last executing test programs: 3.349687566s ago: executing program 2 (id=654): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}, 0x922bac8556bdad8e) 3.287301168s ago: executing program 2 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000101000054000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa0600040000000c00070001"], 0x68}}, 0x0) 3.137313261s ago: executing program 2 (id=661): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) close(r0) 3.042138063s ago: executing program 2 (id=667): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) 2.973551416s ago: executing program 0 (id=669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000004c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000b00070066696c746572000074000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800a00010071756f746100000008000240000000001c000300"], 0x108}}, 0x0) 2.852711988s ago: executing program 0 (id=672): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.838963939s ago: executing program 2 (id=673): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r1, r0, 0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 2.551687496s ago: executing program 3 (id=678): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 2.529671847s ago: executing program 2 (id=679): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) sendfile(r1, r2, 0x0, 0x8) timer_create(0x7, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) 2.521659347s ago: executing program 3 (id=680): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) 2.463086748s ago: executing program 3 (id=682): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) 2.462581638s ago: executing program 3 (id=685): r0 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xffffffffffffffff, 0x0) 2.462331508s ago: executing program 3 (id=687): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x18888, &(0x7f0000000380)=ANY=[@ANYBLOB="7472216e020066642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00', @ANYBLOB="de575ddd9a2a3d6886fb6709da3f"]) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.957906401s ago: executing program 0 (id=691): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x81, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000100)='ip6gretap0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) fallocate(r4, 0x10, 0x0, 0x10000003) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b05000080432f"], 0xdd12}], 0x1}, 0x20040890) 1.188462031s ago: executing program 0 (id=692): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x2f8d, &(0x7f0000000340)={0x0, 0xc382, 0x1000, 0x2, 0x200001}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x101102, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xa098) lseek(r5, 0x0, 0x1) r6 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)={0xe000200f}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x5ef, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x88}}}, &(0x7f0000000180)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, r7, 0x100000000000019) madvise(&(0x7f0000305000/0x4000)=nil, 0x4000, 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r8, &(0x7f0000000080)='4', 0x1) 843.514289ms ago: executing program 3 (id=693): open(&(0x7f0000000000)='./file0\x00', 0x161840, 0x1d2) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x4, 0xffffff81}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x8000000) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x2000010, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 841.35589ms ago: executing program 0 (id=701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$bpf(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0xc010, &(0x7f0000005440)={[{@gid={'gid', 0x3d, r1}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0xee00, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) setgroups(0x3, &(0x7f0000000840)=[r1, r2, r4]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r6, r10, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x1, 0x128}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e}}], 0x4, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) write$P9_RVERSION(r11, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0xc8b, 0x6, '9P2000'}, 0x13) mkdirat(r8, &(0x7f0000000100)='./dev/mapper/control\x00', 0xff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000800}, 0xc, 0x0}, 0x4008810) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = dup(r13) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, 0x0) ioctl$KVM_NMI(r15, 0xae9a) 425.59291ms ago: executing program 1 (id=696): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000009010100000000000000000000000010"], 0x58}}, 0x0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)={0x2, 0x2, 0x4, 0x400, 0x9, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0xd, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 376.502981ms ago: executing program 1 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) fremovexattr(r0, &(0x7f0000000380)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$security_selinux(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x1) mkdirat(r0, &(0x7f0000000080)='./mnt\x00', 0x10) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) 347.474151ms ago: executing program 1 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="10000200000000002000"], 0x34, 0x3) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x4) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f00000001c0)={0xd, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "39b138d4300bc48f", "ccf149b57883a43d088357d86882e1e4", "f30add4d", "c3d07f5fede7b038"}, 0x28) (async) recvfrom(r5, 0x0, 0x0, 0x17, 0x0, 0x0) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) close(0x3) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) (async) sendmmsg(r4, &(0x7f00000016c0)=[{{&(0x7f0000000280)=@rc={0x1f, @any, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)="66a19715ceb24c4bf99f41bc0af6a3dd4bcc25246aba7529e08cad9a3a889d443e83f2791ed3ef58024723a091085d20aeefe9dd59407180dfb96ee0c34f18316e15dffa3ad76bd1f0800b245327f0090e9ffc5fbd987a7246b958cd54b4080a7c", 0x61}, {&(0x7f0000000380)="adea8eb8c7cf605ce09ce9893a8bd819a1408b33063a8485e39126693893aae7bbb52b7a43adc08f8752ac132e0277513e70c446c811524d1dd8e7ece855a455073305", 0x43}, {&(0x7f0000000400)="255dfe861c7403b56d3da27fca22cd96dd0a53b4b31fa96b33e5f7cf934fe21c02fa299fc6cc85820216f9b09d9b7f19c41fc744d155628e69f021ea95f3ccd6d56c6427680573152456c9bcef4f7c0225a0e1595d53ad88d6ba3197c1bc01c37b62", 0x62}, {&(0x7f0000000480)="4b902e1808233477789424fcd98fd577d78b865e90b79739397229a2cb4d27bfb2bb5bbd67f79e4f4d28d2c6744e003c843334264a4b85e1ec6652db5ee9ebef96d7c17a27ed4578d98b6f3835edc4627802a9e7e584425b8a640a50103c9a15ee0a193e5e72d9822e54d8574021c16dd31d3f306244efa80e5b1eb620bdaca345ac54e504a1db59687981cb6fb195a1353cdf004154bafe03471fe2838c834e60b79a64891d956f4cdfaa2a11bf8fc49eb9095385085a849f75", 0xba}], 0x4}}, {{&(0x7f0000000580)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="41da8fdd212e84b7bf032320e374c9e0932c41291b2954ff2a3680d7f7aae1ec689833d07df98a33392e0819b4a99b1dc5d5da991ebba8cae2e5e122a818ba2d41c97ee89c427c986e9310673358c87041167b43437bcb71e950847c5ddbe623ffb7c70af3a72609fcd66c3aba7dae7bb107c24d56386ed748da39917178cc2b422c90a1ad4527cd51a0fa6c3c1711a58a98dade5471fc935d32613285767878e9487fe21cc3071d8aa2b56f87c8c9fe7a6fd5de115b8c4f20db0dad49e884a61e96a29fb0d5393ebedace2d44bda0ed3737958dcb", 0xd5}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="c00000000000f44edfe8000000000000a919ff299222f4c5948e8adaf988dbb3da8f2c6872cd63c0700b3e16937eeff5b74ea0dd3c89f0a79f4dcfc2612af219c27cc577d3dabff3092cd7469926de1948b62cd09692a2a900a3a58e88ec3f1d4c527ae82d702a08c257fcd0ab9547649ca61ea0bdbec393837ca1c2dcdaf4869bd34a2aab6dba58290434092d34d5697f80b6599f213ba540d3f95f01870458151bb87c7ee03a9497293c7ef9119314c20edd845077fa7d51b1269675000000f0000000000000000e0100000d00000034df65baddf3b1588c9aaf2e638afb81ae5b573cecc7ea84041550e951681083a2d5daa427e8655f6cb5d2d5b33c6553e738b921ba93e3f81aa159bc1fc3013559924e0db02ad14c8397e504ed50ebf5daa30f737f29cc1b7d373f5af467e36ea3e9a890194588571f3b814d776f3e19d884c0e1022f8596ec8b7fde7eddaba5a395efa4e4b67568233360db5cf75462560b8271abe66edee77036231b9afc2da019a885aa9f6411211a5f8f37b4bb032a29eb384e9f82d6776c5652f498ca9a348b7e981eb48463bd01cee26a70de790c78fde9c06016939a00000000000000f00000000000000084000000080000004b69203729921442afb70f42ad4bd2d89bbee76dade0c9854e325cdc9ffacae0c4b76f39ff40aaaacc114b96500c8ca7d6fcf46ff49c08652017b40e78df8a417a3ca48ef577ab3c59e628d54b3e208455562eabb3b5a424aa1e8d76f7c55f04e564e62485a560c9260dbfbd6d7270a4f4974904afa0f494786120b11e7b511b885cc8a8ae37403f5ce4971d53f66bb2a70b891b66687ac7d06d527ceb63c109660098d12446c2c4bd9d58acd8e96035dcdb1c4b0234e9c23eedcfa4a39a714b897c588f88dd10035918e12e8ab77b1230605e7af33e898d2df3f70000000000e8000000000000000f010000020000007655a8df439c37176af6eca88a3877002934d4a8a15e790a50531223c8daa9cdbf6a409dfb73586022c506c78b876c89a37a41b2dac0d29aa91c7e6de3238314cc81874411c6e05941bca7bab93d0a0c4a6b5617866a759a8416badcab6573f0abf5a8875cbcf4e2723e8cc97e95b9aaadf32a1c947bbffe88bd1996e86af1b99039f59ba49bde281d5cd5aaa07c8a8db2d90381acf698f14cd82b81e749a290495023f8025da26079d28d074f474dacc4882990c5f51bc029d010da8f71e8881c3b507b0dd3a663241de2c3fae390ecc6000000000000008000000000000000ff00000009000000e506ad68ce9a1aedb08fd8c57f46aae5cbb248740cbf1c6af8c1fc4fd174600b2c76e9b5992fbfd6049c3111fc4b0322be98addb435cf63427bcee41daac599bd15effa19a34891031a0f6c0d015d2c4be0a36b8903ef68e5c37f8a0f979ca4bb167f0988da4030a796695c4fd0000003800000000000000ff00000000000000d47cdddc6014e4bf54c56f3da1c70e184dc18764e3811381007b3dc2f90d9ab64e72000000000000c8000000000000001401000001000000bf4cbeefa3e22cd6280bd16059d87d5618d282168828f8813bd8f2fe208c19d97bca385ca615cd4247a57ef4ae2775563d3e99af713bac11d681ebbb4ccaacde3cc55800e110b89a4159e0ae2567093a249e2d40e56f0883ca6bc3290246aa1e69364c8fc68ca33e0c00750f2c052f0a5c09c32f924fd040f640d0613242935bf7ab4cfe794f8fde4f453d260717b6924f1e14f6904356191d74bd556a23576ad2220621b4d17f68c62b3be13676edaa02d583f7c8fd0000a8000000000000000901000000080000a1424fa63d668258748cfaac0fe1e4d6163131fe718a5d073e80fe7e106536704f2902171815f3ca0ad167dffde73ecafce3c1ee1f016f34d526a5c855e790b978db5349e538785bf26615167d553f62c600a27da3fe70d2274fce3cfb006ae554095b9aeed8da7c9599b9d9c924e6c6358e742d805eddcbbc39d15a8de846e9334136cdf8a1f349c07784cb5f6688e9b8821d768b780000c8000000000000001101000003000000d722dc8a0ae7abe8c798d3a3c334ac1b10501173833c3058d8a190144ed19ba65ae72795ac73a170125e698289e007bb33768f3e44aa9f78164e0196889f1a6c5964729d17fc7d4292a0186406e7562456799def71a857d5c6c4e005272c0f898ba67eb30b3a10a28d37f6b880b97195c57b1396ed35ce2f8287a90b603f962ceba893678351be055aefa024a5a2c6de9f8173540c1461e4e0d1850799e4afff0e78ceaf06378b41000000"], 0x678}}, {{&(0x7f0000000e00)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e80)="34677d1cdca2f4fbeb08288538764fecbf3bea5e29176aebf4de824ffb9264c4f14cbcb40e1c86f6e09f81b315e631ce53974b6d6e811fb247d95c65494cb4836a2a70d2c264eacd76cb604bd50c45c09de7e825ed7d3effe478b666dfb6cae1af4d86c8056a8c103455cb22d3a683f48c2c5f281661c6a55fbc158748d9850480263cb50ad1ac3d47ad3fd37a21e268416b94e7c3836f1ea3278811a8747c0de34091aef74881603ccc82c07998cc079442386abf6a8036f27c2c5ac9eff2d3751dbf976f03e5e38f0a27318ce84df744fe75839601fe0dafb51b55d027cc852b815b1c8f70e174056b1d0915a67e3b13e663dafb49bda41910fe", 0xfb}, {&(0x7f0000000f80)="c4dda57e20ea275eebecfa1598cfea94706f39b566fb2c41d8654a150a409e4d6a1af790a3c95c105535e7d8a0716efd01989917f2850af5ad3f6ebbf3cb984d5f8dc0baad61eac4c18179477cd90848bd86abb9f8adcdc2cfd0218026fa39ade6c25637a1c1ee1163043572ece3e62194969ee81ee055eeb17543768c981a759accb404b12a887ceab05ee2d98b12c0724f1b7a6b4a8705c561156a89cade62ccca30da3e38aaf7308b2ef339fc95e5a5d5e584d1a5fcc8e328ba24f3186dec393d1af2acbbf3a0713c69690c6b9f748e6ae9c31f56200e1d513df47cc44889659089e417da8a7e5796cf33ba51c5dd95", 0xf1}, {&(0x7f0000001080)="499840e5ea7f64771374dfdc6a5e413b12726386ef3c57244b0f500229bb9626379180eddafe83e74b66ff6d1b197b9af4fd2718ea6cccce66c946f83d0a3e9c326aa8fb92c989f3ec01554ecf869f33fca184186e7cee75f37f0d1e7f51b3fed22a6800a7a5e84ac085ed7044f1ee28d5d54fc2bebbd84a065f71899aa6fd4196cad858fc58e3b8c2e8754ae685e35a9c2dfddbe49214c529a17e4c43ed64ff711faca72e3189ba4723d7c644dc798c4c2daf72d23c2d75b55ed624236ab218ff2bb5e8f71404e55a18b260c655226b4dd71088", 0xd4}], 0x3, &(0x7f00000011c0)=[{0x30, 0x119, 0x10001, "ba45d1f87ef0554424790e9125792a28cc4c64ff7dc8f7e62af2a6fb1e"}, {0x100, 0x10b, 0xffffff36, "793f7a8240e0c145274be7388d0dabe4fea07aa5d1dde4bce1b9847f15fe42d59fd856bda79465d06909aa18d74e4d646018f01e8afe25269921e72436f0137d688c9ab9c2db8a709834a6fd02a8d38ae36c030df7ea42bc878ded236871d1fc25cfd4e9fa8953eda1ba801aab195de07ea655240216272709d0e38aa4acdba39136a10af3db2e8ee430832931e676e3809dd5e0a623aa1a524e0891c2efddda04a811615ce46d29a77806944f6b954def9671391af07f42f4bc546fee0cbde67aa153daed3c18ed2d87f1c8403946f6653d414ca2c5c2fe1c8e0a1d613d59be95ca1ba4a33f076aa4b3"}, {0x80, 0x104, 0x5, "002fed2e61ce8847a75ab2f522803a5676d28e86cbeef754db486b16cffd10207f09c4eaff4b3fffa67946e9fef14c3599714e21264bc5ef1e898dadbe62f7adddb6b2b70e5e856f6061b3ddee452fcba80955bcf6cddc39e9138511673cd632f9a8c509d50f481bdcdf1231cb1e7e75"}, {0x18, 0x11, 0x10, "6669e763527089"}], 0x1c8}}, {{&(0x7f00000013c0)=@ethernet={0x1}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001440)="f4d837acd19ce9e6e22e690cb3ee6ef817d81d857f7fb5fd82b3997764bf912709c841879ee06f2f8e037b3bc95c8b1312f2398b82c0af873c186c4788dcaf3a1b3ec2b3e177a763e4bb381eb2463970d1e54ada3e8b20ccd9bfda6e4a7eaa5413e2b8ac9cae814622953c3b514b6d38f35ffaf5e2c95a93ed21d62b2072022a5cd684e71ecb7e1da73b7f650b5fcaa38ab0480f", 0x94}, {&(0x7f0000001500)="c0393b4be83008e2dc68849207be97", 0xf}, {&(0x7f0000001540)="780c0e5253b71f1aa53b1a3343029c3fe4db22d5aa0216b68b267d558a535ad80c11092aa3a5507a4e133ffe2bfeff51e2be1712bbedec55bc47d62888c311d245c44f53563bbb37992bedfbb63f3a64e808af", 0x53}, {&(0x7f00000015c0)="cd5b1ba1dd35677c958f4c36265071419ab5dcfc6e9de41a51737ce72ce73e5f062dbed5202d530a986985c09062a77c18b4f6eba9f96fdc94ff63ec75c51d4a2dce920ce4a5e0a02e2e913c6e5db004b80bffc86660bc1b389a86c62bfae1d41da1550f7bc0b56ea069afa08191f598fda31b747a9c7a8985ef33f6981fbf7415b1faf4496077164a295f5af01b9fb5f6e6b14672f4dbb2f8befb156da2244cf72b7c7889494e3174fe7a87edadf206ff6b72a2f4451755", 0xb8}], 0x4}}], 0x4, 0x90) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) (async) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, &(0x7f0000000240)={0x77359400}, 0x8) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x59e}) 257.506624ms ago: executing program 1 (id=699): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x4c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xa) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001100)={'veth1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x100, 0x0, 0x4, 0x40, 0x7, 0x2c, 0x4b, 0x1, 0x4, [0x6, 0x8, 0xffff, 0xc1e, 0x47a3, 0x40d9e, 0xf, 0x1]}}) bind$can_raw(r0, &(0x7f0000000080), 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r3, 0x4cd1c000) 257.251024ms ago: executing program 1 (id=700): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x2600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 138.560007ms ago: executing program 1 (id=702): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x18888, &(0x7f0000000380)=ANY=[@ANYBLOB="7472216e020066642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00', @ANYBLOB]) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 0s ago: executing program 0 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0xc, 0x0, 0x7}, {0xf000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfb}, {0x2, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0x3, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0x0, 0xf, 0x6, 0xff, 0x10, 0x3, 0xc, 0x58, 0x9, 0x4}, {0x4000, 0x1000, 0xb, 0xfc, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x2fff, 0x100000, 0xd, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x5000, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x9000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x804, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xc0000000, 0xdf18, 0x1, 0x7, 0x3, 0x81, 0x7}]}) kernel console output (not intermixed with test programs): llmulticast mode [ 22.982452][ T293] bridge_slave_1: entered promiscuous mode [ 23.033087][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.040154][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.047196][ T294] bridge_slave_0: entered allmulticast mode [ 23.053451][ T294] bridge_slave_0: entered promiscuous mode [ 23.059593][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.066622][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.073786][ T296] bridge_slave_0: entered allmulticast mode [ 23.079926][ T296] bridge_slave_0: entered promiscuous mode [ 23.090150][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.097175][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.104257][ T294] bridge_slave_1: entered allmulticast mode [ 23.110405][ T294] bridge_slave_1: entered promiscuous mode [ 23.116399][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.123461][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.130521][ T296] bridge_slave_1: entered allmulticast mode [ 23.136630][ T296] bridge_slave_1: entered promiscuous mode [ 23.159693][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.166729][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.173822][ T295] bridge_slave_0: entered allmulticast mode [ 23.180022][ T295] bridge_slave_0: entered promiscuous mode [ 23.186329][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.193379][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.200431][ T295] bridge_slave_1: entered allmulticast mode [ 23.206521][ T295] bridge_slave_1: entered promiscuous mode [ 