proc_fail_nth_write+0x184/0x220 [ 49.838069][ T689] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.838111][ T689] kvm_vcpu_ioctl+0x7da/0x1000 [ 49.838135][ T689] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.838157][ T689] ? __cfi_vfs_write+0x10/0x10 [ 49.838179][ T689] ? __kasan_check_write+0x18/0x20 [ 49.838201][ T689] ? mutex_unlock+0x90/0x240 [ 49.838231][ T689] ? __cfi_mutex_unlock+0x10/0x10 [ 49.838263][ T689] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.838290][ T689] ? security_file_ioctl+0x3e/0x110 [ 49.838322][ T689] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.838343][ T689] __se_sys_ioctl+0x135/0x1b0 [ 49.838371][ T689] __x64_sys_ioctl+0x7f/0xa0 [ 49.838398][ T689] x64_sys_call+0x1878/0x2ee0 [ 49.838418][ T689] do_syscall_64+0x57/0xf0 [ 49.838443][ T689] ? clear_bhb_loop+0x50/0xa0 [ 49.838474][ T689] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.838502][ T689] RIP: 0033:0x7f69ce79e0d9 [ 49.838521][ T689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.838539][ T689] RSP: 002b:00007f69cf5bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.838560][ T689] RAX: ffffffffffffffda RBX: 00007f69cea25fa0 RCX: 00007f69ce79e0d9 [ 49.838576][ T689] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 49.838589][ T689] RBP: 00007f69cf5bc090 R08: 0000000000000000 R09: 0000000000000000 [ 49.838603][ T689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.838615][ T689] R13: 00007f69cea26038 R14: 00007f69cea25fa0 R15: 00007ffc1bd0d3b8 [ 49.838633][ T689] [ 50.206663][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 50.212665][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 50.236262][ T9] usb 5-1: USB disconnect, device number 5 [ 50.275566][ T696] process 'syz.0.145' launched './file1' with NULL argv: empty string added [ 50.350151][ T698] tmpfs: Bad value for 'uid' [ 50.354785][ T698] tmpfs: Bad value for 'uid' [ 50.378720][ T698] kvm: kvm [697]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x11e) = 0xbe702111 [ 50.548846][ T709] FAULT_INJECTION: forcing a failure. [ 50.548846][ T709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.562067][ T709] CPU: 1 UID: 0 PID: 709 Comm: syz.0.150 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 50.562106][ T709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.562121][ T709] Call Trace: [ 50.562130][ T709] [ 50.562139][ T709] __dump_stack+0x21/0x30 [ 50.562177][ T709] dump_stack_lvl+0x140/0x1c0 [ 50.562209][ T709] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.562242][ T709] ? has_cap_mac_admin+0xd0/0xd0 [ 50.562265][ T709] dump_stack+0x19/0x20 [ 50.562295][ T709] should_fail_ex+0x3c2/0x510 [ 50.562322][ T709] should_fail+0xf/0x20 [ 50.562345][ T709] should_fail_usercopy+0x1e/0x30 [ 50.562373][ T709] _copy_from_user+0x20/0xa0 [ 50.562401][ T709] proc_submiturb+0xdc/0x1c0 [ 50.562421][ T709] ? proc_setconfig+0x5b0/0x5b0 [ 50.562454][ T709] ? mutex_lock+0x97/0x1d0 [ 50.562486][ T709] ? __cfi_mutex_lock+0x10/0x10 [ 50.562518][ T709] ? __kasan_check_write+0x18/0x20 [ 50.562541][ T709] ? mutex_unlock+0x90/0x240 [ 50.562573][ T709] usbdev_ioctl+0x110b/0x2120 [ 50.562617][ T709] ? __cfi_usbdev_ioctl+0x10/0x10 [ 50.562653][ T709] ? bpf_lsm_file_ioctl+0xd/0x20 [ 50.562682][ T709] ? security_file_ioctl+0x3e/0x110 [ 50.562713][ T709] ? __cfi_usbdev_ioctl+0x10/0x10 [ 50.562750][ T709] __se_sys_ioctl+0x135/0x1b0 [ 50.562779][ T709] __x64_sys_ioctl+0x7f/0xa0 [ 50.562807][ T709] x64_sys_call+0x1878/0x2ee0 [ 50.562828][ T709] do_syscall_64+0x57/0xf0 [ 50.562852][ T709] ? clear_bhb_loop+0x50/0xa0 [ 50.562891][ T709] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.562921][ T709] RIP: 