last executing test programs: 6.156731s ago: executing program 0 (id=155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000001100fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.137125781s ago: executing program 0 (id=157): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x6000) syz_ublk_setup_io_uring(0x72a3, &(0x7f0000000100)={0x0, 0x9a0, 0x4000, 0x3, 0x3ac}, &(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x3baa, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x2, 0xcb}, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r5, r6, 0x0, r7, &(0x7f0000000480)={0x2e, 0x8, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x4ae, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0xa}}}, &(0x7f0000000500)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) 5.51026399s ago: executing program 1 (id=169): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) unshare(0x70040600) (async) unshare(0x70040600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 3.959572643s ago: executing program 0 (id=176): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) (async, rerun: 32) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0xb5, 0x4) (async, rerun: 32) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x5, 0x20, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x5, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x60, 0x41, 0x104}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x35, 0xf3, 0x4}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x422}}, {0x0, 0x0}, {0xd9, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x80c}}]}) 2.805441478s ago: executing program 0 (id=184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff0400000000000000020000000002000000e6ffe4200091ad07000000000000000000008000000000ffff0f800000000003000000000000000400000200000000130000000000000003000000b86b6e"], 0xd4}, 0x1, 0x1400000000000000}, 0x0) 2.782654579s ago: executing program 0 (id=185): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (fail_nth: 22) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2.668627824s ago: executing program 0 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@local=@item_012={0x2, 0x2, 0x0, "00b1"}, @main=@item_012={0x2, 0x0, 0x8, "0b86"}, @local=@item_4={0x3, 0x2, 0x4, "8eea0afc"}, @main=@item_4={0x3, 0x0, 0x9, "d6d50c90"}, @main=@item_012={0x1, 0x0, 0x9, 'K'}, @local=@item_012={0x2, 0x2, 0x6, "4804"}, @main=@item_012={0x2, 0x0, 0xc, "8198"}]}}, 0x0}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@loopback}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={0x14, 0x14, 0x1, 0x4, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x100, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x80810) 2.448462395s ago: executing program 1 (id=190): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000540)="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", 0xfd) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) sendfile(r2, r2, 0x0, 0x40000000800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x100000000000011, 0x2000, 0x2f93) 1.900688911s ago: executing program 1 (id=201): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac10000000000000000000000000000000000100", "90be6c09306003d8006000", [0xfffffffffffffffc, 0x2]}}) 1.900442471s ago: executing program 1 (id=202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5de419168d40a22b6dce55ca", @ANYRES16=r2, @ANYBLOB="20002cbd7000fddbdf2509000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090008000000"], 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x56002329, @empty, 0x9}, 0x1c) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = getpgid(0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) setreuid(0xee01, 0xee01) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x90000000000000, r0, 'id0\x00'}) write$hidraw(r6, &(0x7f00000002c0)="1ea7af2394a2e096a1960a0557c28ca6fadd91049efcaec6b6817f8a78d82635ad13ff378c0680bc2c6b7a92aabc3ab444495e4931b860b05e74c080a8c6e4d7e92d88352e7c55b7c34e84520332868ad4c8d6badb0210a213895c1c16b5be14cc979cca497f905d663e9cf17968888801d1a3b7e707661d90976b4f1b8642901f428575c126d78c56e1dea78c8222aac33dfc51090eea93c75c11befb388f9cdb916557f1ac3db619de56ef9097e0c9fddb296074a56391f949b8e8d13fc72611636e45b0ca8debbe4000e6db5a3ebf4fd885736d169f3c1422e32cd0ae0571d9c27faca07c040f2f5bf13396007725e9a47ecc25829321ac38c238314e725f43d979cd21b0cd0c670ccd675a3f94a70fc71abdb60236f40ecb00917acd009c8b33cba6394ced2e70eeb945a4235e6caa00af915a61599055a6d23dcaecfcfa5484befeb5aa35b6cb0a0c3ad30f16a8f105184094e59ab44265cb1da8e69d5122c66522e4ef625eed4ad1b6113cd1e25584ad25d37f51a97d2bf7801f73dd582da9bd3b52690f0f765bc72446a667f7cf13dd7d1d7b15586f659085d6cf4046979f86fefa7998c2491dbfe68f74a37c7e431ec9bc94bd8ae8df5dc2c4fb9f0932b7f12e005cc07216dd5002a6b2b51ef9d2ac1739135d0849073a5e3ce1138b558fee0c71a706a23af6590ae0daf88418e5b374ae45de662b792f7a9d314317114c12b87816aa4cbeed77dbe27955ccd1a9e67ccdc45fefba47490985a0f9d352cdba4d0de3c9ec7781c2244cc14e1f9401289fc8a5d714b2865c848d486501d7bf8c88a2bb9a97f8a795a13264d01605493996612df9b87a3c2dc8b4007b344fa029ace3747b3c4a4d6b22e0358c972eb4ca031e92b519df6cd44a8f37717ff654bb3a2c533c7d14f7bea23d592821a18cf2eef4b3196e8337dc6fea2b7e502458490bfa7232d9a7f3b893b85c5a140e6d5a62010b1cac4ca63ad59b4d8870131b0e68494cf223c984d1d72a4d84a0dbd56fd93566795009812d6b88e843d5607e486e3e109fb3e927aec7e15f8bd6c852e1f71a5c3bcdfe4cb455427077d3167d3ca520ecfcf8448168bf117efa40f33aad875edca8a39677d5491aa9a0662f40ef97465bb01d2fba2e2463c35f49abd7402763ad20de0e5bae92d2523227e213aec81bcdb5076fa4baf385056e4ea5568cb20a36dc47d0bae0c7f0a5c314f07f165b472e3a60c547a4870749a78bfc695ddfae1a698a074bdee5f0e1d218cbfa5a034f0cc1250898b1786deda41c7fa5e6159b86e39124e734898e39547ca6608ba7992969e5799071af7f01d36f563c99def19527753e7211617a55ae7cdb738f3e51646909f61d5d4b126d30ddf4c141e1e79af6704fc005f14a08a5b1499811c2424476f0acd0a67312efdf12e93efc65e953680f197aad859621a523764e51db71b31e84ebbe3244c9e6ecf5173546f93add76e4d7a2432dbbb0872df8e468ade31e4ebe81e7797cfcd0c89939db5728aaa363f9256a196a05764eb5d99ae3b2ce694f5ad467658f6ccad64a0d96885c0df933e0809e1e5724c91d809bb80e04c8b4839a344896c240467195bdd6fbe31fa61df4a80e502928011cfa58b6b66bc37807e00bc96f2ba63e006719f39a22a9272073ac641d3fc1d3ee7bdb0c2d88d0361edb38b98967ed5f4f59c6e0f6ecd592e1e321a65826b0fa3522107fe97c536cd172c3a994f19707eddd31a677aed0067d4976ca67ec8384ec2632b0fb6d3423180b680d62424b722a473e3c8706755bb2fa278940909f9140046b3349f6d81c2c0f03d10d65e2f036b490d1b152e78e5f6a2b2593cd915157ff10259d90462d013f69a9796e7a3f51620368bd9e145d6e583faf5201643fa52918814996384a574d21d431faca914d1607ba91fe0e0a374ea689bda8ffe39eecc8493ba84909f27762e85e2fd61f0a10bb483f6ce1705819120a91b06ce1aca0d5ac6e413fcfc34daed632b3ed884bc8d299de1a18e356153bba5c427dd866e27ac7bbb5f05e2e90176657a345302194d167be38bfad7dee9619807a0cb0733fd9dc3b3d1b0ff3a72ac62e606f5886328c6d5f9797bcf6d8bda18e84d2691fb8d88baac6bb912c85e22743d5da27a06bcc18c697f418b53df39c96f07c9fefd1a8c9e4212fdf402b8a9838bf917200964104113b8bff926b82143388ba916d1128201002b6519756888871a53bc22f4bc15207852b3c9d50006e9bc47620f19afb142a00e28b4d1b29e62365f144528f6714e733e9a15970c7ce59c81b6fb4c365589603b22c8f220cd9cd868eebd9b6210f427686c0eeca1aa51519e05d4c02f524f6228b2f2ed9008b868e80357ae67c2dd519e5a2c9e8b7c84138293b3d2463b64bad84683d2b7da149c90d542373780324c9af233faf2e35be7c6c62b0bc4ce06c86ec4248b2362cdcc1c07e463116d4c05be438049cb57bef56618c53dee842d822109e9d02a22dcd35c3d3d038ab72ae53eedc05d8ea006705a8c9a37c78faa196cd12f3eef67d04834fccf9b5b19fb6b9b311c362d2e3bfe9bac79510162a8164a75d7155151606ca8fa76e9eb89fcfe109349a0e21ef75f42a27e862fbbcbf3ba94448055d62b0e636a1682fd7831b9f5b958574a46a76c2f63148bdc2b10bbf5016b15d42d5333cb95123459516ab7d911197ba48a0a75fd8e6ebeadcbf9f88a3870057739314905831c04f6bb3c20b7ffa886e89538cebce265e9367c6c30e633cf0eabce9c20bc9765245dff5b459b7bbb7e4b53a4948adab41ebbdb4ab6dd3a19ba1978c65949c76726b058c4d4df7455c5abdc8dd49a26d1f1cde8515ff2ba886b372e82edddeac552578c65df10567b4d8bcfe6f4a0d2ab54bff67289eb21d6c1c3f42a3ac36ca5d74e4363261434b018a0777f71134c30cd291edddd1c9a7b8ee2800432f4240f9217e75c218219e352ff7a49bd934af60462a62668a7236ba7d3665c54f1cca93b57ac153b4545e813ba2f4532c86267210f8bca44a7f9cc10f0ddd290834f7c889c1d3ec96bfe3813371755eeecd26634b66a51962ce29681f43b946e2210731ac3ce344cac540d800c50e578bb049ccbc6495b3a496cd15b254acb97d2f20b5c5a74efaadb0bdadb8b916b2dd7b7d3ab79e75f8668646dec3be82c1d833866263faff2a312dc16bb547ada545f2e8796790fbafd87d261f5de543575e7e1d549c49b39efba2f4913e7bb42058181cd1b8dbc473e15a4392327905c77c9f319e2e4e2431d7c2f2cc9b51fdbf0f0ee686aa5550bd1fa38bfd38b7e339b88f7af422a75248c10acd436d691856a4bc951fe2645797d2b7bea0d85cc4d95fac05e70cb8d9b65467780fa47d9d6a6d19bf470baf1c5821c6484c78b8a677a3f880db23afaf76585c42fe93f2ccc6e4d0c908deb4433894f43138974a7840ed963bc51beb358622966937890eb8ae70090a692d68fc1fee0e0d45366376f58e2c1878a43f7f350e3a1b41b91ccb6eafaf77de7776b20e4ac3611aef8dec536b2f9fc3cfce4af38a781d00266465e299be1e703e239988ceb92d19df485c3dfe77b238e41b52072fd20695a8b1712e2585dcb0bb620cc1023892df4e273dc0eacf6b61b0ad901e2b9c1128476dc34d7428e01c5be2fa9104795d946328b6925b8681528c36a29eb46400e6ba00942cdc26af96d2a8bc5173699080b65698f5355111ba97a8c1499c396b965dd7cc0fe78a6251e773e0786871d3944ee7204aa13776342b41e17d9c6cc8d254efb0b8ab6604526d108c803fff1530279436fc0824c9ea8653765b593229602f3be651749cf682f07d51c0f95851e66deed408ca3a9dbfe4efbbb0734c8f49e72ab6a37bb49e297160e4cab4abfc2b4f9645d4a3a777019f4b6349cd2e45958c65ebdb209193eb2975e7acc2b3e13c44dfaa4804a1f0caad2167644d0e922edfeea0e7ed47446f9d7acef79dfce7b8e9546aef5d453aa2580a5cba71bfe54a9864d91b3c670a230026a6f7a4717ad5e6ca2e9b81fb8a44175b0d2cbfc5e512dc11cefc8444ffe9e288e57b1cda835ecbfe58f3abf97a4be08646b8f367facffc6b76f00e5123ca965c1ca2a3e0cc9d10629e49ae1828909f0ba4b83a5b3d6ee54ca6305988be21897cfe0021286a008a38296948265b27f9bf594e8b0d43839940eadbb89d43ac4eddea481317d302bdf41445fe7984023bc933a6277167f5640b5941218a81a86e0048dd77bb9907028ea15a9bfb90c2d821d63c27f6a98f1e1c5c29a46caf56b5e383f73dff66dcdf04a5d9715c57aed65efb0a432beb6a4bfc8e1a510f0b1d33a94056735b54c89155e32e1406c0e8af1dafdd31b93ea0d4b5c31a9fd524b2190b19a77dd3dad5d885b7454bdb2bdaf14a193070c272a1394cacc85aa06cc867b0e3dbe5ecdfc45b384ecc73377de404358f154d236f2b0f3d2d7d7887aa36adec4848f0864748f6392b60c07ab3d378267a473fb408130ad4b013718f3484739a9da93298efa1979cde02b6dbdb4b582c1bb364210e25011f65058ff7bc2ecfb611ccb81c8ef9d93235202dc958db55102687827eae31d98903fbcf60ca6c761b419c18fb05b6dd8555fa7998beadea507de5493f8eedf7b3464dc0a04efdd365a2163c3c27d1235418654e6e5735a92b3fdd2a675f9617c556197667de472c281ff462941258591f055855efcfef0def5ab4a203a53cf348f85fe3b32f324893e864882de48d371a8966c116d7c4fe7c55e6d5c368673ac460d8d7dec6544fd9f7dbe451ffb680e394b16a4a6b19eacf1530ea781bbeb3fc203c14b7a61a5ed22c2d1135db59807a2c8bc3b32903400aa7ba08d6d1dfadd05567c8cb9db4fa1e1d1fb9ba89efde3970310efcd44bdf81c65c6f17aacbb265986246b6c4bdd33ea7378de87fda23591210ff0a429cb4166f0534b2eb8a64502244715094ee3772b2ca684f1cbf9378d3b213f8f16a771ad47cf7566aeb0284b6af8337b94829e8509e0db43f1825201c8e731cc848bd2cb42d237fbfc1110e2fd003921aa613947452f4fe6a1d8a2c0b5493fa69191060ce4665ca8a7764b36127e3d7973ef055ccd16f3c0aa7ca95a2945b737508531fd00f5b32bd02a993442ed3716d8da7827493e63c9f486bdf9ed1352e8d9cb34ae33a07cfbb4bb30efee6c075689ec22b25888c3e41ac13972b3542d4a055380eaf5ee64fd6b00f4394cb60e765420f5ab2248de3aba9646516a143f3a58ffe144e8de12b5bc33b8b01cad27ac53bfcc35dac494edc060401310c99c49ac9f36353f55bfd148f1750d68a97aa40f089fc5f608b7bfbe2c490b1e3be25230c14b2b9f17e71622693448b4542487c640414c40614e6f70187e1866c8a5e821274449bb5c01cd940378b26ab86304a98ffcff86c49b17999f3472e5c9a5b6d6fb63a1cf7d0a32f43a78d27dab55e66e03552fde7426b8167fcbaaedabfa284828e6d3a1611fd2a025a11e26335a971486ef5350c4c8203e157c2f9929c2ba717b9e65f9efb45d2b70ec1f914391476bac4d23f46ce1a28156bb86754d59065758d1ddfc88b317a34f50cf60ee87207e8e92073388ccbdd0dcb99aa56e238ab64bf644188e8f64ae66ec43eed7f0948f468f5f032dfe0e2dca6cf3c6b143d94b00a12f44724640c9003253d45c440def99c1f90642a3656940943db9a3dc1ad81fa30b667365d5aa9b319f879ae5bd91e2a32d173ab0860406003769a4116945ce6ca71331ebfb2aa662043cd234e1c5650", 0x1000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r7, &(0x7f0000002040)={@void, @val={0x1, 0x0, 0x3, 0x3, 0x14, 0x6}, @ipv4=@dccp={{0x8, 0x4, 0x0, 0x5, 0x1c, 0x64, 0x0, 0x5, 0x21, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp={0x44, 0x8, 0xd7, 0x0, 0x5, [0x1a3]}, @generic={0x88, 0x2}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0xa, 0x7, "18d7e1", 0x9, "503da1"}, "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"}}}, 0xfca) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socket(0x10, 0x803, 0x0) close(0x3) r9 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r9, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) 1.191256524s ago: executing program 1 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) 1.182621674s ago: executing program 1 (id=210): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x94, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xfd}}}}}]}}]}}, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)=0x3928daf, 0x4) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 245.095079ms ago: executing program 3 (id=220): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d780239e5b82fd916d8abd3f030a29d33e69f81a5d6017f61fd2245f801d3d417fbc10c5556e06ab480b17c8a8cf147064dc0d136022a0efe5dfd38edd492423cb6c2f3528f439422cdd234800caed10ed7eb5d65b00aeb461d38de250d161ee60466aa8d67c98f4170e72cb0e93c5f27263f6ae6259ee3a87b79568a879318610b372482f96a2841b000"/191, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x80081270, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x15, 0x0, &(0x7f0000000e80)) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x1ff, 0x81, 0xfffffff6}}, 0x50) read$FUSE(r3, &(0x7f0000008ec0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x34, 0x0, r5}, 0x10) read$FUSE(r1, &(0x7f0000004400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, r6, {0x200}}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000100)={0x9, {{0x2, 0x4e21, @remote}}, {{0x2, 0x0, @remote}}}, 0x108) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/PNP0B00:00\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/rtc_cmos\x00', 0x0, 0x0) r10 = openat(r9, &(0x7f00000001c0)='unbind\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='PNP0B00:00\x00', 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/oxu210hp-hcd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='PNP0B00:00\x00', 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) 244.761089ms ago: executing program 3 (id=222): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x100000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 184.789081ms ago: executing program 3 (id=223): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0xf, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r0, 0x7) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000040)=0x7) getdents64(r1, &(0x7f0000000480)=""/137, 0x89) 184.667031ms ago: executing program 3 (id=224): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac10000000000000000000000000000000001200", "90be6c09306003d8006000", [0xfffffffffffffffc, 0x2]}}) 184.602591ms ago: executing program 3 (id=225): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc02000000000000000000000001a800fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 171.939962ms ago: executing program 3 (id=226): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="89cca9ad7f624c0600008508750900008100", 0x12}], 0x1) timer_create(0x8, &(0x7f0000000080)={0x0, 0x35, 0x0, @thr={&(0x7f00000000c0)="1f59c92bf04d2580490bad123703f3117cf07c000200000000fd1fab0000cba116", 0x0}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r5, 0xc0686611, &(0x7f0000000080)=0x68) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) dup3(r6, r0, 0x80000) io_submit(r7, 0x1, &(0x7f0000000dc0)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x759, r6, &(0x7f0000000c00)="d4", 0x1, 0x5}]) r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r9], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) tkill(r8, 0x12) r10 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r10) wait4(r8, 0x0, 0xa, 0x0) 74.370477ms ago: executing program 2 (id=232): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x200000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 16.59072ms ago: executing program 2 (id=233): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @empty, 0x7, 0x11}}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x0, @local}}, 0x1, 0x2, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0xfffd, @local}}]}, 0x190) pread64(r0, &(0x7f0000000080)=""/27, 0x1b, 0x8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @empty, 0x7, 0x11}}) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) rmdir(&(0x7f0000000140)='./file1\x00') (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x0, @local}}, 0x1, 0x2, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0xfffd, @local}}]}, 0x190) (async) pread64(r0, &(0x7f0000000080)=""/27, 0x1b, 0x8) (async) 16.36094ms ago: executing program 2 (id=234): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac10000000000000000000000000000000002000", "90be6c09306003d8006000", [0xfffffffffffffffc, 0x2]}}) 16.261189ms ago: executing program 2 (id=235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc02000000000000000000000084ff00fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.226489ms ago: executing program 2 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) 0s ago: executing program 2 (id=237): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xdb1b, 0x141000) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000380)=""/177) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1f0}}, 0x8800) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x40106726, &(0x7f00000000c0)) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, &(0x7f0000000000)=[@cr4={0x1, 0x408d8}], 0x1) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000080)="400f23280f019c990e000000b91a0200000f32c344240000600000c744240200800000c7442406000000000f011c246566262e440f23b126673e660f382943b0c4c3914984fb499e00007fc744240000000000c744240278581667c7442406000000000f011c2467440fc7580066b804008ee8", 0x73}], 0x1, 0x41, 0x0, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000300), 0x8000, 0x8200) ioctl$KVM_TDX_INIT_VM(r8, 0xc008aeba, &(0x7f00000004c0)={0x1, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000240)={r2, &(0x7f0000000580)='\xff\xff\xa9\xbc\x85$+\xc4\xc3\b\xfe=\xadGy\x00\x00/+\rkN\x81\xce\xa7\x04\x02\x0f\xdf\x00', 0x6ef41, &(0x7f0000000540)={@align=0x1, {0x2, 0xd, 0x1fc}}, 0x6, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000200)=0x2}) ioctl$KVM_TDX_INIT_VCPU(r9, 0xc008aeba, &(0x7f0000000280)={0x2, 0x0, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 30.130609][ T36] audit: type=1400 audit(1789468494.360:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.134107][ T287] cgroup: Unknown subsys name 'net' [ 30.153281][ T36] audit: type=1400 audit(1789468494.360:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.180712][ T36] audit: type=1400 audit(1789468494.400:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.181107][ T287] cgroup: Unknown subsys name 'devices' [ 30.305956][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.311584][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.427477][ T36] audit: type=1400 audit(1789468494.660:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.450681][ T36] audit: type=1400 audit(1789468494.660:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.475453][ T36] audit: type=1400 audit(1789468494.660:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.505645][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.514564][ T36] audit: type=1400 audit(1789468494.750:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.540019][ T36] audit: type=1400 audit(1789468494.750:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.598740][ T36] audit: type=1400 audit(1789468494.830:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.600023][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.624274][ T36] audit: type=1400 audit(1789468494.830:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.483873][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.490968][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.498427][ T295] bridge_slave_0: entered allmulticast mode [ 31.504865][ T295] bridge_slave_0: entered promiscuous mode [ 31.512726][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.519822][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.526923][ T295] bridge_slave_1: entered allmulticast mode [ 31.533219][ T295] bridge_slave_1: entered promiscuous mode [ 31.539308][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.546503][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.553559][ T296] bridge_slave_0: entered allmulticast mode [ 31.559926][ T296] bridge_slave_0: entered promiscuous mode [ 31.566485][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.573635][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.580800][ T296] bridge_slave_1: entered allmulticast mode [ 31.587097][ T296] bridge_slave_1: entered promiscuous mode [ 31.630066][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.637158][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.644268][ T294] bridge_slave_0: entered allmulticast mode [ 31.650564][ T294] bridge_slave_0: entered promiscuous mode [ 31.663169][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.670350][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.677501][ T294] bridge_slave_1: entered allmulticast mode [ 31.683804][ T294] bridge_slave_1: entered promiscuous mode [ 31.714959][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.722053][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.729239][ T297] bridge_slave_0: entered allmulticast mode [ 31.735549][ T297] bridge_slave_0: entered promiscuous mode [ 31.757873][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.764962][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.772053][ T297] bridge_slave_1: entered allmulticast mode [ 31.778514][ T297] bridge_slave_1: entered promiscuous mode [ 31.889605][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.896698][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.904004][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.911047][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.920452][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.927533][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.934817][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.941857][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.961300][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.968384][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.975703][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.982746][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.018510][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.025655][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.032929][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.039991][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.069732][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.078316][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.085531][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.092690][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.100586][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.108030][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.115331][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.122477][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.133636][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.140707][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.155720][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.162789][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.170578][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.177638][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.190686][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.197753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.205529][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.212572][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.227263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.234367][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.271066][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.278145][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.291529][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.298611][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.315099][ T294] veth0_vlan: entered promiscuous mode [ 32.336869][ T295] veth0_vlan: entered promiscuous mode [ 32.346035][ T296] veth0_vlan: entered promiscuous mode [ 32.367336][ T295] veth1_macvtap: entered promiscuous mode [ 32.381472][ T296] veth1_macvtap: entered promiscuous mode [ 32.398175][ T294] veth1_macvtap: entered promiscuous mode [ 32.425686][ T297] veth0_vlan: entered promiscuous mode [ 32.438439][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.470563][ T297] veth1_macvtap: entered promiscuous mode [ 32.532957][ T316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.563417][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.635068][ T329] FAULT_INJECTION: forcing a failure. [ 32.635068][ T329] name failslab, interval 1, probability 0, space 0, times 1 [ 32.681196][ T329] CPU: 0 UID: 0 PID: 329 Comm: syz.3.7 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 32.681225][ T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.681243][ T329] Call Trace: [ 32.681249][ T329] [ 32.681257][ T329] __dump_stack+0x21/0x30 [ 32.681296][ T329] dump_stack_lvl+0x140/0x1c0 [ 32.681339][ T329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.681367][ T329] dump_stack+0x19/0x20 [ 32.681393][ T329] should_fail_ex+0x3c2/0x510 [ 32.681416][ T329] should_failslab+0xac/0x100 [ 32.681440][ T329] __kmalloc_cache_noprof+0x41/0x470 [ 32.681461][ T329] ? __kasan_kmalloc+0x96/0xb0 [ 32.681484][ T329] ? legacy_init_fs_context+0x62/0x160 [ 32.681520][ T329] legacy_init_fs_context+0x62/0x160 [ 32.681547][ T329] alloc_fs_context+0x5c7/0x800 [ 32.681573][ T329] fs_context_for_mount+0x26/0x40 [ 32.681598][ T329] do_new_mount+0x116/0xb40 [ 32.681618][ T329] ? security_capable+0x44/0x130 [ 32.681641][ T329] path_mount+0x66a/0xff0 [ 32.681660][ T329] ? putname+0x113/0x150 [ 32.681681][ T329] __se_sys_mount+0x2bf/0x480 [ 32.681702][ T329] ? ksys_write+0x1f3/0x260 [ 32.681722][ T329] ? __x64_sys_mount+0xf0/0xf0 [ 32.681744][ T329] __x64_sys_mount+0xc3/0xf0 [ 32.681765][ T329] x64_sys_call+0x2021/0x2ee0 [ 32.681782][ T329] do_syscall_64+0x57/0xf0 [ 32.681799][ T329] ? clear_bhb_loop+0x50/0xa0 [ 32.681833][ T329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.681854][ T329] RIP: 0033:0x7fa8fab9e159 [ 32.681874][ T329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.681889][ T329] RSP: 002b:00007fa8fb9be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.681915][ T329] RAX: ffffffffffffffda RBX: 00007fa8fae25fa0 RCX: 00007fa8fab9e159 [ 32.681929][ T329] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 32.681941][ T329] RBP: 00007fa8fb9be090 R08: 0000200000000100 R09: 0000000000000000 [ 32.681952][ T329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.681963][ T329] R13: 00007fa8fae26038 R14: 00007fa8fae25fa0 R15: 00007ffc89671188 [ 32.681978][ T329] [ 32.921462][ T348] incfs: Error accessing: ./file0. [ 32.927757][ T348] incfs: mount failed -20 [ 32.996724][ T360] FAULT_INJECTION: forcing a failure. [ 32.996724][ T360] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.010467][ T360] CPU: 0 UID: 0 PID: 360 Comm: syz.3.16 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 33.010506][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.010519][ T360] Call Trace: [ 33.010526][ T360] [ 33.010534][ T360] __dump_stack+0x21/0x30 [ 33.010568][ T360] dump_stack_lvl+0x140/0x1c0 [ 33.010599][ T360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.010628][ T360] ? is_bpf_text_address+0x17b/0x1a0 [ 33.010662][ T360] ? kernel_text_address+0xa9/0xe0 [ 33.010692][ T360] dump_stack+0x19/0x20 [ 33.010722][ T360] should_fail_ex+0x3c2/0x510 [ 33.010749][ T360] should_fail+0xf/0x20 [ 33.010773][ T360] should_fail_usercopy+0x1e/0x30 [ 33.010801][ T360] _copy_from_user+0x20/0xa0 [ 33.010830][ T360] ___sys_sendmsg+0x1c7/0x370 [ 33.010857][ T360] ? __sys_sendmsg+0x260/0x260 [ 33.010888][ T360] ? kstrtouint+0x78/0xf0 [ 33.010916][ T360] ? __fget_files+0x2bc/0x330 [ 33.010945][ T360] __sys_sendmmsg+0x292/0x490 [ 33.010977][ T360] ? __cfi___sys_sendmmsg+0x10/0x10 [ 33.011013][ T360] ? __cfi_ksys_write+0x10/0x10 [ 33.011036][ T360] __x64_sys_sendmmsg+0xa4/0xc0 [ 33.011062][ T360] x64_sys_call+0xfec/0x2ee0 [ 33.011080][ T360] do_syscall_64+0x57/0xf0 [ 33.011099][ T360] ? clear_bhb_loop+0x50/0xa0 [ 33.011125][ T360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.011148][ T360] RIP: 0033:0x7fa8fab9e159 [ 33.011166][ T360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.011183][ T360] RSP: 002b:00007fa8fb9be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 33.011206][ T360] RAX: ffffffffffffffda RBX: 00007fa8fae25fa0 RCX: 00007fa8fab9e159 [ 33.011222][ T360] RDX: 0000000000000002 RSI: 0000200000001680 RDI: 0000000000000003 [ 33.011249][ T360] RBP: 00007fa8fb9be090 R08: 0000000000000000 R09: 0000000000000000 [ 33.011262][ T360] R10: 0000000004040801 R11: 0000000000000246 R12: 0000000000000001 [ 33.011275][ T360] R13: 00007fa8fae26038 R14: 00007fa8fae25fa0 R15: 00007ffc89671188 [ 33.011292][ T360] [ 33.241028][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.279170][ T369] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.348676][ T376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21'. [ 33.363820][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.394923][ T10] usb 3-1: config index 0 descriptor too short (expected 64575, got 68) [ 33.398715][ T380] fuse: Bad value for 'fd' [ 33.403371][ T10] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 33.410173][ T383] netlink: 'syz.1.23': attribute type 28 has an invalid length. [ 33.417905][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 33.439054][ T386] capability: warning: `syz.1.23' uses 32-bit capabilities (legacy support in use) [ 33.451959][ T10] usb 3-1: config index 1 descriptor too short (expected 64575, got 68) [ 33.463738][ T10] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 33.475329][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 33.523841][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 33.539877][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.552669][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 33.561016][ T394] FAULT_INJECTION: forcing a failure. [ 33.561016][ T394] name failslab, interval 1, probability 0, space 0, times 0 [ 33.563934][ T67] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 33.577272][ T394] CPU: 1 UID: 0 PID: 394 Comm: syz.3.26 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 33.577346][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.577384][ T394] Call Trace: [ 33.577398][ T394] [ 33.577425][ T394] __dump_stack+0x21/0x30 [ 33.577505][ T394] dump_stack_lvl+0x140/0x1c0 [ 33.577587][ T394] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.577689][ T394] dump_stack+0x19/0x20 [ 33.577783][ T394] should_fail_ex+0x3c2/0x510 [ 33.577857][ T394] should_failslab+0xac/0x100 [ 33.577945][ T394] __kmalloc_cache_noprof+0x41/0x470 [ 33.578008][ T394] ? selinux_perf_event_alloc+0x110/0x110 [ 33.578070][ T394] ? v9fs_mount+0xc1/0x9d0 [ 33.578143][ T394] v9fs_mount+0xc1/0x9d0 [ 33.578213][ T394] ? __cfi_v9fs_mount+0x10/0x10 [ 33.578285][ T394] ? selinux_capable+0x38/0x50 [ 33.578360][ T394] legacy_get_tree+0x106/0x1b0 [ 33.578458][ T394] ? __cfi_v9fs_mount+0x10/0x10 [ 33.578522][ T394] vfs_get_tree+0x9e/0x290 [ 33.578584][ T394] do_new_mount+0x251/0xb40 [ 33.578651][ T394] ? security_capable+0x44/0x130 [ 33.578723][ T394] path_mount+0x66a/0xff0 [ 33.578793][ T394] ? putname+0x113/0x150 [ 33.578863][ T394] __se_sys_mount+0x2bf/0x480 [ 33.578948][ T394] ? ksys_write+0x1f3/0x260 [ 33.579022][ T394] ? __x64_sys_mount+0xf0/0xf0 [ 33.579101][ T394] __x64_sys_mount+0xc3/0xf0 [ 33.579169][ T394] x64_sys_call+0x2021/0x2ee0 [ 33.579227][ T394] do_syscall_64+0x57/0xf0 [ 33.579276][ T394] ? clear_bhb_loop+0x50/0xa0 [ 33.579337][ T394] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.579392][ T394] RIP: 0033:0x7fa8fab9e159 [ 33.579444][ T394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.579492][ T394] RSP: 002b:00007fa8fb9be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.579552][ T394] RAX: ffffffffffffffda RBX: 00007fa8fae25fa0 RCX: 00007fa8fab9e159 [ 33.579592][ T394] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 33.579632][ T394] RBP: 00007fa8fb9be090 R08: 0000200000000100 R09: 0000000000000000 [ 33.579664][ T394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.579702][ T394] R13: 00007fa8fae26038 R14: 00007fa8fae25fa0 R15: 00007ffc89671188 [ 33.579751][ T394] [ 33.716307][ T397] FAULT_INJECTION: forcing a failure. [ 33.716307][ T397] name failslab, interval 1, probability 0, space 0, times 0 [ 33.728957][ T10] usb 3-1: string descriptor 0 read error: -71 [ 33.743618][ T397] CPU: 1 UID: 0 PID: 397 Comm: syz.3.27 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 33.743711][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.743748][ T397] Call Trace: [ 33.743768][ T397] [ 33.743788][ T397] __dump_stack+0x21/0x30 [ 33.743869][ T397] dump_stack_lvl+0x140/0x1c0 [ 33.743896][ T397] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.744009][ T397] ? unwind_get_return_address+0x51/0x90 [ 33.744102][ T397] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.744182][ T397] dump_stack+0x19/0x20 [ 33.744260][ T397] should_fail_ex+0x3c2/0x510 [ 33.744328][ T397] should_failslab+0xac/0x100 [ 33.744399][ T397] __kmalloc_cache_noprof+0x41/0x470 [ 33.744468][ T397] ? alloc_fs_context+0x6f/0x800 [ 33.744548][ T397] ? stack_trace_save+0xaa/0x100 [ 33.744617][ T397] alloc_fs_context+0x6f/0x800 [ 33.744690][ T397] ? kasan_save_alloc_info+0x3a/0x50 [ 33.744741][ T397] ? __kasan_slab_alloc+0x73/0x90 [ 33.744812][ T397] ? init_file+0x9e/0x210 [ 33.744885][ T397] ? alloc_empty_file+0xd9/0x270 [ 33.744960][ T397] fs_context_for_mount+0x26/0x40 [ 33.745044][ T397] vfs_kern_mount+0x2e/0x170 [ 33.745134][ T397] vfs_submount+0x97/0xb0 [ 33.745221][ T397] trace_automount+0x3b/0x80 [ 33.745301][ T397] ? __cfi_trace_automount+0x10/0x10 [ 33.745400][ T397] debugfs_automount+0xce/0xf0 [ 33.745472][ T397] __traverse_mounts+0x339/0x600 [ 33.745530][ T397] step_into+0x51f/0xf10 [ 33.745552][ T397] ? read_word_at_a_time+0x1a/0x40 [ 33.745615][ T397] ? set_root+0x420/0x420 [ 33.745689][ T397] ? inode_permission+0xf3/0x4c0 [ 33.745771][ T397] link_path_walk+0x746/0xeb0 [ 33.745834][ T397] path_openat+0x298/0x35a0 [ 33.745966][ T397] ? kasan_save_alloc_info+0x3a/0x50 [ 33.746019][ T397] ? __kasan_slab_alloc+0x73/0x90 [ 33.746091][ T397] ? getname+0x1b/0x30 [ 33.746160][ T397] ? x64_sys_call+0xe69/0x2ee0 [ 33.746213][ T397] ? do_syscall_64+0x57/0xf0 [ 33.746281][ T397] ? do_filp_open+0x440/0x440 [ 33.746376][ T397] do_filp_open+0x1f2/0x440 [ 33.746466][ T397] ? __cfi_do_filp_open+0x10/0x10 [ 33.746558][ T397] ? alloc_fd+0x4c1/0x570 [ 33.746624][ T397] do_sys_openat2+0x134/0x1d0 [ 33.746715][ T397] ? do_sys_open+0x100/0x100 [ 33.746806][ T397] __x64_sys_openat+0x13a/0x170 [ 33.746904][ T397] x64_sys_call+0xe69/0x2ee0 [ 33.746963][ T397] do_syscall_64+0x57/0xf0 [ 33.747025][ T397] ? clear_bhb_loop+0x50/0xa0 [ 33.747149][ T397] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.747214][ T397] RIP: 0033:0x7fa8fab9e159 [ 33.747260][ T397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.747299][ T397] RSP: 002b:00007fa8fb99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.747365][ T397] RAX: ffffffffffffffda RBX: 00007fa8fae26090 RCX: 00007fa8fab9e159 [ 33.747415][ T397] RDX: 0000000000002d80 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 33.747454][ T397] RBP: 00007fa8fac3503b R08: 0000000000000000 R09: 0000000000000000 [ 33.747492][ T397] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000000 [ 33.747528][ T397] R13: 00007fa8fae26128 R14: 00007fa8fae26090 R15: 00007ffc89671188 [ 33.747575][ T397] [ 34.162104][ T67] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 34.171256][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.181464][ T67] usb 1-1: config 0 descriptor?? [ 34.188654][ T401] FAULT_INJECTION: forcing a failure. [ 34.188654][ T401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.191598][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 34.204026][ T401] CPU: 1 UID: 0 PID: 401 Comm: syz.2.29 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 34.204100][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.204133][ T401] Call Trace: [ 34.204152][ T401] [ 34.204173][ T401] __dump_stack+0x21/0x30 [ 34.204287][ T401] dump_stack_lvl+0x140/0x1c0 [ 34.204377][ T401] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.204450][ T401] ? check_stack_object+0x138/0x150 [ 34.204507][ T401] dump_stack+0x19/0x20 [ 34.204566][ T401] should_fail_ex+0x3c2/0x510 [ 34.204675][ T401] should_fail+0xf/0x20 [ 34.204744][ T401] should_fail_usercopy+0x1e/0x30 [ 34.204813][ T401] _copy_to_user+0x24/0xa0 [ 34.204883][ T401] simple_read_from_buffer+0xed/0x160 [ 34.204957][ T401] proc_fail_nth_read+0x1aa/0x220 [ 34.205050][ T401] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 34.205117][ T401] ? bpf_lsm_file_permission+0xd/0x20 [ 34.205195][ T401] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 34.205274][ T401] vfs_read+0x28b/0xc70 [ 34.205337][ T401] ? __cfi_vfs_read+0x10/0x10 [ 34.205398][ T401] ? __kasan_check_write+0x18/0x20 [ 34.205451][ T401] ? mutex_lock+0x97/0x1d0 [ 34.205511][ T401] ? __cfi_mutex_lock+0x10/0x10 [ 34.205582][ T401] ksys_read+0x145/0x260 [ 34.205635][ T401] ? __cfi_ksys_read+0x10/0x10 [ 34.205687][ T401] ? __kasan_check_read+0x15/0x20 [ 34.205732][ T401] __x64_sys_read+0x7f/0x90 [ 34.205784][ T401] x64_sys_call+0x2638/0x2ee0 [ 34.205835][ T401] do_syscall_64+0x57/0xf0 [ 34.205913][ T401] ? clear_bhb_loop+0x50/0xa0 [ 34.205983][ T401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.206074][ T401] RIP: 0033:0x7faa5d35e98e [ 34.206132][ T401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 34.206181][ T401] RSP: 002b:00007faa5e2a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.206244][ T401] RAX: ffffffffffffffda RBX: 00007faa5e2a76c0 RCX: 00007faa5d35e98e [ 34.206286][ T401] RDX: 000000000000000f RSI: 00007faa5e2a70a0 RDI: 0000000000000004 [ 34.206319][ T401] RBP: 00007faa5e2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.206352][ T401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.206405][ T401] R13: 00007faa5d626038 R14: 00007faa5d625fa0 R15: 00007ffc6222bbe8 [ 34.206455][ T401] [ 34.449141][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.459389][ T67] nintendo 0003:057E:2019.0001: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 34.471983][ T10] usb 3-1: can't set config #1, error -71 [ 34.485541][ T10] usb 3-1: USB disconnect, device number 2 [ 34.537246][ T415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34'. [ 34.615026][ T425] FAULT_INJECTION: forcing a failure. [ 34.615026][ T425] name failslab, interval 1, probability 0, space 0, times 0 [ 34.628493][ T425] CPU: 0 UID: 0 PID: 425 Comm: syz.1.39 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 34.628519][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.628531][ T425] Call Trace: [ 34.628537][ T425] [ 34.628544][ T425] __dump_stack+0x21/0x30 [ 34.628577][ T425] dump_stack_lvl+0x140/0x1c0 [ 34.628602][ T425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.628630][ T425] dump_stack+0x19/0x20 [ 34.628654][ T425] should_fail_ex+0x3c2/0x510 [ 34.628677][ T425] should_failslab+0xac/0x100 [ 34.628701][ T425] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 34.628722][ T425] ? v9fs_session_init+0xb7/0x18a0 [ 34.628742][ T425] kstrdup+0x4d/0x130 [ 34.628770][ T425] ? v9fs_session_init+0xa6/0x18a0 [ 34.628789][ T425] v9fs_session_init+0xb7/0x18a0 [ 34.628808][ T425] ? __cfi_v9fs_session_init+0x10/0x10 [ 34.628846][ T425] ? kasan_save_alloc_info+0x3a/0x50 [ 34.628864][ T425] ? __kasan_kmalloc+0x96/0xb0 [ 34.628886][ T425] ? __kmalloc_cache_noprof+0x23c/0x470 [ 34.628906][ T425] ? v9fs_mount+0xc1/0x9d0 [ 34.628928][ T425] v9fs_mount+0xdb/0x9d0 [ 34.628950][ T425] ? __cfi_v9fs_mount+0x10/0x10 [ 34.628972][ T425] ? selinux_capable+0x38/0x50 [ 34.628998][ T425] legacy_get_tree+0x106/0x1b0 [ 34.629024][ T425] ? __cfi_v9fs_mount+0x10/0x10 [ 34.629045][ T425] vfs_get_tree+0x9e/0x290 [ 34.629064][ T425] do_new_mount+0x251/0xb40 [ 34.629083][ T425] ? security_capable+0x44/0x130 [ 34.629106][ T425] path_mount+0x66a/0xff0 [ 34.629124][ T425] ? putname+0x113/0x150 [ 34.629145][ T425] __se_sys_mount+0x2bf/0x480 [ 34.629164][ T425] ? ksys_write+0x1f3/0x260 [ 34.629185][ T425] ? __x64_sys_mount+0xf0/0xf0 [ 34.629217][ T425] __x64_sys_mount+0xc3/0xf0 [ 34.629235][ T425] x64_sys_call+0x2021/0x2ee0 [ 34.629250][ T425] do_syscall_64+0x57/0xf0 [ 34.629265][ T425] ? clear_bhb_loop+0x50/0xa0 [ 34.629286][ T425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.629306][ T425] RIP: 0033:0x7fadbc79e159 [ 34.629320][ T425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.629337][ T425] RSP: 002b:00007fadbd73a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.629355][ T425] RAX: ffffffffffffffda RBX: 00007fadbca25fa0 RCX: 00007fadbc79e159 [ 34.629367][ T425] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 34.629379][ T425] RBP: 00007fadbd73a090 R08: 0000200000000100 R09: 0000000000000000 [ 34.629389][ T425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.629399][ T425] R13: 00007fadbca26038 R14: 00007fadbca25fa0 R15: 00007ffdf5994368 [ 34.629414][ T425] [ 35.224728][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.233611][ T444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'. [ 35.259132][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 35.259147][ T36] audit: type=1400 audit(1789468499.490:157): avc: denied { write } for pid=445 comm="syz.2.47" name="cgroup.subtree_control" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.288971][ T36] audit: type=1400 audit(1789468499.490:158): avc: denied { open } for pid=445 comm="syz.2.47" path="" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.312525][ T36] audit: type=1400 audit(1789468499.540:159): avc: denied { setopt } for pid=445 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.332082][ T36] audit: type=1400 audit(1789468499.540:160): avc: denied { name_bind } for pid=445 comm="syz.2.47" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.393768][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 35.400038][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.411084][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.422025][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.432835][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.443735][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.453929][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.462992][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.471733][ T10] usb 4-1: config 0 descriptor?? [ 35.477978][ T10] hub 4-1:0.0: Invalid hub with more than one config or interface [ 35.485885][ T10] hub 4-1:0.0: probe with driver hub failed with error -22 [ 35.500715][ T36] audit: type=1400 audit(1789468499.730:161): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.730267][ T36] audit: type=1400 audit(1789468499.960:162): avc: denied { block_suspend } for pid=438 comm="syz.3.44" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.796730][ T439] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2306 sclass=netlink_tcpdiag_socket pid=439 comm=syz.3.44 [ 35.863846][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 35.886728][ T10] usb 4-1: USB disconnect, device number 2 [ 35.921225][ T67] nintendo 0003:057E:2019.0001: Failed to get joycon info; ret=-71 [ 35.931001][ T67] nintendo 0003:057E:2019.0001: Failed to retrieve controller info; ret=-71 [ 35.942801][ T67] nintendo 0003:057E:2019.0001: Failed to initialize controller; ret=-71 [ 35.953152][ T67] nintendo 0003:057E:2019.0001: probe - fail = -71 [ 35.960300][ T67] nintendo 0003:057E:2019.0001: probe with driver nintendo failed with error -71 [ 35.970603][ T462] FAULT_INJECTION: forcing a failure. [ 35.970603][ T462] name failslab, interval 1, probability 0, space 0, times 0 [ 35.985058][ T67] usb 1-1: USB disconnect, device number 2 [ 35.991934][ T462] CPU: 0 UID: 0 PID: 462 Comm: syz.0.51 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 35.991963][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.991976][ T462] Call Trace: [ 35.991983][ T462] [ 35.991991][ T462] __dump_stack+0x21/0x30 [ 35.992024][ T462] dump_stack_lvl+0x140/0x1c0 [ 35.992053][ T462] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.992085][ T462] dump_stack+0x19/0x20 [ 35.992112][ T462] should_fail_ex+0x3c2/0x510 [ 35.992138][ T462] should_failslab+0xac/0x100 [ 35.992164][ T462] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 35.992188][ T462] ? v9fs_session_init+0xf9/0x18a0 [ 35.992209][ T462] ? kstrdup+0x7b/0x130 [ 35.992240][ T462] kstrdup+0x4d/0x130 [ 35.992270][ T462] v9fs_session_init+0xf9/0x18a0 [ 35.992293][ T462] ? __cfi_v9fs_session_init+0x10/0x10 [ 35.992313][ T462] ? kasan_save_alloc_info+0x3a/0x50 [ 35.992331][ T462] ? __kasan_kmalloc+0x96/0xb0 [ 35.992356][ T462] ? __kmalloc_cache_noprof+0x23c/0x470 [ 35.992378][ T462] ? v9fs_mount+0xc1/0x9d0 [ 35.992403][ T462] v9fs_mount+0xdb/0x9d0 [ 35.992429][ T462] ? __cfi_v9fs_mount+0x10/0x10 [ 35.992454][ T462] ? selinux_capable+0x38/0x50 [ 35.992484][ T462] legacy_get_tree+0x106/0x1b0 [ 35.992512][ T462] ? __cfi_v9fs_mount+0x10/0x10 [ 35.992538][ T462] vfs_get_tree+0x9e/0x290 [ 35.992559][ T462] do_new_mount+0x251/0xb40 [ 35.992580][ T462] ? security_capable+0x44/0x130 [ 35.992605][ T462] path_mount+0x66a/0xff0 [ 35.992626][ T462] ? putname+0x113/0x150 [ 35.992650][ T462] __se_sys_mount+0x2bf/0x480 [ 35.992672][ T462] ? ksys_write+0x1f3/0x260 [ 35.992694][ T462] ? __x64_sys_mount+0xf0/0xf0 [ 35.992718][ T462] __x64_sys_mount+0xc3/0xf0 [ 35.992740][ T462] x64_sys_call+0x2021/0x2ee0 [ 35.992759][ T462] do_syscall_64+0x57/0xf0 [ 35.992778][ T462] ? clear_bhb_loop+0x50/0xa0 [ 35.992815][ T462] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.992838][ T462] RIP: 0033:0x7f9004b9e159 [ 35.992856][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.992873][ T462] RSP: 002b:00007f90035f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.992895][ T462] RAX: ffffffffffffffda RBX: 00007f9004e25fa0 RCX: 00007f9004b9e159 [ 35.992910][ T462] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 35.992924][ T462] RBP: 00007f90035f7090 R08: 0000200000000100 R09: 0000000000000000 [ 35.992937][ T462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 35.992948][ T462] R13: 00007f9004e26038 R14: 00007f9004e25fa0 R15: 00007ffe71e83168 [ 35.992964][ T462] [ 36.282595][ T36] audit: type=1400 audit(1789468500.510:163): avc: denied { create } for pid=466 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.304725][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 36.315741][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.327011][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 36.338127][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 36.352514][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.361621][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.369699][ T9] usb 2-1: SerialNumber: syz [ 36.375527][ T455] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 36.441323][ T478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.58'. [ 36.481436][ T36] audit: type=1400 audit(1789468500.710:164): avc: denied { lock } for pid=481 comm="syz.0.60" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.506811][ T36] audit: type=1400 audit(1789468500.710:165): avc: denied { getattr } for pid=481 comm="syz.0.60" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.575232][ T487] FAULT_INJECTION: forcing a failure. [ 36.575232][ T487] name failslab, interval 1, probability 0, space 0, times 0 [ 36.588153][ T487] CPU: 0 UID: 0 PID: 487 Comm: syz.0.62 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 36.588185][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.588197][ T487] Call Trace: [ 36.588204][ T487] [ 36.588212][ T487] __dump_stack+0x21/0x30 [ 36.588251][ T487] dump_stack_lvl+0x140/0x1c0 [ 36.588280][ T487] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.588310][ T487] ? kasan_save_track+0x4f/0x80 [ 36.588335][ T487] ? kasan_save_track+0x3e/0x80 [ 36.588358][ T487] ? kasan_save_alloc_info+0x3a/0x50 [ 36.588379][ T487] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 36.588403][ T487] ? kstrdup+0x4d/0x130 [ 36.588434][ T487] dump_stack+0x19/0x20 [ 36.588461][ T487] should_fail_ex+0x3c2/0x510 [ 36.588488][ T487] should_failslab+0xac/0x100 [ 36.588515][ T487] __kmalloc_cache_noprof+0x41/0x470 [ 36.588539][ T487] ? p9_client_create+0xeb/0x12d0 [ 36.588568][ T487] p9_client_create+0xeb/0x12d0 [ 36.588595][ T487] ? __cfi_p9_client_create+0x10/0x10 [ 36.588621][ T487] ? __kasan_kmalloc+0x96/0xb0 [ 36.588647][ T487] ? __kmalloc_cache_noprof+0x23c/0x470 [ 36.588669][ T487] ? v9fs_mount+0xc1/0x9d0 [ 36.588695][ T487] ? kasan_save_alloc_info+0x3a/0x50 [ 36.588715][ T487] ? __kasan_kmalloc+0x96/0xb0 [ 36.588749][ T487] ? irqentry_exit+0x4a/0x60 [ 36.588775][ T487] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 36.588802][ T487] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 36.588832][ T487] v9fs_session_init+0x1c4/0x18a0 [ 36.588856][ T487] ? __cfi_v9fs_session_init+0x10/0x10 [ 36.588879][ T487] ? kasan_save_alloc_info+0x3a/0x50 [ 36.588898][ T487] ? __kasan_kmalloc+0x96/0xb0 [ 36.588924][ T487] ? __kmalloc_cache_noprof+0x23c/0x470 [ 36.588946][ T487] ? v9fs_mount+0xc1/0x9d0 [ 36.588972][ T487] v9fs_mount+0xdb/0x9d0 [ 36.588997][ T487] ? __cfi_v9fs_mount+0x10/0x10 [ 36.589024][ T487] ? selinux_capable+0x38/0x50 [ 36.589054][ T487] legacy_get_tree+0x106/0x1b0 [ 36.589085][ T487] ? __cfi_v9fs_mount+0x10/0x10 [ 36.589112][ T487] vfs_get_tree+0x9e/0x290 [ 36.589134][ T487] do_new_mount+0x251/0xb40 [ 36.589156][ T487] ? security_capable+0x44/0x130 [ 36.589183][ T487] path_mount+0x66a/0xff0 [ 36.589204][ T487] ? putname+0x113/0x150 [ 36.589229][ T487] __se_sys_mount+0x2bf/0x480 [ 36.589253][ T487] ? ksys_write+0x1f3/0x260 [ 36.589276][ T487] ? __x64_sys_mount+0xf0/0xf0 [ 36.589301][ T487] __x64_sys_mount+0xc3/0xf0 [ 36.589324][ T487] x64_sys_call+0x2021/0x2ee0 [ 36.589344][ T487] do_syscall_64+0x57/0xf0 [ 36.589363][ T487] ? clear_bhb_loop+0x50/0xa0 [ 36.589389][ T487] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.589414][ T487] RIP: 0033:0x7f9004b9e159 [ 36.589431][ T487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.589448][ T487] RSP: 002b:00007f90035f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.589470][ T487] RAX: ffffffffffffffda RBX: 00007f9004e25fa0 RCX: 00007f9004b9e159 [ 36.589485][ T487] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 36.589499][ T487] RBP: 00007f90035f7090 R08: 0000200000000100 R09: 0000000000000000 [ 36.589513][ T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.589526][ T487] R13: 00007f9004e26038 R14: 00007f9004e25fa0 R15: 00007ffe71e83168 [ 36.589544][ T487] [ 36.929335][ T36] audit: type=1400 audit(1789468501.170:166): avc: denied { write } for pid=452 comm="syz.1.50" name="ip6_mr_vif" dev="proc" ino=4026532420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.175544][ T502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'. [ 37.368342][ T519] FAULT_INJECTION: forcing a failure. [ 37.368342][ T519] name failslab, interval 1, probability 0, space 0, times 0 [ 37.413704][ T519] CPU: 1 UID: 0 PID: 519 Comm: syz.2.75 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 37.413740][ T519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.413754][ T519] Call Trace: [ 37.413762][ T519] [ 37.413771][ T519] __dump_stack+0x21/0x30 [ 37.413807][ T519] dump_stack_lvl+0x140/0x1c0 [ 37.413837][ T519] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.413869][ T519] dump_stack+0x19/0x20 [ 37.413899][ T519] should_fail_ex+0x3c2/0x510 [ 37.413925][ T519] should_failslab+0xac/0x100 [ 37.413952][ T519] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 37.413977][ T519] ? __kasan_kmalloc+0x96/0xb0 [ 37.414002][ T519] ? p9_client_create+0x32c/0x12d0 [ 37.414033][ T519] kstrdup+0x4d/0x130 [ 37.414064][ T519] p9_client_create+0x32c/0x12d0 [ 37.414091][ T519] ? __cfi_p9_client_create+0x10/0x10 [ 37.414120][ T519] ? __kasan_kmalloc+0x96/0xb0 [ 37.414146][ T519] ? __kmalloc_cache_noprof+0x23c/0x470 [ 37.414178][ T519] ? v9fs_mount+0xc1/0x9d0 [ 37.414204][ T519] ? kasan_save_alloc_info+0x3a/0x50 [ 37.414225][ T519] ? __kasan_kmalloc+0x96/0xb0 [ 37.414252][ T519] ? kstrdup+0x7b/0x130 [ 37.414282][ T519] ? __asan_memset+0x39/0x50 [ 37.414305][ T519] v9fs_session_init+0x1c4/0x18a0 [ 37.414329][ T519] ? __cfi_v9fs_session_init+0x10/0x10 [ 37.414352][ T519] ? kasan_save_alloc_info+0x3a/0x50 [ 37.414371][ T519] ? __kasan_kmalloc+0x96/0xb0 [ 37.414398][ T519] ? __kmalloc_cache_noprof+0x23c/0x470 [ 37.414421][ T519] ? v9fs_mount+0xc1/0x9d0 [ 37.414448][ T519] v9fs_mount+0xdb/0x9d0 [ 37.414474][ T519] ? __cfi_v9fs_mount+0x10/0x10 [ 37.414501][ T519] ? selinux_capable+0x38/0x50 [ 37.414531][ T519] legacy_get_tree+0x106/0x1b0 [ 37.414581][ T519] ? __cfi_v9fs_mount+0x10/0x10 [ 37.414605][ T519] vfs_get_tree+0x9e/0x290 [ 37.414628][ T519] do_new_mount+0x251/0xb40 [ 37.414650][ T519] ? security_capable+0x44/0x130 [ 37.414679][ T519] path_mount+0x66a/0xff0 [ 37.414702][ T519] ? putname+0x113/0x150 [ 37.414732][ T519] __se_sys_mount+0x2bf/0x480 [ 37.414756][ T519] ? ksys_write+0x1f3/0x260 [ 37.414779][ T519] ? __x64_sys_mount+0xf0/0xf0 [ 37.414804][ T519] __x64_sys_mount+0xc3/0xf0 [ 37.414827][ T519] x64_sys_call+0x2021/0x2ee0 [ 37.414849][ T519] do_syscall_64+0x57/0xf0 [ 37.414868][ T519] ? clear_bhb_loop+0x50/0xa0 [ 37.414894][ T519] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.414919][ T519] RIP: 0033:0x7faa5d39e159 [ 37.414937][ T519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.414955][ T519] RSP: 002b:00007faa5e2a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.414978][ T519] RAX: ffffffffffffffda RBX: 00007faa5d625fa0 RCX: 00007faa5d39e159 [ 37.414994][ T519] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 37.415008][ T519] RBP: 00007faa5e2a7090 R08: 0000200000000100 R09: 0000000000000000 [ 37.415022][ T519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.415034][ T519] R13: 00007faa5d626038 R14: 00007faa5d625fa0 R15: 00007ffc6222bbe8 [ 37.415052][ T519] [ 37.779699][ T525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.788364][ T525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.813097][ T531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 37.916161][ T535] kvm: apic: phys broadcast and lowest prio [ 37.997331][ T525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.014636][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.022857][ T525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.184898][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.201273][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 38.210698][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.222235][ T31] usb 3-1: config 0 descriptor?? [ 38.295827][ T552] FAULT_INJECTION: forcing a failure. [ 38.295827][ T552] name failslab, interval 1, probability 0, space 0, times 0 [ 38.311782][ T552] CPU: 0 UID: 0 PID: 552 Comm: syz.0.86 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 38.311812][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.311828][ T552] Call Trace: [ 38.311834][ T552] [ 38.311841][ T552] __dump_stack+0x21/0x30 [ 38.311873][ T552] dump_stack_lvl+0x140/0x1c0 [ 38.311901][ T552] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.311933][ T552] dump_stack+0x19/0x20 [ 38.311962][ T552] should_fail_ex+0x3c2/0x510 [ 38.311989][ T552] should_failslab+0xac/0x100 [ 38.312016][ T552] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 38.312040][ T552] ? match_token+0x520/0x5a0 [ 38.312060][ T552] ? match_strdup+0x65/0x80 [ 38.312082][ T552] kmemdup_nul+0x5a/0x1a0 [ 38.312102][ T552] match_strdup+0x65/0x80 [ 38.312123][ T552] p9_client_create+0x3fa/0x12d0 [ 38.312151][ T552] ? __cfi_p9_client_create+0x10/0x10 [ 38.312177][ T552] ? __kasan_kmalloc+0x96/0xb0 [ 38.312203][ T552] ? __kmalloc_cache_noprof+0x23c/0x470 [ 38.312226][ T552] ? v9fs_mount+0xc1/0x9d0 [ 38.312250][ T552] ? kasan_save_alloc_info+0x3a/0x50 [ 38.312270][ T552] ? __kasan_kmalloc+0x96/0xb0 [ 38.312296][ T552] ? kstrdup+0x7b/0x130 [ 38.312336][ T552] ? __asan_memset+0x39/0x50 [ 38.312358][ T552] v9fs_session_init+0x1c4/0x18a0 [ 38.312380][ T552] ? __cfi_v9fs_session_init+0x10/0x10 [ 38.312403][ T552] ? kasan_save_alloc_info+0x3a/0x50 [ 38.312422][ T552] ? __kasan_kmalloc+0x96/0xb0 [ 38.312448][ T552] ? __kmalloc_cache_noprof+0x23c/0x470 [ 38.312472][ T552] ? v9fs_mount+0xc1/0x9d0 [ 38.312497][ T552] v9fs_mount+0xdb/0x9d0 [ 38.312534][ T552] ? __cfi_v9fs_mount+0x10/0x10 [ 38.312560][ T552] ? selinux_capable+0x38/0x50 [ 38.312589][ T552] legacy_get_tree+0x106/0x1b0 [ 38.312619][ T552] ? __cfi_v9fs_mount+0x10/0x10 [ 38.312645][ T552] vfs_get_tree+0x9e/0x290 [ 38.312666][ T552] do_new_mount+0x251/0xb40 [ 38.312688][ T552] ? security_capable+0x44/0x130 [ 38.312714][ T552] path_mount+0x66a/0xff0 [ 38.312736][ T552] ? putname+0x113/0x150 [ 38.312761][ T552] __se_sys_mount+0x2bf/0x480 [ 38.312783][ T552] ? ksys_write+0x1f3/0x260 [ 38.312803][ T552] ? __x64_sys_mount+0xf0/0xf0 [ 38.312828][ T552] __x64_sys_mount+0xc3/0xf0 [ 38.312885][ T552] x64_sys_call+0x2021/0x2ee0 [ 38.312907][ T552] do_syscall_64+0x57/0xf0 [ 38.312925][ T552] ? clear_bhb_loop+0x50/0xa0 [ 38.312948][ T552] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.312975][ T552] RIP: 0033:0x7f9004b9e159 [ 38.312988][ T552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.313001][ T552] RSP: 002b:00007f90035f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.313019][ T552] RAX: ffffffffffffffda RBX: 00007f9004e25fa0 RCX: 00007f9004b9e159 [ 38.313047][ T552] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 38.313061][ T552] RBP: 00007f90035f7090 R08: 0000200000000100 R09: 0000000000000000 [ 38.313075][ T552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.313086][ T552] R13: 00007f9004e26038 R14: 00007f9004e25fa0 R15: 00007ffe71e83168 [ 38.313103][ T552] [ 38.437587][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.637157][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.647474][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.658114][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.667055][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.677158][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.691840][ T31] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 38.699982][ T31] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4 [ 38.713823][ T31] usb 3-1: USB disconnect, device number 3 [ 38.713859][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 38.738795][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 38.762437][ T9] usb 2-1: USB disconnect, device number 2 [ 38.783473][ T563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 39.053732][ T67] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.143749][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.206290][ T67] usb 4-1: config 0 has no interfaces? [ 39.211810][ T67] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 39.221467][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.233792][ T67] usb 4-1: config 0 descriptor?? [ 39.295279][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.303133][ T9] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 39.312300][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 39.319924][ T9] usb 2-1: can't read configurations, error -61 [ 39.378573][ T581] FAULT_INJECTION: forcing a failure. [ 39.378573][ T581] name failslab, interval 1, probability 0, space 0, times 0 [ 39.391321][ T581] CPU: 0 UID: 0 PID: 581 Comm: syz.0.98 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 39.391351][ T581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.391365][ T581] Call Trace: [ 39.391372][ T581] [ 39.391380][ T581] __dump_stack+0x21/0x30 [ 39.391414][ T581] dump_stack_lvl+0x140/0x1c0 [ 39.391445][ T581] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.391475][ T581] dump_stack+0x19/0x20 [ 39.391503][ T581] should_fail_ex+0x3c2/0x510 [ 39.391530][ T581] should_failslab+0xac/0x100 [ 39.391557][ T581] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 39.391583][ T581] ? match_token+0x520/0x5a0 [ 39.391602][ T581] ? match_strdup+0x65/0x80 [ 39.391623][ T581] kmemdup_nul+0x5a/0x1a0 [ 39.391643][ T581] match_strdup+0x65/0x80 [ 39.391663][ T581] p9_client_create+0x3fa/0x12d0 [ 39.391691][ T581] ? __cfi_p9_client_create+0x10/0x10 [ 39.391717][ T581] ? __kasan_kmalloc+0x96/0xb0 [ 39.391742][ T581] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.391769][ T581] ? v9fs_mount+0xc1/0x9d0 [ 39.391795][ T581] ? kasan_save_alloc_info+0x3a/0x50 [ 39.391816][ T581] ? __kasan_kmalloc+0x96/0xb0 [ 39.391842][ T581] ? kstrdup+0x7b/0x130 [ 39.391872][ T581] ? __asan_memset+0x39/0x50 [ 39.391894][ T581] v9fs_session_init+0x1c4/0x18a0 [ 39.391919][ T581] ? __cfi_v9fs_session_init+0x10/0x10 [ 39.391941][ T581] ? kasan_save_alloc_info+0x3a/0x50 [ 39.391960][ T581] ? __kasan_kmalloc+0x96/0xb0 [ 39.391994][ T581] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.392017][ T581] ? v9fs_mount+0xc1/0x9d0 [ 39.392042][ T581] v9fs_mount+0xdb/0x9d0 [ 39.392067][ T581] ? __cfi_v9fs_mount+0x10/0x10 [ 39.392093][ T581] ? selinux_capable+0x38/0x50 [ 39.392122][ T581] legacy_get_tree+0x106/0x1b0 [ 39.392150][ T581] ? __cfi_v9fs_mount+0x10/0x10 [ 39.392175][ T581] vfs_get_tree+0x9e/0x290 [ 39.392197][ T581] do_new_mount+0x251/0xb40 [ 39.392218][ T581] ? security_capable+0x44/0x130 [ 39.392244][ T581] path_mount+0x66a/0xff0 [ 39.392264][ T581] ? putname+0x113/0x150 [ 39.392289][ T581] __se_sys_mount+0x2bf/0x480 [ 39.392311][ T581] ? ksys_write+0x1f3/0x260 [ 39.392334][ T581] ? __x64_sys_mount+0xf0/0xf0 [ 39.392358][ T581] __x64_sys_mount+0xc3/0xf0 [ 39.392382][ T581] x64_sys_call+0x2021/0x2ee0 [ 39.392402][ T581] do_syscall_64+0x57/0xf0 [ 39.392421][ T581] ? clear_bhb_loop+0x50/0xa0 [ 39.392448][ T581] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.392474][ T581] RIP: 0033:0x7f9004b9e159 [ 39.392491][ T581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.392509][ T581] RSP: 002b:00007f90035f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.392531][ T581] RAX: ffffffffffffffda RBX: 00007f9004e25fa0 RCX: 00007f9004b9e159 [ 39.392547][ T581] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 39.392561][ T581] RBP: 00007f90035f7090 R08: 0000200000000100 R09: 0000000000000000 [ 39.392574][ T581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.392586][ T581] R13: 00007f9004e26038 R14: 00007f9004e25fa0 R15: 00007ffe71e83168 [ 39.392604][ T581] [ 39.763754][ T67] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.771533][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.795430][ T588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.804489][ T588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.907051][ T10] usb 4-1: USB disconnect, device number 3 [ 39.923769][ T67] usb 3-1: Using ep0 maxpacket: 32 [ 39.930176][ T67] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.940370][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.948092][ T9] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 39.956098][ T67] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.966222][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 39.973872][ T9] usb 2-1: can't read configurations, error -61 [ 39.980346][ T9] usb usb2-port1: attempt power cycle [ 39.985995][ T67] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 39.995222][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.003217][ T67] usb 3-1: Product: syz [ 40.007484][ T67] usb 3-1: Manufacturer: syz [ 40.012100][ T67] usb 3-1: SerialNumber: syz [ 40.224065][ T579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 40.363753][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.385411][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.393160][ T9] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 40.402106][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.409771][ T9] usb 2-1: can't read configurations, error -61 [ 40.460927][ T599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.103'. [ 40.483434][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 40.483452][ T36] audit: type=1400 audit(1789468504.710:183): avc: denied { write } for pid=600 comm="syz.3.104" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.513375][ T36] audit: type=1400 audit(1789468504.710:184): avc: denied { ioctl } for pid=600 comm="syz.3.104" path="socket:[5810]" dev="sockfs" ino=5810 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.563753][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.585562][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.594628][ T9] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 40.603557][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.611708][ T9] usb 2-1: can't read configurations, error -61 [ 40.618240][ T9] usb usb2-port1: unable to enumerate USB device [ 40.668438][ T36] audit: type=1400 audit(1789468504.900:185): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 40.699118][ T610] FAULT_INJECTION: forcing a failure. [ 40.699118][ T610] name failslab, interval 1, probability 0, space 0, times 0 [ 40.712044][ T610] CPU: 0 UID: 0 PID: 610 Comm: syz.3.108 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 40.712072][ T610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.712083][ T610] Call Trace: [ 40.712090][ T610] [ 40.712097][ T610] __dump_stack+0x21/0x30 [ 40.712131][ T610] dump_stack_lvl+0x140/0x1c0 [ 40.712157][ T610] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.712183][ T610] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 40.712202][ T610] ? stack_depot_save_flags+0x399/0x800 [ 40.712227][ T610] dump_stack+0x19/0x20 [ 40.712252][ T610] should_fail_ex+0x3c2/0x510 [ 40.712274][ T610] should_failslab+0xac/0x100 [ 40.712298][ T610] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 40.712319][ T610] ? __x64_sys_mount+0xc3/0xf0 [ 40.712346][ T610] ? do_syscall_64+0x57/0xf0 [ 40.712362][ T610] ? parse_opts+0x189/0x5d0 [ 40.712380][ T610] kstrdup+0x4d/0x130 [ 40.712407][ T610] parse_opts+0x189/0x5d0 [ 40.712424][ T610] ? p9_fd_show_options+0x1c0/0x1c0 [ 40.712445][ T610] p9_fd_create+0x39/0x4c0 [ 40.712463][ T610] p9_client_create+0x89a/0x12d0 [ 40.712488][ T610] ? __cfi_p9_client_create+0x10/0x10 [ 40.712510][ T610] ? __kasan_kmalloc+0x96/0xb0 [ 40.712533][ T610] ? __kmalloc_cache_noprof+0x23c/0x470 [ 40.712553][ T610] ? v9fs_mount+0xc1/0x9d0 [ 40.712575][ T610] ? kasan_save_alloc_info+0x3a/0x50 [ 40.712593][ T610] ? __kasan_kmalloc+0x96/0xb0 [ 40.712615][ T610] ? kstrdup+0x7b/0x130 [ 40.712641][ T610] ? __asan_memset+0x39/0x50 [ 40.712659][ T610] v9fs_session_init+0x1c4/0x18a0 [ 40.712680][ T610] ? __cfi_v9fs_session_init+0x10/0x10 [ 40.712699][ T610] ? kasan_save_alloc_info+0x3a/0x50 [ 40.712716][ T610] ? __kasan_kmalloc+0x96/0xb0 [ 40.712738][ T610] ? __kmalloc_cache_noprof+0x23c/0x470 [ 40.712757][ T610] ? v9fs_mount+0xc1/0x9d0 [ 40.712779][ T610] v9fs_mount+0xdb/0x9d0 [ 40.712802][ T610] ? __cfi_v9fs_mount+0x10/0x10 [ 40.712824][ T610] ? selinux_capable+0x38/0x50 [ 40.712851][ T610] legacy_get_tree+0x106/0x1b0 [ 40.712875][ T610] ? __cfi_v9fs_mount+0x10/0x10 [ 40.712898][ T610] vfs_get_tree+0x9e/0x290 [ 40.712916][ T610] do_new_mount+0x251/0xb40 [ 40.712935][ T610] ? security_capable+0x44/0x130 [ 40.712957][ T610] path_mount+0x66a/0xff0 [ 40.712975][ T610] ? putname+0x113/0x150 [ 40.712996][ T610] __se_sys_mount+0x2bf/0x480 [ 40.713016][ T610] ? ksys_write+0x1f3/0x260 [ 40.713035][ T610] ? __x64_sys_mount+0xf0/0xf0 [ 40.713055][ T610] __x64_sys_mount+0xc3/0xf0 [ 40.713076][ T610] x64_sys_call+0x2021/0x2ee0 [ 40.713092][ T610] do_syscall_64+0x57/0xf0 [ 40.713108][ T610] ? clear_bhb_loop+0x50/0xa0 [ 40.713130][ T610] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.713151][ T610] RIP: 0033:0x7fa8fab9e159 [ 40.713167][ T610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.713181][ T610] RSP: 002b:00007fa8fb9be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.713200][ T610] RAX: ffffffffffffffda RBX: 00007fa8fae25fa0 RCX: 00007fa8fab9e159 [ 40.713214][ T610] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 40.713227][ T610] RBP: 00007fa8fb9be090 R08: 0000200000000100 R09: 0000000000000000 [ 40.713239][ T610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.713249][ T610] R13: 00007fa8fae26038 R14: 00007fa8fae25fa0 R15: 00007ffc89671188 [ 40.713265][ T610] [ 41.064633][ T36] audit: type=1400 audit(1789468505.300:186): avc: denied { unlink } for pid=612 comm="syz.3.110" name="#1" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.086697][ T36] audit: type=1400 audit(1789468505.300:187): avc: denied { mount } for pid=612 comm="syz.3.110" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.174216][ T36] audit: type=1400 audit(1789468505.370:188): avc: denied { setopt } for pid=623 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.191010][ T628] ======================================================= [ 41.191010][ T628] WARNING: The mand mount option has been deprecated and [ 41.191010][ T628] and is ignored by this kernel. Remove the mand [ 41.191010][ T628] option from the mount to silence this warning. [ 41.191010][ T628] ======================================================= [ 41.204169][ T36] audit: type=1400 audit(1789468505.370:189): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.231830][ T630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.115'. [ 41.248150][ T36] audit: type=1400 audit(1789468505.390:190): avc: denied { bind } for pid=623 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.275653][ T36] audit: type=1400 audit(1789468505.400:191): avc: denied { mount } for pid=627 comm="syz.3.114" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 41.297859][ T36] audit: type=1400 audit(1789468505.410:192): avc: denied { create } for pid=627 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.373477][ T639] FAULT_INJECTION: forcing a failure. [ 41.373477][ T639] name failslab, interval 1, probability 0, space 0, times 0 [ 41.389736][ T639] CPU: 1 UID: 0 PID: 639 Comm: syz.3.119 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 41.389767][ T639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.389781][ T639] Call Trace: [ 41.389788][ T639] [ 41.389796][ T639] __dump_stack+0x21/0x30 [ 41.389832][ T639] dump_stack_lvl+0x140/0x1c0 [ 41.389870][ T639] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.389900][ T639] ? parse_opts+0x435/0x5d0 [ 41.389921][ T639] dump_stack+0x19/0x20 [ 41.389949][ T639] should_fail_ex+0x3c2/0x510 [ 41.389977][ T639] should_failslab+0xac/0x100 [ 41.390004][ T639] __kmalloc_cache_noprof+0x41/0x470 [ 41.390028][ T639] ? p9_fd_create+0x103/0x4c0 [ 41.390050][ T639] p9_fd_create+0x103/0x4c0 [ 41.390072][ T639] p9_client_create+0x89a/0x12d0 [ 41.390100][ T639] ? __cfi_p9_client_create+0x10/0x10 [ 41.390127][ T639] ? __kasan_kmalloc+0x96/0xb0 [ 41.390152][ T639] ? __kmalloc_cache_noprof+0x23c/0x470 [ 41.390174][ T639] ? v9fs_mount+0xc1/0x9d0 [ 41.390199][ T639] ? kasan_save_alloc_info+0x3a/0x50 [ 41.390218][ T639] ? __kasan_kmalloc+0x96/0xb0 [ 41.390247][ T639] ? kstrdup+0x7b/0x130 [ 41.390278][ T639] ? __asan_memset+0x39/0x50 [ 41.390298][ T639] v9fs_session_init+0x1c4/0x18a0 [ 41.390322][ T639] ? __cfi_v9fs_session_init+0x10/0x10 [ 41.390343][ T639] ? kasan_save_alloc_info+0x3a/0x50 [ 41.390363][ T639] ? __kasan_kmalloc+0x96/0xb0 [ 41.390390][ T639] ? __kmalloc_cache_noprof+0x23c/0x470 [ 41.390412][ T639] ? v9fs_mount+0xc1/0x9d0 [ 41.390438][ T639] v9fs_mount+0xdb/0x9d0 [ 41.390462][ T639] ? __cfi_v9fs_mount+0x10/0x10 [ 41.390489][ T639] ? selinux_capable+0x38/0x50 [ 41.390519][ T639] legacy_get_tree+0x106/0x1b0 [ 41.390551][ T639] ? __cfi_v9fs_mount+0x10/0x10 [ 41.390577][ T639] vfs_get_tree+0x9e/0x290 [ 41.390600][ T639] do_new_mount+0x251/0xb40 [ 41.390622][ T639] ? security_capable+0x44/0x130 [ 41.390648][ T639] path_mount+0x66a/0xff0 [ 41.390669][ T639] ? putname+0x113/0x150 [ 41.390693][ T639] __se_sys_mount+0x2bf/0x480 [ 41.390715][ T639] ? ksys_write+0x1f3/0x260 [ 41.390737][ T639] ? __x64_sys_mount+0xf0/0xf0 [ 41.390761][ T639] __x64_sys_mount+0xc3/0xf0 [ 41.390784][ T639] x64_sys_call+0x2021/0x2ee0 [ 41.390804][ T639] do_syscall_64+0x57/0xf0 [ 41.390823][ T639] ? clear_bhb_loop+0x50/0xa0 [ 41.390850][ T639] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.390883][ T639] RIP: 0033:0x7fa8fab9e159 [ 41.390900][ T639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.390918][ T639] RSP: 002b:00007fa8fb9be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.390939][ T639] RAX: ffffffffffffffda RBX: 00007fa8fae25fa0 RCX: 00007fa8fab9e159 [ 41.390953][ T639] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 41.390967][ T639] RBP: 00007fa8fb9be090 R08: 0000200000000100 R09: 0000000000000000 [ 41.390979][ T639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.390992][ T639] R13: 00007fa8fae26038 R14: 00007fa8fae25fa0 R15: 00007ffc89671188 [ 41.391009][ T639] [ 41.500669][ T643] fuse: Bad value for 'fd' [ 41.717486][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.729565][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.739555][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.748805][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.757758][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.772927][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.787164][ T658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.126'. [ 41.792346][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.835624][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.856006][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.866778][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.922150][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.975634][ T683] FAULT_INJECTION: forcing a failure. [ 41.975634][ T683] name failslab, interval 1, probability 0, space 0, times 0 [ 42.003173][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.013758][ T683] CPU: 1 UID: 0 PID: 683 Comm: syz.0.132 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 42.013791][ T683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.013805][ T683] Call Trace: [ 42.013812][ T683] [ 42.013821][ T683] __dump_stack+0x21/0x30 [ 42.013857][ T683] dump_stack_lvl+0x140/0x1c0 [ 42.013886][ T683] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.013916][ T683] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 42.013939][ T683] dump_stack+0x19/0x20 [ 42.013970][ T683] should_fail_ex+0x3c2/0x510 [ 42.013996][ T683] should_failslab+0xac/0x100 [ 42.014024][ T683] kmem_cache_alloc_noprof+0x42/0x410 [ 42.014047][ T683] ? p9_client_prepare_req+0x175/0xa50 [ 42.014080][ T683] p9_client_prepare_req+0x175/0xa50 [ 42.014113][ T683] ? __se_sys_mount+0x2bf/0x480 [ 42.014137][ T683] ? trace_raw_output_9p_fid_ref+0x190/0x190 [ 42.014190][ T683] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 42.014212][ T683] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 42.014235][ T683] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 42.014256][ T683] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 42.014279][ T683] p9_client_rpc+0x191/0xb50 [ 42.014307][ T683] ? unix_poll+0x367/0x420 [ 42.014333][ T683] ? p9_fid_create+0x3d0/0x3d0 [ 42.014360][ T683] ? __cfi_sock_poll+0x10/0x10 [ 42.014381][ T683] ? __kasan_check_write+0x18/0x20 [ 42.014403][ T683] ? p9_conn_create+0x4f2/0x590 [ 42.014425][ T683] ? p9_fd_create+0x2f4/0x4c0 [ 42.014447][ T683] p9_client_create+0xa26/0x12d0 [ 42.014475][ T683] ? __cfi_p9_client_create+0x10/0x10 [ 42.014504][ T683] ? __kasan_kmalloc+0x96/0xb0 [ 42.014531][ T683] ? __kmalloc_cache_noprof+0x23c/0x470 [ 42.014554][ T683] ? v9fs_mount+0xc1/0x9d0 [ 42.014581][ T683] ? kasan_save_alloc_info+0x3a/0x50 [ 42.014601][ T683] ? __kasan_kmalloc+0x96/0xb0 [ 42.014629][ T683] ? kstrdup+0x7b/0x130 [ 42.014662][ T683] ? __asan_memset+0x39/0x50 [ 42.014684][ T683] v9fs_session_init+0x1c4/0x18a0 [ 42.014716][ T683] ? __cfi_v9fs_session_init+0x10/0x10 [ 42.014738][ T683] ? kasan_save_alloc_info+0x3a/0x50 [ 42.014759][ T683] ? __kasan_kmalloc+0x96/0xb0 [ 42.014787][ T683] ? __kmalloc_cache_noprof+0x23c/0x470 [ 42.014811][ T683] ? v9fs_mount+0xc1/0x9d0 [ 42.014839][ T683] v9fs_mount+0xdb/0x9d0 [ 42.014865][ T683] ? __cfi_v9fs_mount+0x10/0x10 [ 42.014892][ T683] ? selinux_capable+0x38/0x50 [ 42.014924][ T683] legacy_get_tree+0x106/0x1b0 [ 42.014953][ T683] ? __cfi_v9fs_mount+0x10/0x10 [ 42.014979][ T683] vfs_get_tree+0x9e/0x290 [ 42.015002][ T683] do_new_mount+0x251/0xb40 [ 42.015024][ T683] ? security_capable+0x44/0x130 [ 42.015053][ T683] path_mount+0x66a/0xff0 [ 42.015074][ T683] ? putname+0x113/0x150 [ 42.015099][ T683] __se_sys_mount+0x2bf/0x480 [ 42.015123][ T683] ? __x64_sys_mount+0xf0/0xf0 [ 42.015146][ T683] ? handle_softirqs+0x54c/0x620 [ 42.015171][ T683] __x64_sys_mount+0xc3/0xf0 [ 42.015195][ T683] x64_sys_call+0x2021/0x2ee0 [ 42.015216][ T683] do_syscall_64+0x57/0xf0 [ 42.015234][ T683] ? clear_bhb_loop+0x50/0xa0 [ 42.015261][ T683] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.015286][ T683] RIP: 0033:0x7f9004b9e159 [ 42.015305][ T683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.015323][ T683] RSP: 002b:00007f90035f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.015347][ T683] RAX: ffffffffffffffda RBX: 00007f9004e25fa0 RCX: 00007f9004b9e159 [ 42.015363][ T683] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 42.015376][ T683] RBP: 00007f90035f7090 R08: 0000200000000100 R09: 0000000000000000 [ 42.015390][ T683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.015402][ T683] R13: 00007f9004e26038 R14: 00007f9004e25fa0 R15: 00007ffe71e83168 [ 42.015420][ T683] [ 42.109217][ T643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.121'. [ 42.457210][ T704] Zero length message leads to an empty skb [ 42.489301][ T707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 42.617829][ T722] netlink: 96 bytes leftover after parsing attributes in process `syz.0.140'. [ 42.654436][ T672] cgroup: fork rejected by pids controller in /syz3 [ 42.859639][ T740] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 42.991172][ T750] FAULT_INJECTION: forcing a failure. [ 42.991172][ T750] name failslab, interval 1, probability 0, space 0, times 0 [ 43.007791][ T750] CPU: 1 UID: 0 PID: 750 Comm: syz.0.145 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 