23.345054][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.352117][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.359399][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.366411][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.375220][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.382270][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.389531][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.396538][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.405898][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.412980][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.420436][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.427448][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.442057][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.449098][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.456376][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.463399][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.503270][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.510552][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.517922][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.525450][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.533131][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.540376][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.547508][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.555495][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.576774][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.583831][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.591374][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.598381][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.621779][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.628803][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.636412][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.643476][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.651426][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.658461][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.666027][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.673059][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.691326][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.698354][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.705854][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.712892][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.735988][ T296] veth0_vlan: entered promiscuous mode [ 23.753587][ T296] veth1_macvtap: entered promiscuous mode [ 23.790498][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.808074][ T293] veth0_vlan: entered promiscuous mode [ 23.820278][ T294] veth0_vlan: entered promiscuous mode [ 23.831522][ T295] veth0_vlan: entered promiscuous mode [ 23.851655][ T294] veth1_macvtap: entered promiscuous mode [ 23.861569][ T293] veth1_macvtap: entered promiscuous mode [ 23.872618][ T295] veth1_macvtap: entered promiscuous mode [ 23.960786][ T323] rust_binder: 322:323 error while translating object: EPERM [ 23.968315][ T323] rust_binder: Failure in copy_transaction_data: EPERM [ 23.968350][ T323] rust_binder: 322:323 transaction call to 322:0 failed EPERM, code 0 size 72-24 [ 23.988205][ T317] rust_binder: 322: undelivered TRANSACTION_ERROR: 29201 [ 24.060950][ T339] ======================================================= [ 24.060950][ T339] WARNING: The mand mount option has been deprecated and [ 24.060950][ T339] and is ignored by this kernel. Remove the mand [ 24.060950][ T339] option from the mount to silence this warning. [ 24.060950][ T339] ======================================================= [ 24.062072][ T338] overlayfs: overlapping lowerdir path [ 24.096034][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.103662][ T341] overlayfs: overlapping lowerdir path [ 24.117930][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.135320][ T341] overlayfs: maximum fs stacking depth exceeded [ 24.142058][ T341] overlayfs: maximum fs stacking depth exceeded [ 24.151195][ T341] overlayfs: maximum fs stacking depth exceeded [ 24.158091][ T341] overlayfs: maximum fs stacking depth exceeded [ 24.260250][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.275376][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 24.284523][ T317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.292058][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.300426][ T45] usb 3-1: Product: syz [ 24.304702][ T45] usb 3-1: Manufacturer: syz [ 24.309512][ T45] usb 3-1: SerialNumber: syz [ 24.316753][ T45] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 24.322845][ T45] cdc_wdm 3-1:1.0: Unknown control protocol [ 24.450724][ T317] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 24.459996][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.468494][ T317] usb 4-1: config 0 descriptor?? [ 24.722952][ T65] usb 3-1: USB disconnect, device number 2 [ 24.979204][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.119363][ T45] usb 1-1: device descriptor read/64, error -71 [ 25.309086][ T331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.317795][ T331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.359230][ T45] usb 1-1: device descriptor read/64, error -71 [ 25.479246][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.599237][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.629224][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 25.635469][ T65] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.646464][ T65] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.656590][ T65] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 25.669651][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.676251][ T65] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 25.685449][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.694322][ T65] usb 3-1: config 0 descriptor?? [ 25.727708][ T331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.737608][ T331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.754437][ T331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.764871][ T331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.769220][ T45] usb 1-1: device descriptor read/64, error -71 [ 25.778864][ T317] usb 4-1: Cannot set autoneg [ 25.789262][ T317] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 26.049386][ T45] usb 1-1: device descriptor read/64, error -71 [ 26.159358][ T45] usb usb1-port1: attempt power cycle [ 26.302929][ T65] usb 3-1: USB disconnect, device number 3 [ 26.509217][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.530352][ T45] usb 1-1: device descriptor read/8, error -71 [ 26.660194][ T45] usb 1-1: device descriptor read/8, error -71 [ 26.820562][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 26.820578][ T36] audit: type=1400 audit(1788526577.449:143): avc: denied { mounton } for pid=359 comm="syz.2.13" path="/2/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 26.839954][ T360] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 26.858911][ T36] audit: type=1400 audit(1788526577.489:144): avc: denied { relabelto } for pid=359 comm="syz.2.13" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 26.891649][ T362] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 26.902139][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.915390][ T36] audit: type=1400 audit(1788526577.539:145): avc: denied { read write } for pid=363 comm="syz.2.15" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.938644][ T36] audit: type=1400 audit(1788526577.539:146): avc: denied { open } for pid=363 comm="syz.2.15" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.941595][ T366] overlayfs: failed to resolve 'upper': -2 [ 26.962199][ T36] audit: type=1400 audit(1788526577.549:147): avc: denied { ioctl } for pid=363 comm="syz.2.15" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.979295][ T45] usb 1-1: device descriptor read/8, error -71 [ 27.011417][ T36] audit: type=1400 audit(1788526577.639:148): avc: denied { create } for pid=367 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.037688][ T36] audit: type=1400 audit(1788526577.659:149): avc: denied { name_bind } for pid=367 comm="syz.2.17" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.041216][ T316] usb 4-1: USB disconnect, device number 2 [ 27.068414][ T36] audit: type=1400 audit(1788526577.689:150): avc: denied { write } for pid=369 comm="syz.3.18" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.120159][ T45] usb 1-1: device descriptor read/8, error -71 [ 27.154478][ T36] audit: type=1400 audit(1788526577.779:151): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.183760][ T36] audit: type=1400 audit(1788526577.809:152): avc: denied { unlink } for pid=371 comm="syz.1.19" name="#1" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.229336][ T45] usb usb1-port1: unable to enumerate USB device [ 27.269233][ T317] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.419212][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 27.424372][ T316] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.433010][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.443147][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.453483][ T317] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.462540][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.470530][ T317] usb 3-1: Product: syz [ 27.474661][ T317] usb 3-1: Manufacturer: syz [ 27.479254][ T317] usb 3-1: SerialNumber: syz [ 27.519197][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.579210][ T316] usb 4-1: device descriptor read/64, error -71 [ 27.669222][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 27.675417][ T65] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.685855][ T317] usb 3-1: 0:2 : does not exist [ 27.686399][ T65] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.695934][ T317] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 27.701143][ T65] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 27.713244][ T317] usb 3-1: USB disconnect, device number 4 [ 27.722965][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.735106][ T65] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 27.737458][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.744215][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.771931][ T65] usb 2-1: config 0 descriptor?? [ 27.859241][ T316] usb 4-1: device descriptor read/64, error -71 [ 28.099214][ T316] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 28.191336][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.223213][ T398] FAULT_INJECTION: forcing a failure. [ 28.223213][ T398] name failslab, interval 1, probability 0, space 0, times 0 [ 28.235965][ T316] usb 4-1: device descriptor read/64, error -71 [ 28.236431][ T398] CPU: 0 UID: 0 PID: 398 Comm: syz.2.29 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 28.236458][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.236476][ T398] Call Trace: [ 28.236482][ T398] [ 28.236489][ T398] __dump_stack+0x21/0x30 [ 28.236523][ T398] dump_stack_lvl+0x140/0x1c0 [ 28.236547][ T398] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.236571][ T398] ? stack_depot_save_flags+0x399/0x800 [ 28.236595][ T398] dump_stack+0x19/0x20 [ 28.236618][ T398] should_fail_ex+0x3c2/0x510 [ 28.236638][ T398] should_failslab+0xac/0x100 [ 28.236660][ T398] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 28.236689][ T398] ? kasprintf+0xe3/0x140 [ 28.236707][ T398] kvasprintf+0xf1/0x260 [ 28.236724][ T398] ? __cfi_kvasprintf+0x10/0x10 [ 28.236742][ T398] kasprintf+0xe3/0x140 [ 28.236759][ T398] ? kasan_save_track+0x3e/0x80 [ 28.236779][ T398] ? kasan_save_track+0x3e/0x80 [ 28.236799][ T398] ? __cfi_kasprintf+0x10/0x10 [ 28.236819][ T398] ? kfree+0x158/0x440 [ 28.236835][ T398] ? event_hist_trigger_parse+0x154/0x5620 [ 28.236860][ T398] event_hist_trigger_parse+0x168/0x5620 [ 28.236884][ T398] ? stack_depot_save_flags+0x38/0x800 [ 28.236917][ T398] ? is_bpf_text_address+0x17b/0x1a0 [ 28.236943][ T398] ? kasan_save_track+0x4f/0x80 [ 28.236962][ T398] ? kasan_save_track+0x3e/0x80 [ 28.236982][ T398] ? __kasan_kmalloc+0x96/0xb0 [ 28.237002][ T398] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 28.237022][ T398] ? memdup_user_nul+0x40/0x1a0 [ 28.237039][ T398] ? event_trigger_write+0x6f/0x1e0 [ 28.237062][ T398] ? vfs_write+0x3c4/0xfd0 [ 28.237080][ T398] ? __x64_sys_write+0x7f/0x90 [ 28.237098][ T398] ? x64_sys_call+0x271c/0x2ee0 [ 28.237115][ T398] ? do_syscall_64+0x57/0xf0 [ 28.237139][ T398] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.237160][ T398] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 28.237187][ T398] ? __kasan_check_write+0x18/0x20 [ 28.237205][ T398] ? mutex_lock+0x97/0x1d0 [ 28.237224][ T398] ? __cfi_mutex_lock+0x10/0x10 [ 28.237242][ T398] ? check_stack_object+0x81/0x150 [ 28.237260][ T398] ? __virt_addr_valid+0x2a1/0x370 [ 28.237282][ T398] ? __check_object_size+0x54c/0x870 [ 28.237301][ T398] trigger_process_regex+0x1e3/0x280 [ 28.237325][ T398] ? __cfi_trigger_process_regex+0x10/0x10 [ 28.237348][ T398] ? __kasan_check_write+0x18/0x20 [ 28.237367][ T398] ? strim+0x190/0x1d0 [ 28.237383][ T398] event_trigger_write+0x142/0x1e0 [ 28.237407][ T398] ? __cfi_event_trigger_write+0x10/0x10 [ 28.237430][ T398] vfs_write+0x3c4/0xfd0 [ 28.237449][ T398] ? __cfi_vfs_write+0x10/0x10 [ 28.237468][ T398] ? __kasan_check_write+0x18/0x20 [ 28.237486][ T398] ? mutex_lock+0x97/0x1d0 [ 28.237505][ T398] ? __cfi_mutex_lock+0x10/0x10 [ 28.237525][ T398] ksys_write+0x145/0x260 [ 28.237544][ T398] ? __cfi_ksys_write+0x10/0x10 [ 28.237563][ T398] ? __kasan_check_read+0x15/0x20 [ 28.237581][ T398] __x64_sys_write+0x7f/0x90 [ 28.237600][ T398] x64_sys_call+0x271c/0x2ee0 [ 28.237616][ T398] do_syscall_64+0x57/0xf0 [ 28.237640][ T398] ? clear_bhb_loop+0x50/0xa0 [ 28.237660][ T398] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.237686][ T398] RIP: 0033:0x7f0cbed9e159 [ 28.237707][ T398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.237722][ T398] RSP: 002b:00007f0cbfcd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 28.237748][ T398] RAX: ffffffffffffffda RBX: 00007f0cbf025fa0 RCX: 00007f0cbed9e159 [ 28.237762][ T398] RDX: 000000000000000a RSI: 0000200000000180 RDI: 0000000000000003 [ 28.237774][ T398] RBP: 00007f0cbfcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 28.237786][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.237797][ T398] R13: 00007f0cbf026038 R14: 00007f0cbf025fa0 R15: 00007ffef7195368 [ 28.237813][ T398] [ 28.360308][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.392471][ T317] usb 2-1: USB disconnect, device number 2 [ 28.393257][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.609207][ T316] usb 4-1: device descriptor read/64, error -71 [ 28.616015][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 28.666304][ T403] block device autoloading is deprecated and will be removed. [ 28.668736][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.684956][ T10] usb 1-1: config 0 descriptor?? [ 28.730520][ T316] usb usb4-port1: attempt power cycle [ 28.939496][ T317] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.069218][ T316] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 29.090564][ T316] usb 4-1: device descriptor read/8, error -71 [ 29.096670][ T10] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.104001][ T10] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.109222][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 29.111020][ T10] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.117829][ T317] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 29.123099][ T10] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.134092][ T317] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 29.140882][ T10] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.154015][ T317] usb 3-1: config 0 interface 0 has no altsetting 0 [ 29.161009][ T10] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.167689][ T317] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 29.176158][ T10] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.183675][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.191557][ T10] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 29.213722][ T317] usb 3-1: config 0 descriptor?? [ 29.229238][ T388] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.250110][ T316] usb 4-1: device descriptor read/8, error -71 [ 29.294140][ T10] cp2112 0003:10C4:EA90.0003: Part Number: 0x30 Device Version: 0x6E [ 29.380243][ T388] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 29.391269][ T388] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.404160][ T388] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.411151][ T388] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 29.420211][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.428897][ T388] usb 2-1: config 0 descriptor?? [ 29.434218][ T415] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 29.499251][ T316] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 29.503395][ T394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.515491][ T394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.530194][ T316] usb 4-1: device descriptor read/8, error -71 [ 29.622755][ T317] lg-g15 0003:046D:C227.0004: ignoring exceeding usage max [ 29.631579][ T317] lg-g15 0003:046D:C227.0004: hidraw1: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.2-1/input0 [ 29.660191][ T316] usb 4-1: device descriptor read/8, error -71 [ 29.725108][ T10] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 29.734373][ T10] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 29.745944][ T10] usb 1-1: USB disconnect, device number 6 [ 29.769300][ T316] usb usb4-port1: unable to enumerate USB device [ 29.831329][ T403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.839842][ T403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.850072][ T356] usb 3-1: USB disconnect, device number 5 [ 29.857617][ T388] usbhid 2-1:0.0: can't add hid device: -71 [ 29.866144][ T388] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 29.879627][ T388] usb 2-1: USB disconnect, device number 3 [ 