0033:0x7f253ff9e0d9 [ 50.562940][ T709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.562960][ T709] RSP: 002b:00007f2540f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.562985][ T709] RAX: ffffffffffffffda RBX: 00007f2540225fa0 RCX: 00007f253ff9e0d9 [ 50.563003][ T709] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 50.563019][ T709] RBP: 00007f2540f46090 R08: 0000000000000000 R09: 0000000000000000 [ 50.563035][ T709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.563049][ T709] R13: 00007f2540226038 R14: 00007f2540225fa0 R15: 00007ffe639c8e88 [ 50.563070][ T709] [ 50.850417][ T46] bridge_slave_1: left allmulticast mode [ 50.873023][ T46] bridge_slave_1: left promiscuous mode [ 50.878856][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.887026][ T46] bridge_slave_0: left allmulticast mode [ 50.892920][ T46] bridge_slave_0: left promiscuous mode [ 50.898814][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.922027][ T722] BUG: scheduling while atomic: syz.4.155/722/0x00000002 [ 50.929175][ T722] Modules linked in: [ 50.933112][ T722] CPU: 1 UID: 0 PID: 722 Comm: syz.4.155 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 50.933148][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.933163][ T722] Call Trace: [ 50.933172][ T722] [ 50.933181][ T722] __dump_stack+0x21/0x30 [ 50.933221][ T722] dump_stack_lvl+0x140/0x1c0 [ 50.933256][ T722] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.933293][ T722] dump_stack+0x19/0x20 [ 50.933325][ T722] __schedule_bug+0x12b/0x200 [ 50.933352][ T722] ? find_proxy_task+0x2460/0x2460 [ 50.933379][ T722] ? unwind_get_return_address+0x51/0x90 [ 50.933410][ T722] ? arch_stack_walk+0x10a/0x170 [ 50.933435][ T722] __schedule+0xb85/0x20b0 [ 50.933476][ T722] ? __sched_text_start+0x10/0x10 [ 50.933506][ T722] ? kernel_text_address+0xa9/0xe0 [ 50.933542][ T722] ? __kasan_check_write+0x18/0x20 [ 50.933566][ T722] ? _raw_spin_lock_irq+0x93/0x120 [ 50.933595][ T722] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 50.933623][ T722] schedule+0xc5/0x240 [ 50.933652][ T722] schedule_preempt_disabled+0x14/0x30 [ 50.933683][ T722] rwsem_down_read_slowpath+0x88c/0x14c0 [ 50.933709][ T722] ? down_write_killable+0x2d0/0x2d0 [ 50.933733][ T722] ? __kasan_check_write+0x18/0x20 [ 50.933758][ T722] ? downgrade_write+0x470/0x470 [ 50.933794][ T722] ? __kasan_check_write+0x18/0x20 [ 50.933817][ T722] ? rwsem_read_trylock+0x275/0x5a0 [ 50.933854][ T722] down_read+0x95/0xe0 [ 50.933889][ T722] ? __cfi_down_read+0x10/0x10 [ 50.933924][ T722] ? __kasan_check_write+0x18/0x20 [ 50.933948][ T722] ? mutex_lock+0x97/0x1d0 [ 50.933980][ T722] kernfs_find_and_get_ns+0x76/0x130 [ 50.934013][ T722] sysfs_unmerge_group+0x66/0x130 [ 50.934041][ T722] pm_qos_sysfs_remove_resume_latency+0x20/0x30 [ 50.934075][ T722] dev_pm_qos_constraints_destroy+0x3b/0x4b0 [ 50.934102][ T722] ? sysfs_unmerge_group+0x120/0x130 [ 50.934131][ T722] dpm_sysfs_remove+0x6c/0xd0 [ 50.934162][ T722] device_del+0x241/0xcf0 [ 50.934203][ T722] ? __cfi_class_find_device+0x10/0x10 [ 50.934229][ T722] ? __cfi_device_del+0x10/0x10 [ 50.934263][ T722] ? __kasan_check_write+0x18/0x20 [ 50.934291][ T722] ? kobject_put+0x1cc/0x2a0 [ 50.934319][ T722] device_destroy+0xb0/0x100 [ 50.934354][ T722] ? __cfi_device_destroy+0x10/0x10 [ 50.934390][ T722] ? __kasan_check_write+0x18/0x20 [ 50.934415][ T722] android_device_destroy+0x118/0x180 [ 50.934457][ T722] gadgets_drop+0x1d/0x30 [ 50.934480][ T722] ? __cfi_gadgets_drop+0x10/0x10 [ 50.934503][ T722] configfs_rmdir+0x8b7/0x9b0 [ 50.934538][ T722] vfs_rmdir+0x3de/0x560 [ 50.934572][ T722] do_rmdir+0x29a/0x590 [ 50.934607][ T722] ? __cfi_do_rmdir+0x10/0x10 [ 50.934641][ T722] ? __kasan_check_write+0x18/0x20 [ 50.934666][ T722] __x64_sys_rmdir+0x4b/0x60 [ 50.934700][ T722] x64_sys_call+0xaf7/0x2ee0 [ 50.934722][ T722] do_syscall_64+0x57/0xf0 [ 50.934750][ T722] ? clear_bhb_loop+0x50/0xa0 [ 50.934783][ T722] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.934815][ T722] RIP: 0033:0x7fdcfbd9e0d9 [ 50.934836][ T722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.934857][ T722] RSP: 002b:00007fdcfccc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 50.934883][ T722] RAX: ffffffffffffffda RBX: 00007fdcfc026090 RCX: 00007fdcfbd9e0d9 [ 50.934902][ T722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 50.934918][ T722] RBP: 00007fdcfbe35024 R08: 0000000000000000 R09: 0000000000000000 [ 50.934934][ T722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.934950][ T722] R13: 00007fdcfc026128 R14: 00007fdcfc026090 R15: 00007ffc6200a998 [ 50.934970][ T722] [ 50.935398][ T722] BUG: scheduling while atomic: syz.4.155/722/0x00000000 [ 51.361138][ T722] Modules linked in: [ 51.365113][ T722] CPU: 1 UID: 0 PID: 722 Comm: syz.4.155 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 51.365157][ T722] Tainted: [W]=WARN [ 51.365166][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.365182][ T722] Call Trace: [ 51.365190][ T722] [ 51.365200][ T722] __dump_stack+0x21/0x30 [ 51.365241][ T722] dump_stack_lvl+0x140/0x1c0 [ 51.365275][ T722] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.365312][ T722] dump_stack+0x19/0x20 [ 51.365345][ T722] __schedule_bug+0x12b/0x200 [ 51.365371][ T722] ? find_proxy_task+0x2460/0x2460 [ 51.365399][ T722] ? update_curr+0xf1/0x9c0 [ 51.365433][ T722] __schedule+0xb85/0x20b0 [ 51.365464][ T722] ? plist_check_list+0x2a1/0x2c0 [ 51.365491][ T722] ? __sched_text_start+0x10/0x10 [ 51.365520][ T722] ? plist_add+0x4d4/0x570 [ 51.365548][ T722] ? __futex_queue+0x19f/0x350 [ 51.365578][ T722] ? __cfi___futex_queue+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 51.365607][ T722] schedule+0xc5/0x240 [ 51.365634][ T722] futex_wait_queue+0xfc/0x240 [ 51.365654][ T722] __futex_wait+0x15b/0x3d0 [ 51.365675][ T722] ? __cfi___futex_wait+0x10/0x10 [ 51.365697][ T722] ? __cfi_futex_wake_mark+0x10/0x10 [ 51.365732][ T722] ? futex_wake+0x666/0x950 [ 51.365751][ T722] ? futex_setup_timer+0xb4/0xd0 [ 51.365779][ T722] futex_wait+0x128/0x7c0 [ 51.365800][ T722] ? __cfi_futex_wait+0x10/0x10 [ 51.365826][ T722] do_futex+0x32a/0x510 [ 51.365858][ T722] ? __cfi_do_futex+0x10/0x10 [ 51.365890][ T722] ? __kasan_slab_free+0x6a/0x80 [ 51.365919][ T722] ? kmem_cache_free+0x1bd/0x4f0 [ 51.365945][ T722] __se_sys_futex+0x13c/0x320 [ 51.365986][ T722] ? putname+0x113/0x150 [ 51.366015][ T722] ? __x64_sys_futex+0x110/0x110 [ 51.366049][ T722] __x64_sys_futex+0xe9/0x110 [ 51.366079][ T722] x64_sys_call+0x227f/0x2ee0 [ 51.366101][ T722] do_syscall_64+0x57/0xf0 [ 51.366127][ T722] ? clear_bhb_loop+0x50/0xa0 [ 51.366160][ T722] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.366192][ T722] RIP: 0033:0x7fdcfbd9e0d9 [ 51.366214][ T722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.366236][ T722] RSP: 002b:00007fdcfccc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.366263][ T722] RAX: ffffffffffffffda RBX: 00007fdcfc026098 RCX: 00007fdcfbd9e0d9 [ 51.366283][ T722] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdcfc026098 [ 51.366299][ T722] RBP: 00007fdcfc026090 R08: 0000000000000000 R09: 0000000000000000 [ 51.366316][ T722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.366332][ T722] R13: 00007fdcfc026128 R14: 00007ffc6200a8b0 R15: 00007ffc6200a998 [ 51.366353][ T722] [ 51.446856][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 