43.007828][ T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.007841][ T750] Call Trace: [ 43.007848][ T750] [ 43.007857][ T750] __dump_stack+0x21/0x30 [ 43.007893][ T750] dump_stack_lvl+0x140/0x1c0 [ 43.007924][ T750] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.007956][ T750] ? parse_opts+0x435/0x5d0 [ 43.007977][ T750] dump_stack+0x19/0x20 [ 43.008005][ T750] should_fail_ex+0x3c2/0x510 [ 43.008032][ T750] should_failslab+0xac/0x100 [ 43.008060][ T750] __kmalloc_cache_noprof+0x41/0x470 [ 43.008082][ T750] ? p9_fd_create+0x103/0x4c0 [ 43.008116][ T750] p9_fd_create+0x103/0x4c0 [ 43.008139][ T750] p9_client_create+0x89a/0x12d0 [ 43.008167][ T750] ? __cfi_p9_client_create+0x10/0x10 [ 43.008196][ T750] ? __kasan_kmalloc+0x96/0xb0 [ 43.008221][ T750] ? __kmalloc_cache_noprof+0x23c/0x470 [ 43.008246][ T750] ? v9fs_mount+0xc1/0x9d0 [ 43.008274][ T750] ? kasan_save_alloc_info+0x3a/0x50 [ 43.008293][ T750] ? __kasan_kmalloc+0x96/0xb0 [ 43.008319][ T750] ? kstrdup+0x7b/0x130 [ 43.008352][ T750] ? __asan_memset+0x39/0x50 [ 43.008375][ T750] v9fs_session_init+0x1c4/0x18a0 [ 43.008399][ T750] ? __cfi_v9fs_session_init+0x10/0x10 [ 43.008422][ T750] ? kasan_save_alloc_info+0x3a/0x50 [ 43.008443][ T750] ? __kasan_kmalloc+0x96/0xb0 [ 43.008470][ T750] ? __kmalloc_cache_noprof+0x23c/0x470 [ 43.008494][ T750] ? v9fs_mount+0xc1/0x9d0 [ 43.008521][ T750] v9fs_mount+0xdb/0x9d0 [ 43.008547][ T750] ? __cfi_v9fs_mount+0x10/0x10 [ 43.008574][ T750] ? selinux_capable+0x38/0x50 [ 43.008604][ T750] legacy_get_tree+0x106/0x1b0 [ 43.008635][ T750] ? __cfi_v9fs_mount+0x10/0x10 [ 43.008661][ T750] vfs_get_tree+0x9e/0x290 [ 43.008684][ T750] do_new_mount+0x251/0xb40 [ 43.008707][ T750] ? security_capable+0x44/0x130 [ 43.008734][ T750] path_mount+0x66a/0xff0 [ 43.008756][ T750] ? putname+0x113/0x150 [ 43.008783][ T750] __se_sys_mount+0x2bf/0x480 [ 43.008813][ T750] ? ksys_write+0x1f3/0x260 [ 43.008838][ T750] ? __x64_sys_mount+0xf0/0xf0 [ 43.008862][ T750] __x64_sys_mount+0xc3/0xf0 [ 43.008884][ T750] x64_sys_call+0x2021/0x2ee0 [ 43.008905][ T750] do_syscall_64+0x57/0xf0 [ 43.008926][ T750] ? clear_bhb_loop+0x50/0xa0 [ 43.008952][ T750] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.008975][ T750] RIP: 0033:0x7f9004b9e159 [ 43.008993][ T750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.009010][ T750] RSP: 002b:00007f90035f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.009033][ T750] RAX: ffffffffffffffda RBX: 00007f9004e25fa0 RCX: 00007f9004b9e159 [ 43.009049][ T750] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 43.009063][ T750] RBP: 00007f90035f7090 R08: 0000200000000100 R09: 0000000000000000 [ 43.009077][ T750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.009099][ T750] R13: 00007f9004e26038 R14: 00007f9004e25fa0 R15: 00007ffe71e83168 [ 43.009117][ T750] [ 43.350612][ T756] No source specified [ 43.354628][ T755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.149'. [ 43.415046][ T758] process 'syz.2.150' launched '/dev/fd/5' with NULL argv: empty string added [ 43.449201][ T758] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 43.481075][ T10] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 43.542746][ T771] fido_id[771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.613305][ T787] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 43.644463][ T789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.161'. [ 43.698698][ T792] FAULT_INJECTION: forcing a failure. [ 43.698698][ T792] name failslab, interval 1, probability 0, space 0, times 0 [ 43.712944][ T792] CPU: 0 UID: 0 PID: 792 Comm: syz.1.162 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 43.712976][ T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.712990][ T792] Call Trace: [ 43.712997][ T792] [ 43.713005][ T792] __dump_stack+0x21/0x30 [ 43.713041][ T792] dump_stack_lvl+0x140/0x1c0 [ 43.713074][ T792] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.713106][ T792] dump_stack+0x19/0x20 [ 43.713133][ T792] should_fail_ex+0x3c2/0x510 [ 43.713162][ T792] ? p9_fcall_init+0x12d/0x360 [ 43.713193][ T792] should_failslab+0xac/0x100 [ 43.713223][ T792] __kmalloc_noprof+0x69/0x510 [ 43.713248][ T792] ? p9_fcall_init+0x12d/0x360 [ 43.713278][ T792] ? __kasan_slab_alloc+0x73/0x90 [ 43.713307][ T792] p9_fcall_init+0x12d/0x360 [ 43.713338][ T792] ? p9_msg_buf_size+0x1911/0x2180 [ 43.713372][ T792] p9_client_prepare_req+0x2a6/0xa50 [ 43.713405][ T792] ? trace_raw_output_9p_fid_ref+0x190/0x190 [ 43.713437][ T792] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 43.713459][ T792] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 43.713481][ T792] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 43.713504][ T792] p9_client_rpc+0x191/0xb50 [ 43.713533][ T792] ? unix_poll+0x367/0x420 [ 43.713559][ T792] ? p9_fid_create+0x3d0/0x3d0 [ 43.713595][ T792] ? __cfi_sock_poll+0x10/0x10 [ 43.713615][ T792] ? __kasan_check_write+0x18/0x20 [ 43.713637][ T792] ? p9_conn_create+0x4f2/0x590 [ 43.713658][ T792] ? p9_fd_create+0x2f4/0x4c0 [ 43.713680][ T792] p9_client_create+0xa26/0x12d0 [ 43.713709][ T792] ? __cfi_p9_client_create+0x10/0x10 [ 43.713736][ T792] ? __kasan_kmalloc+0x96/0xb0 [ 43.713762][ T792] ? __kmalloc_cache_noprof+0x23c/0x470 [ 43.713786][ T792] ? v9fs_mount+0xc1/0x9d0 [ 43.713814][ T792] ? kasan_save_alloc_info+0x3a/0x50 [ 43.713834][ T792] ? __kasan_kmalloc+0x96/0xb0 [ 43.713862][ T792] ? kstrdup+0x7b/0x130 [ 43.713894][ T792] ? __asan_memset+0x39/0x50 [ 43.713916][ T792] v9fs_session_init+0x1c4/0x18a0 [ 43.713941][ T792] ? __cfi_v9fs_session_init+0x10/0x10 [ 43.713965][ T792] ? kasan_save_alloc_info+0x3a/0x50 [ 43.713985][ T792] ? __kasan_kmalloc+0x96/0xb0 [ 43.714011][ T792] ? __kmalloc_cache_noprof+0x23c/0x470 [ 43.714050][ T792] ? v9fs_mount+0xc1/0x9d0 [ 43.714077][ T792] v9fs_mount+0xdb/0x9d0 [ 43.714104][ T792] ? __cfi_v9fs_mount+0x10/0x10 [ 43.714132][ T792] ? selinux_capable+0x38/0x50 [ 43.714162][ T792] legacy_get_tree+0x106/0x1b0 [ 43.714194][ T792] ? __cfi_v9fs_mount+0x10/0x10 [ 43.714222][ T792] vfs_get_tree+0x9e/0x290 [ 43.714246][ T792] do_new_mount+0x251/0xb40 [ 43.714269][ T792] ? security_capable+0x44/0x130 [ 43.714296][ T792] path_mount+0x66a/0xff0 [ 43.714318][ T792] ? putname+0x113/0x150 [ 43.714343][ T792] __se_sys_mount+0x2bf/0x480 [ 43.714368][ T792] ? ksys_write+0x1f3/0x260 [ 43.714391][ T792] ? __x64_sys_mount+0xf0/0xf0 [ 43.714417][ T792] __x64_sys_mount+0xc3/0xf0 [ 43.714441][ T792] x64_sys_call+0x2021/0x2ee0 [ 43.714463][ T792] do_syscall_64+0x57/0xf0 [ 43.714483][ T792] ? clear_bhb_loop+0x50/0xa0 [ 43.714510][ T792] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.714535][ T792] RIP: 0033:0x7fadbc79e159 [ 43.714554][ T792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.714586][ T792] RSP: 002b:00007fadbd73a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.714610][ T792] RAX: ffffffffffffffda RBX: 00007fadbca25fa0 RCX: 00007fadbc79e159 [ 43.714627][ T792] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 43.714642][ T792] RBP: 00007fadbd73a090 R08: 0000200000000100 R09: 0000000000000000 [ 43.714656][ T792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.714670][ T792] R13: 00007fadbca26038 R14: 00007fadbca25fa0 R15: 00007ffdf5994368 [ 43.714689][ T792] [ 44.154520][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.200950][ T813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.210482][ T813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.232433][ T816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 44.308421][ T818] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 44.313834][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 44.336083][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.346514][ T821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.347935][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.356690][ T821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.365658][ T10] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.385863][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.392548][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 44.401734][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.410235][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 44.419644][ T10] usb 1-1: config 0 descriptor?? [ 44.453750][ T310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.574734][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.584934][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 44.593840][ T310] usb 2-1: device descriptor read/64, error -71 [ 44.598848][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.611201][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.619261][ T9] usb 4-1: Product: syz [ 44.623475][ T9] usb 4-1: Manufacturer: syz [ 44.628122][ T9] usb 4-1: SerialNumber: syz [ 44.633036][ T779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.643934][ T779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.644320][ T806] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.833773][ T310] usb 2-1: device descriptor read/64, error -71 [ 44.861191][ T779] tun0: tun_chr_ioctl cmd 1074025675 [ 44.866632][ T779] tun0: persist enabled [ 44.870992][ T779] tun0: tun_chr_ioctl cmd 1074025675 [ 44.876357][ T779] tun0: persist enabled [ 44.882044][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.889394][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.896680][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.903952][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.911190][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.918469][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.925753][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.932999][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.940247][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.947506][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.954773][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.962121][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.969423][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.976697][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.983969][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.991254][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 44.998540][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.005834][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.013100][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.020550][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.029335][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.037955][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.046210][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.053714][ T10] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 45.063918][ T10] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 45.076451][ T67] usb 3-1: 0:1 : does not exist [ 45.081353][ T67] usb 3-1: 0:2 : does not exist [ 45.083868][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.086332][ T67] usb 3-1: 0:3 : does not exist [ 45.101796][ T67] usb 3-1: 0:4 : does not exist [ 45.106877][ T67] usb 3-1: unit 6 not found! [ 45.111541][ T67] usb 3-1: unit 7 not found! [ 45.116656][ T823] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 45.158686][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.167364][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.178057][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.187077][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.225922][ T31] usb 1-1: USB disconnect, device number 3 [ 45.233836][ T310] usb 2-1: device descriptor read/64, error -71 [ 45.248554][ T828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.257158][ T828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.265634][ T828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.274978][ T828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.283564][ T828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.292299][ T828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.300793][ T828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.309383][ T828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.473732][ T310] usb 2-1: device descriptor read/64, error -71 [ 45.583842][ T310] usb usb2-port1: attempt power cycle [ 45.664175][ T9] cdc_ncm 4-1:1.0: bind() failure [ 45.670163][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 45.677269][ T9] cdc_ncm 4-1:1.1: bind() failure [ 45.878645][ T573] usb 4-1: USB disconnect, device number 4 [ 45.923804][ T310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.944743][ T310] usb 2-1: device descriptor read/8, error -71 [ 45.973766][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.074787][ T310] usb 2-1: device descriptor read/8, error -71 [ 46.125186][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.133738][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.143933][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 46.158560][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=1014, bcdDevice= 0.40 [ 46.167666][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.175798][ T31] usb 1-1: SerialNumber: syz [ 46.313752][ T310] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.334828][ T310] usb 2-1: device descriptor read/8, error -71 [ 46.383885][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 46.393634][ T31] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 46.409534][ T31] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 46.433493][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 46.433509][ T36] audit: type=1400 audit(1789468510.660:214): avc: denied { setopt } for pid=833 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.445469][ T31] usb 1-1: USB disconnect, device number 4 [ 46.484227][ T528] udevd[528]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 46.500501][ T310] usb 2-1: device descriptor read/8, error -71 [ 46.549683][ T36] audit: type=1400 audit(1789468510.780:215): avc: denied { append } for pid=835 comm="syz.3.179" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.613824][ T310] usb usb2-port1: unable to enumerate USB device [ 46.896023][ T853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 46.969178][ T855] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 47.232975][ T870] netlink: 'syz.1.190': attribute type 12 has an invalid length. [ 47.403758][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.450663][ T881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 47.478104][ T36] audit: type=1400 audit(1789468511.710:216): avc: denied { create } for pid=882 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.503727][ T36] audit: type=1400 audit(1789468511.710:217): avc: denied { ioctl } for pid=882 comm="syz.3.196" path="socket:[7416]" dev="sockfs" ino=7416 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.541378][ T36] audit: type=1400 audit(1789468511.710:218): avc: denied { setopt } for pid=882 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.583712][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 47.590143][ T310] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.601310][ T310] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.612625][ T310] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.613852][ T886] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 47.625818][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.641878][ T310] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 47.657570][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.672074][ T310] usb 1-1: config 0 descriptor?? [ 47.796144][ T36] audit: type=1400 audit(1789468512.030:219): avc: denied { mount } for pid=901 comm="syz.3.203" name="/" dev="configfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.829524][ T903] futex_wake_op: syz.3.203 tries to shift op by 144; fix this program [ 47.843821][ T36] audit: type=1400 audit(1789468512.050:220): avc: denied { create } for pid=899 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.876826][ T36] audit: type=1400 audit(1789468512.050:221): avc: denied { sys_admin } for pid=899 comm="syz.1.202" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.906973][ T36] audit: type=1400 audit(1789468512.130:222): avc: denied { create } for pid=899 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.933566][ T36] audit: type=1400 audit(1789468512.130:223): avc: denied { connect } for pid=899 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.105447][ T310] prodikeys 0003:041E:2801.0004: collection stack underflow [ 48.116995][ T310] prodikeys 0003:041E:2801.0004: item 0 2 0 12 parsing failed [ 48.133950][ T310] prodikeys 0003:041E:2801.0004: hid parse failed [ 48.140662][ T310] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 48.153768][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.265622][ T912] capability: warning: `syz.2.206' uses deprecated v2 capabilities in a way that may be insecure [ 48.316364][ T860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=860 comm=syz.0.186 [ 48.323891][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 48.341601][ T9] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 48.358305][ T914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'. [ 48.374141][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 48.400830][ T9] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 48.416118][ T9] usb 4-1: Product: syz [ 48.423645][ T9] usb 4-1: Manufacturer: syz [ 48.438441][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 48.452478][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 48.489196][ T916] FAULT_INJECTION: forcing a failure. [ 48.489196][ T916] name failslab, interval 1, probability 0, space 0, times 0 [ 48.516644][ T916] CPU: 0 UID: 0 PID: 916 Comm: syz.2.208 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 48.516686][ T916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.516701][ T916] Call Trace: [ 48.516709][ T916] [ 48.516717][ T916] __dump_stack+0x21/0x30 [ 48.516755][ T916] dump_stack_lvl+0x140/0x1c0 [ 48.516787][ T916] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.516817][ T916] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 48.516851][ T916] dump_stack+0x19/0x20 [ 48.516878][ T916] should_fail_ex+0x3c2/0x510 [ 48.516905][ T916] ? p9pdu_readf+0x1778/0x22d0 [ 48.516939][ T916] should_failslab+0xac/0x100 [ 48.516965][ T916] __kmalloc_noprof+0x69/0x510 [ 48.516989][ T916] ? p9pdu_readf+0x1778/0x22d0 [ 48.517021][ T916] p9pdu_readf+0x1778/0x22d0 [ 48.517056][ T916] ? _raw_spin_unlock+0x45/0x60 [ 48.517088][ T916] ? finish_task_switch+0x139/0x770 [ 48.517116][ T916] ? __cfi_p9pdu_readf+0x10/0x10 [ 48.517147][ T916] ? __schedule+0x149e/0x20b0 [ 48.517172][ T916] p9_check_errors+0x3fe/0x720 [ 48.517203][ T916] ? p9_client_flush+0x3f0/0x3f0 [ 48.517236][ T916] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 48.517257][ T916] ? finish_wait+0x189/0x1c0 [ 48.517280][ T916] p9_client_rpc+0x73d/0xb50 [ 48.517309][ T916] ? p9_fid_create+0x3d0/0x3d0 [ 48.517335][ T916] ? __cfi_sock_poll+0x10/0x10 [ 48.517356][ T916] ? __cfi_autoremove_wake_function+0x10/0x10 [ 48.517381][ T916] ? p9_fd_create+0x2f4/0x4c0 [ 48.517403][ T916] p9_client_create+0xa26/0x12d0 [ 48.517431][ T916] ? __cfi_p9_client_create+0x10/0x10 [ 48.517458][ T916] ? __kasan_kmalloc+0x96/0xb0 [ 48.517484][ T916] ? __kmalloc_cache_noprof+0x23c/0x470 [ 48.517506][ T916] ? v9fs_mount+0xc1/0x9d0 [ 48.517530][ T916] ? kasan_save_alloc_info+0x3a/0x50 [ 48.517549][ T916] ? __kasan_kmalloc+0x96/0xb0 [ 48.517575][ T916] ? kstrdup+0x7b/0x130 [ 48.517605][ T916] ? __asan_memset+0x39/0x50 [ 48.517627][ T916] v9fs_session_init+0x1c4/0x18a0 [ 48.517665][ T916] ? __cfi_v9fs_session_init+0x10/0x10 [ 48.517688][ T916] ? kasan_save_alloc_info+0x3a/0x50 [ 48.517708][ T916] ? __kasan_kmalloc+0x96/0xb0 [ 48.517734][ T916] ? __kmalloc_cache_noprof+0x23c/0x470 [ 48.517758][ T916] ? v9fs_mount+0xc1/0x9d0 [ 48.517784][ T916] v9fs_mount+0xdb/0x9d0 [ 48.517810][ T916] ? __cfi_v9fs_mount+0x10/0x10 [ 48.517836][ T916] ? selinux_capable+0x38/0x50 [ 48.517866][ T916] legacy_get_tree+0x106/0x1b0 [ 48.517894][ T916] ? __cfi_v9fs_mount+0x10/0x10 [ 48.517920][ T916] vfs_get_tree+0x9e/0x290 [ 48.517944][ T916] do_new_mount+0x251/0xb40 [ 48.517966][ T916] ? security_capable+0x44/0x130 [ 48.517992][ T916] path_mount+0x66a/0xff0 [ 48.518013][ T916] ? putname+0x113/0x150 [ 48.518037][ T916] __se_sys_mount+0x2bf/0x480 [ 48.518060][ T916] ? ksys_write+0x1f3/0x260 [ 48.518082][ T916] ? xfd_validate_state+0x68/0x140 [ 48.518113][ T916] ? __x64_sys_mount+0xf0/0xf0 [ 48.518137][ T916] __x64_sys_mount+0xc3/0xf0 [ 48.518161][ T916] x64_sys_call+0x2021/0x2ee0 [ 48.518181][ T916] do_syscall_64+0x57/0xf0 [ 48.518200][ T916] ? clear_bhb_loop+0x50/0xa0 [ 48.518226][ T916] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.518250][ T916] RIP: 0033:0x7faa5d39e159 [ 48.518267][ T916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.518285][ T916] RSP: 002b:00007faa5e2a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 48.518307][ T916] RAX: ffffffffffffffda RBX: 00007faa5d625fa0 RCX: 00007faa5d39e159 [ 48.518323][ T916] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 48.518337][ T916] RBP: 00007faa5e2a7090 R08: 0000200000000100 R09: 0000000000000000 [ 48.518351][ T916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.518364][ T916] R13: 00007faa5d626038 R14: 00007faa5d625fa0 R15: 00007ffc6222bbe8 [ 48.518382][ T916] [ 48.879943][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.884448][ T9] r8152-cfgselector 4-1: bad CDC descriptors [ 48.922501][ T9] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 49.083739][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 49.090123][ T310] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 49.103609][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 49.110705][ T310] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 49.120097][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.130341][ T310] usb 2-1: config 0 descriptor?? [ 49.329138][ T940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 49.344607][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 49.350887][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 49.359747][ T310] usb 2-1: USB disconnect, device number 11 [ 49.419246][ T946] netlink: 9 bytes leftover after parsing attributes in process `syz.3.220'. [ 49.430484][ T946] gretap0: entered promiscuous mode [ 49.512892][ T948] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 49.563701][ T965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.229'. [ 49.705822][ T989] ------------[ cut here ]------------ [ 49.711389][ T989] WARNING: CPU: 0 PID: 989 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 49.720834][ T989] Modules linked in: [ 49.724764][ T989] CPU: 0 UID: 0 PID: 989 Comm: syz.2.237 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 49.736200][ T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.746381][ T989] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 49.752429][ T989] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d c5 c7 0b 06 00 0f 85 c2 00 00 00 c6 05 b8 c7 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 49.772127][ T989] RSP: 0018:ffffc9000f5ef980 EFLAGS: 00010246 [ 49.778367][ T989] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 49.786434][ T989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f5efa38 [ 49.794467][ T989] RBP: ffffc9000f5efaa8 R08: ffffc9000f5efa37 R09: 0000000000000000 [ 49.802451][ T989] R10: ffffc9000f5efa20 R11: fffff52001ebdf47 R12: ffffc9000f5ef9c0 [ 49.810467][ T989] R13: dffffc0000000000 R14: 1ffff92001ebdf34 R15: 0000000000000000 [ 49.818491][ T989] FS: 00007faa5e2a76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.827566][ T989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.834256][ T989] CR2: 00007faa5e264ff8 CR3: 000000010b732000 CR4: 00000000003526b0 [ 49.842256][ T989] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.843861][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.850276][ T989] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 49.865798][ T989] Call Trace: [ 49.869097][ T989] [ 49.872070][ T989] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 49.877860][ T989] ? schedule+0xc5/0x240 [ 49.882134][ T989] ? futex_unqueue+0x136/0x160 [ 49.886966][ T989] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 49.893188][ T989] ___kmalloc_large_node+0x81/0x220 [ 49.898451][ T989] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 49.904678][ T989] __kmalloc_large_node_noprof+0x1e/0xd0 [ 49.910340][ T989] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 49.916588][ T989] __kmalloc_noprof+0x326/0x510 [ 49.921477][ T989] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 49.927556][ T989] ? futex_wait+0x2b8/0x7c0 [ 49.932090][ T989] ? __cfi_futex_wait+0x10/0x10 [ 49.937006][ T989] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 49.943479][ T989] ? selinux_file_ioctl+0x732/0x1480 [ 49.948851][ T989] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 49.954445][ T989] ? do_futex+0x32a/0x510 [ 49.958807][ T989] ? __cfi_do_futex+0x10/0x10 [ 49.963519][ T989] ? __fget_files+0x2bc/0x330 [ 49.968259][ T989] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.973235][ T989] ? security_file_ioctl+0x3e/0x110 [ 49.978517][ T989] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 49.985034][ T989] __se_sys_ioctl+0x126/0x1b0 [ 49.989738][ T989] __x64_sys_ioctl+0x7f/0xa0 [ 49.994374][ T989] x64_sys_call+0x1878/0x2ee0 [ 49.999071][ T989] do_syscall_64+0x57/0xf0 [ 50.003505][ T989] ? clear_bhb_loop+0x50/0xa0 [ 50.008299][ T989] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.014242][ T989] RIP: 0033:0x7faa5d39e159 [ 50.018678][ T989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.037732][ T573] usb 1-1: USB disconnect, device number 5 [ 50.038486][ T989] RSP: 002b:00007faa5e2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.052575][ T989] RAX: ffffffffffffffda RBX: 00007faa5d625fa0 RCX: 00007faa5d39e159 [ 50.060609][ T989] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000a [ 50.068629][ T989] RBP: 00007faa5d43503b R08: 0000000000000000 R09: 0000000000000000 [ 50.076683][ T989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.084707][ T989] R13: 00007faa5d626038 R14: 00007faa5d625fa0 R15: 00007ffc6222bbe8 [ 50.092707][ T989] [ 50.095794][ T989] ---[ end trace 0000000000000000 ]---