last executing test programs: 7.314512044s ago: executing program 0 (id=179): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x36be4, 0x4) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000880)={0x0, 0x33, &(0x7f00000008c0)=[{&(0x7f0000000900)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.422677335s ago: executing program 0 (id=181): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x0, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r1, &(0x7f0000000180)=""/134, 0x86, 0x40002061, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000140)=0x4, 0x4) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000100)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x881, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000480)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000021, 0x0, 0xc}]}) madvise(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x11) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63}) 6.421385675s ago: executing program 0 (id=183): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0xc, 0x0, 0xfec00000}) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30}) syz_kvm_add_vcpu$x86(r3, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@out_dx={0x6a, 0x28, {0xe526, 0x3, 0x6}}], 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4605069e0d000000000000000003000300d9000000ca020000380000005e02000004040000000020000301"], 0x98) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6.360661756s ago: executing program 0 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000380)="b8001800000f23d00f21f80f42ef0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x72}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e284) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xb0, 0x6, "", [{{0x9, 0x4, 0x0, 0xac, 0x1, 0x7, 0x1, 0x1, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7f, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0xf8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xd, 0x6, 0x8, 0xff, 0xd}, 0x55, &(0x7f0000000100)={0x5, 0xf, 0x55, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x4, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "4531253db2774b88ca7025aad83020d1"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x1000, 0x0, 0x5a, [0xc030]}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x8, 0xf00, 0x9, [0xc030, 0xff000f]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x8, 0x8fc}]}, 0x1, [{0xfc, &(0x7f0000000180)=@string={0xfc, 0x3, "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"}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x5) 4.872939812s ago: executing program 3 (id=200): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7, 0x0, 0xfffffffd, 0x40}, 0x10) write(r0, &(0x7f00000001c0)="240000001a005f0214f9f407000904001f00000000070002000000000800040001000000", 0x24) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206a05c00000000000000109022400010000000409040008020300000009210000000122180009e2800300fabd0000"], 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = dup(r2) utimensat(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0xfffffff9}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="7ebac1ade0595923f27cdf9b43b33c90714682756b45578951a354b2c8838fd95df9f8ff1d0f8e", 0x27, 0x4001, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000380)={0x1060, 0x0, 0x0, 0x20000}) getegid() ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000140)={0xebb7, 0x6}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000ff820525004000010203010902600003010000020904000000010100000a240101000a00020102090401000001020000090401010101020000090501090800069f0bec199867a305030725010c020300090402000001020000092702010101020000090582094000020516"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) 3.29761768s ago: executing program 0 (id=207): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000f0000000006241a00000009050e5a00020000000904010000020d00000904010102020d000009058202000204"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="50000000300005040000000000000000000000003c000100380001000900010067616374000034d7bc68f30000280002801801000000000000000c000300010000000000002000"/80, 0x50}], 0x1}, 0x24040000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0xfd44, 0x10, 0x10, 0x10, 0x10, 0xc, 0x10, 0xe, 0x10, 0x6, 0x410}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, 0x0, 0x10) pipe(0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x40, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket(0x3, 0x4, 0x9) r7 = openat$kvm(0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, 0x0) 2.90024501s ago: executing program 1 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x350, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x5, 0x0, 0x7, [{0x18, 0x1, "aa28339326745f4cff271801"}, {0x5, 0x1c, "1fc2fa96c8ad22bc60fe33198965b1ee38c4f315f534fa17bd58544185770e20d54f4613942b3114c1d0450eb43ebea339f41f36cbd0ed627f467e54aa987397e709246d3a5c0a0ef75d5bc28673b4e0b45cc242a8d54bd5cbd055fc9140cf23647f73f78fb5f02ed291af5d00e8779e8246ee2b65129541d29beeebd6f9323c9101b21fce3ed7e5a5c0fe2ef41bca133a7dc53a2fa0fa45ce3305d4c80ca99a334235d212d5f25458538a19b8255113a3809b82b8e279ce39a4e136c6d86684d8162292dfb575e3e9ac31ef35a42abfcd2d76b23f6e52a02bfc1120fad84039"}, {0x0, 0x1d, "ec49e3d7552f1720587af943404342061291e7b24c44c9a40ad10f23717d8ab61c0e051fa3ad7cc4684be8ca09e96a4fff2afab6b44d736882bd4cabe5e8f2bd8276eb9b6d2f5ced5b8bb1bdba63a11ef9cf36879e64f9cdb9bf58ff53f0790770ffe81fcec92da0aa6eec97e0d7500d80a7ee6f3c85cf8dba21ed913e08f0367d4ebfec768360f32b1606369423ebc65701d30e17fad4069041c23e6094457ab05a5ade61cdfe8ad1aa1a392cf5b84bde5776f710fee7e0218e383ee6c514b96fe52ad102dd1b455dd3d5ffe84ec56e32a8bb379e533f61cabbeaec31dec74e59cf10e1e11f88"}, {0x22, 0xf, "489ca87cc92b1e9fbb308b1ec76f66979a7b209474c6ba72ffdffc4725fdde70144743e64462367bde1abdd429541457aa107e21349ea61cb6df8a743c1651fe3150c441f7282176fa2b094f6e6a968a1e3d0066295d0938baa6b3ae99ad7d31b0d48e7f56cbe29956c3fad28edeb5d2dd3e0334bbb4af"}, {0xe, 0x1d, "537f74b23d792f8801caaf9347bc81c930e72ea88472c9e1a52189c5ea817cf3e5e0a6333ceb4e3ba7142efbfb6f1400664c49284f1cdb19d1181ccb3893aac936e1742b6432dd30a1d9330b667221b8b43ea66752c35ad5b4d1ba96719bc0d6ebfa808f9b608f3ab580ce931dea68c15249f67804b69d053a6b959f3cb7004c01d81796f05d902c6bffccb818bbe82a19e6b64687748d22892a4c94d6fb9e584534a1c63a756662a7cc8e3a0b89977b6832b183ea39973f97ed5033046bd078a9ef960f8c8a4c5bd880dce28e460e4d5339e3dee7c5a82ba45910ab9f55c81c9be149ca8c90a191256f2932"}]}}}}}}}, 0x38a) 2.874122631s ago: executing program 1 (id=212): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000b00)='.\x00', 0x808) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x10f00) 2.844497481s ago: executing program 1 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x198, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9b1}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x472f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x568e01cb}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x52ea}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000800}, 0x400c090) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000100)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./trace\x00', &(0x7f0000000400)='efs\x00', 0x30108a5, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x1000, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000680)=[@increfs]}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000006c0)={0xe85, 0x0, &(0x7f0000000700)=[@request_freeze={0x400c6313, 0x0, 0x3}, @request_freeze]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/events/clk/clk_rate_request_start/format\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000480)=""/37, 0x25, 0x10000) bind$xdp(r1, &(0x7f0000000340)={0x2c, 0xf, r4, 0x4}, 0x10) 2.710932955s ago: executing program 1 (id=214): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/79, 0x4f}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r0, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r7, r6, &(0x7f0000000500)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000800)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x105, 0x0, 0x0}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r10, &(0x7f0000000a80)={@void, @void, @llc={@snap={0x1, 0xab, "cc", "1ffb43", 0x8847, "f0de2c482245f7c526426bc0c222dfc3e1bdb5031fe78404795529608786c24ac43a10ba1073c07f2844442259084de22bd517ff3271a663bc136577efea17dab1e7c6925d734b3162d60159855f042dfa98af090ace"}}}, 0x5e) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000b40)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x8}]}) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xc, 0x40, 0xa, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x7, 0xfff7, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x3, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x40, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0x29cf2000) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x5}}, 0x24, 0x2) r14 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000080)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r15 = userfaultfd(0x801) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f0000000b80)) 1.868026245s ago: executing program 3 (id=218): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./tracing\x00', 0x60) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/115, 0x73}], 0x1) 1.853341415s ago: executing program 3 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x183600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0xb4e, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000c92000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.689231499s ago: executing program 3 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x350, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x5, 0x0, 0x7, [{0x18, 0x1, "aa28339326745f4cff271801"}, {0x5, 0x1c, "1fc2fa96c8ad22bc60fe33198965b1ee38c4f315f534fa17bd58544185770e20d54f4613942b3114c1d0450eb43ebea339f41f36cbd0ed627f467e54aa987397e709246d3a5c0a0ef75d5bc28673b4e0b45cc242a8d54bd5cbd055fc9140cf23647f73f78fb5f02ed291af5d00e8779e8246ee2b65129541d29beeebd6f9323c9101b21fce3ed7e5a5c0fe2ef41bca133a7dc53a2fa0fa45ce3305d4c80ca99a334235d212d5f25458538a19b8255113a3809b82b8e279ce39a4e136c6d86684d8162292dfb575e3e9ac31ef35a42abfcd2d76b23f6e52a02bfc1120fad84039"}, {0x0, 0x1d, "ec49e3d7552f1720587af943404342061291e7b24c44c9a40ad10f23717d8ab61c0e051fa3ad7cc4684be8ca09e96a4fff2afab6b44d736882bd4cabe5e8f2bd8276eb9b6d2f5ced5b8bb1bdba63a11ef9cf36879e64f9cdb9bf58ff53f0790770ffe81fcec92da0aa6eec97e0d7500d80a7ee6f3c85cf8dba21ed913e08f0367d4ebfec768360f32b1606369423ebc65701d30e17fad4069041c23e6094457ab05a5ade61cdfe8ad1aa1a392cf5b84bde5776f710fee7e0218e383ee6c514b96fe52ad102dd1b455dd3d5ffe84ec56e32a8bb379e533f61cabbeaec31dec74e59cf10e1e11f88"}, {0x22, 0xf, "489ca87cc92b1e9fbb308b1ec76f66979a7b209474c6ba72ffdffc4725fdde70144743e64462367bde1abdd429541457aa107e21349ea61cb6df8a743c1651fe3150c441f7282176fa2b094f6e6a968a1e3d0066295d0938baa6b3ae99ad7d31b0d48e7f56cbe29956c3fad28edeb5d2dd3e0334bbb4af"}, {0xe, 0x1d, "537f74b23d792f8801caaf9347bc81c930e72ea88472c9e1a52189c5ea817cf3e5e0a6333ceb4e3ba7142efbfb6f1400664c49284f1cdb19d1181ccb3893aac936e1742b6432dd30a1d9330b667221b8b43ea66752c35ad5b4d1ba96719bc0d6ebfa808f9b608f3ab580ce931dea68c15249f67804b69d053a6b959f3cb7004c01d81796f05d902c6bffccb818bbe82a19e6b64687748d22892a4c94d6fb9e584534a1c63a756662a7cc8e3a0b89977b6832b183ea39973f97ed5033046bd078a9ef960f8c8a4c5bd880dce28e460e4d5339e3dee7c5a82ba45910ab9f55c81c9be149ca8c90a191256f2932"}]}}}}}}}, 0x38a) 1.683366969s ago: executing program 3 (id=221): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000b00)='.