last executing test programs: 5.74743702s ago: executing program 0 (id=431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$midi(0x5, 0xd2, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x1, 0x1, 0x9, 0xa0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x24, 0x7}], [{{0x9, 0x5, 0x1, 0x11, 0x0, 0x8, 0x40, 0xef, {0x10, 0x25, 0x1, 0xc, "7deddc90ba2b123a7c0bfa61"}}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x9, 0x5, 0xa, {0x14, 0x25, 0x1, 0x10, "0575b6d7223b54f40abd4ea5ff4c35f7"}}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x10, 0x80, 0x81, {0x10, 0x25, 0x1, 0xc, "265f4d1b5899eb87d04282c0"}}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x8, 0xa3, 0x5, {0x7, 0x25, 0x1, 0x3, "856cf4"}}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x7, 0x7, 0x0, {0x6, 0x25, 0x1, 0x2, 'jY'}}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x0, 0x43, 0xd, {0x5, 0x25, 0x1, 0x1, "d9"}}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x3, 0x3, 0x3e, {0x11, 0x25, 0x1, 0xd, "e47f4fbc8b79eec25f9ec76e61"}}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xb, 0xfb, 0xfb, {0x8, 0x25, 0x1, 0x4, "27cbc467"}}}]}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3, 0x7, 0x7, 0x10, 0x1}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ebf025c8ef1df026f85c6c638b807839"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io$lan78xx(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x0, 0x30, 0x9, {0x9, 0x21, "763eae7c4d24f4"}}, &(0x7f0000000240)={0x0, 0x3, 0x70, @string={0x70, 0x3, "34c114031d4fa7b1f7793de5a42daa4c626409ff976dbc4c104b518de07c6da8291265459756b3efa8d0db9bb43d8474e9e53159b24564f6bdf0ddaef507e87fea1d1288c89417feaa98638692486be2596323d3d6de3f7ce6ebc6c756c22dd39e922c8be4bae20f9f3f15f49abb"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000300)={0x20, 0x0, 0x19, "f744b7c05a6ca6872f81a7e77762ccfcffc95fef8b71113728"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x200}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0xb4}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "4aa5968ab729a0f7f2b47377aad259a6a4ba16ddf521f668012ab89c7dcbf25b33a154319f39046982d2c3cb5ebc20"}}) sendmsg$nl_xfrm(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000bc0)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2d, 0x25dfdbfc, {{@in=@broadcast, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0x0, 0xa, 0x30, 0xa0, 0x3c}, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x4008010) 4.260210027s ago: executing program 0 (id=448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff01010000ac1e0101000000000000000000000000000100000000000000230005020000203a00000000fae3000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d432000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844) 4.260068887s ago: executing program 0 (id=449): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000100)=0x1b) (fail_nth: 1) 2.966328947s ago: executing program 2 (id=468): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f4288cdf755974233383e991deafe13ec24721ef116fda212dd27e0721c58186bfbe1d785b388574284f5aa4690e75ef85fed10d5ea68101b561eceaa0819d3a08dd490e3e7329bbd7ae3046144c707d37", 0x63, 0x40, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) 2.764342984s ago: executing program 0 (id=469): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0xfff9, 0x8, 0x0, 0x0}}, 0x0) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000480)=""/229) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sync() sync() sync() sync() mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000002c0)=[@free_buffer, @decrefs={0x40046307, 0x1}], 0x52, 0x0, 0x0}) preadv(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0xe, 0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa1, 0x5d, 0x29, 0x8, 0x403, 0xf850, 0x9015, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0x58, 0x1, "", [{{0x9, 0x4, 0xdb, 0x4, 0x0, 0xbc, 0xd3, 0x78, 0x3}}]}}]}}, 0x0) 2.279557759s ago: executing program 0 (id=477): munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000001980)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kheaders.tar.xz', 0x141000, 0x14) 2.23005104s ago: executing program 0 (id=478): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20012900000005a801b4"], 0x0}) 2.120605314s ago: executing program 2 (id=479): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000010d21f0760000000000001090224000100009008090400ff020300020009218100040122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x22, 0x28, {0x28, 0xb, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2200, 0x18) lseek(r1, 0x7fffffffffffffff, 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xad, 0x91, 0x8d, 0x20, 0xb57, 0x89b6, 0xc8fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x2, 0x0, 0x4, "", [{{0x9, 0x4, 0x25, 0x8, 0x1, 0x3, 0x1, 0x2, 0x14, [], [{{0x9, 0x5, 0x6, 0x8, 0x20, 0x3, 0x0, 0xf7}}]}}]}}]}}, 0x0) 966.41294ms ago: executing program 1 (id=496): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000086d040ac70020000000010902240001000010080904005f01030003000921c1000301222800090581030002030301"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="013701371036"}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 424.323127ms ago: executing program 1 (id=506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}}, 0xb8}}, 0x0) 423.828987ms ago: executing program 1 (id=507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f4288cdf755974233383e991deafe13ec24721ef116fda212dd27e0721c58186bfbe1d785b388574284f5aa4690e75ef85fed10d5ea68101b561eceaa0819d3a08dd490e3e7329bbd7ae3046144c707d", 0x62, 0x40, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) 354.265289ms ago: executing program 1 (id=508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002840)=ANY=[@ANYBLOB="f8000000180001012bbd7000fbdbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e2200074e2380000a0010002f000000", @ANYRES32, @ANYRES32, @ANYBLOB="ac141430000000000000000000000000000004d32b0000000a0101000000000000000000000000000020010000000000080000000000000006000000000000001b00000000fffe00030000000000000008000000000000000080000000000000bf03335000000000da00000000000000060000000000000068050000000000000100008000000000c6640000010001000400000027bd7000000000000200006540000000000000001e000000000000000c0015"], 0x2fc}, 0x1, 0x0, 0x0, 0x1004c005}, 0x80) 354.167879ms ago: executing program 1 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000001000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xfc, 0xfffff030}, {0x6, 0x0, 0x0, 0x3}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0xb904, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0xa7a, 0xff, 0x0, 0xffeffeff}}) 353.827799ms ago: executing program 1 (id=510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') r2 = memfd_create(&(0x7f0000000040)='\x13\x00', 0x3) fcntl$setlease(r2, 0x400, 0x1) fsetxattr$system_posix_acl(r2, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) fchdir(r1) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x219) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) pread64(r6, &(0x7f0000000580)=""/224, 0xe0, 0x200000000000002) writev(r4, &(0x7f0000000880)=[{&(0x7f00000008c0)="64656e79b0f9", 0x6}], 0x1) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_create(0x0, 0x0, &(0x7f0000000380)=0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400"], 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) timer_delete(r7) mkdir(&(0x7f0000000080)='./file1\x00', 0x101) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) 353.740599ms ago: executing program 2 (id=511): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r2, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) io_setup(0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (rerun: 64) close(r1) 183.688194ms ago: executing program 2 (id=512): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0x3ba, 0x9, 0x3, 0x9, 0x2, [0x80000000, 0x5, 0xfffffff8, 0x81]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x456083, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffd4, 0x0, 0x0, 0x3000137) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000002640), 0x2, 0x0) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000002680)=""/162) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/60, 0x3c}], 0x1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0xffffffffffffffff, 0x200, 0x7186, 0xffff}) 161.356564ms ago: executing program 2 (id=513): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) 102.358267ms ago: executing program 3 (id=517): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket(0x21, 0x80000, 0x9) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)={0xaaaaaaaaaaaac4e, 0x0, [{0xd, 0x7, 0x800004, 0x4, 0x420e}, {0x0, 0x4, 0xbe16, 0x84d, 0x10}]}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) 71.585927ms ago: executing program 3 (id=518): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) 58.337508ms ago: executing program 3 (id=519): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e03, @local}, {0x1, @random="a30e769b1069"}, 0x6f631b4376e74f2e, {0x2, 0x1, @empty}}) 50.543678ms ago: executing program 2 (id=520): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x3, 0x10000002, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x20, 0x14, 0x9, 0x3, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20004000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f0000011600)={0x0, 0x0, &(0x7f00000115c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000301010100000000000000000000000608000840000000081130ceca6d4ca0e8d28033d49609e21a243fe0b1454ab7a685d8eca82ee07ea9ca44d982e10dc9cbe3256130c3afe0836f11adb9452b01b4057120e4ffbef93ed6bdf7ded59385721380a437af58b8606fbe20e803baa9607b63a7b7fdcd7fc1d3a3e2b85149632f08e020baf739ea060c7c2ec85f72c162a8ecf7f8c6ae69406224bb49dc61e3ce338eb5874dfb30d2e54f14842afc02a6140902b976a8b4c903e05fdb8a831d30567d3a27"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004880) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r13 