30.426366][ T447] FAULT_INJECTION: forcing a failure. [ 30.426366][ T447] name failslab, interval 1, probability 0, space 0, times 0 [ 30.439061][ T447] CPU: 0 UID: 0 PID: 447 Comm: syz.2.46 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 30.439080][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.439087][ T447] Call Trace: [ 30.439090][ T447] [ 30.439095][ T447] __dump_stack+0x21/0x30 [ 30.439114][ T447] dump_stack_lvl+0x140/0x1c0 [ 30.439128][ T447] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.439143][ T447] dump_stack+0x19/0x20 [ 30.439167][ T447] should_fail_ex+0x3c2/0x510 [ 30.439188][ T447] should_failslab+0xac/0x100 [ 30.439209][ T447] __kmalloc_node_noprof+0x69/0x500 [ 30.439227][ T447] ? __kvmalloc_node_noprof+0x128/0x300 [ 30.439238][ T447] __kvmalloc_node_noprof+0x128/0x300 [ 30.439248][ T447] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 30.439258][ T447] ? percpu_ref_init+0x180/0x4d0 [ 30.439270][ T447] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 30.439281][ T447] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 30.439292][ T447] io_uring_create+0x2e0/0x13f0 [ 30.439302][ T447] ? __kasan_check_write+0x18/0x20 [ 30.439313][ T447] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 30.439328][ T447] ? __kasan_check_write+0x18/0x20 [ 30.439338][ T447] ? __x64_sys_io_uring_setup+0x80/0x80 [ 30.439354][ T447] ? __kasan_check_read+0x15/0x20 [ 30.439364][ T447] __x64_sys_io_uring_setup+0x5f/0x80 [ 30.439378][ T447] x64_sys_call+0x22c0/0x2ee0 [ 30.439388][ T447] do_syscall_64+0x57/0xf0 [ 30.439403][ T447] ? clear_bhb_loop+0x50/0xa0 [ 30.439416][ T447] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.439427][ T447] RIP: 0033:0x7f0cbed9e159 [ 30.439437][ T447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.439446][ T447] RSP: 002b:00007f0cbfccfee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 30.439459][ T447] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f0cbed9e159 [ 30.439467][ T447] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 30.439475][ T447] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 30.439481][ T447] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 30.439489][ T447] R13: 0000200000000b10 R14: 00007f0cbfccffd8 R15: 0000000000000000 [ 30.439497][ T447] [ 30.629294][ T316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 30.664382][ T455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 30.819252][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 30.825533][ T316] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.836651][ T316] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.846546][ T316] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 30.859904][ T316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.867722][ T316] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 30.876943][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.891808][ T316] usb 4-1: config 0 descriptor?? [ 30.939226][ T356] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.000366][ T476] input: syz1 as /devices/virtual/input/input4 [ 31.010138][ T476] fuse: Bad value for 'rootmode' [ 31.069205][ T356] usb 1-1: device descriptor read/64, error -71 [ 31.259218][ T388] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.303834][ T316] hid (null): report_id 26619 is invalid [ 31.309497][ T316] hid (null): usage index exceeded [ 31.314600][ T316] hid (null): unknown global tag 0xc [ 31.319223][ T356] usb 1-1: device descriptor read/64, error -71 [ 31.319917][ T316] hid (null): unknown global tag 0xd [ 31.420161][ T388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 236, changing to 11 [ 31.431401][ T388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50537, setting to 1024 [ 31.442748][ T388] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 31.451787][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.463913][ T388] usb 2-1: config 0 descriptor?? [ 31.469537][ T478] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.508063][ T10] usb 4-1: USB disconnect, device number 7 [ 31.569204][ T356] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.699211][ T356] usb 1-1: device descriptor read/64, error -71 [ 31.793955][ T491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=491 comm=syz.2.62 [ 31.871115][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 31.871131][ T36] audit: type=1400 audit(1788526582.499:208): avc: denied { create } for pid=500 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.898616][ T36] audit: type=1400 audit(1788526582.499:209): avc: denied { connect } for pid=500 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.918245][ T36] audit: type=1400 audit(1788526582.499:210): avc: denied { create } for pid=500 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.937341][ T36] audit: type=1400 audit(1788526582.529:211): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.939218][ T356] usb 1-1: device descriptor read/64, error -71 [ 32.032809][ T36] audit: type=1400 audit(1788526582.659:212): avc: denied { create } for pid=504 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.055134][ T36] audit: type=1400 audit(1788526582.659:213): avc: denied { write } for pid=504 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.069310][ T356] usb usb1-port1: attempt power cycle [ 32.092038][ T388] usbhid 2-1:0.0: can't add hid device: -71 [ 32.106854][ T388] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.117638][ T36] audit: type=1400 audit(1788526582.739:214): avc: denied { listen } for pid=534 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.119607][ T388] usb 2-1: USB disconnect, device number 4 [ 32.137516][ T36] audit: type=1400 audit(1788526582.769:215): avc: denied { setopt } for pid=534 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.162774][ T36] audit: type=1400 audit(1788526582.779:216): avc: denied { read } for pid=534 comm="syz.3.71" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.187265][ T36] audit: type=1400 audit(1788526582.779:217): avc: denied { open } for pid=534 comm="syz.3.71" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.291793][ T544] FAULT_INJECTION: forcing a failure. [ 32.291793][ T544] name failslab, interval 1, probability 0, space 0, times 0 [ 32.304502][ T544] CPU: 1 UID: 0 PID: 544 Comm: syz.2.74 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 32.304531][ T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.304543][ T544] Call Trace: [ 32.304549][ T544] [ 32.304557][ T544] __dump_stack+0x21/0x30 [ 32.304588][ T544] dump_stack_lvl+0x140/0x1c0 [ 32.304612][ T544] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.304639][ T544] dump_stack+0x19/0x20 [ 32.304663][ T544] should_fail_ex+0x3c2/0x510 [ 32.304686][ T544] should_failslab+0xac/0x100 [ 32.304710][ T544] __kmalloc_node_noprof+0x69/0x500 [ 32.304730][ T544] ? __kvmalloc_node_noprof+0x128/0x300 [ 32.304749][ T544] __kvmalloc_node_noprof+0x128/0x300 [ 32.304766][ T544] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 32.304785][ T544] ? percpu_ref_init+0x180/0x4d0 [ 32.304807][ T544] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 32.304826][ T544] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 32.304847][ T544] io_uring_create+0x2e0/0x13f0 [ 32.304866][ T544] ? __kasan_check_write+0x18/0x20 [ 32.304886][ T544] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 32.304913][ T544] ? __kasan_check_write+0x18/0x20 [ 32.304932][ T544] ? __x64_sys_io_uring_setup+0x80/0x80 [ 32.304960][ T544] ? __kasan_check_read+0x15/0x20 [ 32.304979][ T544] __x64_sys_io_uring_setup+0x5f/0x80 [ 32.305005][ T544] x64_sys_call+0x22c0/0x2ee0 [ 32.305023][ T544] do_syscall_64+0x57/0xf0 [ 32.305049][ T544] ? clear_bhb_loop+0x50/0xa0 [ 32.305071][ T544] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.305099][ T544] RIP: 0033:0x7f0cbed9e159 [ 32.305116][ T544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.305132][ T544] RSP: 002b:00007f0cbfccfee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 32.305153][ T544] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f0cbed9e159 [ 32.305167][ T544] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 32.305180][ T544] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 32.305193][ T544] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 32.305207][ T544] R13: 0000200000000b10 R14: 00007f0cbfccffd8 R15: 0000000000000000 [ 32.305223][ T544] [ 32.449293][ T356] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.549445][ T548] Zero length message leads to an empty skb [ 32.570149][ T356] usb 1-1: device descriptor read/8, error -71 [ 32.710433][ T356] usb 1-1: device descriptor read/8, error -71 [ 32.959224][ T356] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 32.969333][ T388] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.980314][ T356] usb 1-1: device descriptor read/8, error -71 [ 33.119203][ T388] usb 2-1: Using ep0 maxpacket: 16 [ 33.125362][ T356] usb 1-1: device descriptor read/8, error -71 [ 33.131717][ T388] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.142886][ T388] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.152834][ T388] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 33.165911][ T388] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.172667][ T388] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 33.181846][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.190702][ T388] usb 2-1: config 0 descriptor?? [ 33.249315][ T356] usb usb1-port1: unable to enumerate USB device [ 33.569205][ T316] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.604793][ T388] hid (null): report_id 26619 is invalid [ 33.610466][ T388] hid (null): usage index exceeded [ 33.732632][ T316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.742764][ T316] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 33.751790][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.759209][ T356] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 33.767654][ T316] usb 3-1: config 0 descriptor?? [ 33.776478][ T316] usb 3-1: bad CDC descriptors [ 33.802622][ T316] usb 2-1: USB disconnect, device number 5 [ 33.889535][ T356] usb 4-1: device descriptor read/64, error -71 [ 33.920457][ T583] FAULT_INJECTION: forcing a failure. [ 33.920457][ T583] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.933708][ T583] CPU: 1 UID: 0 PID: 583 Comm: syz.0.90 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 33.933735][ T583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.933747][ T583] Call Trace: [ 33.933753][ T583] [ 33.933760][ T583] __dump_stack+0x21/0x30 [ 33.933790][ T583] dump_stack_lvl+0x140/0x1c0 [ 33.933815][ T583] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.933840][ T583] ? vsnprintf+0x7b4/0x1ad0 [ 33.933865][ T583] ? check_stack_object+0x10f/0x150 [ 33.933886][ T583] dump_stack+0x19/0x20 [ 33.933909][ T583] should_fail_ex+0x3c2/0x510 [ 33.933930][ T583] should_fail+0xf/0x20 [ 33.933950][ T583] should_fail_usercopy+0x1e/0x30 [ 33.933972][ T583] _copy_from_user+0x20/0xa0 [ 33.934006][ T583] kstrtouint_from_user+0xde/0x170 [ 33.934027][ T583] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 33.934047][ T583] ? selinux_file_permission+0x318/0xb60 [ 33.934068][ T583] ? __cfi_selinux_file_permission+0x10/0x10 [ 33.934087][ T583] proc_fail_nth_write+0x8f/0x220 [ 33.934111][ T583] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 33.934138][ T583] ? bpf_lsm_file_permission+0xd/0x20 [ 33.934161][ T583] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 33.934185][ T583] vfs_write+0x3c4/0xfd0 [ 33.934203][ T583] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 33.934222][ T583] ? __cfi_vfs_write+0x10/0x10 [ 33.934240][ T583] ? __kasan_check_write+0x18/0x20 [ 33.934259][ T583] ? mutex_lock+0x97/0x1d0 [ 33.934279][ T583] ? __cfi_mutex_lock+0x10/0x10 [ 33.934301][ T583] ksys_write+0x145/0x260 [ 33.934321][ T583] ? __cfi_ksys_write+0x10/0x10 [ 33.934340][ T583] ? __kasan_check_write+0x18/0x20 [ 33.934359][ T583] ? fput+0x1a4/0x230 [ 33.934383][ T583] ? __kasan_check_read+0x15/0x20 [ 33.934399][ T583] __x64_sys_write+0x7f/0x90 [ 33.934419][ T583] x64_sys_call+0x271c/0x2ee0 [ 33.934436][ T583] do_syscall_64+0x57/0xf0 [ 33.934462][ T583] ? clear_bhb_loop+0x50/0xa0 [ 33.934483][ T583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.934501][ T583] RIP: 0033:0x7f585b55e98e [ 33.934516][ T583] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.934531][ T583] RSP: 002b:00007f585c3b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 33.934550][ T583] RAX: ffffffffffffffda RBX: 00007f585c3b36c0 RCX: 00007f585b55e98e [ 33.934565][ T583] RDX: 0000000000000001 RSI: 00007f585c3b30a0 RDI: 0000000000000004 [ 33.934578][ T583] RBP: 00007f585c3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 33.934591][ T583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.934603][ T583] R13: 00007f585b826038 R14: 00007f585b825fa0 R15: 00007fff712314e8 [ 33.934619][ T583] [ 33.974978][ T388] usb 3-1: USB disconnect, device number 6 [ 34.262397][ T587] binder: Bad value for 'max' [ 34.310953][ T591] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.339248][ T356] usb 4-1: device descriptor read/64, error -71 [ 34.579208][ T356] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 34.589294][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 34.709975][ T356] usb 4-1: device descriptor read/64, error -71 [ 34.729316][ T316] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.741950][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.758823][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 34.774677][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 34.786837][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.797067][ T10] usb 1-1: Product: 뿐ڪ꯵뀎쟣꩚戹㍑灜墺萾쇬ຉ멏ᢓ乎좄㴔Dz盺ꈝ㼩쉍ᗺᗵ트筺ᔗ傟ፏ힦ꐧ쌡泚ߛ遴㭪앐狼㦸ᓑ랳ﮞ６篥귺쮛펼룬恛蕄鿓ね鏉㪯惌놫官禞⛅㐉䐘狹ం馶翩倭ḁ⒛缯牨肱⣦䠂䷩孭茫몵踲뗽죋醞ֻ涢㋤䌯 [ 34.828370][ T10] usb 1-1: Manufacturer: 찐᱙㭽嵅伅ꉰ꺂䃩內䃬ᐟ䔏㝄椕쵥Ổ링ऱ킡쥑뛁罻쾗䐊귞⌿㫜ణ缪뭬쀕픅룂঱醆ഌ껉ᑃ曧軈ꯑ偳㌌鵐伮寒礗ꉮꡯ쒳氘뇷脁률⪒ [ 34.853728][ T10] usb 1-1: SerialNumber: ф [ 34.890366][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 34.903274][ T316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.921298][ T316] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 34.932477][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.943222][ T316] usb 3-1: config 0 descriptor?? [ 34.979209][ T356] usb 4-1: device descriptor read/64, error -71 [ 35.069666][ T10] usb 1-1: USB disconnect, device number 11 [ 35.082675][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.098900][ T356] usb usb4-port1: attempt power cycle [ 35.350540][ T598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.359024][ T598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.368710][ T598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.377328][ T598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.387593][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.394783][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.401969][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.409141][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.416291][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.423737][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.430959][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.438094][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.446038][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.449203][ T356] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.453211][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.468050][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.475384][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.482673][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.490980][ T356] usb 4-1: device descriptor read/8, error -71 [ 35.494205][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.504323][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.511492][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.518618][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.526566][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.533741][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.540890][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.547999][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.555159][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.562289][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.569554][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.576678][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.583840][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.592426][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.599744][ T612] 9pnet_fd: p9_fd_create_tcp (612): problem connecting socket to 127.0.0.1 [ 35.600890][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.615496][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.622640][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.629784][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.630129][ T356] usb 4-1: device descriptor read/8, error -71 [ 35.637077][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.637105][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.657516][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.664672][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.671853][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.678981][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.686135][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.693309][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.700502][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.707622][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.714812][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.721966][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.729100][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.736276][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.737103][ T616] af_packet: packet size is too long (25449 > 2016) [ 