\x00', 0x808) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x10f00) 1.65140636s ago: executing program 3 (id=222): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) io_setup(0x4000000, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000008c0)={'team_slave_0\x00', &(0x7f0000000900)=@ethtool_sset_info={0x12, 0x0, 0x101}}) openat(0xffffffffffffffff, &(0x7f0000000400)='./cgroup\x00', 0xba986d9432b6c458, 0x138) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x1, 0x0, 0x8000}) mount$tmpfs(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340), 0x1804010, &(0x7f0000000380)={[{@huge_advise}, {@quota}], [{@smackfsroot={'smackfsroot', 0x3d, ')@)^'}}, {@dont_measure}, {@subj_role}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x39, 0x38, 0x0, 0x66, 0x63, 0x35], 0x2d, [0x33, 0x35, 0x63, 0x65], 0x2d, [0x61, 0x66, 0x65, 0x30], 0x2d, [0x66, 0x37, 0x0, 0x34], 0x2d, [0x31, 0x32, 0x64, 0x34, 0x33, 0x38, 0x32, 0x30]}}}]}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000200)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r1}, 0x0, 0x1, &(0x7f0000000940)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x2000) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r11, 0x0, 0x0) syz_usb_control_io$rtl8150(r11, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r11, &(0x7f0000000500)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x44, &(0x7f00000005c0)={0x0, 0x3, 0x6, "6ee996eb7083"}, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x82, 0x1, '8'}, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x200000000000000) 1.161168372s ago: executing program 2 (id=224): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xcb}}}, &(0x7f0000000480)=0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x6000, 0x0) open(&(0x7f0000000300)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x88) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0x40081271, &(0x7f0000000580)={'\x00', 0x40, 0x40000a, 0x3, 0x40000000, 0x10}) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r6 = dup(r5) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000040)='\x00', 0x400, &(0x7f0000000080)={@align=0xdbf2, {0x80, 0xffff, 0x3, 0x8}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x7f}, {[0x5ffd, 0xfffffffd, 0xfff, 0x80000001]}, 0x3, 0x6f, &(0x7f0000000200)=""/111}) renameat2(r6, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000440)='./file0\x00', 0x2) (async) syz_ublk_setup_queues(r6, r2, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x1f, 0x0, 0x0, {}, 0x1f, r1, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2031, r8}, 0x1) 1.118510253s ago: executing program 0 (id=225): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xbfbb, 0x7, 0x3, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x7a) close(r3) execve(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) getsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000400)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = fsmount(r4, 0x1, 0x0) fchdir(r6) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0xffffff7f, @loopback, 0x6}, 0x1c) socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 966.213137ms ago: executing program 2 (id=226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1bb) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) (async, rerun: 64) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) (async, rerun: 64) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000600)={0x1}, 0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) (async, rerun: 32) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="3dfd7b75f6acbba1c3dbdd2eaf03c2fe0556e66945d9107aee4b012ec10bb6320ce746b64a571dd65ce8af17474c369381b6c652e2f1a449107d1bbd93c4", 0x3e}, {&(0x7f0000000140)}, {&(0x7f0000000340)="ecc658740986f3f50d14a8d47a73c3fb9f3e77dc7e67964aa1218cb858d85592c164e0b2bd5260b1ff845dcb91f799cf1efe4fd847b58d4eaea4a7e946789186c993ef148fdc3eb56a398eede1bc84832708d36c6506f1007c56bf2dd84e0f92447b983efca0ea23b9d2a113860da2552b344b5ff2e6584bdf01de73a108e1e7f49b6f9aa270b4011bc328cf51462f3ec1a311dc2915d7115de35457bd40972789018b98a5b275f502ab580e6c01af9c5cc7637443f3a925e7d35099ed8eb0bbf8cbc474763d4cba14365b95eeda293e3a81c8", 0xd3}], 0x3, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}, 0xc090) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x3a5) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000500), 0x0, 0x0, 0x0) (async) timer_create(0x2, &(0x7f0000000180)={0x0, 0xd, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000580)={{}, {0x0, 0x3938700}}, &(0x7f00000005c0)) (async) truncate(&(0x7f0000000300)='./file0/file1\x00', 0xe2) 909.128988ms ago: executing program 2 (id=227): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000540)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000580)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000014c0)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000380)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001500)={'#! ', '', [], 0xa, "bdd92f0efe80000000000000b320655800b2b184ef1b05713031e573a3d16b0acc6de928"}, 0x28) 876.133609ms ago: executing program 1 (id=228): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000240)={{0x0, 0x2, 0xffff, 0x25}, 'syz0\x00', 0x3}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, &(0x7f00000002c0)=""/117, 0x75) 100.719968ms ago: executing program 2 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r0, 0x0, 0x0) 1.13876ms ago: executing program 2 (id=230): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000b00)='.\x00', 0x808) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10f00) 832.44µs ago: executing program 1 (id=231): r0 = socket$unix(0x1, 0x5, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x5) (async) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000040)='\xb1\xc8^\xac\xff7\xfd\xff\xff\xff\xbc\x19^\x00\f\xecrNy\xc4\xa2D*\xca\xaf\xcaM\xa2^\xf2<2\x80P\x8dV\xa7E\xe9 \xef\xe3\xb6\xd0\xd0\xcc6PNK\xb17\xd1)\x89\xc3\x8d\xf3\xbd[\xa4y\xae\v~a\xd6y\xd6\xa0\x8e\xc8\xf1\xefc\x9d\xf9rc\x80\\\xdb\x8e\b\x8bBr\x16', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r5, 0x1, &(0x7f0000000300), 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0xeffffffd) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000440)={&(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000540)=0x100000001, 0x4) (async) connect$inet6(r8, &(0x7f0000000580)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000005c0), 0x3c) (async) setsockopt$inet6_tcp_int(r8, 0x11a, 0x17, 0x0, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x0) close(r9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) splice(r2, 0x0, r0, 0x0, 0x25a5, 0x4) vmsplice(r3, &(0x7f0000000800)=[{&(0x7f0000000600)="524d2abb255d9abb4f7718c4f230d276e2d04707fb5c048429b0b25ea99d2fcf5544001b7de9d56a9f588f4a8a8a43d24cdd3a82e05d11d5ce7371826a80cf6aa54ab05287409c58cdc77b37a1e3283eb273b92c5d1c54a28a5894d9a74794f244b6d4a5727828dbc9dfe5f9e73ef3a32137d54fda156623037902ebe524a174f4c3ac2663622b6c84fb56c616a82e41728ee99547ac9d484f9944aa9387a694b33bc2e5b376193a46f4e3147e905cab0a87ff5cd51e57888c049ae3cc1e85e2e0dd54baf910fce50600000070fc5ee714d250429a652bcda157b2ca84bdcc21c9be516051376d5495397a5426f75ba745f4948c2e71ebc36ed48244d096412d96ab4dbe1970587de1327718fce4923faabcbf8bc872", 0x116}, {&(0x7f0000000740)="4db5b06d55ca7a6eb1a16578f1356ea6ca65b1b7bfc763ba7f5dc4a11c526c328940e3248cc3c9cc6493fb8ab56adf7404cc23ad21800dbae27a271a309208d347964909c876b3438af62266638242814fb6a39459bd4b4d26c029436f66470ec1064e18b4fd8cd6b0c735f0b61cc16c3c2debdae9a971e1ad2f5dd6"}, {&(0x7f00000007c0)="5ac1d716028506be71967d29c8f8fee6e693ca3ecdf990"}], 0xfffffffffffffee, 0xd) (async) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000100)={0x1c, 0x4, 0xff}) 0s ago: executing program 2 (id=232): r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x149) (async) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0) write$nbd(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0xf5) (async) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4044800) (async, rerun: 32) recvfrom$inet(r0, 0x0, 0x0, 0x40000240, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x6) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 64) read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r2, &(0x7f0000002c00)={0x50, 0x0, r3}, 0x50) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002cc0), 0x2000, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004d80)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getdents64(r4, &(0x7f0000004dc0)=""/1024, 0x400) (async) syz_fuse_handle_req(r2, &(0x7f00000051c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000066b3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f00000071c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007280)={0x30, 0x0, 0x0, [{0x4, 0x1, 0x4, 0x100, '*W),'}]}, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000401f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r5, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="400504000000b4b5287fab5cb2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000b80)=0x7) sched_setscheduler(0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 29.695964][ T36] audit: type=1400 audit(1792393226.460:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.699265][ T287] cgroup: Unknown subsys name 'net' [ 29.718667][ T36] audit: type=1400 audit(1792393226.460:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.746025][ T36] audit: type=1400 audit(1792393226.490:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.746468][ T287] cgroup: Unknown subsys name 'devices' [ 29.867541][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.873173][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.988641][ T36] audit: type=1400 audit(1792393226.750:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.011852][ T36] audit: type=1400 audit(1792393226.750:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.036846][ T36] audit: type=1400 