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r13, 0x0) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x40000, 0x8000000, {}, 0x1, 0x1}}) r14 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r14, &(0x7f0000000380)={0x2, 0x2d, 0xfffffffffffffffe, 0xa, 0x400002, 0x2c}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66660f38810b0fa9f30f5a75000f01f0f0f6504a660f72d5fa2e670fc77a15653e660f3806bf02000f79080f0ffc9a"}], 0xaaaabc1, 0x48, 0x0, 0xfd6a) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x38, 0x3f7, 0x1, 0x70bd26, 0x25dfdbff, {0x18, 0x7, './cgroup.cpu/cpuset.cpus', './file0'}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x2506e39ca44df9ea}, 0x8810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 519.23µs ago: executing program 3 (id=521): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0xa0582) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x4004550c, 0x0) 423.78µs ago: executing program 3 (id=522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7f, @loopback, 0xffffffff}, 0x1c) listen(r0, 0x0) 0s ago: executing program 3 (id=523): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = memfd_create(&(0x7f00000008c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x8e\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfczb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\x1d\xb5\x81\xce\xb7\xc0t\x83\\\xf7J\x12\xab\x8d\xf2\bc2\xe9]\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xdcdP\xb1\xf2a\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5-\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\x9f\xdf!\x9bF\xad\fjD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xbe\x00\x00\x00\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 32.945667][ T348] __dump_stack+0x21/0x30 [ 32.945710][ T348] dump_stack_lvl+0x140/0x1c0 [ 32.945742][ T348] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.945776][ T348] dump_stack+0x19/0x20 [ 32.945807][ T348] should_fail_ex+0x3d7/0x530 [ 32.945838][ T348] should_failslab+0xac/0x100 [ 32.945866][ T348] kmem_cache_alloc_node_noprof+0x45/0x420 [ 32.945890][ T348] ? ns_capable+0x90/0xf0 [ 32.945909][ T348] ? __alloc_skb+0x108/0x370 [ 32.945934][ T348] __alloc_skb+0x108/0x370 [ 32.945955][ T348] ? __kasan_check_read+0x15/0x20 [ 32.945978][ T348] netlink_ack+0x155/0xa50 [ 32.946008][ T348] netlink_rcv_skb+0x2dd/0x4f0 [ 32.946035][ T348] ? __cfi_genl_rcv_msg+0x10/0x10 [ 32.946055][ T348] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 32.946082][ T348] ? rwsem_read_trylock+0x274/0x5b0 [ 32.946105][ T348] ? down_read+0x7f/0xe0 [ 32.946129][ T348] ? __cfi_down_read+0x10/0x10 [ 32.946154][ T348] ? is_vmalloc_addr+0x11/0x40 [ 32.946182][ T348] genl_rcv+0x2c/0x40 [ 32.946213][ T348] netlink_unicast+0x8c0/0xa60 [ 32.946241][ T348] netlink_sendmsg+0x7fe/0xb10 [ 32.946271][ T348] ? __cfi_netlink_sendmsg+0x10/0x10 [ 32.946301][ T348] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 32.946334][ T348] ? security_socket_sendmsg+0x3d/0x100 [ 32.946364][ T348] ? __cfi_netlink_sendmsg+0x10/0x10 [ 32.946393][ T348] ____sys_sendmsg+0x9e1/0xa30 [ 32.946423][ T348] ? __import_iovec+0x5ad/0x7c0 [ 32.946445][ T348] ? __sys_sendmsg_sock+0x50/0x50 [ 32.946475][ T348] ? import_iovec+0x80/0xb0 [ 32.946497][ T348] ___sys_sendmsg+0x2a6/0x370 [ 32.946526][ T348] ? __sys_sendmsg+0x2a0/0x2a0 [ 32.946556][ T348] ? proc_fail_nth_write+0x184/0x220 [ 32.946589][ T348] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 32.946629][ T348] __x64_sys_sendmsg+0x1fb/0x2d0 [ 32.946657][ T348] ? fput+0x1a4/0x240 [ 32.946686][ T348] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 32.946715][ T348] ? ksys_write+0x1f3/0x260 [ 32.946741][ T348] ? __kasan_check_read+0x15/0x20 [ 32.946764][ T348] x64_sys_call+0x2a4c/0x2ee0 [ 32.946786][ T348] do_syscall_64+0x57/0xf0 [ 32.946817][ T348] ? clear_bhb_loop+0x50/0xa0 [ 32.946840][ T348] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.946875][ T348] RIP: 0033:0x7fe20419ce59 [ 32.946905][ T348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.946923][ T348] RSP: 002b:00007fe204fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.946956][ T348] RAX: ffffffffffffffda RBX: 00007fe204415fa0 RCX: 00007fe20419ce59 [ 32.946973][ T348] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 32.946987][ T348] RBP: 00007fe204fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 32.947002][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.947015][ T348] R13: 00007fe204416038 R14: 00007fe204415fa0 R15: 00007fff57ed6328 [ 32.947034][ T348] [ 33.159238][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 33.278856][ T310] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 33.287013][ T310] usb 1-1: config 0 has no interface number 0 [ 33.294544][ T310] usb 1-1: too many endpoints for config 0 interface 52 altsetting 10: 254, using maximum allowed: 30 [ 33.305866][ T310] usb 1-1: config 0 interface 52 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.321942][ T310] usb 1-1: config 0 interface 52 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 33.336118][ T310] usb 1-1: config 0 interface 52 has no altsetting 0 [ 33.343087][ T310] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 33.356295][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.365973][ T310] usb 1-1: config 0 descriptor?? [ 33.597804][ T46] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.781201][ T46] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 33.790637][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.798904][ T46] usb 3-1: Product: syz [ 33.803455][ T46] usb 3-1: Manufacturer: syz [ 33.811091][ T46] usb 3-1: SerialNumber: syz [ 33.907807][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.992878][ T310] usbhid 1-1:0.52: can't add hid device: -71 [ 34.002085][ T310] usbhid 1-1:0.52: probe with driver usbhid failed with error -71 [ 34.015844][ T310] usb 1-1: USB disconnect, device number 2 [ 34.057758][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 34.064072][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.087791][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.097595][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.117815][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.126707][ T65] usb 4-1: config 0 descriptor?? [ 34.133931][ T65] hub 4-1:0.0: USB hub found [ 34.224275][ T46] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 34.333779][ T65] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 34.736386][ T65] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 34.764390][ T65] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 34.797825][ T452] capability: warning: `syz.1.29' uses 32-bit capabilities (legacy support in use) [ 34.924247][ T464] fuse: Unknown parameter '00000000000000000000003' [ 34.932587][ T464] ======================================================= [ 34.932587][ T464] WARNING: The mand mount option has been deprecated and [ 34.932587][ T464] and is ignored by this kernel. Remove the mand [ 34.932587][ T464] option from the mount to silence this warning. [ 34.932587][ T464] ======================================================= [ 35.057781][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.077948][ T310] usb 4-1: USB disconnect, device number 2 [ 35.218839][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.232441][ T65] usb 1-1: config 0 has no interfaces? [ 35.242425][ T65] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 35.257771][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.273309][ T65] usb 1-1: config 0 descriptor?? [ 35.483205][ T458] FAULT_INJECTION: forcing a failure. [ 35.483205][ T458] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.496563][ T458] CPU: 1 UID: 0 PID: 458 Comm: syz.0.31 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 35.496599][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.496613][ T458] Call Trace: [ 35.496620][ T458] [ 35.496628][ T458] __dump_stack+0x21/0x30 [ 35.496665][ T458] dump_stack_lvl+0x140/0x1c0 [ 35.496698][ T458] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.496730][ T458] ? check_stack_object+0x12b/0x150 [ 35.496756][ T458] dump_stack+0x19/0x20 [ 35.496788][ T458] should_fail_ex+0x3d7/0x530 [ 35.496819][ T458] should_fail+0xf/0x20 [ 35.496847][ T458] should_fail_usercopy+0x1e/0x30 [ 35.496879][ T458] _copy_to_user+0x24/0xa0 [ 35.496901][ T458] simple_read_from_buffer+0xed/0x160 [ 35.496935][ T458] proc_fail_nth_read+0x1aa/0x220 [ 35.496969][ T458] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.497005][ T458] ? bpf_lsm_file_permission+0xd/0x20 [ 35.497036][ T458] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.497070][ T458] vfs_read+0x289/0xcb0 [ 35.497095][ T458] ? __cfi_vfs_read+0x10/0x10 [ 35.497118][ T458] ? __kasan_check_write+0x18/0x20 [ 35.497141][ T458] ? mutex_lock+0x97/0x1d0 [ 35.497166][ T458] ? __cfi_mutex_lock+0x10/0x10 [ 35.497199][ T458] ? __fget_files+0x2c5/0x340 [ 35.497229][ T458] ksys_read+0x145/0x260 [ 35.497253][ T458] ? __cfi_ksys_read+0x10/0x10 [ 35.497279][ T458] ? __kasan_check_read+0x15/0x20 [ 35.497302][ T458] __x64_sys_read+0x7f/0x90 [ 35.497326][ T458] x64_sys_call+0x2638/0x2ee0 [ 35.497348][ T458] do_syscall_64+0x57/0xf0 [ 35.497381][ T458] ? clear_bhb_loop+0x50/0xa0 [ 35.497405][ T458] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.497442][ T458] RIP: 0033:0x7f99cad5d68e [ 35.497462][ T458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.497480][ T458] RSP: 002b:00007f99cbbc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.497505][ T458] RAX: ffffffffffffffda RBX: 