35.743451][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.757249][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.764515][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.771670][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.778802][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.785958][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.793104][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.800265][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.807390][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.814551][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.821714][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.828842][ T316] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 35.836001][ T316] kovaplus 0003:1E7D:2D50.0007: unexpected long global item [ 35.843489][ T316] kovaplus 0003:1E7D:2D50.0007: parse failed [ 35.849193][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.849512][ T316] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -22 [ 35.872388][ T316] usb 3-1: USB disconnect, device number 7 [ 35.889218][ T356] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 35.940179][ T356] usb 4-1: device descriptor read/8, error -71 [ 35.999201][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 36.010552][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.029184][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.039057][ T10] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 36.052301][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.058947][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 36.068225][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.077285][ T356] usb 4-1: device descriptor read/8, error -71 [ 36.084145][ T10] usb 2-1: config 0 descriptor?? [ 36.199333][ T356] usb usb4-port1: unable to enumerate USB device [ 36.419210][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.496116][ T10] hid (null): report_id 26619 is invalid [ 36.501960][ T10] hid (null): usage index exceeded [ 36.549235][ T316] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 36.579213][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 36.585435][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.597169][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.607323][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.619275][ T9] usb 3-1: Product: syz [ 36.623491][ T9] usb 3-1: Manufacturer: syz [ 36.628214][ T9] usb 3-1: SerialNumber: syz [ 36.633682][ T9] usb 3-1: config 0 descriptor?? [ 36.639871][ T9] smsc75xx v1.0.0 [ 36.644407][ T9] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 36.654532][ T9] smsc75xx 3-1:0.0: probe with driver smsc75xx failed with error -22 [ 36.654903][ T645] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 36.696549][ T645] syzkaller1: entered promiscuous mode [ 36.702095][ T645] syzkaller1: entered allmulticast mode [ 36.705291][ T31] usb 2-1: USB disconnect, device number 6 [ 36.720172][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.731078][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.740843][ T316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.753719][ T316] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 36.762804][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.772120][ T316] usb 1-1: config 0 descriptor?? [ 36.839527][ T310] usb 3-1: USB disconnect, device number 8 [ 37.179818][ T316] playstation 0003:054C:09CC.0009: unknown main item tag 0x0 [ 37.187233][ T316] playstation 0003:054C:09CC.0009: unknown main item tag 0x0 [ 37.194725][ T316] playstation 0003:054C:09CC.0009: unknown main item tag 0x0 [ 37.202250][ T316] playstation 0003:054C:09CC.0009: unknown main item tag 0x0 [ 37.209643][ T316] playstation 0003:054C:09CC.0009: unknown main item tag 0x0 [ 37.217035][ T316] playstation 0003:054C:09CC.0009: unknown main item tag 0x0 [ 37.225343][ T316] playstation 0003:054C:09CC.0009: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 37.259228][ T310] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 37.380270][ T316] playstation 0003:054C:09CC.0009: Invalid reportID received, expected 18 got 0 [ 37.389500][ T316] playstation 0003:054C:09CC.0009: Failed to retrieve DualShock4 pairing info: -22 [ 37.398903][ T316] playstation 0003:054C:09CC.0009: Failed to get MAC address from DualShock4 [ 37.407969][ T316] playstation 0003:054C:09CC.0009: Failed to create dualshock4. [ 37.416862][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.431361][ T316] playstation 0003:054C:09CC.0009: probe with driver playstation failed with error -22 [ 37.441809][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.453529][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.471322][ T310] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 37.476750][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 37.476766][ T36] audit: type=1400 audit(1788526588.099:244): avc: denied { map } for pid=684 comm="syz.1.134" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.480740][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.487847][ T36] audit: type=1400 audit(1788526588.109:245): avc: denied { read write } for pid=684 comm="syz.1.134" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.510720][ T310] usb 4-1: config 0 descriptor?? [ 37.545783][ T36] audit: type=1400 audit(1788526588.109:246): avc: denied { open } for pid=684 comm="syz.1.134" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.575424][ T36] audit: type=1400 audit(1788526588.109:247): avc: denied { ioctl } for pid=684 comm="syz.1.134" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.604362][ T10] usb 1-1: USB disconnect, device number 12 [ 37.613979][ T36] audit: type=1400 audit(1788526588.219:248): avc: denied { write } for pid=684 comm="syz.1.134" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.624288][ T694] FAULT_INJECTION: forcing a failure. [ 37.624288][ T694] name failslab, interval 1, probability 0, space 0, times 0 [ 37.641225][ T36] audit: type=1400 audit(1788526588.229:249): avc: denied { write } for pid=684 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.657286][ T694] CPU: 1 UID: 0 PID: 694 Comm: syz.2.136 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 37.657318][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.657329][ T694] Call Trace: [ 37.657335][ T694] [ 37.657342][ T694] __dump_stack+0x21/0x30 [ 37.657371][ T694] dump_stack_lvl+0x140/0x1c0 [ 37.657395][ T694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.657419][ T694] ? number+0xc9d/0xf00 [ 37.657444][ T694] dump_stack+0x19/0x20 [ 37.657467][ T694] should_fail_ex+0x3c2/0x510 [ 37.657488][ T694] should_failslab+0xac/0x100 [ 37.657511][ T694] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 37.657531][ T694] ? vsnprintf+0x19ef/0x1ad0 [ 37.657553][ T694] ? __d_alloc+0x42/0x8c0 [ 37.657571][ T694] __d_alloc+0x42/0x8c0 [ 37.657595][ T694] d_alloc_parallel+0xe4/0x1370 [ 37.657614][ T694] ? __cfi_sprintf+0x10/0x10 [ 37.657639][ T694] ? __kmalloc_cache_noprof+0x23c/0x470 [ 37.657657][ T694] ? proc_thread_self_get_link+0x11a/0x290 [ 37.657684][ T694] ? avc_has_perm_noaudit+0x26b/0x360 [ 37.657706][ T694] ? __cfi_d_alloc_parallel+0x10/0x10 [ 37.657725][ T694] ? __kasan_check_write+0x18/0x20 [ 37.657743][ T694] ? rwsem_read_trylock+0x275/0x5a0 [ 37.657770][ T694] ? downgrade_write+0x470/0x470 [ 37.657796][ T694] __lookup_slow+0x150/0x420 [ 37.657818][ T694] ? try_to_unlazy+0x62a/0xb50 [ 37.657837][ T694] ? lookup_one_len+0x300/0x300 [ 37.657858][ T694] ? down_read+0x7f/0xe0 [ 37.657880][ T694] lookup_slow+0x57/0x80 [ 37.657902][ T694] link_path_walk+0x991/0xeb0 [ 37.657922][ T694] path_openat+0x298/0x35a0 [ 37.657946][ T694] ? kasan_save_alloc_info+0x3a/0x50 [ 37.657962][ T694] ? __kasan_slab_alloc+0x73/0x90 [ 37.657984][ T694] ? getname+0x1b/0x30 [ 37.658003][ T694] ? x64_sys_call+0xe69/0x2ee0 [ 37.658019][ T694] ? do_syscall_64+0x57/0xf0 [ 37.658045][ T694] ? do_filp_open+0x440/0x440 [ 37.658069][ T694] do_filp_open+0x1f2/0x440 [ 37.658093][ T694] ? __cfi_do_filp_open+0x10/0x10 [ 37.658116][ T694] ? __cfi_kfree_link+0x10/0x10 [ 37.658142][ T694] ? alloc_fd+0x4c1/0x570 [ 37.658163][ T694] do_sys_openat2+0x134/0x1d0 [ 37.658187][ T694] ? fput+0x1a4/0x230 [ 37.658209][ T694] ? do_sys_open+0x100/0x100 [ 37.658235][ T694] __x64_sys_openat+0x13a/0x170 [ 37.658260][ T694] x64_sys_call+0xe69/0x2ee0 [ 37.658276][ T694] do_syscall_64+0x57/0xf0 [ 37.658301][ T694] ? clear_bhb_loop+0x50/0xa0 [ 37.658321][ T694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.658341][ T694] RIP: 0033:0x7f0cbed5e98e [ 37.658356][ T694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 37.658371][ T694] RSP: 002b:00007f0cbfccff98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 37.658391][ T694] RAX: ffffffffffffffda RBX: 00007f0cbfcd06c0 RCX: 00007f0cbed5e98e [ 37.658405][ T694] RDX: 0000000000000002 RSI: 00007f0cbee3492b RDI: ffffffffffffff9c [ 37.658418][ T694] RBP: 00007f0cbee35024 R08: 0000000000000000 R09: 0000000000000000 [ 37.658430][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.658446][ T694] R13: 00007f0cbf026038 R14: 00007f0cbf025fa0 R15: 00007ffef7195368 [ 37.658461][ T694] [ 37.951370][ T310] playstation 0003:054C:09CC.000A: unknown main item tag 0x0 [ 37.953535][ T36] audit: type=1400 audit(1788526588.229:250): avc: denied { connect } for pid=684 comm="syz.1.134" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.960170][ T310] playstation 0003:054C:09CC.000A: unknown main item tag 0x0 [ 37.967682][ T36] audit: type=1400 audit(1788526588.369:251): avc: denied { ioctl } for pid=668 comm="syz.3.127" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.982270][ T310] playstation 0003:054C:09CC.000A: unknown main item tag 0x0 [ 38.054656][ T310] playstation 0003:054C:09CC.000A: unknown main item tag 0x0 [ 38.062088][ T310] playstation 0003:054C:09CC.000A: unknown main item tag 0x0 [ 38.069493][ T310] playstation 0003:054C:09CC.000A: unknown main item tag 0x0 [ 38.077408][ T310] playstation 0003:054C:09CC.000A: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 38.150996][ T310] playstation 0003:054C:09CC.000A: Failed to retrieve feature with reportID 18: -71 [ 38.160561][ T310] playstation 0003:054C:09CC.000A: Failed to retrieve DualShock4 pairing info: -71 [ 38.170468][ T310] playstation 0003:054C:09CC.000A: Failed to get MAC address from DualShock4 [ 38.179283][ T310] playstation 0003:054C:09CC.000A: Failed to create dualshock4. [ 38.190213][ T310] playstation 0003:054C:09CC.000A: probe with driver playstation failed with error -71 [ 38.208921][ T310] usb 4-1: USB disconnect, device number 12 [ 38.220128][ T316] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 38.379195][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 38.387298][ T316] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.398737][ T316] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.408565][ T316] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 38.421514][ T316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.428163][ T316] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 38.437277][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.446251][ T316] usb 3-1: config 0 descriptor?? [ 38.585152][ T36] audit: type=1400 audit(1788526589.209:252): avc: denied { map } for pid=717 comm="syz.0.146" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.622062][ T36] audit: type=1400 audit(1788526589.249:253): avc: denied { mounton } for pid=720 comm="syz.0.147" path="/47/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.651865][ T716] kvm: kvm [715]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 38.695379][ T728] overlayfs: conflicting lowerdir path [ 38.702057][ T728] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 38.792442][ T742] rust_binder: Failure in copy_transaction_data: ENOMEM [ 38.792465][ T742] rust_binder: 741:742 transaction async to 741:0 failed ENOMEM, code 0 size 72-18446744073709551584 [ 38.832532][ T31] rust_binder: 741: undelivered TRANSACTION_ERROR: 29201 [ 38.864637][ T316] hid (null): report_id 0 is invalid [ 39.062374][ T316] usb 3-1: USB disconnect, device number 9 [ 39.069711][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 39.129242][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.220305][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 39.230010][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 39.241178][ T9] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 39.250250][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.258225][ T9] usb 1-1: Product: syz [ 39.262445][ T9] usb 1-1: Manufacturer: syz [ 39.267105][ T9] usb 1-1: SerialNumber: syz [ 39.279184][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 39.285334][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.295444][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.304419][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 39.315374][ T10] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 39.328609][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.338266][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 39.346266][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 39.355332][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.363323][ T10] usb 2-1: Product: syz [ 39.367467][ T10] usb 2-1: Manufacturer: syz [ 39.372088][ T10] usb 2-1: SerialNumber: syz [ 39.473940][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 39.580163][ T10] usb 2-1: selecting invalid altsetting 0 [ 39.683203][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.693870][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.702363][ T757] GUP no longer grows the stack in syz.3.161 (757): 200000005000-200000008000 (200000004000) [ 39.712620][ T757] CPU: 0 UID: 0 PID: 757 Comm: syz.3.161 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 39.712651][ T757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.712662][ T757] Call Trace: [ 39.712667][ T757] [ 39.712672][ T757] __dump_stack+0x21/0x30 [ 39.712692][ T757] dump_stack_lvl+0x140/0x1c0 [ 39.712710][ T757] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.712725][ T757] ? find_vma+0xd3/0x120 [ 39.712736][ T757] dump_stack+0x19/0x20 [ 39.712749][ T757] fixup_user_fault+0x616/0x6a0 [ 39.712762][ T757] fault_in_user_writeable+0x75/0xe0 [ 39.712777][ T757] futex_lock_pi+0x2ed/0xa70 [ 39.712792][ T757] ? futex_unqueue+0x136/0x160 [ 39.712806][ T757] ? __cfi_futex_lock_pi+0x10/0x10 [ 39.712821][ T757] ? __cfi_futex_wake_mark+0x10/0x10 [ 39.712831][ T757] ? __cfi_futex_wake_mark+0x10/0x10 [ 39.712842][ T757] do_futex+0x270/0x510 [ 39.712854][ T757] ? __cfi_do_futex+0x10/0x10 [ 39.712867][ T757] ? __vm_munmap+0x30d/0x3d0 [ 39.712878][ T757] __se_sys_futex+0x13c/0x320 [ 39.712892][ T757] ? __x64_sys_futex+0x110/0x110 [ 39.712905][ T757] ? __kasan_check_write+0x18/0x20 [ 39.712916][ T757] __x64_sys_futex+0xe9/0x110 [ 39.712929][ T757] x64_sys_call+0x227f/0x2ee0 [ 39.712946][ T757] do_syscall_64+0x57/0xf0 [ 39.712962][ T757] ? clear_bhb_loop+0x50/0xa0 [ 39.712974][ T757] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.712986][ T757] RIP: 0033:0x7f46b639e159 [ 39.712996][ T757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.713005][ T757] RSP: 002b:00007f46b727a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 39.713018][ T757] RAX: ffffffffffffffda RBX: 00007f46b6625fa0 RCX: 00007f46b639e159 [ 39.713026][ T757] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 39.713033][ T757] RBP: 00007f46b6435024 R08: 0000000000000000 R09: 0000000000000001 [ 39.713039][ T757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.713046][ T757] R13: 00007f46b6626038 R14: 00007f46b6625fa0 R15: 00007ffddb4457d8 [ 39.713054][ T757] [ 39.962090][ T767] tipc: Started in network mode [ 39.966994][ T767] tipc: Node identity 2000004, cluster identity 4711 [ 39.973721][ T767] tipc: Node number set to 33554436 [ 40.020347][ T774] process 'syz.3.167' launched './file0' with NULL argv: empty string added [ 40.137240][ T10] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 40.147196][ T10] usb 2-1: USB disconnect, device number 7 [ 40.162040][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.240508][ T31] usb 1-1: USB disconnect, device number 13 [ 40.247399][ T31] usblp0: removed [ 40.329206][ T388] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 40.479196][ T388] usb 4-1: Using ep0 maxpacket: 16 [ 40.485337][ T388] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.496419][ T388] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.506247][ T388] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 40.519205][ T388] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.525796][ T388] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 40.534844][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.543853][ T388] usb 4-1: config 0 descriptor?? [ 40.742132][ T780] mmap: syz.1.169 (780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.849753][ T798] FAULT_INJECTION: forcing a failure. [ 40.849753][ T798] name failslab, interval 1, probability 0, space 0, times 0 [ 40.867757][ T798] CPU: 1 UID: 0 PID: 798 Comm: syz.2.175 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 40.867793][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.867804][ T798] Call Trace: [ 40.867809][ T798] [ 40.867816][ T798] __dump_stack+0x21/0x30 [ 40.867845][ T798] dump_stack_lvl+0x140/0x1c0 [ 40.867869][ T798] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.867893][ T798] dump_stack+0x19/0x20 [ 40.867916][ T798] should_fail_ex+0x3c2/0x510 [ 40.867938][ T798] should_failslab+0xac/0x100 [ 40.867960][ T798] kmem_cache_alloc_node_noprof+0x45/0x420 [ 40.867981][ T798] ? __alloc_skb+0x10c/0x360 [ 40.868002][ T798] __alloc_skb+0x10c/0x360 [ 40.868023][ T798] xfrm_send_state_notify+0x777/0x1ae0 [ 40.868046][ T798] ? xfrm_state_add+0xb9d/0xed0 [ 40.868068][ T798] ? __cfi_xfrm_send_state_notify+0x10/0x10 [ 40.868092][ T798] ? __cfi_xfrm_send_state_notify+0x10/0x10 [ 40.868112][ T798] km_state_notify+0x81/0xe0 [ 