audit(1792393226.750:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.055159][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.068901][ T36] audit: type=1400 audit(1792393226.830:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.092669][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.094392][ T36] audit: type=1400 audit(1792393226.830:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.128662][ T36] audit: type=1400 audit(1792393226.850:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.154291][ T36] audit: type=1400 audit(1792393226.850:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.023218][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.030682][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.037826][ T295] bridge_slave_0: entered allmulticast mode [ 31.044141][ T295] bridge_slave_0: entered promiscuous mode [ 31.056940][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.064012][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.071315][ T295] bridge_slave_1: entered allmulticast mode [ 31.077770][ T295] bridge_slave_1: entered promiscuous mode [ 31.109547][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.116763][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.123861][ T294] bridge_slave_0: entered allmulticast mode [ 31.130257][ T294] bridge_slave_0: entered promiscuous mode [ 31.139911][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.147048][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.154123][ T294] bridge_slave_1: entered allmulticast mode [ 31.160451][ T294] bridge_slave_1: entered promiscuous mode [ 31.186984][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.194060][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.201348][ T297] bridge_slave_0: entered allmulticast mode [ 31.207686][ T297] bridge_slave_0: entered promiscuous mode [ 31.224011][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.231102][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.238252][ T297] bridge_slave_1: entered allmulticast mode [ 31.244779][ T297] bridge_slave_1: entered promiscuous mode [ 31.280817][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.287949][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.295032][ T296] bridge_slave_0: entered allmulticast mode [ 31.301713][ T296] bridge_slave_0: entered promiscuous mode [ 31.308334][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.317088][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.324163][ T296] bridge_slave_1: entered allmulticast mode [ 31.330521][ T296] bridge_slave_1: entered promiscuous mode [ 31.458533][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.465654][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.473007][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.480085][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.490717][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.497791][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.505062][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.512142][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.540125][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.547231][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.554536][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.561617][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.594004][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.601117][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.608476][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.615567][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.640162][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.647517][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.655059][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.662905][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.670325][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.678222][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.685577][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.692848][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.706028][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.713114][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.722425][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.729531][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.749690][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.756911][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.764526][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.771616][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.795558][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.802623][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.828843][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.835948][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.844007][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.851109][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.867167][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.874249][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.893623][ T295] veth0_vlan: entered promiscuous mode [ 31.913125][ T295] veth1_macvtap: entered promiscuous mode [ 31.932049][ T297] veth0_vlan: entered promiscuous mode [ 31.943443][ T294] veth0_vlan: entered promiscuous mode [ 31.970315][ T297] veth1_macvtap: entered promiscuous mode [ 31.983454][ T294] veth1_macvtap: entered promiscuous mode [ 31.993979][ T296] veth0_vlan: entered promiscuous mode [ 32.021008][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.056495][ T296] veth1_macvtap: entered promiscuous mode [ 32.112485][ T313] SELinux: ebitmap start bit (771752192) is beyond the end of the bitmap (1472) [ 32.124486][ T313] SELinux: failed to load policy [ 32.131993][ T319] netlink: 'syz.2.5': attribute type 27 has an invalid length. [ 32.151212][ T317] sd 0:0:1:0: PR command failed: 1026 [ 32.157021][ T317] sd 0:0:1:0: Sense Key : 0x5 [current] [ 32.157543][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.162954][ T317] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 32.188708][ T317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.207920][ T317] gretap0: entered promiscuous mode [ 32.290370][ T337] netlink: 'syz.2.10': attribute type 27 has an invalid length. [ 32.299425][ T337] Zero length message leads to an empty skb [ 32.330487][ T336] FAULT_INJECTION: forcing a failure. [ 32.330487][ T336] name failslab, interval 1, probability 0, space 0, times 1 [ 32.359734][ T336] CPU: 0 UID: 0 PID: 336 Comm: syz.0.9 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 32.359776][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.359802][ T336] Call Trace: [ 32.359810][ T336] [ 32.359819][ T336] __dump_stack+0x21/0x30 [ 32.359861][ T336] dump_stack_lvl+0x140/0x1c0 [ 32.359897][ T336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.359933][ T336] ? do_futex+0x32a/0x510 [ 32.359958][ T336] dump_stack+0x19/0x20 [ 32.359992][ T336] should_fail_ex+0x3c2/0x510 [ 32.360015][ T336] should_failslab+0xac/0x100 [ 32.360039][ T336] kmem_cache_alloc_noprof+0x42/0x410 [ 32.360072][ T336] ? __se_sys_getcwd+0x6c/0x440 [ 32.360104][ T336] __se_sys_getcwd+0x6c/0x440 [ 32.360136][ T336] ? __kasan_check_write+0x18/0x20 [ 32.360168][ T336] ? fpregs_restore_userregs+0x11c/0x260 [ 32.360201][ T336] __x64_sys_getcwd+0x5f/0x80 [ 32.360232][ T336] x64_sys_call+0x1c71/0x2ee0 [ 32.360256][ T336] do_syscall_64+0x57/0xf0 [ 32.360277][ T336] ? clear_bhb_loop+0x50/0xa0 [ 32.360306][ T336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.360334][ T336] RIP: 0033:0x7f06d899e559 [ 32.360362][ T336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.360381][ T336] RSP: 002b:00007f06d985b028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 32.360416][ T336] RAX: ffffffffffffffda RBX: 00007f06d8c25fa0 RCX: 00007f06d899e559 [ 32.360434][ T336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.360449][ T336] RBP: 00007f06d8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 32.360463][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.360478][ T336] R13: 00007f06d8c26038 R14: 00007f06d8c25fa0 R15: 00007ffe238158c8 [ 32.360498][ T336] [ 32.446341][ T340] batadv_slave_0: entered promiscuous mode [ 32.562266][ T338] batadv_slave_0: left promiscuous mode [ 32.615361][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.766819][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 32.776922][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 32.787062][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 32.798005][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 32.807974][ T31] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 32.818336][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.828879][ T326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.836621][ T326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.844589][ T31] pl2303 4-1:1.0: pl2303 converter detected [ 32.851697][ T31] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 32.965355][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.005326][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.126679][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.137215][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.151969][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.161162][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.169571][ T326] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 33.170646][ T10] usb 3-1: Product: syz [ 33.178867][ T326] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 33.182600][ T10] usb 3-1: Manufacturer: syz [ 33.190367][ T326] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 33.194171][ T10] usb 3-1: SerialNumber: syz [ 33.201733][ T326] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 33.205710][ T66] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 33.213773][ T326] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 33.225035][ T66] usb 1-1: config 1 interface 0 has no altsetting 0 [ 33.239584][ T353] usb 4-1: USB disconnect, device number 2 [ 33.246662][ T353] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 33.254732][ T353] pl2303 4-1:1.0: device disconnected [ 33.262398][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 33.272573][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.280822][ T66] usb 1-1: Product: syz [ 33.285040][ T66] usb 1-1: Manufacturer: syz [ 33.289966][ T66] usb 1-1: SerialNumber: syz [ 33.295851][ T352] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 33.508907][ T66] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8 [ 33.521157][ T66] usb 1-1: USB disconnect, device number 2 [ 33.528160][ T66] usblp0: removed [ 33.675337][ T353] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.828237][ T353] usb 2-1: Using ep0 maxpacket: 32 [ 