00007f99cbbca6c0 RCX: 00007f99cad5d68e [ 35.497522][ T458] RDX: 000000000000000f RSI: 00007f99cbbca0a0 RDI: 0000000000000005 [ 35.497537][ T458] RBP: 00007f99cbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 35.497552][ T458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.497570][ T458] R13: 00007f99cb016038 R14: 00007f99cb015fa0 R15: 00007ffc49e21a08 [ 35.497591][ T458] [ 35.766956][ T310] usb 1-1: USB disconnect, device number 3 [ 35.776617][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 35.776635][ T36] audit: type=1400 audit(1781859381.880:150): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.065862][ T486] fuse: Unknown parameter 'fd00000000000000000000003' [ 36.285728][ T310] usb 3-1: USB disconnect, device number 2 [ 36.298161][ T310] usblp0: removed [ 36.322526][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 36.367914][ T440] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.477764][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 36.488534][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.517813][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.527649][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.537027][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.548024][ T65] usb 2-1: config 0 descriptor?? [ 36.557769][ T440] usb 1-1: Using ep0 maxpacket: 32 [ 36.568524][ T65] hub 2-1:0.0: USB hub found [ 36.577174][ T440] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 36.591012][ T440] usb 1-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 36.600278][ T440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.608421][ T440] usb 1-1: Product: syz [ 36.612710][ T440] usb 1-1: Manufacturer: syz [ 36.617412][ T440] usb 1-1: SerialNumber: syz [ 36.755260][ T65] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 36.837047][ T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.854507][ T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.878392][ T440] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 36.905519][ T440] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.917879][ T440] usb 1-1: USB disconnect, device number 4 [ 36.934629][ T514] fuse: Unknown parameter 'fd00000000000000000000003' [ 36.938896][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.162753][ T65] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 37.181056][ T65] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 37.368514][ T440] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 37.477967][ T46] usb 2-1: USB disconnect, device number 2 [ 37.520525][ T440] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 37.529753][ T440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.538037][ T440] usb 1-1: Product: syz [ 37.542244][ T440] usb 1-1: Manufacturer: syz [ 37.546852][ T440] usb 1-1: SerialNumber: syz [ 37.597782][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.749012][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.760617][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.770509][ T65] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 37.779709][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.788582][ T65] usb 3-1: config 0 descriptor?? [ 37.899141][ T36] audit: type=1400 audit(1781859384.010:151): avc: denied { unmount } for pid=534 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.943855][ T538] fuse: Unknown parameter 'fd00000000000000000000003' [ 37.961097][ T440] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 37.987936][ T540] overlayfs: missing 'lowerdir' [ 38.198835][ T65] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.206315][ T65] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.215998][ T65] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.223501][ T65] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.231162][ T65] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.252176][ T65] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 38.280114][ T562] overlayfs: missing 'lowerdir' [ 38.532013][ T36] audit: type=1400 audit(1781859384.640:152): avc: denied { nlmsg_write } for pid=576 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 38.798870][ T65] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (5), disabling calibration. [ 38.827771][ T65] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 38.847757][ T65] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 38.867877][ T65] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 38.880092][ T36] audit: type=1400 audit(1781859384.990:153): avc: denied { setopt } for pid=584 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.900553][ T65] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0003/input/input4 [ 38.913108][ T36] audit: type=1400 audit(1781859385.020:154): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=465 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.936557][ T65] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0003/input/input5 [ 38.950336][ T36] audit: type=1400 audit(1781859385.020:155): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=465 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.985271][ T65] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0003/input/input6 [ 39.002496][ T36] audit: type=1400 audit(1781859385.020:156): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=465 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.030040][ T36] audit: type=1400 audit(1781859385.020:157): avc: denied { setopt } for pid=584 comm="syz.1.84" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.060659][ T65] playstation 0003:054C:0DF2.0003: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 39.076710][ T65] usb 3-1: USB disconnect, device number 3 [ 39.083590][ T36] audit: type=1400 audit(1781859385.020:158): avc: denied { connect } for pid=584 comm="syz.1.84" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.129855][ T36] audit: type=1400 audit(1781859385.240:159): avc: denied { create } for pid=588 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.777807][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.927759][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 39.934152][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.945129][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.955005][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.964197][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.973141][ T65] usb 3-1: config 0 descriptor?? [ 39.980885][ T65] hub 3-1:0.0: USB hub found [ 40.034157][ T440] usb 1-1: USB disconnect, device number 5 [ 40.040971][ T440] usblp0: removed [ 40.179905][ T65] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 40.581941][ T65] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 40.590974][ T65] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 40.888953][ T46] usb 3-1: USB disconnect, device number 4 [ 40.919925][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 40.919944][ T36] audit: type=1400 audit(1781859387.030:164): avc: denied { create } for pid=642 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.946940][ T36] audit: type=1400 audit(1781859387.030:165): avc: denied { ioctl } for pid=642 comm="syz.0.110" path="socket:[6397]" dev="sockfs" ino=6397 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.971651][ T36] audit: type=1400 audit(1781859387.030:166): avc: denied { connect } for pid=642 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.992137][ T36] audit: type=1400 audit(1781859387.030:167): avc: denied { write } for pid=642 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.246379][ T36] audit: type=1400 audit(1781859387.350:168): avc: denied { listen } for pid=655 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.266076][ T36] audit: type=1400 audit(1781859387.350:169): avc: denied { connect } for pid=655 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.285973][ T36] audit: type=1400 audit(1781859387.350:170): avc: denied { write } for pid=655 comm="syz.1.115" path="socket:[6496]" dev="sockfs" ino=6496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.314670][ T36] audit: type=1400 audit(1781859387.350:171): avc: denied { write } for pid=655 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.374490][ T36] audit: type=1400 audit(1781859387.480:172): avc: denied { read } for pid=658 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.425514][ T36] audit: type=1400 audit(1781859387.530:173): avc: denied { ioctl } for pid=658 comm="syz.1.116" path="socket:[5659]" dev="sockfs" ino=5659 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.471438][ T427] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.607806][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.628891][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.639889][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.649688][ T427] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 41.658822][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.667488][ T427] usb 1-1: config 0 descriptor?? [ 41.758934][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.769939][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.779780][ T46] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 41.788904][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.797759][ T46] usb 3-1: config 0 descriptor?? [ 42.076146][ T427] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 42.086522][ T427] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 42.094223][ T427] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 42.101970][ T427] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 42.109799][ T427] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 42.122919][ T427] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 42.167946][ T682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 