40.868134][ T798] xfrm_add_sa+0x29e9/0x37b0 [ 40.868156][ T798] ? __cfi_xfrm_add_sa+0x10/0x10 [ 40.868179][ T798] xfrm_user_rcv_msg+0x699/0x900 [ 40.868202][ T798] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 40.868229][ T798] ? __asan_memcpy+0x5a/0x80 [ 40.868246][ T798] ? avc_has_perm_noaudit+0x289/0x360 [ 40.868268][ T798] ? avc_has_perm+0x155/0x240 [ 40.868288][ T798] netlink_rcv_skb+0x24d/0x4e0 [ 40.868311][ T798] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 40.868334][ T798] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 40.868357][ T798] ? __kasan_check_write+0x18/0x20 [ 40.868385][ T798] ? mutex_lock+0x97/0x1d0 [ 40.868406][ T798] ? __cfi_mutex_lock+0x10/0x10 [ 40.868426][ T798] ? netlink_autobind+0x1c0/0x1c0 [ 40.868456][ T798] xfrm_netlink_rcv+0x76/0x90 [ 40.868479][ T798] netlink_unicast+0x8bf/0xa70 [ 40.868501][ T798] netlink_sendmsg+0x7d1/0xad0 [ 40.868525][ T798] ? __cfi_netlink_sendmsg+0x10/0x10 [ 40.868550][ T798] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 40.868572][ T798] ? security_socket_sendmsg+0x3d/0x100 [ 40.868597][ T798] ____sys_sendmsg+0x99e/0xa00 [ 40.868622][ T798] ? __import_iovec+0x5b9/0x7d0 [ 40.868648][ T798] ? __sys_sendmsg_sock+0x50/0x50 [ 40.868672][ T798] ? import_iovec+0x80/0xb0 [ 40.868696][ T798] ___sys_sendmsg+0x2a6/0x370 [ 40.868720][ T798] ? __sys_sendmsg+0x260/0x260 [ 40.868742][ T798] ? proc_fail_nth_write+0x184/0x220 [ 40.868767][ T798] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 40.868796][ T798] ? __fget_files+0x2bc/0x330 [ 40.868818][ T798] __x64_sys_sendmsg+0x1be/0x2a0 [ 40.868839][ T798] ? fput+0x1a4/0x230 [ 40.868862][ T798] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 40.868883][ T798] ? ksys_write+0x1f3/0x260 [ 40.868901][ T798] ? __kasan_check_read+0x15/0x20 [ 40.868920][ T798] x64_sys_call+0x2a4c/0x2ee0 [ 40.868937][ T798] do_syscall_64+0x57/0xf0 [ 40.868960][ T798] ? clear_bhb_loop+0x50/0xa0 [ 40.868981][ T798] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.869001][ T798] RIP: 0033:0x7f0cbed9e159 [ 40.869017][ T798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.869033][ T798] RSP: 002b:00007f0cbfcd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.869054][ T798] RAX: ffffffffffffffda RBX: 00007f0cbf025fa0 RCX: 00007f0cbed9e159 [ 40.869069][ T798] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 40.869081][ T798] RBP: 00007f0cbfcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 40.869092][ T798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.869103][ T798] R13: 00007f0cbf026038 R14: 00007f0cbf025fa0 R15: 00007ffef7195368 [ 40.869118][ T798] [ 40.967202][ T388] hid (null): report_id 0 is invalid [ 41.260746][ T388] usb 4-1: USB disconnect, device number 13 [ 41.262968][ T809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 41.287803][ T806] FAULT_INJECTION: forcing a failure. [ 41.287803][ T806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.321413][ T806] CPU: 1 UID: 0 PID: 806 Comm: syz.1.179 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 41.321452][ T806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.321462][ T806] Call Trace: [ 41.321468][ T806] [ 41.321476][ T806] __dump_stack+0x21/0x30 [ 41.321508][ T806] dump_stack_lvl+0x140/0x1c0 [ 41.321533][ T806] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.321560][ T806] ? check_stack_object+0x138/0x150 [ 41.321581][ T806] dump_stack+0x19/0x20 [ 41.321603][ T806] should_fail_ex+0x3c2/0x510 [ 41.321624][ T806] should_fail+0xf/0x20 [ 41.321643][ T806] should_fail_usercopy+0x1e/0x30 [ 41.321664][ T806] _copy_to_user+0x24/0xa0 [ 41.321688][ T806] simple_read_from_buffer+0xed/0x160 [ 41.321715][ T806] proc_fail_nth_read+0x1aa/0x220 [ 41.321743][ T806] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 41.321770][ T806] ? bpf_lsm_file_permission+0xd/0x20 [ 41.321795][ T806] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 41.321818][ T806] vfs_read+0x28b/0xc70 [ 41.321837][ T806] ? __cfi_vfs_read+0x10/0x10 [ 41.321855][ T806] ? __kasan_check_write+0x18/0x20 [ 41.321873][ T806] ? mutex_lock+0x97/0x1d0 [ 41.321893][ T806] ? __cfi_mutex_lock+0x10/0x10 [ 41.321915][ T806] ksys_read+0x145/0x260 [ 41.321933][ T806] ? __cfi_ksys_read+0x10/0x10 [ 41.321951][ T806] ? __kasan_check_write+0x18/0x20 [ 41.321969][ T806] ? fput+0x1a4/0x230 [ 41.321993][ T806] ? __kasan_check_read+0x15/0x20 [ 41.322012][ T806] __x64_sys_read+0x7f/0x90 [ 41.322032][ T806] x64_sys_call+0x2638/0x2ee0 [ 41.322048][ T806] do_syscall_64+0x57/0xf0 [ 41.322072][ T806] ? clear_bhb_loop+0x50/0xa0 [ 41.322093][ T806] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.322113][ T806] RIP: 0033:0x7f672755e98e [ 41.322133][ T806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.322148][ T806] RSP: 002b:00007f6725ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.322169][ T806] RAX: ffffffffffffffda RBX: 00007f6725ff76c0 RCX: 00007f672755e98e [ 41.322183][ T806] RDX: 000000000000000f RSI: 00007f6725ff70a0 RDI: 0000000000000007 [ 41.322196][ T806] RBP: 00007f6725ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.322208][ T806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.322221][ T806] R13: 00007f6727826038 R14: 00007f6727825fa0 R15: 00007ffd13bce268 [ 41.322237][ T806] [ 41.815545][ T840] FAULT_INJECTION: forcing a failure. [ 41.815545][ T840] name failslab, interval 1, probability 0, space 0, times 0 [ 41.828238][ T840] CPU: 0 UID: 0 PID: 840 Comm: syz.2.188 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 41.828262][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.828269][ T840] Call Trace: [ 41.828273][ T840] [ 41.828278][ T840] __dump_stack+0x21/0x30 [ 41.828299][ T840] dump_stack_lvl+0x140/0x1c0 [ 41.828324][ T840] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.828349][ T840] ? __kasan_check_write+0x18/0x20 [ 41.828364][ T840] ? copy_mm+0x307/0x1da0 [ 41.828377][ T840] dump_stack+0x19/0x20 [ 41.828390][ T840] should_fail_ex+0x3c2/0x510 [ 41.828403][ T840] should_failslab+0xac/0x100 [ 41.828416][ T840] kmem_cache_alloc_noprof+0x42/0x410 [ 41.828427][ T840] ? alloc_pid+0xa5/0xb80 [ 41.828442][ T840] ? __asan_memcpy+0x5a/0x80 [ 41.828452][ T840] alloc_pid+0xa5/0xb80 [ 41.828464][ T840] copy_process+0x1467/0x3350 [ 41.828485][ T840] ? __cfi_copy_process+0x10/0x10 [ 41.828498][ T840] ? __kmalloc_cache_noprof+0x23c/0x470 [ 41.828509][ T840] ? __kasan_check_write+0x18/0x20 [ 41.828519][ T840] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 41.828533][ T840] vhost_task_create+0x1f7/0x3f0 [ 41.828544][ T840] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 41.828557][ T840] ? __cfi_vhost_task_create+0x10/0x10 [ 41.828568][ T840] ? __cfi_vhost_task_fn+0x10/0x10 [ 41.828579][ T840] ? __kasan_check_write+0x18/0x20 [ 41.828589][ T840] ? mutex_lock+0x97/0x1d0 [ 41.828602][ T840] ? __cfi_mutex_lock+0x10/0x10 [ 41.828612][ T840] ? kernel_text_address+0xa9/0xe0 [ 41.828627][ T840] kvm_mmu_post_init_vm+0x161/0x300 [ 41.828642][ T840] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 41.828657][ T840] ? _parse_integer_limit+0x195/0x1e0 [ 41.828669][ T840] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 41.828683][ T840] ? kstrtoull+0x13b/0x1e0 [ 41.828693][ T840] ? kstrtouint+0x78/0xf0 [ 41.828704][ T840] ? ioctl_has_perm+0x1bc/0x500 [ 41.828714][ T840] ? __asan_memcpy+0x5a/0x80 [ 41.828725][ T840] ? ioctl_has_perm+0x408/0x500 [ 41.828735][ T840] ? has_cap_mac_admin+0xd0/0xd0 [ 41.828745][ T840] ? __kasan_check_write+0x18/0x20 [ 41.828755][ T840] ? mutex_lock_killable+0x97/0x1d0 [ 41.828767][ T840] ? __cfi_mutex_lock_killable+0x10/0x10 [ 41.828779][ T840] ? proc_fail_nth_write+0x184/0x220 [ 41.828795][ T840] kvm_vcpu_ioctl+0xa43/0x1000 [ 41.828805][ T840] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 41.828815][ T840] ? __cfi_vfs_write+0x10/0x10 [ 41.828827][ T840] ? __kasan_check_write+0x18/0x20 [ 41.828837][ T840] ? mutex_unlock+0x90/0x240 [ 41.828848][ T840] ? __cfi_mutex_unlock+0x10/0x10 [ 41.828860][ T840] ? __fget_files+0x2bc/0x330 [ 41.828873][ T840] ? bpf_lsm_file_ioctl+0xd/0x20 [ 41.828888][ T840] ? security_file_ioctl+0x3e/0x110 [ 41.828897][ T840] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 41.828907][ T840] __se_sys_ioctl+0x126/0x1b0 [ 41.828920][ T840] __x64_sys_ioctl+0x7f/0xa0 [ 41.828932][ T840] x64_sys_call+0x1878/0x2ee0 [ 41.828942][ T840] do_syscall_64+0x57/0xf0 [ 41.828956][ T840] ? clear_bhb_loop+0x50/0xa0 [ 41.828969][ T840] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.828982][ T840] RIP: 0033:0x7f0cbed9e159 [ 41.828993][ T840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.829002][ T840] RSP: 002b:00007f0cbfcd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.829015][ T840] RAX: ffffffffffffffda RBX: 00007f0cbf025fa0 RCX: 00007f0cbed9e159 [ 41.829023][ T840] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 41.829030][ T840] RBP: 00007f0cbfcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 41.829037][ T840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.829043][ T840] R13: 00007f0cbf026038 R14: 00007f0cbf025fa0 R15: 00007ffef7195368 [ 41.829052][ T840] [ 42.337625][ T859] 9pnet_fd: Insufficient options for proto=fd [ 42.372260][ T865] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.462279][ T876] netlink: 'syz.1.203': attribute type 46 has an invalid length. [ 42.526409][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 42.526426][ T36] audit: type=1400 audit(1788526593.089:271): avc: denied { append } for pid=875 comm="syz.1.203" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.679207][ T316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.699210][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 42.809199][ T316] usb 3-1: device descriptor read/64, error -71 [ 42.829202][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.859192][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 42.865300][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.876383][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.886280][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 42.899348][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.905942][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 42.915009][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.923803][ T10] usb 1-1: config 0 descriptor?? [ 42.979198][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 42.985306][ T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 42.993729][ T31] usb 2-1: config 179 has no interface number 0 [ 43.000016][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 43.011232][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 43.022446][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 43.033568][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 43.044972][ T31] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 43.058191][ T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 43.067220][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.075227][ T316] usb 3-1: device descriptor read/64, error -71 [ 43.084811][ T882] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 43.296381][ T882] netlink: 'syz.1.206': attribute type 39 has an invalid length. [ 43.329192][ T316] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.343730][ T10] hid (null): report_id 0 is invalid [ 43.459213][ T316] usb 3-1: device descriptor read/64, error -71 [ 43.506929][ T31] usb 2-1: USB disconnect, device number 8 [ 43.512821][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 43.512857][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 43.539767][ T10] usb 1-1: USB disconnect, device number 14 [ 43.699257][ T316] usb 3-1: device descriptor read/64, error -71 [ 43.779201][ T310] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 43.809329][ T316] usb usb3-port1: attempt power cycle [ 43.929222][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 43.935428][ T310] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 43.943547][ T310] usb 4-1: config 0 has no interface number 0 [ 43.950972][ T310] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.960028][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.968018][ T310] usb 4-1: Product: syz [ 43.972190][ T310] usb 4-1: Manufacturer: syz [ 43.976772][ T310] usb 4-1: SerialNumber: syz [ 43.981903][ T310] usb 4-1: config 0 descriptor?? [ 43.987537][ T310] smsc95xx v2.0.0 [ 44.060643][ T36] audit: type=1400 audit(1788526594.689:272): avc: denied { bind } for pid=899 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.079848][ T36] audit: type=1400 audit(1788526594.689:273): avc: denied { mounton } for pid=899 comm="syz.0.209" path="/proc/169/task" dev="proc" ino=8021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.118524][ T36] audit: type=1400 audit(1788526594.739:274): avc: denied { map } for pid=907 comm="syz.0.211" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.159210][ T316] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.180082][ T316] usb 3-1: device descriptor read/8, error -71 [ 44.278679][ T36] audit: type=1400 audit(1788526594.899:275): avc: denied { execute } for pid=913 comm="syz.0.213" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.302265][ T36] audit: type=1400 audit(1788526594.909:276): avc: denied { map } for pid=913 comm="syz.0.213" path="socket:[8033]" dev="sockfs" ino=8033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.310167][ T316] usb 3-1: device descriptor read/8, error -71 [ 44.336980][ T36] audit: type=1400 audit(1788526594.959:277): avc: denied { getopt } for pid=924 comm="syz.0.214" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.357250][ T36] audit: type=1400 audit(1788526594.959:278): avc: denied { ioctl } for pid=924 comm="syz.0.214" path="socket:[8195]" dev="sockfs" ino=8195 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.389219][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.396986][ T310] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 44.408015][ T310] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.550213][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.561150][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.573943][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 44.579240][ T316] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.580554][ T10] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 44.597094][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.605648][ T10] usb 2-1: config 0 descriptor?? [ 44.610164][ T316] usb 3-1: device descriptor read/8, error -71 [ 44.750194][ T316] usb 3-1: device descriptor read/8, error -71 [ 44.759231][ T898] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 44.818464][ T310] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 44.829340][ T310] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 44.838506][ T310] usb 4-1: USB disconnect, device number 14 [ 44.859267][ T316] usb usb3-port1: unable to enumerate USB device [ 44.909193][ T898] usb 1-1: Using ep0 maxpacket: 32 [ 44.915379][ T898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.926341][ T898] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.935414][ T898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.944175][ T898] usb 1-1: config 0 descriptor?? [ 44.950123][ T898] hub 1-1:0.0: USB hub found [ 45.013702][ T10] hid-multitouch 0003:0EEF:72C4.000E: item fetching failed at offset 5/24 [ 45.022522][ T10] hid-multitouch 0003:0EEF:72C4.000E: probe with driver hid-multitouch failed with error -22 [ 45.150581][ T898] hub 1-1:0.0: 1 port detected [ 45.219018][ T10] usb 2-1: USB disconnect, device number 9 [ 45.480018][ T939] FAULT_INJECTION: forcing a failure. [ 45.480018][ T939] name failslab, interval 1, probability 0, space 0, times 0 [ 45.492860][ T939] CPU: 0 UID: 0 PID: 939 Comm: syz.2.220 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 45.492891][ T939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.492903][ T939] Call Trace: [ 45.492909][ T939] [ 45.492917][ T939] __dump_stack+0x21/0x30 [ 45.492948][ T939] dump_stack_lvl+0x140/0x1c0 [ 45.492972][ T939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.492999][ T939] dump_stack+0x19/0x20 [ 45.493022][ T939] should_fail_ex+0x3c2/0x510 [ 45.493044][ T939] should_failslab+0xac/0x100 [ 45.493068][ T939] __kmalloc_node_noprof+0x69/0x500 [ 45.493089][ T939] ? __kvmalloc_node_noprof+0x128/0x300 [ 45.493108][ T939] __kvmalloc_node_noprof+0x128/0x300 [ 45.493127][ T939] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 45.493146][ T939] ? percpu_ref_init+0x180/0x4d0 [ 45.493168][ T939] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 45.493188][ T939] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 45.493209][ T939] io_uring_create+0x2e0/0x13f0 [ 45.493228][ T939] ? __kasan_check_write+0x18/0x20 [ 45.493247][ T939] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 45.493273][ T939] ? __kasan_check_write+0x18/0x20 [ 45.493293][ T939] ? __x64_sys_io_uring_setup+0x80/0x80 [ 45.493320][ T939] ? __kasan_check_read+0x15/0x20 [ 45.493340][ T939] __x64_sys_io_uring_setup+0x5f/0x80 [ 45.493364][ T939] x64_sys_call+0x22c0/0x2ee0 [ 45.493382][ T939] do_syscall_64+0x57/0xf0 [ 45.493408][ T939] ? clear_bhb_loop+0x50/0xa0 [ 45.493429][ T939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.493450][ T939] RIP: 0033:0x7f0cbed9e159 [ 45.493466][ T939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.493484][ T939] RSP: 002b:00007f0cbfccfee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 45.493505][ T939] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f0cbed9e159 [ 45.493521][ T939] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 45.493534][ T939] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 45.493547][ T939] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 45.493562][ T939] R13: 0000200000000b10 R14: 00007f0cbfccffd8 R15: 0000000000000000 [ 45.493578][ T939] [ 45.724273][ T942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.733195][ T942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.745644][ T942] MTRR 1 not used [ 45.753386][ T942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.762322][ T942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.779772][ T36] audit: type=1400 audit(1788526596.369:279): avc: denied { read write } for pid=934 comm="syz.3.218" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.802887][ T36] audit: type=1400 audit(1788526596.369:280): avc: denied { open } for pid=934 comm="syz.3.218" path="/40/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.869734][ T948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 45.894922][ T950] FAULT_INJECTION: forcing a failure. [ 45.894922][ T950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.908094][ T950] CPU: 1 UID: 0 PID: 950 Comm: syz.2.223 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 45.908124][ T950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.908136][ T950] Call Trace: [ 45.908140][ T950] [ 45.908145][ T950] __dump_stack+0x21/0x30 [ 45.908166][ T950] dump_stack_lvl+0x140/0x1c0 [ 45.908182][ T950] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.908197][ T950] ? __kasan_check_write+0x18/0x20 [ 45.908209][ T950] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 45.908220][ T950] dump_stack+0x19/0x20 [ 45.908233][ T950] should_fail_ex+0x3c2/0x510 [ 45.908246][ T950] should_fail+0xf/0x20 [ 45.908257][ T950] should_fail_usercopy+0x1e/0x30 [ 45.908269][ T950] _copy_from_user+0x20/0xa0 [ 45.908284][ T950] kvm_arch_vcpu_ioctl+0x627/0x3120 [ 45.908294][ T950] ? kernel_text_address+0xa9/0xe0 [ 45.908309][ T950] ? __kernel_text_address+0x11/0x40 [ 45.908323][ T950] ? unwind_get_return_address+0x51/0x90 [ 45.908336][ T950] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 45.908347][ T950] ? arch_stack_walk+0x10a/0x170 [ 45.908358][ T950] ? stack_trace_save+0xaa/0x100 [ 45.908370][ T950] ? stack_depot_save_flags+0x38/0x800 [ 45.908384][ T950] ? kasan_save_track+0x4f/0x80 [ 45.908395][ T950] ? kasan_save_track+0x3e/0x80 [ 45.908406][ T950] ? kasan_save_free_info+0x44/0x50 [ 45.908416][ T950] ? __kasan_slab_free+0x5f/0x80 [ 45.908428][ T950] ? kfree+0x158/0x440 [ 45.908439][ T950] ? kvfree+0x39/0x50 [ 45.908450][ T950] ? kvm_dev_ioctl_get_cpuid+0xbb5/0x1350 [ 45.908461][ T950] ? kvm_arch_dev_ioctl+0x3fd/0x990 [ 45.908471][ T950] ? kvm_dev_ioctl+0x48e/0x14c0 [ 45.908486][ T950] ? __se_sys_ioctl+0x126/0x1b0 [ 45.908498][ T950] ? __x64_sys_ioctl+0x7f/0xa0 [ 45.908510][ T950] ? x64_sys_call+0x1878/0x2ee0 [ 45.908526][ T950] ? do_syscall_64+0x57/0xf0 [ 45.908541][ T950] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.908555][ T950] ? __asan_set_shadow_00+0x12/0x20 [ 45.908569][ T950] ? do_vfs_ioctl+0x1824/0x2010 [ 45.908582][ T950] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 45.908596][ T950] ? __kasan_slab_free+0x6a/0x80 [ 45.908609][ T950] ? kfree+0x158/0x440 [ 45.908618][ T950] ? kvfree+0x39/0x50 [ 45.908627][ T950] ? ioctl_has_perm+0x1bc/0x500 [ 45.908639][ T950] ? __asan_memcpy+0x5a/0x80 [ 45.908649][ T950] ? ioctl_has_perm+0x408/0x500 [ 45.908659][ T950] ? has_cap_mac_admin+0xd0/0xd0 [ 45.908669][ T950] ? __kasan_check_write+0x18/0x20 [ 45.908679][ T950] ? mutex_lock_killable+0x97/0x1d0 [ 45.908692][ T950] ? __cfi_mutex_lock_killable+0x10/0x10 [ 45.908704][ T950] ? kvm_arch_dev_ioctl+0x5ed/0x990 [ 45.908714][ T950] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 45.908723][ T950] kvm_vcpu_ioctl+0x7da/0x1000 [ 45.908734][ T950] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.908743][ T950] ? __kasan_slab_free+0x6a/0x80 [ 45.908756][ T950] ? kmem_cache_free+0x1bd/0x4f0 [ 45.908766][ T950] ? putname+0x113/0x150 [ 45.908778][ T950] ? kvm_dev_ioctl+0x48e/0x14c0 [ 45.908794][ T950] ? __fget_files+0x2bc/0x330 [ 45.908807][ T950] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.908820][ T950] ? security_file_ioctl+0x3e/0x110 [ 45.908831][ T950] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.908840][ T950] __se_sys_ioctl+0x126/0x1b0 [ 45.908853][ T950] __x64_sys_ioctl+0x7f/0xa0 [ 45.908865][ T950] x64_sys_call+0x1878/0x2ee0 [ 45.908875][ T950] do_syscall_64+0x57/0xf0 [ 45.908889][ T950] ? clear_bhb_loop+0x50/0xa0 [ 45.908901][ T950] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.908912][ T950] RIP: 0033:0x7f0cbed9ddeb [ 45.908922][ T950] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 45.908932][ T950] RSP: 002b:00007f0cbfcce450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.908944][ T950] RAX: ffffffffffffffda RBX: 0000200000fe8000 RCX: 00007f0cbed9ddeb [ 45.908952][ T950] RDX: 00007f0cbfccebd0 RSI: 000000004008ae90 RDI: 0000000000000005 [ 45.908960][ T950] RBP: 0000200000fe9000 R08: 0000000000000007 R09: 0000000000000000 [ 45.908967][ T950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000fe9800 [ 45.908974][ T950] R13: 00007f0cbfccebd0 R14: 000000000000006b R15: 00000000000000c0 [ 45.908982][ T950] [ 45.952660][ T952] FAULT_INJECTION: forcing a failure. [ 45.952660][ T952] name failslab, interval 1, probability 0, space 0, times 0 [ 46.019200][ T310] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.031079][ T952] CPU: 0 UID: 0 PID: 952 Comm: syz.1.224 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 46.031110][ T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.031123][ T952] Call Trace: [ 46.031130][ T952] [ 46.031137][ T952] __dump_stack+0x21/0x30 [ 46.031169][ T952] dump_stack_lvl+0x140/0x1c0 [ 46.031196][ T952] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.031222][ T952] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 46.031248][ T952] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 46.031276][ T952] dump_stack+0x19/0x20 [ 46.031299][ T952] should_fail_ex+0x3c2/0x510 [ 46.031321][ T952] should_failslab+0xac/0x100 [ 46.031344][ T952] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 46.031365][ T952] ? __d_alloc+0x42/0x8c0 [ 46.031383][ T952] ? expand_files+0xda/0x6f0 [ 46.031406][ T952] __d_alloc+0x42/0x8c0 [ 46.031424][ T952] d_alloc_pseudo+0x23/0xc0 [ 46.031441][ T952] alloc_file_pseudo+0xde/0x1f0 [ 46.031466][ T952] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 46.031490][ T952] ? _raw_spin_unlock+0x45/0x60 [ 46.031517][ T952] sock_alloc_file+0xbe/0x2b0 [ 46.031535][ T952] __sys_socket+0x14c/0x1c0 [ 46.031562][ T952] __x64_sys_socket+0x7e/0x90 [ 46.031583][ T952] x64_sys_call+0x2608/0x2ee0 [ 46.031601][ T952] do_syscall_64+0x57/0xf0 [ 46.031628][ T952] ? clear_bhb_loop+0x50/0xa0 [ 46.031650][ T952] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.031671][ T952] RIP: 0033:0x7f672759e159 [ 46.031687][ T952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.031704][ T952] RSP: 002b:00007f6725ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 46.031725][ T952] RAX: ffffffffffffffda RBX: 00007f6727825fa0 RCX: 00007f672759e159 [ 46.031740][ T952] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 46.031752][ T952] RBP: 00007f6727635024 R08: 0000000000000000 R09: 0000000000000000 [ 46.031764][ T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.031776][ T952] R13: 00007f6727826038 R14: 00007f6727825fa0 R15: 00007ffd13bce268 [ 46.031793][ T952] [ 46.170481][ T356] usb 1-1: USB disconnect, device number 15 [ 46.174574][ T898] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 46.699217][ T310] usb 4-1: device descriptor read/64, error -71 [ 46.751115][ T966] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 46.772267][ T969] FAULT_INJECTION: forcing a failure. [ 46.772267][ T969] name failslab, interval 1, probability 0, space 0, times 0 [ 46.785958][ T969] CPU: 0 UID: 0 PID: 969 Comm: syz.0.231 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 46.785989][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.786002][ T969] Call Trace: [ 46.786008][ T969] [ 46.786015][ T969] __dump_stack+0x21/0x30 [ 46.786046][ T969] dump_stack_lvl+0x140/0x1c0 [ 46.786071][ T969] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.786095][ T969] dump_stack+0x19/0x20 [ 46.786119][ T969] should_fail_ex+0x3c2/0x510 [ 46.786141][ T969] should_failslab+0xac/0x100 [ 46.786166][ T969] kmem_cache_alloc_noprof+0x42/0x410 [ 46.786187][ T969] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 46.786210][ T969] ? alloc_empty_file+0xbf/0x270 [ 46.786234][ T969] ? arch_stack_walk+0x10a/0x170 [ 46.786253][ T969] alloc_empty_file+0xbf/0x270 [ 46.786276][ T969] path_openat+0xf4/0x35a0 [ 46.786300][ T969] ? stack_depot_save_flags+0x38/0x800 [ 46.786323][ T969] ? kasan_save_track+0x4f/0x80 [ 46.786345][ T969] ? kasan_save_track+0x3e/0x80 [ 46.786365][ T969] ? kasan_save_alloc_info+0x3a/0x50 [ 46.786382][ T969] ? __kasan_slab_alloc+0x73/0x90 [ 46.786405][ T969] ? getname+0x1b/0x30 [ 46.786425][ T969] ? do_sys_openat2+0xda/0x1d0 [ 46.786449][ T969] ? __x64_sys_openat+0x13a/0x170 [ 46.786482][ T969] ? x64_sys_call+0xe69/0x2ee0 [ 46.786499][ T969] ? do_syscall_64+0x57/0xf0 [ 46.786526][ T969] ? do_filp_open+0x440/0x440 [ 46.786551][ T969] do_filp_open+0x1f2/0x440 [ 46.786575][ T969] ? __cfi_do_filp_open+0x10/0x10 [ 46.786602][ T969] ? alloc_fd+0x4c1/0x570 [ 46.786625][ T969] do_sys_openat2+0x134/0x1d0 [ 46.786649][ T969] ? fput+0x1a4/0x230 [ 46.786669][ T969] ? do_sys_open+0x100/0x100 [ 46.786692][ T969] ? ksys_write+0x1f3/0x260 [ 46.786710][ T969] ? __cfi_ksys_write+0x10/0x10 [ 46.786729][ T969] __x64_sys_openat+0x13a/0x170 [ 46.786752][ T969] x64_sys_call+0xe69/0x2ee0 [ 46.786769][ T969] do_syscall_64+0x57/0xf0 [ 46.786793][ T969] ? clear_bhb_loop+0x50/0xa0 [ 46.786815][ T969] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.786833][ T969] RIP: 0033:0x7f585b59e159 [ 46.786849][ T969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.786865][ T969] RSP: 002b:00007f585c3b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.786886][ T969] RAX: ffffffffffffffda RBX: 00007f585b825fa0 RCX: 00007f585b59e159 [ 46.786900][ T969] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 46.786913][ T969] RBP: 00007f585c3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 46.786926][ T969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.786937][ T969] R13: 00007f585b826038 R14: 00007f585b825fa0 R15: 00007fff712314e8 [ 46.786954][ T969] [ 47.059257][ T310] usb 4-1: device descriptor read/64, error -71 [ 47.091360][ T971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=971 comm=syz.1.232 [ 47.158809][ T977] netlink: 104 bytes leftover after parsing attributes in process `syz.2.234'. [ 47.319416][ T310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.409328][ T898] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 47.449228][ T316] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 47.479233][ T310] usb 4-1: device descriptor read/64, error -71 [ 47.560316][ T898] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 47.569523][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.578341][ T898] usb 3-1: config 0 descriptor?? [ 47.599198][ T316] usb 1-1: Using ep0 maxpacket: 8 [ 47.605420][ T316] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 47.613769][ T316] usb 1-1: config 179 has no interface number 0 [ 47.620122][ T316] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 47.631430][ T316] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 47.642936][ T316] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.654272][ T316] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 47.664699][ T316] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 47.678113][ T316] usb 1-1: config 179 interface 65 has no altsetting 0 [ 47.685054][ T316] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 47.694218][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.712559][ T316] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 47.723637][ T310] usb 4-1: device descriptor read/64, error -71 [ 47.849357][ T310] usb usb4-port1: attempt power cycle [ 47.913176][ T981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.922260][ T981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.933088][ T981] overlayfs: failed to resolve './file0': -2 [ 47.990368][ T898] usb 3-1: Cannot set MAC address [ 48.001422][ T898] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 48.025815][ T898] usb 3-1: USB disconnect, device number 14 [ 48.045333][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 48.045347][ T36] audit: type=1400 audit(1788526598.669:291): avc: denied { write } for pid=980 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.189220][ T310] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 48.210183][ T310] usb 4-1: device descriptor read/8, error -71 [ 48.340112][ T310] usb 4-1: device descriptor read/8, error -71 [ 48.380379][ T36] audit: type=1400 audit(1788526599.009:292): avc: denied { mounton } for pid=996 comm="syz.1.242" path="/56/file0" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 48.470279][ T1005] netlink: 220 bytes leftover after parsing attributes in process `syz.3.243'. [ 48.480102][ T1005] rust_binder: 1004:1005 got transaction to invalid handle 1 [ 48.487490][ T1005] rust_binder: 1004:1005 transaction call to 0:0 failed ENOENT, code 0 size 72-0 [ 48.579350][ T898] usb 1-1: USB disconnect, device number 16 [ 48.599529][ T898] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 48.668702][ T388] rust_binder: 1004: undelivered TRANSACTION_ERROR: 29201 [ 48.736671][ T1024] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.12288.0), cmd(9) [ 48.739572][ T36] audit: type=1400 audit(1788526599.359:293): avc: denied { write } for pid=1025 comm="syz.0.249" name="tcp6" dev="proc" ino=4026532425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.787784][ T36] audit: type=1400 audit(1788526599.409:294): avc: denied { search } for pid=1025 comm="syz.0.249" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.821482][ T1032] fuse: Bad value for 'fd' [ 48.827630][ T36] audit: type=1400 audit(1788526599.449:295): avc: denied { mounton } for pid=1031 comm="syz.3.250" path="/45/file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.885822][ T1043] netlink: 140 bytes leftover after parsing attributes in process `syz.3.250'. [ 48.886081][ T36] audit: type=1400 audit(1788526599.509:296): avc: granted { setsecparam } for pid=1031 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 48.949583][ T36] audit: type=1400 audit(1788526599.579:297): avc: denied { read } for pid=1045 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.000787][ T1049] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1049 comm=syz.2.252 [ 49.114650][ T36] audit: type=1400 audit(1788526599.739:298): avc: denied { create } for pid=1053 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.136217][ T36] audit: type=1400 audit(1788526599.759:299): avc: denied { setopt } for pid=1053 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.203164][ T1060] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 49.331003][ T36] audit: type=1400 audit(1788526599.959:300): avc: denied { mount } for pid=1066 comm="syz.2.260" name="/" dev="ramfs" ino=9136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.539785][ T1089] SELinux: policydb string length 2097160 does not match expected length 8 [ 49.554978][ T1089] SELinux: failed to load policy [ 49.778218][ T1115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 51.209341][ T1293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 51.559210][ T898] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 51.689205][ T898] usb 1-1: device descriptor read/64, error -71 [ 51.786980][ T1345] 9pnet: Could not find request transport: rdma [ 51.881468][ T1361] SELinux: policydb string S does not match my string SE Linux [ 51.889129][ T1361] SELinux: failed to load policy [ 51.903447][ T1363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 51.939440][ T898] usb 1-1: device descriptor read/64, error -71 [ 52.179191][ T898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 52.319194][ T898] usb 1-1: device descriptor read/64, error -71 [ 52.445543][ T1397] FAULT_INJECTION: forcing a failure. [ 52.445543][ T1397] name failslab, interval 1, probability 0, space 0, times 0 [ 52.469197][ T1397] CPU: 1 UID: 0 PID: 1397 Comm: syz.3.386 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 52.469233][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.469246][ T1397] Call Trace: [ 52.469253][ T1397] [ 52.469260][ T1397] __dump_stack+0x21/0x30 [ 52.469304][ T1397] dump_stack_lvl+0x140/0x1c0 [ 52.469337][ T1397] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.469366][ T1397] ? mtree_range_walk+0x573/0x730 [ 52.469391][ T1397] dump_stack+0x19/0x20 [ 52.469421][ T1397] should_fail_ex+0x3c2/0x510 [ 52.469445][ T1397] should_failslab+0xac/0x100 [ 52.469472][ T1397] kmem_cache_alloc_noprof+0x42/0x410 [ 52.469494][ T1397] ? vma_merge_new_range+0x7bc/0x900 [ 52.469516][ T1397] ? vm_area_alloc+0x3f/0x190 [ 52.469539][ T1397] vm_area_alloc+0x3f/0x190 [ 52.469560][ T1397] mmap_region+0xce2/0x1d10 [ 52.469582][ T1397] ? __cfi_mmap_region+0x10/0x10 [ 52.469604][ T1397] ? avc_has_perm_noaudit+0x289/0x360 [ 52.469631][ T1397] ? __kasan_check_read+0x15/0x20 [ 52.469653][ T1397] ? __get_unmapped_area+0x406/0x470 [ 52.469673][ T1397] ? futex_wait+0x2b8/0x7c0 [ 52.469694][ T1397] do_mmap+0xb61/0x13b0 [ 52.469714][ T1397] ? __cfi_do_mmap+0x10/0x10 [ 52.469733][ T1397] ? down_write_killable+0xee/0x2d0 [ 52.469757][ T1397] ? __cfi_down_write_killable+0x10/0x10 [ 52.469781][ T1397] ? do_futex+0x32a/0x510 [ 52.469807][ T1397] vm_mmap_pgoff+0x367/0x4b0 [ 52.469828][ T1397] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 52.469848][ T1397] ? __x64_sys_futex+0x110/0x110 [ 52.469874][ T1397] ksys_mmap_pgoff+0xfa/0x1e0 [ 52.469894][ T1397] ? __kasan_check_write+0x18/0x20 [ 52.469914][ T1397] __x64_sys_mmap+0x121/0x140 [ 52.469935][ T1397] x64_sys_call+0x13bf/0x2ee0 [ 52.469953][ T1397] do_syscall_64+0x57/0xf0 [ 52.469980][ T1397] ? clear_bhb_loop+0x50/0xa0 [ 52.470004][ T1397] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.470026][ T1397] RIP: 0033:0x7f46b639e159 [ 52.470045][ T1397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.470062][ T1397] RSP: 002b:00007f46b727a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 52.470085][ T1397] RAX: ffffffffffffffda RBX: 00007f46b6625fa0 RCX: 00007f46b639e159 [ 52.470101][ T1397] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000000000000 [ 52.470115][ T1397] RBP: 00007f46b6435024 R08: ffffffffffffffff R09: 0000000010000000 [ 52.470132][ T1397] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000 [ 52.470146][ T1397] R13: 00007f46b6626038 R14: 00007f46b6625fa0 R15: 00007ffddb4457d8 [ 52.470164][ T1397] [ 52.881261][ T898] usb 1-1: device descriptor read/64, error -71 [ 52.893841][ T1400] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 52.989314][ T898] usb usb1-port1: attempt power cycle [ 53.349220][ T898] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 53.390283][ T898] usb 1-1: device descriptor read/8, error -71 [ 53.530250][ T898] usb 1-1: device descriptor read/8, error -71 [ 53.769266][ T898] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 53.797028][ T898] usb 1-1: device descriptor read/8, error -71 [ 53.900881][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 53.900899][ T36] audit: type=1400 audit(1700006402.029:382): avc: denied { audit_read } for pid=1442 comm="syz.2.405" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.950248][ T898] usb 1-1: device descriptor read/8, error -71 [ 54.059324][ T898] usb usb1-port1: unable to enumerate USB device [ 54.364898][ T1470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.417'. [ 54.546962][ T36] audit: type=1400 audit(1700006402.669:383): avc: denied { read } for pid=1482 comm="syz.3.423" name="/" dev="configfs" ino=2209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.575672][ T36] audit: type=1400 audit(1700006402.669:384): avc: denied { open } for pid=1482 comm="syz.3.423" path="/107/config" dev="configfs" ino=2209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.797162][ T1519] netlink: 'syz.2.440': attribute type 15 has an invalid length. [ 55.040500][ T36] audit: type=1400 audit(1700006403.169:385): avc: denied { getopt } for pid=1551 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.295652][ T36] audit: type=1400 audit(1700006403.419:386): avc: denied { setopt } for pid=1575 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.349214][ T36] audit: type=1400 audit(1700006403.449:387): avc: denied { validate_trans } for pid=1577 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.487488][ T36] audit: type=1326 audit(1700006403.609:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.0.473" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 55.524658][ T36] audit: type=1326 audit(1700006403.609:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.0.473" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 55.553025][ T1611] veth0: entered promiscuous mode [ 55.558536][ T1608] veth0: left promiscuous mode [ 55.568739][ T36] audit: type=1326 audit(1700006403.619:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.0.473" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 55.606834][ T36] audit: type=1326 audit(1700006403.619:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.0.473" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 56.108612][ T1707] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=1707 comm=syz.0.501 [ 56.123310][ T1706] FAULT_INJECTION: forcing a failure. [ 56.123310][ T1706] name failslab, interval 1, probability 0, space 0, times 0 [ 56.138306][ T1706] CPU: 1 UID: 0 PID: 1706 Comm: syz.2.500 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 56.138340][ T1706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.138353][ T1706] Call Trace: [ 56.138359][ T1706] [ 56.138367][ T1706] __dump_stack+0x21/0x30 [ 56.138399][ T1706] dump_stack_lvl+0x140/0x1c0 [ 56.138423][ T1706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.138450][ T1706] ? kasan_save_track+0x4f/0x80 [ 56.138472][ T1706] ? kasan_save_track+0x3e/0x80 [ 56.138493][ T1706] dump_stack+0x19/0x20 [ 56.138517][ T1706] should_fail_ex+0x3c2/0x510 [ 56.138539][ T1706] should_failslab+0xac/0x100 [ 56.138560][ T1706] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 56.138582][ T1706] ? __d_alloc+0x42/0x8c0 [ 56.138598][ T1706] __d_alloc+0x42/0x8c0 [ 56.138615][ T1706] ? _raw_spin_lock+0x92/0x120 [ 56.138642][ T1706] d_alloc_pseudo+0x23/0xc0 [ 56.138659][ T1706] alloc_file_pseudo+0xde/0x1f0 [ 56.138683][ T1706] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 56.138708][ T1706] anon_inode_getfd+0xda/0x1d0 [ 56.138734][ T1706] __se_sys_fsopen+0x260/0x390 [ 56.138759][ T1706] __x64_sys_fsopen+0x5f/0x80 [ 56.138786][ T1706] x64_sys_call+0x2d40/0x2ee0 [ 56.138803][ T1706] do_syscall_64+0x57/0xf0 [ 56.138829][ T1706] ? clear_bhb_loop+0x50/0xa0 [ 56.138850][ T1706] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.138881][ T1706] RIP: 0033:0x7f0cbed9e159 [ 56.138899][ T1706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.138918][ T1706] RSP: 002b:00007f0cbfcd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 56.138941][ T1706] RAX: ffffffffffffffda RBX: 00007f0cbf025fa0 RCX: 00007f0cbed9e159 [ 56.138957][ T1706] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 56.138971][ T1706] RBP: 00007f0cbee35024 R08: 0000000000000000 R09: 0000000000000000 [ 56.138985][ T1706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.138997][ T1706] R13: 00007f0cbf026038 R14: 00007f0cbf025fa0 R15: 00007ffef7195368 [ 56.139013][ T1706] [ 56.364243][ T1716] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 57.931695][ T1854] device-mapper: ioctl: Target spec extends beyond end of parameters [ 57.952769][ T1854] device-mapper: ioctl: unable to find target [ 58.351618][ T1884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 58.479883][ T1897] tipc: Started in network mode [ 58.508259][ T1897] tipc: Node identity 425bee0915d6, cluster identity 4711 [ 58.538116][ T1897] tipc: Enabled bearer , priority 0 [ 58.587264][ T1905] syzkaller0: entered promiscuous mode [ 58.623086][ T1905] syzkaller0: entered allmulticast mode [ 58.639541][ T1905] tipc: Resetting bearer [ 58.670680][ T1896] tipc: Resetting bearer [ 58.705062][ T1896] tipc: Disabling bearer [ 59.001746][ T412] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.422250][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 59.422287][ T36] audit: type=1400 audit(1700006407.549:439): avc: denied { write } for pid=1970 comm="syz.2.620" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.671913][ T36] audit: type=1400 audit(1700006407.799:440): avc: denied { associate } for pid=1992 comm="syz.0.629" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 59.865325][ T36] audit: type=1400 audit(1700006407.989:441): avc: denied { create } for pid=2015 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.375490][ T36] audit: type=1400 audit(1700006408.499:442): avc: denied { getopt } for pid=2031 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.425537][ T36] audit: type=1400 audit(1700006408.549:443): avc: denied { setopt } for pid=2035 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.450891][ T36] audit: type=1400 audit(1700006408.579:444): avc: denied { read } for pid=2035 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.773790][ T36] audit: type=1326 audit(1700006408.879:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.657" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 60.799467][ T36] audit: type=1326 audit(1700006408.879:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.657" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 60.825156][ T36] audit: type=1326 audit(1700006408.879:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.657" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 60.835052][ T2060] veth0: entered promiscuous mode [ 60.852054][ T36] audit: type=1326 audit(1700006408.879:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.657" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f585b59e159 code=0x7ffc0000 [ 60.871302][ T2060] veth0: left promiscuous mode [ 60.913862][ T2069] ./dev/sda1: Can't lookup blockdev [ 60.933520][ T2074] FAULT_INJECTION: forcing a failure. [ 60.933520][ T2074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.948829][ T2074] CPU: 1 UID: 0 PID: 2074 Comm: syz.2.667 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 60.948862][ T2074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.948876][ T2074] Call Trace: [ 60.948884][ T2074] [ 60.948891][ T2074] __dump_stack+0x21/0x30 [ 60.948939][ T2074] dump_stack_lvl+0x140/0x1c0 [ 60.948964][ T2074] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.948990][ T2074] ? __kasan_check_write+0x18/0x20 [ 60.949010][ T2074] dump_stack+0x19/0x20 [ 60.949035][ T2074] should_fail_ex+0x3c2/0x510 [ 60.949056][ T2074] should_fail_alloc_page+0xec/0x110 [ 60.949079][ T2074] __alloc_pages_noprof+0x1c0/0x7e0 [ 60.949104][ T2074] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.949130][ T2074] ? folio_add_lru+0x116/0x400 [ 60.949156][ T2074] ? __cfi_folio_add_lru+0x10/0x10 [ 60.949181][ T2074] __folio_alloc_noprof+0x14/0x80 [ 60.949210][ T2074] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 60.949239][ T2074] ? shmem_replace_folio+0x9b0/0x9b0 [ 60.949264][ T2074] ? shmem_huge_global_enabled+0x2da/0x360 [ 60.949287][ T2074] ? shmem_allowable_huge_orders+0x405/0x430 [ 60.949311][ T2074] shmem_get_folio_gfp+0x5cd/0x12e0 [ 60.949336][ T2074] ? shmem_get_folio+0xc0/0xc0 [ 60.949358][ T2074] ? __cfi_filemap_map_pages+0x10/0x10 [ 60.949383][ T2074] ? folio_unlock+0x137/0x1b0 [ 60.949406][ T2074] shmem_fault+0x17d/0x350 [ 60.949430][ T2074] do_pte_missing+0x364c/0x4440 [ 60.949458][ T2074] ? pte_marker_clear+0x1b0/0x1b0 [ 60.949482][ T2074] ? cgroup_rstat_updated+0x144/0x800 [ 60.949506][ T2074] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 60.949528][ T2074] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 60.949556][ T2074] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 60.949586][ T2074] handle_mm_fault+0x1189/0x1ba0 [ 60.949611][ T2074] ? __kasan_check_write+0x18/0x20 [ 60.949635][ T2074] ? __cfi_handle_mm_fault+0x10/0x10 [ 60.949660][ T2074] ? follow_page_pte+0x4b2/0xba0 [ 60.949690][ T2074] ? gup_must_unshare+0x1e0/0x1e0 [ 60.949717][ T2074] ? vma_is_secretmem+0x11/0x50 [ 60.949746][ T2074] ? check_vma_flags+0x337/0x3a0 [ 60.949774][ T2074] __get_user_pages+0x114b/0x22d0 [ 60.949804][ T2074] ? populate_vma_page_range+0x220/0x220 [ 60.949829][ T2074] ? down_read+0x7f/0xe0 [ 60.949852][ T2074] ? __cfi_down_read+0x10/0x10 [ 60.949876][ T2074] __mm_populate+0x300/0x440 [ 60.949902][ T2074] vm_mmap_pgoff+0x426/0x4b0 [ 60.949922][ T2074] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 60.949943][ T2074] ? __x64_sys_sched_setscheduler+0xa0/0xa0 [ 60.949969][ T2074] ? xfd_validate_state+0x68/0x140 [ 60.949997][ T2074] ksys_mmap_pgoff+0xfa/0x1e0 [ 60.950017][ T2074] ? __kasan_check_write+0x18/0x20 [ 60.950043][ T2074] __x64_sys_mmap+0x121/0x140 [ 60.950062][ T2074] x64_sys_call+0x13bf/0x2ee0 [ 60.950082][ T2074] do_syscall_64+0x57/0xf0 [ 60.950111][ T2074] ? clear_bhb_loop+0x50/0xa0 [ 60.950135][ T2074] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.950159][ T2074] RIP: 0033:0x7f0cbed9e159 [ 60.950184][ T2074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.950203][ T2074] RSP: 002b:00007f0cbfcd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 60.950232][ T2074] RAX: ffffffffffffffda RBX: 00007f0cbf025fa0 RCX: 00007f0cbed9e159 [ 60.950250][ T2074] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 60.950265][ T2074] RBP: 00007f0cbee35024 R08: ffffffffffffffff R09: 000000006f6a0000 [ 60.950280][ T2074] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 60.950294][ T2074] R13: 00007f0cbf026038 R14: 00007f0cbf025fa0 R15: 00007ffef7195368 [ 60.950313][ T2074] [ 60.980117][ T2079] syzkaller0: entered promiscuous mode [ 61.009232][ T1950] Bluetooth: hci0: command 0x1003 tx timeout [ 61.035434][ T610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.339602][ T933] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 61.347858][ T933] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.759205][ T933] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 61.819211][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 61.929224][ T933] usb 4-1: Using ep0 maxpacket: 16 [ 61.935406][ T933] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.946448][ T933] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.956339][ T933] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 61.969606][ T933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 61.976225][ T933] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.979198][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 61.985331][ T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.999171][ T933] usb 4-1: config 0 descriptor?? [ 62.006084][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.027213][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.036697][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.049444][ T9] usb 2-1: config 0 descriptor?? [ 62.059767][ T9] hub 2-1:0.0: USB hub found [ 62.255607][ T9] hub 2-1:0.0: 1 port detected [ 62.415639][ T933] hid (null): report_id 26619 is invalid [ 62.421323][ T933] hid (null): usage index exceeded [ 62.613945][ T933] usb 4-1: USB disconnect, device number 19 [ 62.869661][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 62.870670][ T933] usb 2-1: USB disconnect, device number 10 [ 63.126215][ T2129] capability: warning: `syz.0.701' uses 32-bit capabilities (legacy support in use) [ 64.069227][ T388] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 64.219188][ T388] usb 2-1: Using ep0 maxpacket: 16 [ 64.225316][ T388] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.236275][ T388] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.246116][ T388] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 64.259063][ T388] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.265671][ T388] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 64.274695][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.283251][ T388] usb 2-1: config 0 descriptor?? [ 69.330451][ T388] usbhid 2-1:0.0: can't add hid device: -32 [ 69.336382][ T388] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 205.569288][ T37] INFO: task jbd2/sda1-8:73 blocked for more than 122 seconds. [ 205.576933][ T37] Not tainted syzkaller #0 [ 205.582091][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.590975][ T37] task:jbd2/sda1-8 state:D stack:0 pid:73 tgid:73 ppid:2 flags:0x00004000 [ 205.601158][ T37] Call Trace: [ 205.604435][ T37] [ 205.607347][ T37] __schedule+0x1496/0x20b0 [ 205.611866][ T37] ? __sched_text_start+0x10/0x10 [ 205.616889][ T37] ? dd_has_work+0x1f3/0x2f0 [ 205.621487][ T37] ? __kasan_check_write+0x18/0x20 [ 205.626598][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 205.632085][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 205.637986][ T37] ? blk_mq_flush_plug_list+0x1517/0x1750 [ 205.643717][ T37] schedule+0xc5/0x240 [ 205.647791][ T37] io_schedule+0x85/0x150 [ 205.652135][ T37] bit_wait_io+0x17/0xd0 [ 205.656379][ T37] __wait_on_bit+0xb6/0x2e0 [ 205.660899][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 205.665838][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 205.671313][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 205.676253][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 205.682235][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 205.687691][ T37] ? __cfi__raw_write_lock+0x10/0x10 [ 205.692976][ T37] ? _raw_read_unlock+0x16/0x40 [ 205.697821][ T37] __wait_on_buffer+0x5a/0x70 [ 205.702498][ T37] jbd2_journal_commit_transaction+0x2dba/0x5510 [ 205.708831][ T37] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 205.715504][ T37] ? __schedule+0x149e/0x20b0 [ 205.720189][ T37] ? __kasan_check_write+0x18/0x20 [ 205.725277][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 205.730794][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 205.736258][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 205.742154][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 205.747616][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 205.753423][ T37] ? __try_to_del_timer_sync+0x2e8/0x440 [ 205.759091][ T37] kjournald2+0x386/0x6a0 [ 205.763415][ T37] ? __cfi_kjournald2+0x10/0x10 [ 205.768241][ T37] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 205.773445][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 205.779542][ T37] ? __kasan_check_read+0x15/0x20 [ 205.784566][ T37] ? __kthread_parkme+0x12f/0x180 [ 205.789611][ T37] ? schedule+0xc5/0x240 [ 205.793851][ T37] kthread+0x2c4/0x360 [ 205.797900][ T37] ? __cfi_kjournald2+0x10/0x10 [ 205.802880][ T37] ? __cfi_kthread+0x10/0x10 [ 205.807468][ T37] ret_from_fork+0x64/0xa0 [ 205.811885][ T37] ? __cfi_kthread+0x10/0x10 [ 205.816476][ T37] ret_from_fork_asm+0x1a/0x30 [ 205.821238][ T37] [ 205.824275][ T37] INFO: task syz-executor:286 blocked for more than 123 seconds. [ 205.832122][ T37] Not tainted syzkaller #0 [ 205.837060][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.845727][ T37] task:syz-executor state:D stack:0 pid:286 tgid:286 ppid:285 flags:0x00000000 [ 205.855904][ T37] Call Trace: [ 205.859187][ T37] [ 205.862117][ T37] __schedule+0x1496/0x20b0 [ 205.866602][ T37] ? __sched_text_start+0x10/0x10 [ 205.871626][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 205.876913][ T37] ? __kasan_check_write+0x18/0x20 [ 205.882026][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 205.887489][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 205.893390][ T37] ? folio_mark_accessed+0x35f/0x620 [ 205.898680][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 205.904909][ T37] schedule+0xc5/0x240 [ 205.909145][ T37] io_schedule+0x85/0x150 [ 205.913472][ T37] bit_wait_io+0x17/0xd0 [ 205.917692][ T37] __wait_on_bit+0xb6/0x2e0 [ 205.922206][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 