33.834687][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.846442][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.864636][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.874531][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.883632][ T353] usb 2-1: config 0 descriptor?? [ 33.890384][ T353] hub 2-1:0.0: USB hub found [ 34.085353][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.126925][ T353] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 34.137225][ T353] usbhid 2-1:0.0: can't add hid device: -71 [ 34.143268][ T353] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.165671][ T353] usb 2-1: USB disconnect, device number 2 [ 34.240912][ T375] SELinux: ebitmap start bit (771752192) is beyond the end of the bitmap (1472) [ 34.251333][ T10] cdc_ncm 3-1:1.0: bind() failure [ 34.257012][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.259839][ T375] SELinux: failed to load policy [ 34.272620][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.275011][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 34.281703][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 34.292219][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 34.305647][ T31] usb 4-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 34.317797][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.323295][ T10] usb 3-1: USB disconnect, device number 2 [ 34.334127][ T31] usb 4-1: Product: syz [ 34.339540][ T31] usb 4-1: Manufacturer: syz [ 34.350648][ T31] usb 4-1: SerialNumber: syz [ 34.395945][ T46] tipc: Subscription rejected, illegal request [ 34.581398][ T31] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.588607][ T31] usb 4-1: incorrect wMaxPacketSize 0x20 for BADD profile [ 34.606929][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.623615][ T31] usb 4-1: USB disconnect, device number 3 [ 34.644049][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.773648][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 34.773666][ T36] audit: type=1400 audit(1792393231.530:157): avc: denied { unlink } for pid=392 comm="syz.2.26" name="#1" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.801818][ T36] audit: type=1400 audit(1792393231.530:158): avc: denied { mount } for pid=392 comm="syz.2.26" name="/" dev="overlay" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.955320][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.015326][ T66] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.105279][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 35.111731][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 35.122991][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 35.138826][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 35.148010][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.157919][ T10] usb 2-1: config 0 descriptor?? [ 35.185315][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 35.192829][ T66] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 35.201957][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.210047][ T66] usb 3-1: Product: syz [ 35.214994][ T66] usb 3-1: Manufacturer: syz [ 35.220089][ T66] usb 3-1: SerialNumber: syz [ 35.243792][ T36] audit: type=1400 audit(1792393232.000:159): avc: denied { map } for pid=398 comm="syz.3.29" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 35.259616][ T399] netlink: 'syz.3.29': attribute type 150 has an invalid length. [ 35.267067][ T36] audit: type=1400 audit(1792393232.020:160): avc: denied { read } for pid=398 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.276990][ T399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 35.294724][ T36] audit: type=1400 audit(1792393232.020:161): avc: denied { ioctl } for pid=398 comm="syz.3.29" path="socket:[3627]" dev="sockfs" ino=3627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.366673][ T10] wacom 0003:056A:0047.0001: Unknown device_type for 'HID 056a:0047'. Assuming pen. [ 35.382734][ T10] wacom 0003:056A:0047.0001: hidraw0: USB HID v21.0a Device [HID 056a:0047] on usb-dummy_hcd.1-1/input0 [ 35.396534][ T10] input: Wacom Intuos2 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0047.0001/input/input4 [ 35.410667][ T36] audit: type=1400 audit(1792393232.170:162): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.465563][ T36] audit: type=1400 audit(1792393232.170:163): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.500682][ T36] audit: type=1400 audit(1792393232.250:164): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=459 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.530451][ T36] audit: type=1400 audit(1792393232.290:165): avc: denied { mmap_zero } for pid=402 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.554138][ T36] audit: type=1400 audit(1792393232.310:166): avc: denied { create } for pid=402 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.570925][ T31] usb 2-1: USB disconnect, device number 3 [ 35.606064][ T405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 35.915301][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.076555][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.087711][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.098156][ T311] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 36.107517][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.117104][ T311] usb 1-1: config 0 descriptor?? [ 36.395363][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.525365][ T10] usb 2-1: device descriptor read/64, error -71 [ 36.538717][ T407] capability: warning: `syz.0.32' uses 32-bit capabilities (legacy support in use) [ 36.752915][ T407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.762156][ T407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.785293][ T10] usb 2-1: device descriptor read/64, error -71 [ 36.797118][ T311] usb 1-1: string descriptor 0 read error: -71 [ 36.803621][ T311] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 36.812505][ T311] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 36.821299][ T311] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 36.829470][ T311] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 36.837036][ T311] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 36.847631][ T311] usb 1-1: USB disconnect, device number 3 [ 36.855648][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 36.866795][ T66] usb 3-1: USB disconnect, device number 3 [ 36.875453][ T353] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.025328][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.033954][ T353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.044666][ T353] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.059453][ T353] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.068577][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.076656][ T353] usb 4-1: Product: syz [ 37.080869][ T353] usb 4-1: Manufacturer: syz [ 37.085532][ T353] usb 4-1: SerialNumber: syz [ 37.185291][ T10] usb 2-1: device descriptor read/64, error -71 [ 37.349232][ T424] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 37.358998][ T424] SELinux: failed to load policy [ 37.417949][ T432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.41'. [ 37.425402][ T10] usb 2-1: device descriptor read/64, error -71 [ 37.433144][ T433] netlink: 68 bytes leftover after parsing attributes in process `syz.2.41'. [ 37.535646][ T10] usb usb2-port1: attempt power cycle [ 37.655333][ T66] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 37.826394][ T66] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 37.837579][ T66] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.848840][ T66] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 37.863196][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.872409][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.880544][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.888150][ T66] usb 1-1: SerialNumber: syz [ 37.906410][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.036471][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.095095][ T353] cdc_ncm 4-1:1.0: bind() failure [ 38.102176][ T66] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 38.108772][ T66] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 38.119328][ T353] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 38.127926][ T66] usb 1-1: USB disconnect, device number 4 [ 38.140386][ T353] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 38.152930][ T353] usb 4-1: USB disconnect, device number 4 [ 38.263535][ T439] loop5: detected capacity change from 0 to 7 [ 38.275430][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.296338][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.344174][ T442] Invalid logical block size (18350) [ 38.426417][ T10] usb 2-1: device descriptor read/8, error -71 [ 38.535398][ T10] usb usb2-port1: unable to enumerate USB device [ 38.625271][ T311] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 38.786926][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 38.795453][ T311] usb 3-1: config 1 interface 0 altsetting 182 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 38.806630][ T311] usb 3-1: config 1 interface 0 has no altsetting 0 [ 38.816071][ T311] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.40 [ 38.825486][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.833624][ T311] usb 3-1: Product: ఄ [ 38.838169][ T311] usb 3-1: Manufacturer: 繈즖樍ʿႭᖬ뷋憸⺠麟㶺䮵⭲䐑袯펏ⴃણ埣跹ꓦ䔞볡Ⓨ㚑ᾁ澸㙝ㆤ㓃읎ﯼᒋ彶匱⍗젇ꟸ絴낡✴쩝葘錠隲ꌂ櫈缮鴇ⲉ郈뜷玖ꍎ獷≥⺦㵞膑都궠ﮱᎥ굞ﳸ뱻熂鍩煠꿈䴼㤃汽쬀瑜࿛뛞먓㎄̓褖⹄者㊰챟⨬늹턆婊ᡢ調ཿ鶦쁭庲䆤鰍ῄꚭ䑣폓ꞣ佱占疜ᢩ皒ᏺ䊕攡打鰐 [ 38.874514][ T311] usb 3-1: SerialNumber: ࠠ [ 38.881289][ T446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 39.093922][ T311] usbhid 3-1:1.0: can't add hid device: -71 [ 39.100110][ T311] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 39.109491][ T311] usb 3-1: USB disconnect, device number 4 [ 39.230593][ T462] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.240570][ T462] SELinux: failed to load policy [ 39.324663][ T477] vlan1: entered promiscuous mode [ 39.330103][ T477] vlan1: entered allmulticast mode [ 39.335489][ T477] veth0_vlan: entered allmulticast mode [ 39.452051][ T480] process 'syz.3.55' launched './file0' with NULL argv: empty string added [ 39.461137][ T480] Invalid argument reading file caps for ./file0 [ 39.468822][ T480] fuse: Unknown parameter 'fd?oW' [ 39.545357][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.599144][ T311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.612324][ T485] overlayfs: missing 'lowerdir' [ 39.642168][ T490] ======================================================= [ 39.642168][ T490] WARNING: The mand mount option has been deprecated and [ 39.642168][ T490] and is ignored by this kernel. Remove the mand [ 39.642168][ T490] option from the mount to silence this warning. [ 39.642168][ T490] ======================================================= [ 39.692640][ T492] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.702521][ T492] SELinux: failed to load policy [ 39.716573][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.726835][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.735780][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.750230][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.760182][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.763050][ T494] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.768258][ T31] usb 1-1: Product: syz [ 39.782507][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 39.782543][ T36] audit: type=1400 audit(1792393236.540:202): avc: denied { ioctl } for pid=493 comm="syz.3.61" path="socket:[6423]" dev="sockfs" ino=6423 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.784584][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 39.819785][ T31] usb 1-1: Manufacturer: syz [ 39.824418][ T31] usb 1-1: SerialNumber: syz [ 39.832012][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.842458][ T31] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 39.849348][ T31] cdc_ncm 1-1:1.0: bind() failure [ 39.854424][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.864728][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.868198][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 39.892302][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.901878][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.910030][ T311] usb 2-1: Product: syz [ 39.914223][ T311] usb 2-1: Manufacturer: syz [ 39.918915][ T311] usb 2-1: SerialNumber: syz [ 40.037168][ T36] audit: type=1400 audit(1792393236.800:203): avc: denied { mount } for pid=486 comm="syz.2.58" name="/" dev="configfs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.046670][ T487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.069425][ T488] binder: Unknown parameter 'defcontext01777777777777777777777' [ 40.072728][ T36] audit: type=1400 audit(1792393236.830:204): avc: denied { remount } for pid=486 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.080883][ T487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.115006][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 40.122857][ T10] usb 3-1: can't read configurations, error -71 [ 40.129205][ T36] audit: type=1400 audit(1792393236.890:205): avc: denied { ioctl } for pid=476 comm="syz.1.54" path="socket:[5123]" dev="sockfs" ino=5123 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.132415][ T311] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 40.160436][ T311] cdc_ncm 2-1:1.0: bind() failure [ 40.167991][ T311] usb 2-1: USB disconnect, device number 8 [ 40.365322][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.516488][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 40.526562][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 40.536362][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.547293][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 40.557102][ T31] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 40.566192][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.577878][ T507] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 40.585375][ T507] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 40.593233][ T31] pl2303 4-1:1.0: pl2303 converter detected [ 40.600692][ T31] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 40.623776][ T36] audit: type=1400 audit(1792393237.380:206): avc: denied { bind } for pid=510 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.643155][ T511] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000 [ 40.652270][ T511] flags: 0x4000000000000000(zone=1) [ 40.657665][ T511] page_type: f2(table) [ 40.661830][ T511] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 40.670717][ T511] raw: 0000000000000000 0000000000000000 00000001f2000000 0000000000000000 [ 40.679409][ T511] page dumped because: unmovable page [ 40.685382][ T511] page_owner tracks the page as allocated [ 40.691195][ T511] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 943976011, free_ts 0 [ 40.704162][ T511] register_early_stack+0x99/0x100 [ 40.711037][ T36] audit: type=1400 audit(1792393237.470:207): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.713997][ T511] init_page_owner+0x40/0x840 [ 40.736537][ T36] audit: type=1400 audit(1792393237.470:208): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.745472][ T511] page_ext_init+0x3f8/0x44b [ 40.760422][ T36] audit: type=1400 audit(1792393237.470:209): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.775541][ T511] mm_core_init+0x4b/0x7b [ 40.786039][ T515] netlink: 92 bytes leftover after parsing attributes in process `syz.0.53'. [ 40.790129][ T511] page_owner free stack trace missing [ 40.809615][ T36] audit: type=1400 audit(1792393237.470:210): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.831621][ T36] audit: type=1400 audit(1792393237.470:211): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.973429][ T528] SELinux: ebitmap start bit (771752192) is beyond the end of the bitmap (1472) [ 40.983633][ T528] SELinux: failed to load policy [ 41.007085][ T532] input: syz0 as /devices/virtual/input/input7 [ 41.305307][ T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 41.435286][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.675304][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.915292][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 42.045293][ T31] usb 2-1: device descriptor read/64, error -71 [ 42.095323][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.245277][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 42.251751][ T311] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.262757][ T311] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.275655][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.282304][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 42.291466][ T31] usb 2-1: device descriptor read/64, error -71 [ 42.297785][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.306576][ T311] usb 3-1: config 0 descriptor?? [ 42.415425][ T31] usb usb2-port1: attempt power cycle [ 42.524080][ T10] usb 1-1: USB disconnect, device number 5 [ 42.723923][ T311] microsoft 0003:045E:00DC.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.2-1/input0 [ 42.736366][ T311] microsoft 0003:045E:00DC.0003: no inputs found [ 42.742780][ T311] microsoft 0003:045E:00DC.0003: could not initialize ff, continuing anyway [ 42.755299][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 42.776559][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.885291][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.906460][ T31] usb 2-1: device descriptor read/8, error -71 [ 43.036295][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.047328][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.057161][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 43.066304][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.075096][ T10] usb 1-1: config 0 descriptor?? [ 43.155296][ T31] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 43.176500][ T31] usb 2-1: device descriptor read/8, error -71 [ 43.178895][ T353] usb 4-1: USB disconnect, device number 5 [ 43.194618][ T353] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 43.205023][ T353] pl2303 4-1:1.0: device disconnected [ 43.325729][ T31] usb 2-1: device descriptor read/8, error -71 [ 43.435392][ T31] usb usb2-port1: unable to enumerate USB device [ 43.665297][ T353] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.682713][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 43.690869][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 43.699835][ T10] usb 1-1: USB disconnect, device number 6 [ 43.816687][ T353] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.825190][ T353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.835481][ T353] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.846017][ T353] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 43.855123][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.863197][ T353] usb 4-1: Product: syz [ 43.867426][ T353] usb 4-1: Manufacturer: syz [ 43.872065][ T353] usb 4-1: SerialNumber: syz [ 43.880738][ T353] usb 4-1: selecting invalid altsetting 1 [ 43.886815][ T353] usb 4-1: unit 6 not found! [ 44.033588][ T556] SELinux: ebitmap start bit (771752192) is beyond the end of the bitmap (1472) [ 44.043716][ T556] SELinux: failed to load policy [ 44.077341][ T558] loop1: detected capacity change from 0 to 1 [ 44.125963][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 44.203165][ T566] FAULT_INJECTION: forcing a failure. [ 44.203165][ T566] name failslab, interval 1, probability 0, space 0, times 0 [ 44.215919][ T566] CPU: 0 UID: 0 PID: 566 Comm: syz.0.82 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 44.215954][ T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.215967][ T566] Call Trace: [ 44.215974][ T566] [ 44.215982][ T566] __dump_stack+0x21/0x30 [ 44.216024][ T566] dump_stack_lvl+0x140/0x1c0 [ 44.216055][ T566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.216087][ T566] ? kasan_save_alloc_info+0x3a/0x50 [ 44.216116][ T566] dump_stack+0x19/0x20 [ 44.216146][ T566] should_fail_ex+0x3c2/0x510 [ 44.216167][ T566] ? sk_prot_alloc+0x104/0x3a0 [ 44.216194][ T566] should_failslab+0xac/0x100 [ 44.216209][ T566] __kmalloc_noprof+0x69/0x510 [ 44.216230][ T566] ? sk_prot_alloc+0x104/0x3a0 [ 44.216248][ T566] sk_prot_alloc+0x104/0x3a0 [ 44.216264][ T566] ? security_socket_post_create+0x48/0x140 [ 44.216283][ T566] sk_alloc+0x40/0x590 [ 44.216307][ T566] __netlink_kernel_create+0x173/0x8a0 [ 44.216326][ T566] ? __netlink_kernel_create+0x6ff/0x8a0 [ 44.216345][ T566] ? __cfi___netlink_kernel_create+0x10/0x10 [ 44.216363][ T566] ? __asan_memcpy+0x5a/0x80 [ 44.216384][ T566] genl_pernet_init+0xb8/0x170 [ 44.216406][ T566] ? __cfi_genl_pernet_init+0x10/0x10 [ 44.216428][ T566] ? rtnetlink_net_init+0xbf/0x140 [ 44.216442][ T566] ? __cfi_genl_rcv+0x10/0x10 [ 44.216463][ T566] ? __cfi_genl_bind+0x10/0x10 [ 44.216484][ T566] ? __cfi_genl_unbind+0x10/0x10 [ 44.216505][ T566] ? __cfi_genl_release+0x10/0x10 [ 44.216527][ T566] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 44.216540][ T566] ? __cfi_rtnetlink_bind+0x10/0x10 [ 44.216554][ T566] ? __kasan_check_write+0x18/0x20 [ 44.216575][ T566] ? __mutex_init+0xa6/0x1a0 [ 44.216592][ T566] ops_init+0x302/0x5d0 [ 44.216615][ T566] ? __kasan_check_write+0x18/0x20 [ 44.216635][ T566] ? rwsem_read_trylock+0x275/0x5a0 [ 44.216654][ T566] setup_net+0x227/0x9b0 [ 44.216675][ T566] ? copy_net_ns+0xa20/0xa20 [ 44.216696][ T566] ? down_read_killable+0x7f/0x100 [ 44.216716][ T566] ? __cfi_down_read_killable+0x10/0x10 [ 44.216738][ T566] copy_net_ns+0x4fc/0xa20 [ 44.216759][ T566] create_new_namespaces+0x390/0x6f0 [ 44.216775][ T566] unshare_nsproxy_namespaces+0x124/0x180 [ 44.216791][ T566] ksys_unshare+0x4f9/0x920 [ 44.216817][ T566] ? __cfi_ksys_unshare+0x10/0x10 [ 44.216840][ T566] ? __kasan_check_write+0x18/0x20 [ 44.216861][ T566] __x64_sys_unshare+0x3c/0x50 [ 44.216911][ T566] x64_sys_call+0x2998/0x2ee0 [ 44.216933][ T566] do_syscall_64+0x57/0xf0 [ 44.216952][ T566] ? clear_bhb_loop+0x50/0xa0 [ 44.216980][ T566] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.217006][ T566] RIP: 0033:0x7f06d899e559 [ 44.217025][ T566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.217038][ T566] RSP: 002b:00007f06d985b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 44.217055][ T566] RAX: ffffffffffffffda RBX: 00007f06d8c25fa0 RCX: 00007f06d899e559 [ 44.217067][ T566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 44.217077][ T566] RBP: 00007f06d8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 44.217087][ T566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.217096][ T566] R13: 00007f06d8c26038 R14: 00007f06d8c25fa0 R15: 00007ffe238158c8 [ 44.217110][ T566] [ 44.978195][ T566] overlayfs: statfs failed on './file0' [ 45.003161][ T573] kernel profiling enabled (shift: 9) [ 45.261043][ T353] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 45.278081][ T353] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.289670][ T353] usb 4-1: USB disconnect, device number 6 [ 45.295566][ T415] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.318449][ T584] SELinux: ebitmap: truncated map [ 45.333890][ T584] SELinux: failed to load policy [ 45.345595][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.359882][ T587] loop8: detected capacity change from 0 to 10 [ 45.371740][ T589] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 45.387810][ T590] overlayfs: missing 'lowerdir' [ 45.447442][ T415] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.42 [ 45.456584][ T415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 45.464595][ T415] usb 1-1: Product: syz [ 45.468818][ T415] usb 1-1: Manufacturer: syz [ 45.475261][ T415] usb-storage 1-1:1.0: USB Mass Storage device detected [ 45.676427][ T415] usb 1-1: USB disconnect, device number 7 [ 45.735354][ T353] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.885304][ T353] usb 4-1: Using ep0 maxpacket: 32 [ 45.891536][ T353] usb 4-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 45.902463][ T353] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.913521][ T353] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 45.926542][ T353] usb 4-1: config 0 interface 0 has no altsetting 0 [ 45.933279][ T353] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 45.942382][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.951237][ T353] usb 4-1: config 0 descriptor?? [ 46.052515][ T597] netlink: 140 bytes leftover after parsing attributes in process `syz.1.91'. [ 46.195712][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 46.195732][ T36] audit: type=1400 audit(1792393242.960:233): avc: denied { relabelfrom } for pid=598 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.221900][ T36] audit: type=1400 audit(1792393242.960:234): avc: denied { relabelto } for pid=598 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.305303][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 46.318569][ T36] audit: type=1400 audit(1792393243.080:235): avc: denied { ioctl } for pid=600 comm="syz.0.93" path="mnt:[4026532295]" dev="nsfs" ino=4026532295 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.357704][ T36] audit: type=1400 audit(1792393243.120:236): avc: denied { write } for pid=591 comm="syz.3.90" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.364991][ T353] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 46.394878][ T36] audit: type=1400 audit(1792393243.150:237): avc: denied { setopt } for pid=591 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.427861][ T36] audit: type=1400 audit(1792393243.160:238): avc: denied { mounton } for pid=600 comm="syz.0.93" path="/syzcgroup/cpu/syz0/memory.force_empty" dev="cgroup" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 46.430420][ T353] pantherlord 0003:0E8F:0003.0004: global environment stack underflow [ 46.458957][ T610] syzkaller0: entered allmulticast mode [ 46.461296][ T10] usb 2-1: device descriptor read/64, error -71 [ 46.494662][ T353] pantherlord 0003:0E8F:0003.0004: item 0 4 1 11 parsing failed [ 46.506771][ T353] pantherlord 0003:0E8F:0003.0004: parse failed [ 46.516615][ T353] pantherlord 0003:0E8F:0003.0004: probe with driver pantherlord failed with error -22 [ 46.715264][ T10] usb 2-1: device descriptor read/64, error -71 [ 46.955286][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 47.105260][ T10] usb 2-1: device descriptor read/64, error -71 [ 47.345297][ T10] usb 2-1: device descriptor read/64, error -71 [ 47.455432][ T10] usb usb2-port1: attempt power cycle [ 47.545318][ T66] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 47.697077][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.707295][ T66] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.721651][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.730848][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.739022][ T66] usb 1-1: Product: syz [ 47.743272][ T66] usb 1-1: Manufacturer: syz [ 47.748089][ T66] usb 1-1: SerialNumber: syz [ 47.805313][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.826462][ T10] usb 2-1: device descriptor read/8, error -71 [ 47.956353][ T10] usb 2-1: device descriptor read/8, error -71 [ 48.195309][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.216362][ T10] usb 2-1: device descriptor read/8, error -71 [ 48.346518][ T10] usb 2-1: device descriptor read/8, error -71 [ 48.465477][ T10] usb usb2-port1: unable to enumerate USB device [ 48.509331][ T31] usb 4-1: USB disconnect, device number 7 [ 48.538122][ T36] audit: type=1400 audit(1792393245.300:239): avc: denied { create } for pid=616 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 48.563559][ T36] audit: type=1400 audit(1792393245.320:240): avc: denied { sys_admin } for pid=616 comm="syz.3.96" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 49.117207][ T628] SELinux: ebitmap: truncated map [ 49.153180][ T628] SELinux: failed to load policy [ 49.217621][ T36] audit: type=1400 audit(1792393245.980:241): avc: denied { read write } for pid=629 comm="syz.1.98" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.276142][ T36] audit: type=1400 audit(1792393245.980:242): avc: denied { open } for pid=629 comm="syz.1.98" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.094267][ T645] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.501570][ T646] cgroup: fork rejected by pids controller in /syz1 [ 51.245261][ T311] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 51.406385][ T66] cdc_ncm 1-1:1.0: bind() failure [ 51.416342][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.424049][ T66] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 51.436708][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.449176][ T66] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 51.455309][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.469990][ T311] usb 2-1: Product: syz [ 51.474252][ T66] usb 1-1: USB disconnect, device number 8 [ 51.479738][ T311] usb 2-1: Manufacturer: syz [ 51.484700][ T311] usb 2-1: SerialNumber: syz [ 52.200585][ T694] SELinux: ebitmap: truncated map [ 52.219429][ T694] SELinux: failed to load policy [ 52.286785][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 52.286801][ T36] audit: type=1400 audit(1792393249.050:247): avc: denied { bind } for pid=698 comm="syz.3.107" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.313058][ T36] audit: type=1400 audit(1792393249.050:248): avc: denied { name_bind } for pid=698 comm="syz.3.107" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 52.333730][ T36] audit: type=1400 audit(1792393249.050:249): avc: denied { node_bind } for pid=698 comm="syz.3.107" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 52.352240][ T699] Invalid ELF header magic: != ELF [ 52.356155][ T36] audit: type=1400 audit(1792393249.050:250): avc: denied { name_bind } for pid=698 comm="syz.3.107" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.381934][ T36] audit: type=1400 audit(1792393249.100:251): avc: denied { write } for pid=698 comm="syz.3.107" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.405396][ T36] audit: type=1400 audit(1792393249.100:252): avc: denied { module_load } for pid=698 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 52.485257][ T31] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 52.513378][ T311] cdc_ncm 2-1:1.0: failed to get mac address [ 52.637591][ T31] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 52.645410][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 52.660778][ T31] usb 1-1: string descriptor 0 read error: -22 [ 52.667337][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.677651][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.688624][ T696] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 52.697034][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 52.716571][ T311] cdc_ncm 2-1:1.0: bind() failure [ 52.722996][ T311] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 52.731430][ T311] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 52.743772][ T311] usb 2-1: USB disconnect, device number 17 [ 52.908368][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.917012][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.925418][ T415] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.977762][ T311] usb 1-1: USB disconnect, device number 9 [ 53.086475][ T415] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.096707][ T415] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.111004][ T415] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.120127][ T415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.128178][ T415] usb 4-1: Product: syz [ 53.132373][ T415] usb 4-1: Manufacturer: syz [ 53.137072][ T415] usb 4-1: SerialNumber: syz [ 53.375475][ T541] microsoft 0003:045E:00DC.0003: timeout initializing reports [ 53.436319][ T311] usb 3-1: USB disconnect, device number 7 [ 53.510780][ T36] audit: type=1400 audit(1792393250.270:253): avc: denied { mount } for pid=719 comm="syz.1.114" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.541045][ T722] SELinux: ebitmap: truncated map [ 53.556886][ T722] SELinux: failed to load policy [ 53.569563][ T36] audit: type=1326 audit(1792393250.330:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.1.114" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80559e559 code=0x7fc00000 [ 53.605296][ T36] audit: type=1326 audit(1792393250.360:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.1.114" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb80559e559 