51.446929][ T36] audit: type=1400 audit(1786032543.390:258): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2896]" dev="pipefs" ino=2896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.469635][ T442] usb 2-1: USB disconnect, device number 7 [ 51.765500][ T36] audit: type=1400 audit(1786032543.840:259): avc: denied { mounton } for pid=725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.808703][ T46] veth1_macvtap: left promiscuous mode [ 51.814332][ T46] veth0_vlan: left promiscuous mode [ 51.891999][ T725] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.899142][ T725] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.906334][ T725] bridge_slave_0: entered allmulticast mode [ 51.912735][ T725] bridge_slave_0: entered promiscuous mode [ 51.919294][ T725] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.926690][ T725] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.933934][ T725] bridge_slave_1: entered allmulticast mode [ 51.940672][ T725] bridge_slave_1: entered promiscuous mode [ 51.985072][ T725] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.992156][ T725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.999571][ T725] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.006633][ T725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.029269][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.036733][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.046706][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.053766][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.062697][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.069771][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.096425][ T725] veth0_vlan: entered promiscuous mode [ 52.107714][ T725] veth1_macvtap: entered promiscuous mode [ 52.120749][ T46] bridge_slave_1: left allmulticast mode [ 52.126621][ T46] bridge_slave_1: left promiscuous mode [ 52.132244][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.139965][ T46] bridge_slave_0: left allmulticast mode [ 52.145968][ T46] bridge_slave_0: left promiscuous mode [ 52.151606][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.159509][ T46] bridge_slave_1: left allmulticast mode [ 52.165163][ T46] bridge_slave_1: left promiscuous mode [ 52.171473][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.179012][ T46] bridge_slave_0: left allmulticast mode [ 52.184677][ T46] bridge_slave_0: left promiscuous mode [ 52.190684][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.198590][ T46] bridge_slave_1: left allmulticast mode [ 52.204265][ T46] bridge_slave_1: left promiscuous mode [ 52.210128][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.217643][ T46] bridge_slave_0: left allmulticast mode [ 52.223287][ T46] bridge_slave_0: left promiscuous mode [ 52.229082][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.510578][ T46] veth1_macvtap: left promiscuous mode [ 52.516147][ T46] veth0_vlan: left promiscuous mode [ 52.521529][ T46] veth1_macvtap: left promiscuous mode [ 52.527176][ T46] ÿÿÿÿÿÿ: left promiscuous mode [ 52.532397][ T46] veth1_macvtap: left promiscuous mode [ 52.537989][ T46] veth0_vlan: left promiscuous mode [ 53.126898][ T46] bridge_slave_1: left allmulticast mode [ 53.132660][ T46] bridge_slave_1: left promiscuous mode [ 53.138361][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.145935][ T46] bridge_slave_0: left allmulticast mode [ 53.151583][ T46] bridge_slave_0: left promiscuous mode [ 53.157343][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.257592][ T46] veth1_macvtap: left promiscuous mode [ 53.263159][ T46] veth0_vlan: left promiscuous mode