205.927161][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 205.932629][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 205.937562][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 205.943557][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 205.949014][ T37] do_get_write_access+0x558/0xd70 [ 205.954131][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 205.960139][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 205.966292][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 205.973012][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 205.978058][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 205.983713][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 205.989282][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 205.994636][ T37] ext4_dirty_inode+0xc9/0x110 [ 205.999411][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 206.004796][ T37] __mark_inode_dirty+0x24e/0xc50 [ 206.009833][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 206.015374][ T37] ? avc_has_perm_noaudit+0x289/0x360 [ 206.020747][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 206.026558][ T37] ? _raw_spin_unlock_bh+0x54/0x60 [ 206.031694][ T37] file_update_time+0x1d3/0x210 [ 206.036565][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 206.041605][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 206.047064][ T37] do_wp_page+0xb3d/0x2e80 [ 206.051489][ T37] ? __check_object_size+0xdc/0x870 [ 206.056686][ T37] ? sock_read_iter+0x25e/0x320 [ 206.061551][ T37] ? folio_put+0x90/0x90 [ 206.065790][ T37] ? __kasan_check_write+0x18/0x20 [ 206.070901][ T37] ? _raw_spin_lock+0x92/0x120 [ 206.075666][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 206.080872][ T37] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 206.086585][ T37] handle_mm_fault+0x1017/0x1ba0 [ 206.091537][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 206.096818][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 206.102022][ T37] ? __kasan_check_read+0x15/0x20 [ 206.107045][ T37] do_user_addr_fault+0x951/0x1230 [ 206.112158][ T37] ? __cfi_ksys_read+0x10/0x10 [ 206.116919][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 206.123000][ T37] exc_page_fault+0x58/0xc0 [ 206.127504][ T37] asm_exc_page_fault+0x2b/0x30 [ 206.132355][ T37] RIP: 0033:0x7f8f01e7c6e2 [ 206.136764][ T37] RSP: 002b:00007fff14657760 EFLAGS: 00010202 [ 206.142837][ T37] RAX: 00007f8effebc000 RBX: 00005555697b5240 RCX: 0000000000000007 [ 206.150815][ T37] RDX: 0000000000001ffa RSI: 00005555697b6ab8 RDI: 0000000000000080 [ 206.158764][ T37] RBP: 00007fff14657c60 R08: 00005555697b6ab8 R09: 0000000000000049 [ 206.166730][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff14657aa0 [ 206.174713][ T37] R13: 00007fff14657890 R14: 585858582e7a7973 R15: 00007fff146577e0 [ 206.182697][ T37] [ 206.185721][ T37] INFO: task syz.3.693:2130 blocked for more than 123 seconds. [ 206.193288][ T37] Not tainted syzkaller #0 [ 206.198212][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 206.206872][ T37] task:syz.3.693 state:D stack:0 pid:2130 tgid:2130 ppid:295 flags:0x00000004 [ 206.217094][ T37] Call Trace: [ 206.220540][ T37] [ 206.223479][ T37] __schedule+0x1496/0x20b0 [ 206.228053][ T37] ? asm_exc_page_fault+0x2b/0x30 [ 206.233274][ T37] ? __sched_text_start+0x10/0x10 [ 206.238301][ T37] ? __kasan_check_read+0x15/0x20 [ 206.243334][ T37] ? __kasan_check_write+0x18/0x20 [ 206.248447][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 206.253914][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 206.259820][ T37] ? __kasan_check_write+0x18/0x20 [ 206.264908][ T37] ? folio_unlock+0x137/0x1b0 [ 206.269582][ T37] schedule+0xc5/0x240 [ 206.273646][ T37] io_schedule+0x85/0x150 [ 206.277951][ T37] bit_wait_io+0x17/0xd0 [ 206.282194][ T37] __wait_on_bit+0xb6/0x2e0 [ 206.286693][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 206.291630][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 206.297085][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 206.302025][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 206.308000][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 206.313457][ T37] do_get_write_access+0x558/0xd70 [ 206.318569][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 206.324566][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 206.330733][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 206.337392][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 206.342415][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 206.348051][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 206.353615][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 206.358991][ T37] ext4_dirty_inode+0xc9/0x110 [ 206.363766][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 206.369153][ T37] __mark_inode_dirty+0x24e/0xc50 [ 206.374161][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 206.379707][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 206.385524][ T37] ? __kasan_check_read+0x15/0x20 [ 206.390562][ T37] file_update_time+0x1d3/0x210 [ 206.395419][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 206.400447][ T37] ? __kasan_check_write+0x18/0x20 [ 206.405560][ T37] ? folio_unlock+0x137/0x1b0 [ 206.410234][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 206.415695][ T37] ? __schedule+0x149e/0x20b0 [ 206.420374][ T37] do_pte_missing+0x12c4/0x4440 [ 206.425225][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 206.431030][ T37] ? hrtimer_start_range_ns+0x123f/0x2030 [ 206.436752][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 206.441794][ T37] ? timerqueue_del+0xc1/0x130 [ 206.446558][ T37] ? hrtimer_try_to_cancel+0x37f/0x650 [ 206.452020][ T37] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 206.457741][ T37] handle_mm_fault+0x1189/0x1ba0 [ 206.462688][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 206.467977][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 206.473222][ T37] do_user_addr_fault+0x951/0x1230 [ 206.478343][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 206.483991][ T37] exc_page_fault+0x58/0xc0 [ 206.488491][ T37] asm_exc_page_fault+0x2b/0x30 [ 206.493344][ T37] RIP: 0033:0x7f46b62727a9 [ 206.497751][ T37] RSP: 002b:00007ffddb445870 EFLAGS: 00010202 [ 206.503816][ T37] RAX: 0000001b2f617000 RBX: ffffffff81d15e4d RCX: 0000001b2f616ff8 [ 206.511794][ T37] RDX: 0000001b2f024220 RSI: 0000000000000008 RDI: 00007f46b7155720 [ 206.519761][ T37] RBP: 00000000000000bc R08: 00007f46b6610000 R09: 00007f46b6612000 [ 206.527725][ T37] R10: 0000000081d15e51 R11: 0000000000000014 R12: 00007f46b6626038 [ 206.535786][ T37] R13: 00000000000000d8 R14: ffffffff81d15e4d R15: 00007f46b7155720 [ 206.543772][ T37] ? __vma_enter_locked+0x24d/0x3c0 [ 206.548956][ T37] ? __vma_enter_locked+0x24d/0x3c0 [ 206.554153][ T37] [ 206.557170][ T37] INFO: task syz.1.702:2155 blocked for more than 123 seconds. [ 206.564759][ T37] Not tainted syzkaller #0 [ 206.569703][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 206.578351][ T37] task:syz.1.702 state:D stack:0 pid:2155 tgid:2155 ppid:294 flags:0x00000004 [ 206.588498][ T37] Call Trace: [ 206.591782][ T37] [ 206.594692][ T37] __schedule+0x1496/0x20b0 [ 206.599202][ T37] ? __sched_text_start+0x10/0x10 [ 206.604221][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 206.609511][ T37] ? __kasan_check_write+0x18/0x20 [ 206.614616][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 206.620074][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 206.625974][ T37] ? folio_mark_accessed+0x35f/0x620 [ 206.631272][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 206.637428][ T37] schedule+0xc5/0x240 [ 206.641503][ T37] io_schedule+0x85/0x150 [ 206.645845][ T37] bit_wait_io+0x17/0xd0 [ 206.650089][ T37] __wait_on_bit+0xb6/0x2e0 [ 206.654592][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 206.659553][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 206.665011][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 206.669952][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 206.675930][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 206.681394][ T37] do_get_write_access+0x558/0xd70 [ 206.686508][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 206.692496][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 206.698670][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 206.705360][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 206.710415][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 206.716029][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 206.721581][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 206.726948][ T37] ext4_dirty_inode+0xc9/0x110 [ 206.731715][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 206.737096][ T37] __mark_inode_dirty+0x24e/0xc50 [ 206.742126][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 206.747670][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 206.753479][ T37] ? __kasan_check_read+0x15/0x20 [ 206.758512][ T37] file_update_time+0x1d3/0x210 [ 206.763364][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 206.768387][ T37] ? __kasan_check_write+0x18/0x20 [ 206.773500][ T37] ? folio_unlock+0x137/0x1b0 [ 206.778173][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 206.783636][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 206.789461][ T37] do_pte_missing+0x12c4/0x4440 [ 206.794295][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 206.799445][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 206.805344][ T37] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 206.811069][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 206.817313][ T37] handle_mm_fault+0x1189/0x1ba0 [ 206.822259][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 206.827542][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 206.832749][ T37] ? hrtimer_reprogram+0x336/0x3d0 [ 206.837864][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 206.843682][ T37] do_user_addr_fault+0x951/0x1230 [ 206.848806][ T37] exc_page_fault+0x58/0xc0 [ 206.853333][ T37] asm_exc_page_fault+0x2b/0x30 [ 206.858281][ T37] RIP: 0033:0x7f6727472809 [ 206.862698][ T37] RSP: 002b:00007ffd13bce2b0 EFLAGS: 00010202 [ 206.868765][ T37] RAX: 0000001b2f224000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 206.876744][ T37] RDX: 0000001b2f223ffc RSI: 00000000003ffde8 RDI: 00007f6728355700 [ 206.884722][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f6727812000 [ 206.892705][ T37] R10: 00007f6728355700 R11: 0000000000000000 R12: 0000000000000000 [ 206.900692][ T37] R13: 0000000000002955 R14: ffffffff813cf21c R15: 00007f6728355720 [ 206.908648][ T37] ? fpregs_restore_userregs+0xfc/0x260 [ 206.914193][ T37] [ 206.917204][ T37] INFO: task syz.0.703:2157 blocked for more than 124 seconds. [ 206.924744][ T37] Not tainted syzkaller #0 [ 206.929688][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 206.938328][ T37] task:syz.0.703 state:D stack:0 pid:2157 tgid:2157 ppid:293 flags:0x00000004 [ 206.948549][ T37] Call Trace: [ 206.951833][ T37] [ 206.954743][ T37] __schedule+0x1496/0x20b0 [ 206.959250][ T37] ? __sched_text_start+0x10/0x10 [ 206.964271][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 206.969565][ T37] ? __kasan_check_write+0x18/0x20 [ 206.974677][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 206.980151][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 206.986048][ T37] ? folio_mark_accessed+0x35f/0x620 [ 206.991336][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 206.997490][ T37] schedule+0xc5/0x240 [ 207.001556][ T37] io_schedule+0x85/0x150 [ 207.005883][ T37] bit_wait_io+0x17/0xd0 [ 207.010180][ T37] __wait_on_bit+0xb6/0x2e0 [ 207.014856][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 207.019795][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 207.025254][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 207.030189][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 207.036166][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 207.041631][ T37] do_get_write_access+0x558/0xd70 [ 207.046741][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 207.052728][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 207.058884][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 207.065562][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 207.070596][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 207.076208][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 207.081753][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 207.087133][ T37] ext4_dirty_inode+0xc9/0x110 [ 207.091900][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 207.097271][ T37] __mark_inode_dirty+0x24e/0xc50 [ 207.102295][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 207.107835][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 207.113643][ T37] ? __kasan_check_read+0x15/0x20 [ 207.118662][ T37] file_update_time+0x1d3/0x210 [ 207.123515][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 207.128538][ T37] ? __kasan_check_write+0x18/0x20 [ 207.133645][ T37] ? folio_unlock+0x137/0x1b0 [ 207.138316][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 207.143784][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 207.149183][ T37] do_pte_missing+0x12c4/0x4440 [ 207.154034][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 207.159037][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 207.164934][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 207.169893][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 207.176115][ T37] handle_mm_fault+0x1189/0x1ba0 [ 207.181052][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 207.186331][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 207.191534][ T37] do_user_addr_fault+0x951/0x1230 [ 207.196650][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 207.202733][ T37] exc_page_fault+0x58/0xc0 [ 207.207234][ T37] asm_exc_page_fault+0x2b/0x30 [ 207.212086][ T37] RIP: 0033:0x7f585b46baa3 [ 207.216494][ T37] RSP: 002b:00007fff71231650 EFLAGS: 00010246 [ 207.222576][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ed64000 [ 207.230553][ T37] RDX: 0000001b2ed24000 RSI: 0000000000400000 RDI: 00007f585b7e0708 [ 207.238516][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.246492][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 207.254533][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff712318e0 [ 207.262557][ T37] [ 207.265587][ T37] NMI backtrace for cpu 1 [ 207.265595][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 207.265613][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.265620][ T37] Call Trace: [ 207.265623][ T37] [ 207.265627][ T37] __dump_stack+0x21/0x30 [ 207.265645][ T37] dump_stack_lvl+0x140/0x1c0 [ 207.265659][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 207.265674][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x6d6/0xa50 [ 207.265691][ T37] dump_stack+0x19/0x20 [ 207.265704][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 207.265719][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 207.265734][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 207.265749][ T37] ? sched_show_task+0x371/0x530 [ 207.265763][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 207.265777][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 207.265792][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 207.265806][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 207.265821][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 207.265835][ T37] watchdog+0xe45/0xf90 [ 207.265846][ T37] ? __kasan_check_write+0x18/0x20 [ 207.265858][ T37] ? __cfi_watchdog+0x10/0x10 [ 207.265868][ T37] ? __kasan_check_read+0x15/0x20 [ 207.265878][ T37] ? __kthread_parkme+0x12f/0x180 [ 207.265889][ T37] ? schedule+0xc5/0x240 [ 207.265899][ T37] kthread+0x2c4/0x360 [ 207.265911][ T37] ? __cfi_watchdog+0x10/0x10 [ 207.265921][ T37] ? __cfi_kthread+0x10/0x10 [ 207.265933][ T37] ret_from_fork+0x64/0xa0 [ 207.265948][ T37] ? __cfi_kthread+0x10/0x10 [ 207.265959][ T37] ret_from_fork_asm+0x1a/0x30 [ 207.265970][ T37] [ 207.265974][ T37] Sending NMI from CPU 1 to CPUs 0: [ 207.435468][ C0] NMI backtrace for cpu 0 [ 207.435480][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 207.435501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.435511][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 207.435536][ C0] Code: cc cc cc cc cc cc cc b8 69 ad 64 06 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 68 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 207.435549][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 207.435564][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a4f4fd [ 207.435576][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000015d0c4 [ 207.435586][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 207.435598][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 207.435609][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ecd7e8 [ 207.435621][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 207.435634][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.435645][ C0] CR2: 00005566b10a6ff0 CR3: 000000010c720000 CR4: 00000000003526b0 [ 207.435659][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000d8 [ 207.435669][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 207.435679][ C0] Call Trace: [ 207.435684][ C0] [ 207.435714][ C0] default_idle+0x17/0x30 [ 207.435733][ C0] arch_cpu_idle+0xd/0x20 [ 207.435752][ C0] default_idle_call+0x3e/0x80 [ 207.435771][ C0] do_idle+0x1df/0x570 [ 207.435787][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 207.435805][ C0] ? do_idle+0x542/0x570 [ 207.435821][ C0] cpu_startup_entry+0x47/0x60 [ 207.435837][ C0] rest_init+0x10b/0x130 [ 207.435856][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 207.435876][ C0] start_kernel+0x462/0x4bb [ 207.435892][ C0] x86_64_start_reservations+0x2e/0x30 [ 207.435910][ C0] x86_64_start_kernel+0x6a/0x7b [ 207.435927][ C0] common_startup_64+0x13b/0x157 [ 207.435950][ C0]