42.208520][ T46] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 42.216076][ T46] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 42.223777][ T46] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 42.231622][ T46] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 42.239315][ T46] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 42.250968][ T46] playstation 0003:054C:0DF2.0006: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 42.283453][ T691] overlayfs: missing 'workdir' [ 42.404448][ T46] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -32 [ 42.413871][ T46] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -32 [ 42.423170][ T46] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 42.432005][ T46] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 42.440427][ T46] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -32 [ 42.675601][ T427] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 5: -71 [ 42.685053][ T427] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense calibration info: -71 [ 42.694686][ T427] playstation 0003:054C:0DF2.0005: Failed to get calibration data from DualSense [ 42.703891][ T427] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 42.712202][ T427] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 42.723312][ T427] usb 1-1: USB disconnect, device number 6 [ 42.922759][ T711] overlayfs: missing 'workdir' [ 43.216225][ T735] syzkaller0: entered promiscuous mode [ 43.227801][ T735] syzkaller0: entered allmulticast mode [ 43.314584][ T744] FAULT_INJECTION: forcing a failure. [ 43.314584][ T744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.348031][ T744] CPU: 0 UID: 0 PID: 744 Comm: syz.0.150 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 43.348068][ T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 43.348082][ T744] Call Trace: [ 43.348089][ T744] [ 43.348097][ T744] __dump_stack+0x21/0x30 [ 43.348143][ T744] dump_stack_lvl+0x140/0x1c0 [ 43.348173][ T744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.348204][ T744] ? check_stack_object+0x12b/0x150 [ 43.348229][ T744] dump_stack+0x19/0x20 [ 43.348260][ T744] should_fail_ex+0x3d7/0x530 [ 43.348289][ T744] should_fail+0xf/0x20 [ 43.348315][ T744] should_fail_usercopy+0x1e/0x30 [ 43.348346][ T744] _copy_to_user+0x24/0xa0 [ 43.348366][ T744] simple_read_from_buffer+0xed/0x160 [ 43.348399][ T744] proc_fail_nth_read+0x1aa/0x220 [ 43.348431][ T744] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 43.348464][ T744] ? bpf_lsm_file_permission+0xd/0x20 [ 43.348493][ T744] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 43.348524][ T744] vfs_read+0x289/0xcb0 [ 43.348547][ T744] ? __cfi_mutex_unlock+0x10/0x10 [ 43.348570][ T744] ? __cfi_vfs_read+0x10/0x10 [ 43.348592][ T744] ? __kasan_check_write+0x18/0x20 [ 43.348614][ T744] ? mutex_lock+0x97/0x1d0 [ 43.348636][ T744] ? __cfi_mutex_lock+0x10/0x10 [ 43.348659][ T744] ? __fget_files+0x2c5/0x340 [ 43.348687][ T744] ksys_read+0x145/0x260 [ 43.348709][ T744] ? __cfi_ksys_read+0x10/0x10 [ 43.348732][ T744] ? __kasan_check_read+0x15/0x20 [ 43.348754][ T744] __x64_sys_read+0x7f/0x90 [ 43.348777][ T744] x64_sys_call+0x2638/0x2ee0 [ 43.348799][ T744] do_syscall_64+0x57/0xf0 [ 43.348830][ T744] ? clear_bhb_loop+0x50/0xa0 [ 43.348852][ T744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.348886][ T744] RIP: 0033:0x7f99cad5d68e [ 43.348905][ T744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.348923][ T744] RSP: 002b:00007f99cbbc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.348948][ T744] RAX: ffffffffffffffda RBX: 00007f99cbbca6c0 RCX: 00007f99cad5d68e [ 43.348965][ T744] RDX: 000000000000000f RSI: 00007f99cbbca0a0 RDI: 0000000000000004 [ 43.348978][ T744] RBP: 00007f99cbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 43.348992][ T744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.349005][ T744] R13: 00007f99cb016038 R14: 00007f99cb015fa0 R15: 00007ffc49e21a08 [ 43.349024][ T744] [ 43.710731][ T760] fuse: Bad value for 'fd' [ 44.161108][ T769] capability: warning: `syz.1.159' uses deprecated v2 capabilities in a way that may be insecure [ 44.350267][ T427] usb 3-1: USB disconnect, device number 5 [ 44.433838][ T780] FAULT_INJECTION: forcing a failure. [ 44.433838][ T780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.447155][ T780] CPU: 0 UID: 0 PID: 780 Comm: syz.2.164 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 44.447179][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 44.447190][ T780] Call Trace: [ 44.447195][ T780] [ 44.447202][ T780] __dump_stack+0x21/0x30 [ 44.447230][ T780] dump_stack_lvl+0x140/0x1c0 [ 44.447253][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.447277][ T780] ? check_stack_object+0x106/0x150 [ 44.447294][ T780] dump_stack+0x19/0x20 [ 44.447316][ T780] should_fail_ex+0x3d7/0x530 [ 44.447355][ T780] should_fail+0xf/0x20 [ 44.447383][ T780] should_fail_usercopy+0x1e/0x30 [ 44.447413][ T780] _copy_from_user+0x20/0xa0 [ 44.447428][ T780] __sys_bind+0x1f4/0x430 [ 44.447448][ T780] ? __cfi___sys_bind+0x10/0x10 [ 44.447466][ T780] ? __kasan_check_read+0x15/0x20 [ 44.447483][ T780] __x64_sys_bind+0x7e/0x90 [ 44.447500][ T780] x64_sys_call+0x1ffd/0x2ee0 [ 44.447515][ T780] do_syscall_64+0x57/0xf0 [ 44.447537][ T780] ? clear_bhb_loop+0x50/0xa0 [ 44.447554][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.447579][ T780] RIP: 0033:0x7fe20419ce59 [ 44.447592][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.447605][ T780] RSP: 002b:00007fe204fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 44.447622][ T780] RAX: ffffffffffffffda RBX: 00007fe204415fa0 RCX: 00007fe20419ce59 [ 44.447634][ T780] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 44.447644][ T780] RBP: 00007fe204fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 44.447654][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.447664][ T780] R13: 00007fe204416038 R14: 00007fe204415fa0 R15: 00007fff57ed6328 [ 44.447677][ T780] [ 44.765904][ T791] FAULT_INJECTION: forcing a failure. [ 44.765904][ T791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.779175][ T791] CPU: 1 UID: 0 PID: 791 Comm: syz.0.169 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 44.779213][ T791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 44.779223][ T791] Call Trace: [ 44.779229][ T791] [ 44.779235][ T791] __dump_stack+0x21/0x30 [ 44.779268][ T791] dump_stack_lvl+0x140/0x1c0 [ 44.779291][ T791] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.779315][ T791] ? __kasan_check_write+0x18/0x20 [ 44.779332][ T791] ? kvm_arch_vcpu_load+0x683/0x8f0 [ 44.779357][ T791] dump_stack+0x19/0x20 [ 44.779379][ T791] should_fail_ex+0x3d7/0x530 [ 44.779400][ T791] should_fail+0xf/0x20 [ 44.779419][ T791] should_fail_usercopy+0x1e/0x30 [ 44.779443][ T791] _copy_from_user+0x20/0xa0 [ 44.779457][ T791] kvm_arch_vcpu_ioctl+0x441/0x2d90 [ 44.779473][ T791] ? avc_has_perm+0x155/0x240 [ 44.779492][ T791] ? __cfi_avc_has_perm+0x10/0x10 [ 44.779509][ T791] ? kasan_save_alloc_info+0x40/0x50 [ 44.779524][ T791] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 44.779542][ T791] ? selinux_file_open+0x46c/0x630 [ 44.779558][ T791] ? __cfi_selinux_file_open+0x10/0x10 [ 44.779577][ T791] ? is_bpf_text_address+0x17b/0x1a0 [ 44.779602][ T791] ? kernel_text_address+0xa9/0xe0 [ 44.779625][ T791] ? __kernel_text_address+0x11/0x40 [ 44.779647][ T791] ? __asan_set_shadow_00+0x12/0x20 [ 44.779671][ T791] ? do_vfs_ioctl+0x182d/0x2010 [ 44.779691][ T791] ? arch_stack_walk+0x10a/0x170 [ 44.779707][ T791] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 44.779728][ T791] ? _parse_integer_limit+0x195/0x1e0 [ 44.779748][ T791] ? _parse_integer+0x2e/0x40 [ 44.779766][ T791] ? kstrtoull+0x13b/0x1e0 [ 44.779784][ T791] ? kstrtouint+0x78/0xf0 [ 44.779802][ T791] ? ioctl_has_perm+0x1bc/0x500 [ 44.779817][ T791] ? __asan_memcpy+0x5a/0x80 [ 44.779833][ T791] ? ioctl_has_perm+0x408/0x500 [ 44.779847][ T791] ? has_cap_mac_admin+0xd0/0xd0 [ 44.779863][ T791] ? __kasan_check_write+0x18/0x20 [ 44.779878][ T791] ? mutex_lock_killable+0x97/0x1d0 [ 44.779896][ T791] ? __cfi_mutex_lock_killable+0x10/0x10 [ 44.779913][ T791] ? proc_fail_nth_write+0x184/0x220 [ 44.779943][ T791] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.779967][ T791] kvm_vcpu_ioctl+0x7da/0x1000 [ 44.779985][ T791] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 44.780001][ T791] ? __cfi_vfs_write+0x10/0x10 [ 44.780017][ T791] ? __kasan_check_write+0x18/0x20 [ 44.780032][ T791] ? mutex_unlock+0x90/0x240 [ 44.780048][ T791] ? __cfi_mutex_unlock+0x10/0x10 [ 44.780064][ T791] ? __fget_files+0x2c5/0x340 [ 44.780084][ T791] ? __fget_files+0x2c5/0x340 [ 44.780103][ T791] ? bpf_lsm_file_ioctl+0xd/0x20 [ 44.780124][ T791] ? security_file_ioctl+0x3e/0x110 [ 44.780148][ T791] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 44.780164][ T791] __se_sys_ioctl+0x132/0x1b0 [ 44.780183][ T791] __x64_sys_ioctl+0x7f/0xa0 [ 44.780202][ T791] x64_sys_call+0x1878/0x2ee0 [ 44.780218][ T791] do_syscall_64+0x57/0xf0 [ 44.780240][ T791] ? clear_bhb_loop+0x50/0xa0 [ 44.780256][ T791] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.780282][ T791] RIP: 0033:0x7f99cad9ce59 [ 44.780302][ T791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.780315][ T791] RSP: 002b:00007f99cbbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.780345][ T791] RAX: ffffffffffffffda RBX: 00007f99cb015fa0 RCX: 00007f99cad9ce59 [ 44.780357][ T791] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 44.780368][ T791] RBP: 00007f99cbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 44.780378][ T791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.780387][ T791] R13: 00007f99cb016038 R14: 00007f99cb015fa0 R15: 00007ffc49e21a08 [ 44.780420][ T791] [ 45.467911][ T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.620132][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.631102][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.642443][ T65] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 45.651552][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.660508][ T65] usb 1-1: config 0 descriptor?? [ 45.917785][ T427] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.071889][ T65] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.071962][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.079632][ T65] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.090633][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.098910][ T65] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.107842][ T427] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 46.115780][ T65] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.124142][ T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.132081][ T65] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.142939][ T427] usb 3-1: config 0 descriptor?? [ 46.154983][ T65] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 46.272246][ T65] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 9: -32 [ 46.281700][ T65] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -32 [ 46.290985][ T65] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 46.299746][ T65] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 46.312651][ T65] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -32 [ 46.465111][ T823] overlayfs: failed to clone upperpath [ 46.555248][ T427] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 46.562883][ T427] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 46.570538][ T427] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 46.578012][ T427] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 46.585429][ T427] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 46.593602][ T427] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 46.954122][ T427] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 64 got 41 [ 46.963830][ T427] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -22 [ 46.973232][ T427] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense [ 46.982162][ T427] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 46.990420][ T427] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 47.159984][ T427] usb 3-1: USB disconnect, device number 6 [ 47.190228][ T840] /dev/loop0: Can't lookup blockdev [ 47.222260][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 47.222280][ T36] audit: type=1400 audit(1781859393.330:191): avc: denied { setattr } for pid=844 comm="syz.3.191" name="CAN_BCM" dev="sockfs" ino=6128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.285167][ T853] fuse: Bad value for 'group_id' [ 47.290318][ T853] fuse: Bad value for 'group_id' [ 47.423259][ T866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.200'. [ 47.457069][ T872] overlayfs: failed to clone upperpath [ 47.486037][ T876] fuse: Bad value for 'group_id' [ 47.491070][ T876] fuse: Bad value for 'group_id' [ 47.644209][ T36] audit: type=1400 audit(1781859393.750:192): avc: denied { ioctl } for pid=885 comm="syz.1.209" path="socket:[7190]" dev="sockfs" ino=7190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.675148][ T36] audit: type=1400 audit(1781859393.760:193): avc: denied { bind } for pid=885 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.707038][ T36] audit: type=1400 audit(1781859393.810:194): avc: denied { read } for pid=889 comm="syz.2.211" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.707880][ T888] process 'syz.1.210' launched './file0' with NULL argv: empty string added [ 47.728621][ T36] audit: type=1400 audit(1781859393.810:195): avc: denied { open } for pid=889 comm="syz.2.211" path="net:[4026532492]" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.759989][ T890] FAULT_INJECTION: forcing a failure. [ 47.759989][ T890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.766457][ T36] audit: type=1400 audit(1781859393.810:196): avc: denied { execute } for pid=887 comm="syz.1.210" name="file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.781672][ T890] CPU: 1 UID: 0 PID: 890 Comm: syz.2.211 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 47.781775][ T890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 47.781807][ T890] Call Trace: [ 47.781827][ T890] [ 47.781848][ T890] __dump_stack+0x21/0x30 [ 47.781950][ T890] dump_stack_lvl+0x140/0x1c0 [ 47.782032][ T890] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.782115][ T890] ? _parse_integer+0x2e/0x40 [ 47.782168][ T890] ? kstrtoull+0x13b/0x1e0 [ 47.782241][ T890] dump_stack+0x19/0x20 [ 47.782318][ T890] should_fail_ex+0x3d7/0x530 [ 47.782399][ T890] should_fail+0xf/0x20 [ 47.782471][ T890] should_fail_usercopy+0x1e/0x30 [ 47.782556][ T890] _copy_from_user+0x20/0xa0 [ 47.782608][ T890] ___sys_sendmsg+0x1c7/0x370 [ 47.782699][ T890] ? __sys_sendmsg+0x2a0/0x2a0 [ 47.782779][ T890] ? proc_fail_nth_write+0x184/0x220 [ 47.782861][ T890] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 47.782983][ T890] __x64_sys_sendmsg+0x1fb/0x2d0 [ 47.783068][ T890] ? fput+0x1a4/0x240 [ 47.783154][ T890] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 47.783227][ T890] ? ksys_write+0x1f3/0x260 [ 47.783291][ T890] ? __kasan_check_read+0x15/0x20 [ 47.783352][ T890] x64_sys_call+0x2a4c/0x2ee0 [ 47.783412][ T890] do_syscall_64+0x57/0xf0 [ 47.783487][ T890] ? clear_bhb_loop+0x50/0xa0 [ 47.783548][ T890] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.783633][ T890] RIP: 0033:0x7fe20419ce59 [ 47.783692][ T890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.783735][ T890] RSP: 002b:00007fe204fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.783798][ T890] RAX: ffffffffffffffda RBX: 00007fe204415fa0 RCX: 00007fe20419ce59 [ 47.783840][ T890] RDX: 0000000000000880 RSI: 0000200000000140 RDI: 0000000000000004 [ 47.783880][ T890] RBP: 00007fe204fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 47.783913][ T890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.783953][ T890] R13: 00007fe204416038 R14: 00007fe204415fa0 R15: 00007fff57ed6328 [ 47.783998][ T890] [ 47.939289][ T894] vlan0: entered promiscuous mode [ 47.957987][ T36] audit: type=1400 audit(1781859393.850:197): avc: denied { execute_no_trans } for pid=887 comm="syz.1.210" path="/95/file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.001769][ T894] vlan0: left promiscuous mode [ 48.049225][ T897] fuse: Bad value for 'group_id' [ 48.054224][ T897] fuse: Bad value for 'group_id' [ 48.110124][ T899] overlayfs: failed to clone upperpath [ 48.164390][ T907] 9pnet_fd: Insufficient options for proto=fd [ 48.247149][ T65] usb 1-1: USB disconnect, device number 7 [ 48.338363][ T911] FAULT_INJECTION: forcing a failure. [ 48.338363][ T911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.351584][ T911] CPU: 0 UID: 0 PID: 911 Comm: syz.0.221 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 48.351619][ T911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 48.351634][ T911] Call Trace: [ 48.351641][ T911] [ 48.351656][ T911] __dump_stack+0x21/0x30 [ 48.351686][ T911] dump_stack_lvl+0x140/0x1c0 [ 48.351709][ T911] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.351739][ T911] ? check_stack_object+0x12b/0x150 [ 48.351757][ T911] dump_stack+0x19/0x20 [ 48.351779][ T911] should_fail_ex+0x3d7/0x530 [ 48.351801][ T911] should_fail+0xf/0x20 [ 48.351820][ T911] should_fail_usercopy+0x1e/0x30 [ 48.351842][ T911] _copy_to_user+0x24/0xa0 [ 48.351856][ T911] simple_read_from_buffer+0xed/0x160 [ 48.351879][ T911] proc_fail_nth_read+0x1aa/0x220 [ 48.351903][ T911] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.351927][ T911] ? bpf_lsm_file_permission+0xd/0x20 [ 48.351948][ T911] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.351971][ T911] vfs_read+0x289/0xcb0 [ 48.351987][ T911] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.352003][ T911] ? __cfi_vfs_read+0x10/0x10 [ 48.352018][ T911] ? __kasan_check_write+0x18/0x20 [ 48.352035][ T911] ? mutex_lock+0x97/0x1d0 [ 48.352051][ T911] ? __cfi_mutex_lock+0x10/0x10 [ 48.352067][ T911] ? __fget_files+0x2c5/0x340 [ 48.352087][ T911] ksys_read+0x145/0x260 [ 48.352103][ T911] ? xfd_validate_state+0x68/0x140 [ 48.352126][ T911] ? __cfi_ksys_read+0x10/0x10 [ 48.352143][ T911] ? __kasan_check_write+0x18/0x20 [ 48.352158][ T911] ? fpregs_restore_userregs+0x11c/0x260 [ 48.352178][ T911] __x64_sys_read+0x7f/0x90 [ 48.352195][ T911] x64_sys_call+0x2638/0x2ee0 [ 48.352210][ T911] do_syscall_64+0x57/0xf0 [ 48.352234][ T911] ? clear_bhb_loop+0x50/0xa0 [ 48.352250][ T911] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.352276][ T911] RIP: 0033:0x7f99cad5d68e [ 48.352288][ T911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.352301][ T911] RSP: 002b:00007f99cbbc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.352318][ T911] RAX: ffffffffffffffda RBX: 00007f99cbbca6c0 RCX: 00007f99cad5d68e [ 48.352330][ T911] RDX: 000000000000000f RSI: 00007f99cbbca0a0 RDI: 0000000000000005 [ 48.352340][ T911] RBP: 00007f99cbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 48.352350][ T911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.352359][ T911] R13: 00007f99cb016038 R14: 00007f99cb015fa0 R15: 00007ffc49e21a08 [ 48.352373][ T911] [ 48.407994][ T36] audit: type=1400 audit(1781859394.470:198): avc: denied { read } for pid=912 comm="syz.0.222" path="socket:[7243]" dev="sockfs" ino=7243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.687081][ T920] overlayfs: failed to clone upperpath [ 48.784034][ T36] audit: type=1400 audit(1781859394.890:199): avc: denied { setopt } for pid=930 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.961834][ T36] audit: type=1400 audit(1781859395.070:200): avc: denied { unlink } for pid=942 comm="syz.0.234" name="#3" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.881426][ T964] tipc: Enabling of bearer rejected, failed to enable media [ 49.907139][ T966] 9pnet_fd: Insufficient options for proto=fd [ 50.167822][ T315] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.318832][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.329809][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.339627][ T315] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 50.348728][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.357360][ T315] usb 1-1: config 0 descriptor?? [ 50.652412][ T993] overlayfs: failed to clone upperpath [ 50.766697][ T315] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 50.774258][ T315] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 50.781748][ T315] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 50.789221][ T315] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 50.796632][ T315] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 50.804852][ T315] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 50.905448][ T1000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.952537][ T1004] syzkaller0: entered promiscuous mode [ 50.958304][ T1004] syzkaller0: entered allmulticast mode [ 50.965582][ T315] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -32 [ 50.975253][ T315] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -32 [ 50.984617][ T315] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 50.993457][ T315] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 51.001747][ T315] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -32 [ 51.068826][ T1011] overlayfs: failed to clone upperpath [ 51.099430][ T1016] overlayfs: failed to clone upperpath [ 51.126303][ T1020] cgroup: Unknown subsys name 'smackfshat' [ 51.133913][ T1020] fuse: Unknown parameter '' [ 51.180254][ T1024] overlayfs: failed to clone upperpath [ 52.783749][ T1050] FAULT_INJECTION: forcing a failure. [ 52.783749][ T1050] name failslab, interval 1, probability 0, space 0, times 0 [ 52.796528][ T1050] CPU: 1 UID: 0 PID: 1050 Comm: syz.2.279 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 52.796564][ T1050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.796584][ T1050] Call Trace: [ 52.796590][ T1050] [ 52.796597][ T1050] __dump_stack+0x21/0x30 [ 52.796625][ T1050] dump_stack_lvl+0x140/0x1c0 [ 52.796649][ T1050] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.796673][ T1050] dump_stack+0x19/0x20 [ 52.796695][ T1050] should_fail_ex+0x3d7/0x530 [ 52.796718][ T1050] should_failslab+0xac/0x100 [ 52.796738][ T1050] __kmalloc_node_noprof+0x6c/0x4f0 [ 52.796756][ T1050] ? __kvmalloc_node_noprof+0x128/0x300 [ 52.796771][ T1050] ? unwind_get_return_address+0x51/0x90 [ 52.796793][ T1050] __kvmalloc_node_noprof+0x128/0x300 [ 52.796808][ T1050] ? __kasan_check_write+0x18/0x20 [ 52.796823][ T1050] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 52.796838][ T1050] ? _parse_integer_limit+0x195/0x1e0 [ 52.796859][ T1050] seq_read_iter+0x21f/0xfd0 [ 52.796879][ T1050] ? kstrtoull+0x13b/0x1e0 [ 52.796905][ T1050] seq_read+0x368/0x490 [ 52.796926][ T1050] ? __cfi_seq_read+0x10/0x10 [ 52.796971][ T1050] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.796995][ T1050] ? bpf_lsm_file_permission+0xd/0x20 [ 52.797017][ T1050] ? __cfi_seq_read+0x10/0x10 [ 52.797036][ T1050] vfs_read+0x289/0xcb0 [ 52.797053][ T1050] ? __cfi_vfs_read+0x10/0x10 [ 52.797068][ T1050] ? __kasan_check_write+0x18/0x20 [ 52.797084][ T1050] ? mutex_lock+0x97/0x1d0 [ 52.797101][ T1050] ? __cfi_mutex_lock+0x10/0x10 [ 52.797116][ T1050] ? __fget_files+0x2c5/0x340 [ 52.797137][ T1050] ksys_read+0x145/0x260 [ 52.797153][ T1050] ? __cfi_ksys_read+0x10/0x10 [ 52.797170][ T1050] ? __kasan_check_read+0x15/0x20 [ 52.797185][ T1050] __x64_sys_read+0x7f/0x90 [ 52.797202][ T1050] x64_sys_call+0x2638/0x2ee0 [ 52.797217][ T1050] do_syscall_64+0x57/0xf0 [ 52.797239][ T1050] ? clear_bhb_loop+0x50/0xa0 [ 52.797256][ T1050] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.797304][ T1050] RIP: 0033:0x7fe20419ce59 [ 52.797323][ T1050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.797340][ T1050] RSP: 002b:00007fe204fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.797366][ T1050] RAX: ffffffffffffffda RBX: 00007fe204415fa0 RCX: 00007fe20419ce59 [ 52.797378][ T1050] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000004 [ 52.797389][ T1050] RBP: 00007fe204fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 52.797399][ T1050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.797408][ T1050] R13: 00007fe204416038 R14: 00007fe204415fa0 R15: 00007fff57ed6328 [ 52.797422][ T1050] [ 52.980105][ T65] usb 1-1: USB disconnect, device number 8 [ 53.082807][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 53.082827][ T36] audit: type=1400 audit(1781859399.190:214): avc: denied { read append } for pid=1052 comm="syz.0.280" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.112289][ T36] audit: type=1400 audit(1781859399.190:215): avc: denied { open } for pid=1052 comm="syz.0.280" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.149953][ T36] audit: type=1400 audit(1781859399.200:216): avc: denied { ioctl } for pid=1052 comm="syz.0.280" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.175322][ T36] audit: type=1400 audit(1781859399.200:217): avc: denied { set_context_mgr } for pid=1052 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.195062][ T36] audit: type=1400 audit(1781859399.240:218): avc: denied { map } for pid=1052 comm="syz.0.280" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.237444][ T36] audit: type=1400 audit(1781859399.340:219): avc: denied { mounton } for pid=1052 comm="syz.0.280" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 53.267564][ T36] audit: type=1400 audit(1781859399.370:220): avc: denied { call } for pid=1052 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.296053][ T36] audit: type=1400 audit(1781859399.370:221): avc: denied { transfer } for pid=1052 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.379744][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 53.538893][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.550190][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.560313][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 53.569865][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.578992][ T10] usb 3-1: config 0 descriptor?? [ 53.627793][ T440] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 53.750121][ T36] audit: type=1400 audit(1781859399.860:222): avc: denied { getopt } for pid=1111 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.790849][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.807793][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.827903][ T440] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 53.837003][ T440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.846432][ T440] usb 1-1: config 0 descriptor?? [ 53.856195][ T36] audit: type=1400 audit(1781859399.960:223): avc: denied { bind } for pid=1111 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.986420][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 53.992482][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 54.001311][ T10] usb 3-1: USB disconnect, device number 7 [ 54.290589][ T440] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 54.298145][ T440] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 54.305580][ T440] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 54.313027][ T440] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 54.320504][ T440] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 54.328714][ T440] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 54.502857][ T440] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 9: -32 [ 54.527806][ T440] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -32 [ 54.545540][ T440] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 54.587738][ T440] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 54.599050][ T440] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -32 [ 55.271706][ T1159] fuse: Bad value for 'user_id' [ 55.276766][ T1159] fuse: Bad value for 'user_id' [ 55.380716][ T1169] syzkaller0: entered promiscuous mode [ 55.386254][ T1169] syzkaller0: entered allmulticast mode [ 55.441736][ T1171] FAULT_INJECTION: forcing a failure. [ 55.441736][ T1171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.454942][ T1171] CPU: 0 UID: 0 PID: 1171 Comm: syz.2.326 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 55.454966][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 55.454976][ T1171] Call Trace: [ 55.454982][ T1171] [ 55.454988][ T1171] __dump_stack+0x21/0x30 [ 55.455016][ T1171] dump_stack_lvl+0x140/0x1c0 [ 55.455039][ T1171] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.455066][ T1171] ? check_stack_object+0x12b/0x150 [ 55.455084][ T1171] dump_stack+0x19/0x20 [ 55.455105][ T1171] should_fail_ex+0x3d7/0x530 [ 55.455127][ T1171] should_fail+0xf/0x20 [ 55.455146][ T1171] should_fail_usercopy+0x1e/0x30 [ 55.455167][ T1171] _copy_to_user+0x24/0xa0 [ 55.455182][ T1171] simple_read_from_buffer+0xed/0x160 [ 55.455205][ T1171] proc_fail_nth_read+0x1aa/0x220 [ 55.455229][ T1171] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.455252][ T1171] ? bpf_lsm_file_permission+0xd/0x20 [ 55.455273][ T1171] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.455296][ T1171] vfs_read+0x289/0xcb0 [ 55.455312][ T1171] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 55.455328][ T1171] ? __cfi_vfs_read+0x10/0x10 [ 55.455343][ T1171] ? __kasan_check_write+0x18/0x20 [ 55.455359][ T1171] ? mutex_lock+0x97/0x1d0 [ 55.455376][ T1171] ? __cfi_mutex_lock+0x10/0x10 [ 55.455392][ T1171] ? __fget_files+0x2c5/0x340 [ 55.455412][ T1171] ksys_read+0x145/0x260 [ 55.455429][ T1171] ? __cfi_ksys_read+0x10/0x10 [ 55.455445][ T1171] ? __kasan_check_read+0x15/0x20 [ 55.455461][ T1171] __x64_sys_read+0x7f/0x90 [ 55.455478][ T1171] x64_sys_call+0x2638/0x2ee0 [ 55.455493][ T1171] do_syscall_64+0x57/0xf0 [ 55.455515][ T1171] ? clear_bhb_loop+0x50/0xa0 [ 55.455531][ T1171] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.455562][ T1171] RIP: 0033:0x7fe20415d68e [ 55.455575][ T1171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.455588][ T1171] RSP: 002b:00007fe204fbbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.455605][ T1171] RAX: ffffffffffffffda RBX: 00007fe204fbc6c0 RCX: 00007fe20415d68e [ 55.455617][ T1171] RDX: 000000000000000f RSI: 00007fe204fbc0a0 RDI: 0000000000000004 [ 55.455627][ T1171] RBP: 00007fe204fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 55.455637][ T1171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.455646][ T1171] R13: 00007fe204416038 R14: 00007fe204415fa0 R15: 00007fff57ed6328 [ 55.455660][ T1171] [ 55.711479][ T1178] fuse: Bad value for 'user_id' [ 55.716442][ T1178] fuse: Bad value for 'user_id' [ 55.984860][ T1187] syz.3.332 uses obsolete (PF_INET,SOCK_PACKET) [ 55.992169][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 56.007767][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 56.235492][ T1200] fuse: Bad value for 'user_id' [ 56.240518][ T1200] fuse: Bad value for 'user_id' [ 56.403038][ T440] usb 1-1: USB disconnect, device number 9 [ 56.630640][ T1220] fuse: Bad value for 'fd' [ 57.381451][ T1250] fuse: Bad value for 'fd' [ 57.594345][ T440] kernel write not supported for file /ppp (pid: 440 comm: kworker/0:3) [ 57.868026][ T440] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 57.997777][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 58.018881][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.030182][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.040137][ T440] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 58.047376][ T1273] fuse: Bad value for 'fd' [ 58.049811][ T440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.062393][ T440] usb 1-1: config 0 descriptor?? [ 58.147857][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 58.154799][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 64, changing to 7 [ 58.168974][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 58.187834][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 58.197264][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.205403][ T10] usb 3-1: Product: 尡憚瞕갿᱊룫髖咧≄曦뭡趪ሏ狓ﱉsට浽᯹췆᧊㉆⌯諔ଗ㋂㦝ၒ횚眭㉇넡찲 [ 58.218999][ T10] usb 3-1: Manufacturer: К [ 58.223559][ T10] usb 3-1: SerialNumber: 閄烬⸳䂡쵛㕽훳搶ꕭዓ덴즟ᒊ㼰簒ᅗഫ謿ꁱ튌蒣缜㚆☶䷪韜촃᝿铴얛좬帹䎁뀹㳊閦͌钬퍞獷 [ 58.373918][ T1290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 58.383517][ T1290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.372'. [ 58.449056][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 58.470826][ T440] usbhid 1-1:0.0: can't add hid device: -71 [ 58.476893][ T440] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 58.486149][ T10] usb 3-1: USB disconnect, device number 8 [ 58.492357][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 58.492375][ T36] audit: type=1400 audit(1781859404.600:231): avc: denied { setopt } for pid=1293 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.498466][ T440] usb 1-1: USB disconnect, device number 10 [ 58.527316][ T1294] overlayfs: failed to clone lowerpath [ 58.541802][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.674755][ T36] audit: type=1400 audit(1781859404.780:232): avc: denied { create } for pid=1304 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 58.694295][ T1305] sit0: entered promiscuous mode [ 58.708965][ T1305] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 58.716641][ T1305] netlink: 1 bytes leftover after parsing attributes in process `syz.3.378'. [ 58.788835][ T36] audit: type=1400 audit(1781859404.900:233): avc: denied { create } for pid=1311 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.665895][ T1345] incfs: Error accessing: ./file0. [ 59.671348][ T1345] incfs: mount failed -20 [ 59.946263][ T1354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 60.056517][ T36] audit: type=1400 audit(1781859406.160:234): avc: denied { mount } for pid=1358 comm="syz.1.395" name="/" dev="configfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.104266][ T36] audit: type=1400 audit(1781859406.210:235): avc: denied { nlmsg_read } for pid=1364 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.147760][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 60.186600][ T1375] overlayfs: failed to resolve './cgroup': -2 [ 60.287795][ T10] usb 3-1: device descriptor read/64, error -71 [ 60.432164][ T1390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1390 comm=syz.0.407 [ 60.527822][ T10] usb 3-1: device descriptor read/64, error -71 [ 60.589716][ T36] audit: type=1400 audit(1781859406.700:236): avc: denied { name_bind } for pid=1408 comm="syz.1.416" src=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 60.639277][ T1414] Zero length message leads to an empty skb [ 60.767778][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 60.897778][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.137773][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.249288][ T10] usb usb3-port1: attempt power cycle [ 61.587800][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 61.608812][ T10] usb 3-1: device descriptor read/8, error -71 [ 61.617769][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 61.738903][ T10] usb 3-1: device descriptor read/8, error -71 [ 61.769216][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 61.779324][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 61.790188][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 61.806136][ T9] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 61.817067][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 61.829557][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 61.836810][ T1452] overlayfs: failed to clone upperpath [ 61.839635][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.852587][ T9] usb 1-1: Product: syz [ 61.856791][ T9] usb 1-1: Manufacturer: syz [ 61.861782][ T9] usb 1-1: SerialNumber: syz [ 61.869047][ T1449] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.876425][ T1449] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.975806][ T36] audit: type=1400 audit(1781859408.080:237): avc: denied { read } for pid=1455 comm="syz.3.434" path="socket:[10255]" dev="sockfs" ino=10255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.977882][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 62.034179][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.136725][ T36] audit: type=1400 audit(1781859408.240:238): avc: denied { setopt } for pid=1468 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.171720][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.296381][ T10] usb usb3-port1: unable to enumerate USB device [ 62.315201][ T9] usb 1-1: USB disconnect, device number 11 [ 62.336986][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.835336][ T36] audit: type=1400 audit(1781859408.940:239): avc: denied { read } for pid=1499 comm="syz.0.449" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.900708][ T36] audit: type=1400 audit(1781859409.010:240): avc: denied { write } for pid=1505 comm="syz.2.452" path="socket:[9732]" dev="sockfs" ino=9732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.297794][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 63.450276][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 63.459542][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.467543][ T9] usb 1-1: Product: syz [ 63.471804][ T9] usb 1-1: Manufacturer: syz [ 63.476451][ T9] usb 1-1: SerialNumber: syz [ 63.687993][ T1500] FAULT_INJECTION: forcing a failure. [ 63.687993][ T1500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.701317][ T1500] CPU: 1 UID: 0 PID: 1500 Comm: syz.0.449 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 63.701356][ T1500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 63.701371][ T1500] Call Trace: [ 63.701379][ T1500] [ 63.701398][ T1500] __dump_stack+0x21/0x30 [ 63.701438][ T1500] dump_stack_lvl+0x140/0x1c0 [ 63.701471][ T1500] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.701507][ T1500] dump_stack+0x19/0x20 [ 63.701540][ T1500] should_fail_ex+0x3d7/0x530 [ 63.701570][ T1500] should_fail+0xf/0x20 [ 63.701597][ T1500] should_fail_usercopy+0x1e/0x30 [ 63.701628][ T1500] _copy_from_user+0x20/0xa0 [ 63.701650][ T1500] raw_ioctl+0xb5e/0x37e0 [ 63.701673][ T1500] ? proc_fail_nth_write+0x184/0x220 [ 63.701708][ T1500] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 63.701742][ T1500] ? __cfi_raw_ioctl+0x10/0x10 [ 63.701764][ T1500] ? selinux_file_ioctl+0x732/0x1480 [ 63.701785][ T1500] ? vfs_write+0x9a4/0xf90 [ 63.701837][ T1500] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 63.701864][ T1500] ? __fget_files+0x2c5/0x340 [ 63.701892][ T1500] ? bpf_lsm_file_ioctl+0xd/0x20 [ 63.701923][ T1500] ? security_file_ioctl+0x3e/0x110 [ 63.701958][ T1500] ? __cfi_raw_ioctl+0x10/0x10 [ 63.701980][ T1500] __se_sys_ioctl+0x132/0x1b0 [ 63.702008][ T1500] __x64_sys_ioctl+0x7f/0xa0 [ 63.702036][ T1500] x64_sys_call+0x1878/0x2ee0 [ 63.702058][ T1500] do_syscall_64+0x57/0xf0 [ 63.702090][ T1500] ? clear_bhb_loop+0x50/0xa0 [ 63.702114][ T1500] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.702150][ T1500] RIP: 0033:0x7f99cad9ce59 [ 63.702170][ T1500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.702191][ T1500] RSP: 002b:00007f99cbbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.702216][ T1500] RAX: ffffffffffffffda RBX: 00007f99cb015fa0 RCX: 00007f99cad9ce59 [ 63.702234][ T1500] RDX: 0000200000000100 RSI: 0000000041015500 RDI: 0000000000000003 [ 63.702250][ T1500] RBP: 00007f99cbbca090 R08: 0000000000000000 R09: 0000000000000000 [ 63.702264][ T1500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.702279][ T1500] R13: 00007f99cb016038 R14: 00007f99cb015fa0 R15: 00007ffc49e21a08 [ 63.702303][ T1500] [ 63.876700][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 63.939699][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 63.957046][ T9] usb 1-1: USB disconnect, device number 12 [ 64.050131][ T1541] kvm: pic: non byte read [ 64.054619][ T1541] kvm: pic: non byte read [ 64.061364][ T1541] kvm: pic: level sensitive irq not supported [ 64.717495][ T1549] rust_binder: Write failure EFAULT in pid:162 [ 64.845434][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 64.845455][ T36] audit: type=1400 audit(1781859410.950:242): avc: denied { ioctl } for pid=1566 comm="syz.0.477" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10485 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.219970][ T670] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 65.240443][ T36] audit: type=1400 audit(1781859411.350:243): avc: denied { name_bind } for pid=1580 comm="syz.1.483" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.261545][ T315] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 65.378926][ T670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.389960][ T670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.399867][ T670] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 65.409134][ T670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.418133][ T670] usb 1-1: config 0 descriptor?? [ 65.427781][ T315] usb 3-1: Using ep0 maxpacket: 16 [ 65.434000][ T315] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.445174][ T315] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.455160][ T315] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.468168][ T315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 65.474879][ T315] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 65.484010][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.493003][ T315] usb 3-1: config 0 descriptor?? [ 65.808201][ T36] audit: type=1400 audit(1781859411.920:244): avc: denied { write } for pid=1585 comm="syz.1.485" path="socket:[10512]" dev="sockfs" ino=10512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.858139][ T670] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 65.866338][ T670] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 65.874261][ T670] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 65.882828][ T670] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 65.890557][ T670] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 65.907388][ T315] hid-multitouch 0003:1FD2:6007.000C: ignoring exceeding usage max [ 65.936925][ T670] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 65.957928][ T315] hid-multitouch 0003:1FD2:6007.000C: hidraw1: USB HID v0.81 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 66.013021][ T36] audit: type=1400 audit(1781859412.120:245): avc: denied { bind } for pid=1603 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.116178][ T36] audit: type=1400 audit(1781859412.220:246): avc: denied { create } for pid=1570 comm="syz.2.479" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.129367][ T1613] 6: renamed from veth0_vlan (while UP) [ 66.143815][ T1571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.155176][ T36] audit: type=1400 audit(1781859412.250:247): avc: denied { read write } for pid=1570 comm="syz.2.479" name="file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.161165][ T1571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.180129][ T36] audit: type=1400 audit(1781859412.250:248): avc: denied { open } for pid=1570 comm="syz.2.479" path="/55/file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.203042][ T315] usb 3-1: USB disconnect, device number 13 [ 66.330284][ T1625] tipc: Started in network mode [ 66.335237][ T1625] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 66.344313][ T1625] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 66.352960][ T1625] tipc: Enabled bearer , priority 10 [ 66.453176][ T670] playstation 0003:054C:0DF2.000B: Invalid gyro calibration data for axis (5), disabling calibration. [ 66.464365][ T670] playstation 0003:054C:0DF2.000B: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 66.476200][ T670] playstation 0003:054C:0DF2.000B: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 66.487989][ T670] playstation 0003:054C:0DF2.000B: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 66.501118][ T670] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.000B/input/input7 [ 66.514145][ T670] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.000B/input/input8 [ 66.534754][ T670] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.000B/input/input9 [ 66.561996][ T670] playstation 0003:054C:0DF2.000B: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 66.657617][ T670] usb 1-1: USB disconnect, device number 13 [ 66.738920][ T36] audit: type=1400 audit(1781859412.850:249): avc: denied { unlink } for pid=297 comm="syz-executor" name="file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.768449][ T36] audit: type=1400 audit(1781859412.880:250): avc: denied { read } for pid=1644 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.017504][ T36] audit: type=1400 audit(1781859413.120:251): avc: denied { create } for pid=1661 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.118869][ T1681] overlayfs: unescaped trailing colons in lowerdir mount option. [ 67.128085][ T1681] ------------[ cut here ]------------ [ 67.133642][ T1681] WARNING: CPU: 0 PID: 1681 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 67.143234][ T1681] Modules linked in: [ 67.147176][ T1681] CPU: 0 UID: 0 PID: 1681 Comm: syz.3.523 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 67.158729][ T1681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.168896][ T1681] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 67.175056][ T1681] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 62 1b 0c 06 00 0f 85 c2 00 00 00 c6 05 55 1b 0c 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 67.194927][ T1681] RSP: 0018:ffffc9001043f860 EFLAGS: 00010246 [ 67.201065][ T1681] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 67.209112][ T1681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001043f918 [ 67.217173][ T1681] RBP: ffffc9001043f988 R08: ffffc9001043f917 R09: 0000000000000000 [ 67.225314][ T1681] R10: ffffc9001043f900 R11: fffff52002087f23 R12: ffffc9001043f8a0 [ 67.233401][ T1681] R13: dffffc0000000000 R14: 1ffff92002087f10 R15: 0000000000000000 [ 67.241430][ T1681] FS: 00007f41f4a856c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 67.250438][ T1681] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.257058][ T1681] CR2: 000000110c2fcf00 CR3: 0000000137f08000 CR4: 00000000003526b0 [ 67.265096][ T1681] Call Trace: [ 67.268460][ T1681] [ 67.271421][ T1681] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.277541][ T1681] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 67.283343][ T1681] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 67.289081][ T1681] ___kmalloc_large_node+0x81/0x210 [ 67.294323][ T1681] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 67.300015][ T1681] __kmalloc_large_node_noprof+0x1e/0xd0 [ 67.305689][ T1681] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 67.311413][ T1681] __kmalloc_noprof+0x326/0x500 [ 67.316305][ T1681] ? __cfi_lockref_get+0x10/0x10 [ 67.321315][ T1681] incfs_realloc_mount_info+0xa7/0x4d0 [ 67.326829][ T1681] ? incfs_add_sysfs_node+0x118/0x230 [ 67.332398][ T1681] incfs_alloc_mount_info+0x478/0x5f0 [ 67.337852][ T1681] incfs_mount_fs+0x3ca/0x970 [ 67.342589][ T1681] ? __cfi_incfs_mount_fs+0x10/0x10 [ 67.347926][ T1681] ? vfs_parse_fs_string+0x10f/0x180 [ 67.353272][ T1681] ? selinux_capable+0x38/0x50 [ 67.358132][ T1681] legacy_get_tree+0x103/0x1b0 [ 67.363000][ T1681] ? __cfi_incfs_mount_fs+0x10/0x10 [ 67.368329][ T1681] vfs_get_tree+0x9e/0x290 [ 67.372788][ T1681] do_new_mount+0x251/0xb30 [ 67.377333][ T1681] ? security_capable+0x44/0x130 [ 67.382353][ T1681] path_mount+0x682/0x1010 [ 67.386817][ T1681] __se_sys_mount+0x2bf/0x480 [ 67.391580][ T1681] ? __x64_sys_mount+0xf0/0xf0 [ 67.396426][ T1681] ? __kasan_check_write+0x18/0x20 [ 67.401648][ T1681] ? fpregs_restore_userregs+0x11c/0x260 [ 67.407332][ T1681] __x64_sys_mount+0xc3/0xf0 [ 67.412021][ T1681] x64_sys_call+0x2021/0x2ee0 [ 67.416747][ T1681] do_syscall_64+0x57/0xf0 [ 67.421272][ T1681] ? clear_bhb_loop+0x50/0xa0 [ 67.425997][ T1681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.432045][ T1681] RIP: 0033:0x7f41f3b9ce59 [ 67.436502][ T1681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.456550][ T1681] RSP: 002b:00007f41f4a85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.465084][ T1681] RAX: ffffffffffffffda RBX: 00007f41f3e15fa0 RCX: 00007f41f3b9ce59 [ 67.473170][ T1681] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000000 [ 67.481208][ T1681] RBP: 00007f41f3c32e6f R08: 00002000000002c0 R09: 0000000000000000 [ 67.489262][ T1681] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 67.497275][ T1681] R13: 00007f41f3e16038 R14: 00007f41f3e15fa0 R15: 00007ffe32e6c0f8 [ 67.505435][ T1681] [ 67.508526][ T1681] ---[ end trace 0000000000000000 ]--- [ 67.514102][ T496] tipc: Node number set to 1 [ 67.537745][ T1681] incfs: Error allocating mount info. -12 [ 67.544256][ T1681] incfs: mount failed -12