code=0x7fc00000 [ 53.630965][ T36] audit: type=1326 audit(1792393250.360:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.1.114" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80559e559 code=0x7fc00000 [ 53.875282][ T66] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 53.950868][ T353] rust_binder: 740: undelivered TRANSACTION_ERROR: 29189 [ 54.028059][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.038061][ T66] usb 1-1: not running at top speed; connect to a high speed hub [ 54.048327][ T66] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 54.057524][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.065718][ T66] usb 1-1: Product: ч [ 54.069922][ T66] usb 1-1: Manufacturer: ৽觼ꏁ큜੣鈄꫊憴졞⩘椮臌窐씇枯꿇뷙匳䜱ભ荊務璷谁틮▪髣貘铿넗ꛎ㔣邵棇 [ 54.083771][ T66] usb 1-1: SerialNumber: и [ 54.147945][ T415] cdc_ncm 4-1:1.0: bind() failure [ 54.154362][ T415] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 54.162769][ T415] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 54.172195][ T415] usb 4-1: USB disconnect, device number 8 [ 54.292344][ T66] usb 1-1: MBOX3: Invalid descriptor size=96. [ 54.299142][ T66] usb 1-1: MBOX3: Invalid descriptor size=96. [ 54.305905][ T66] usb 1-1: MBOX3: Invalid descriptor size=96. [ 54.314239][ T66] usb 1-1: USB disconnect, device number 10 [ 54.679190][ T752] SELinux: ebitmap: truncated map [ 54.692391][ T752] SELinux: failed to load policy [ 54.776921][ T760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 54.795289][ T415] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 54.820583][ T763] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 54.902591][ T764] kvm: pic: non byte write [ 54.955282][ T415] usb 3-1: Using ep0 maxpacket: 32 [ 54.962177][ T415] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.970794][ T415] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 54.979314][ T415] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 54.989957][ T415] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 54.999084][ T415] usb 3-1: config 128 has no interface number 0 [ 55.005481][ T415] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 55.016811][ T415] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.026943][ T415] usb 3-1: config 128 interface 127 has no altsetting 0 [ 55.036245][ T415] usb 3-1: language id specifier not provided by device, defaulting to English [ 55.046429][ T415] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 55.055582][ T415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.063696][ T415] usb 3-1: Product: syz [ 55.067947][ T415] usb 3-1: Manufacturer: syz [ 55.072570][ T415] usb 3-1: SerialNumber: syz [ 55.287196][ T415] usb 3-1: USB disconnect, device number 8 [ 55.298838][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.452575][ T774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.776268][ T784] SELinux: ebitmap: truncated map [ 55.792585][ T784] SELinux: failed to load policy [ 56.013566][ T810] SELinux: ebitmap: truncated map [ 56.028106][ T810] SELinux: failed to load policy [ 56.045609][ T353] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 56.077173][ T816] fuse: Bad value for 'fd' [ 56.082410][ T816] fuse: Bad value for 'fd' [ 56.087258][ T816] fuse: Bad value for 'fd' [ 56.091823][ T816] fuse: Bad value for 'fd' [ 56.096591][ T816] fuse: Bad value for 'fd' [ 56.101219][ T816] fuse: Bad value for 'fd' [ 56.105974][ T816] fuse: Bad value for 'fd' [ 56.110506][ T816] fuse: Bad value for 'fd' [ 56.119610][ T816] fuse: Bad value for 'fd' [ 56.124230][ T816] fuse: Bad value for 'fd' [ 56.129228][ T816] fuse: Bad value for 'fd' [ 56.133770][ T816] fuse: Bad value for 'fd' [ 56.138521][ T816] fuse: Bad value for 'fd' [ 56.143133][ T816] fuse: Bad value for 'fd' [ 56.147964][ T816] fuse: Bad value for 'fd' [ 56.152496][ T816] fuse: Bad value for 'fd' [ 56.157843][ T816] fuse: Bad value for 'fd' [ 56.162393][ T816] fuse: Bad value for 'fd' [ 56.167160][ T816] fuse: Bad value for 'fd' [ 56.171867][ T816] fuse: Bad value for 'fd' [ 56.178575][ T816] fuse: Bad value for 'fd' [ 56.183280][ T816] fuse: Bad value for 'fd' [ 56.188179][ T816] fuse: Bad value for 'fd' [ 56.193849][ T816] fuse: Bad value for 'fd' [ 56.198609][ T816] fuse: Bad value for 'fd' [ 56.203140][ T816] fuse: Bad value for 'fd' [ 56.208266][ T816] fuse: Bad value for 'fd' [ 56.212936][ T816] fuse: Bad value for 'fd' [ 56.217541][ T353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.228064][ T816] fuse: Bad value for 'fd' [ 56.232600][ T816] fuse: Bad value for 'fd' [ 56.237328][ T353] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.250354][ T816] fuse: Bad value for 'fd' [ 56.254874][ T816] fuse: Bad value for 'fd' [ 56.259499][ T816] fuse: Bad value for 'fd' [ 56.264234][ T816] fuse: Bad value for 'fd' [ 56.268964][ T816] fuse: Bad value for 'fd' [ 56.273516][ T816] fuse: Bad value for 'fd' [ 56.278349][ T816] fuse: Bad value for 'fd' [ 56.282899][ T816] fuse: Bad value for 'fd' [ 56.287422][ T353] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.295627][ T816] fuse: Bad value for 'fd' [ 56.296927][ T353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.301522][ T816] fuse: Bad value for 'fd' [ 56.309036][ T353] usb 3-1: Product: syz [ 56.315395][ T816] fuse: Bad value for 'fd' [ 56.317936][ T353] usb 3-1: Manufacturer: syz [ 56.322349][ T816] fuse: Bad value for 'fd' [ 56.326711][ T353] usb 3-1: SerialNumber: syz [ 56.332200][ T816] fuse: Bad value for 'fd' [ 56.340641][ T816] fuse: Bad value for 'fd' [ 56.346272][ T816] fuse: Bad value for 'fd' [ 56.350950][ T816] fuse: Bad value for 'fd' [ 56.355609][ T816] fuse: Bad value for 'fd' [ 56.360139][ T816] fuse: Bad value for 'fd' [ 56.364699][ T816] fuse: Bad value for 'fd' [ 56.369437][ T816] fuse: Bad value for 'fd' [ 56.373969][ T816] fuse: Bad value for 'fd' [ 56.378640][ T816] fuse: Bad value for 'fd' [ 56.383145][ T816] fuse: Bad value for 'fd' [ 56.387821][ T816] fuse: Bad value for 'fd' [ 56.392437][ T816] fuse: Bad value for 'fd' [ 56.397090][ T816] fuse: Bad value for 'fd' [ 56.401600][ T816] fuse: Bad value for 'fd' [ 56.406298][ T816] fuse: Bad value for 'fd' [ 56.410842][ T816] fuse: Bad value for 'fd' [ 56.415523][ T816] fuse: Bad value for 'fd' [ 56.420056][ T816] fuse: Bad value for 'fd' [ 56.424584][ T816] fuse: Bad value for 'fd' [ 56.429265][ T816] fuse: Bad value for 'fd' [ 56.433765][ T816] fuse: Bad value for 'fd' [ 56.438439][ T816] fuse: Bad value for 'fd' [ 56.445388][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 56.556661][ T823] cgroup: fork rejected by pids controller in /syz3 [ 56.575406][ T31] usb 2-1: device descriptor read/64, error -71 [ 56.815273][ T31] usb 2-1: device descriptor read/64, error -71 [ 56.872997][ T964] mmap: syz.3.151 (964) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.913235][ T966] SELinux: ebitmap: truncated map [ 56.930296][ T966] SELinux: failed to load policy [ 56.968294][ T971] FAULT_INJECTION: forcing a failure. [ 56.968294][ T971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.981471][ T971] CPU: 0 UID: 0 PID: 971 Comm: syz.0.154 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 56.981496][ T971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.981507][ T971] Call Trace: [ 56.981513][ T971] [ 56.981525][ T971] __dump_stack+0x21/0x30 [ 56.981560][ T971] dump_stack_lvl+0x140/0x1c0 [ 56.981585][ T971] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.981610][ T971] ? vfs_read+0x82d/0xc70 [ 56.981632][ T971] ? vfs_read+0x932/0xc70 [ 56.981655][ T971] dump_stack+0x19/0x20 [ 56.981679][ T971] should_fail_ex+0x3c2/0x510 [ 56.981694][ T971] should_fail+0xf/0x20 [ 56.981708][ T971] should_fail_usercopy+0x1e/0x30 [ 56.981725][ T971] _copy_from_user+0x20/0xa0 [ 56.981745][ T971] __se_sys_io_uring_setup+0x170/0x2b0 [ 56.981765][ T971] ? __se_sys_futex+0x13c/0x320 [ 56.981782][ T971] ? __x64_sys_io_uring_setup+0x80/0x80 [ 56.981804][ T971] ? __kasan_check_write+0x18/0x20 [ 56.981827][ T971] __x64_sys_io_uring_setup+0x5f/0x80 [ 56.981847][ T971] x64_sys_call+0x22c0/0x2ee0 [ 56.981863][ T971] do_syscall_64+0x57/0xf0 [ 56.981877][ T971] ? clear_bhb_loop+0x50/0xa0 [ 56.981897][ T971] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.981917][ T971] RIP: 0033:0x7f06d899e559 [ 56.981930][ T971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.981944][ T971] RSP: 002b:00007f06d985afb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 56.981961][ T971] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f06d899e559 [ 56.981973][ T971] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 00000000000030da [ 56.981984][ T971] RBP: 00007f06d8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 56.981995][ T971] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 56.982006][ T971] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffe238158c8 [ 56.982021][ T971] [ 57.105528][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 57.221177][ T973] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 57.315315][ T31] usb 2-1: device descriptor read/64, error -71 [ 57.356169][ T353] cdc_ncm 3-1:1.0: bind() failure [ 57.362395][ T353] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 57.372141][ T353] cdc_ncm 3-1:1.1: bind() failure [ 57.478321][ T989] SELinux: ebitmap: truncated map [ 57.491678][ T989] SELinux: failed to load policy [ 57.510037][ T36] kauditd_printk_skb: 1166 callbacks suppressed [ 57.510055][ T36] audit: type=1400 audit(1792393254.270:1423): avc: denied { search } for pid=990 comm="syz.0.162" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.541624][ T36] audit: type=1400 audit(1792393254.270:1424): avc: denied { read write } for pid=990 comm="syz.0.162" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.566139][ T31] usb 2-1: device descriptor read/64, error -71 [ 57.579317][ T353] usb 3-1: USB disconnect, device number 9 [ 57.594464][ T36] audit: type=1400 audit(1792393254.340:1425): avc: denied { block_suspend } for pid=993 comm="syz.0.163" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.685428][ T31] usb usb2-port1: attempt power cycle [ 57.815293][ T508] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 57.955286][ T415] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 57.966435][ T508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.977397][ T508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.987207][ T508] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.000066][ T508] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.009144][ T508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.017911][ T508] usb 1-1: config 0 descriptor?? [ 58.025305][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 58.046347][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.098114][ T36] audit: type=1400 audit(1792393254.860:1426): avc: denied { mounton } for pid=997 comm="syz.2.165" path="/26/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.105573][ T415] usb 4-1: Using ep0 maxpacket: 32 [ 58.127588][ T415] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 58.139302][ T415] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.152861][ T415] usb 4-1: config 0 interface 0 has no altsetting 0 [ 58.159898][ T415] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 58.169391][ T415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.178531][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.185074][ T415] usb 4-1: config 0 descriptor?? [ 58.250156][ T1002] cgroup: fork rejected by pids controller in /syz2 [ 58.428701][ T508] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 22/24 [ 58.439703][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 58.453283][ T508] plantronics 0003:047F:FFFF.0005: parse failed [ 58.463203][ T508] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 58.477495][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.595739][ T996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.605132][ T1059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.615456][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.622062][ T996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.625827][ T1059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.638233][ T508] usb 1-1: USB disconnect, device number 11 [ 58.650783][ T996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.665036][ T996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.745420][ T31] usb usb2-port1: unable to enumerate USB device [ 58.873732][ T996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.882434][ T996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.892586][ T415] usbhid 4-1:0.0: can't add hid device: -71 [ 58.898622][ T415] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 58.907672][ T415] usb 4-1: USB disconnect, device number 9 [ 59.042151][ T36] audit: type=1400 audit(1792393255.800:1427): avc: denied { append } for pid=1072 comm="syz.2.167" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.076274][ T36] audit: type=1400 audit(1792393255.840:1428): avc: denied { getopt } for pid=1074 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.079624][ T1077] 9p: Unknown access argument 00000000004294967295a"b !&XK{: -22 [ 59.152890][ T1083] capability: warning: `syz.1.171' uses deprecated v2 capabilities in a way that may be insecure [ 59.170506][ T36] audit: type=1400 audit(1792393255.930:1429): avc: denied { mounton } for pid=1081 comm="syz.1.171" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 59.183622][ T1082] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.210268][ T1082] SELinux: failed to load policy [ 59.211405][ T36] audit: type=1400 audit(1792393255.970:1430): avc: denied { create } for pid=1084 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.306299][ T36] audit: type=1400 audit(1792393256.070:1431): avc: denied { getopt } for pid=1084 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.455255][ T36] audit: type=1400 audit(1792393256.210:1432): avc: denied { read } for pid=1105 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.495274][ T353] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 59.666514][ T353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.685266][ T353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.694172][ T353] usb 3-1: config 1 has no interface number 0 [ 59.715281][ T353] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.729844][ T353] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.745293][ T508] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 59.755272][ T353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.763305][ T353] usb 3-1: Product: syz [ 59.767791][ T353] usb 3-1: Manufacturer: syz [ 59.772443][ T353] usb 3-1: SerialNumber: syz [ 59.786331][ T353] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 59.793200][ T353] cdc_ncm 3-1:1.1: bind() failure [ 59.906597][ T508] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.917021][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.928563][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.938828][ T508] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.952117][ T508] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 59.961487][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.973139][ T508] usb 4-1: config 0 descriptor?? [ 60.388602][ T508] microsoft 0003:045E:07DA.0006: unexpected long global item [ 60.396228][ T508] microsoft 0003:045E:07DA.0006: parse failed [ 60.402353][ T508] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 60.475295][ T353] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 60.605892][ T10] usb 4-1: USB disconnect, device number 10 [ 60.626413][ T353] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 60.637363][ T353] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 60.650450][ T353] usb 2-1: config 1 interface 0 has no altsetting 0 [ 60.659210][ T353] usb 2-1: string descriptor 0 read error: -22 [ 60.665544][ T353] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 60.674603][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.937776][ T353] usbhid 2-1:1.0: can't add hid device: -71 [ 60.943813][ T353] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 60.952828][ T353] usb 2-1: USB disconnect, device number 22 [ 61.150526][ T1129] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 61.160250][ T1129] SELinux: failed to load policy [ 61.180879][ T1133] netlink: 'syz.3.184': attribute type 25 has an invalid length. [ 61.515341][ T353] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 61.658221][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 61.685270][ T353] usb 1-1: Invalid ep0 maxpacket: 16 [ 61.815286][ T353] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 61.945279][ T508] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 61.965269][ T353] usb 1-1: Invalid ep0 maxpacket: 16 [ 61.970796][ T353] usb usb1-port1: attempt power cycle [ 62.091457][ T1163] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 62.095458][ T508] usb 2-1: Using ep0 maxpacket: 32 [ 62.101372][ T1163] SELinux: failed to load policy [ 62.108784][ T508] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 221, using maximum allowed: 30 [ 62.122208][ T508] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 62.133578][ T508] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 221 [ 62.146986][ T508] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.153784][ T508] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.00 [ 62.163183][ T508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.172421][ T508] usb 2-1: config 0 descriptor?? [ 62.307860][ T1174] FAULT_INJECTION: forcing a failure. [ 62.307860][ T1174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.321118][ T353] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 62.325396][ T1174] CPU: 1 UID: 0 PID: 1174 Comm: syz.3.198 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 62.325526][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.325583][ T1174] Call Trace: [ 62.325604][ T1174] [ 62.325627][ T1174] __dump_stack+0x21/0x30 [ 62.325742][ T1174] dump_stack_lvl+0x140/0x1c0 [ 62.325837][ T1174] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.325939][ T1174] dump_stack+0x19/0x20 [ 62.326032][ T1174] should_fail_ex+0x3c2/0x510 [ 62.326096][ T1174] should_fail+0xf/0x20 [ 62.326155][ T1174] should_fail_usercopy+0x1e/0x30 [ 62.326218][ T1174] _copy_from_user+0x20/0xa0 [ 62.326298][ T1174] proc_do_submiturb+0xabb/0x3ac0 [ 62.326394][ T1174] ? ioctl_has_perm+0x39a/0x500 [ 62.326488][ T1174] proc_submiturb+0x135/0x1c0 [ 62.326568][ T1174] ? proc_setconfig+0x5b0/0x5b0 [ 62.326651][ T1174] ? mutex_lock+0x97/0x1d0 [ 62.326785][ T1174] ? __cfi_mutex_lock+0x10/0x10 [ 62.326902][ T1174] ? __cfi_do_futex+0x10/0x10 [ 62.326986][ T1174] usbdev_ioctl+0x110b/0x2120 [ 62.327080][ T1174] ? __cfi_usbdev_ioctl+0x10/0x10 [ 62.327180][ T1174] ? __fget_files+0x2bc/0x330 [ 62.327235][ T1174] ? bpf_lsm_file_ioctl+0xd/0x20 [ 62.327300][ T1174] ? security_file_ioctl+0x3e/0x110 [ 62.327386][ T1174] ? __cfi_usbdev_ioctl+0x10/0x10 [ 62.327468][ T1174] __se_sys_ioctl+0x126/0x1b0 [ 62.327519][ T1174] __x64_sys_ioctl+0x7f/0xa0 [ 62.327583][ T1174] x64_sys_call+0x1878/0x2ee0 [ 62.327645][ T1174] do_syscall_64+0x57/0xf0 [ 62.327700][ T1174] ? clear_bhb_loop+0x50/0xa0 [ 62.327775][ T1174] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.327859][ T1174] RIP: 0033:0x7f83c299e559 [ 62.327915][ T1174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.327975][ T1174] RSP: 002b:00007f83c13f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.328042][ T1174] RAX: ffffffffffffffda RBX: 00007f83c2c25fa0 RCX: 00007f83c299e559 [ 62.328094][ T1174] RDX: 0000200000000180 RSI: 000000008038550a RDI: 0000000000000004 [ 62.328136][ T1174] RBP: 00007f83c2a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 62.328178][ T1174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.328227][ T1174] R13: 00007f83c2c26038 R14: 00007f83c2c25fa0 R15: 00007ffe18f3adb8 [ 62.328279][ T1174] [ 62.582250][ T353] usb 1-1: Invalid ep0 maxpacket: 16 [ 62.635904][ T31] usb 3-1: USB disconnect, device number 10 [ 62.645595][ T508] apple 0003:05AC:0238.0007: unknown main item tag 0x0 [ 62.653203][ T508] apple 0003:05AC:0238.0007: global environment stack underflow [ 62.661360][ T508] apple 0003:05AC:0238.0007: item 0 4 1 11 parsing failed [ 62.674596][ T1180] overlayfs: overlapping lowerdir path [ 62.678637][ T508] apple 0003:05AC:0238.0007: parse failed [ 62.686044][ T508] apple 0003:05AC:0238.0007: probe with driver apple failed with error -22 [ 62.686794][ T1180] overlayfs: overlapping lowerdir path [ 62.706021][ T1180] overlayfs: overlapping lowerdir path [ 62.712367][ T1180] overlayfs: overlapping lowerdir path [ 62.718017][ T353] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 62.727618][ T1180] overlayfs: overlapping lowerdir path [ 62.734348][ T1180] overlayfs: overlapping lowerdir path [ 62.740332][ T1180] overlayfs: overlapping lowerdir path [ 62.746271][ T353] usb 1-1: Invalid ep0 maxpacket: 16 [ 62.751863][ T1180] overlayfs: overlapping lowerdir path [ 62.757418][ T353] usb usb1-port1: unable to enumerate USB device [ 62.764694][ T1180] overlayfs: overlapping lowerdir path [ 62.770609][ T1180] overlayfs: overlapping lowerdir path [ 62.776487][ T1180] overlayfs: overlapping lowerdir path [ 62.782295][ T1180] overlayfs: overlapping lowerdir path [ 62.788154][ T1180] overlayfs: overlapping lowerdir path [ 62.793946][ T1180] overlayfs: overlapping lowerdir path [ 62.799889][ T1180] overlayfs: overlapping lowerdir path [ 62.805673][ T1180] overlayfs: overlapping lowerdir path [ 62.811402][ T1180] overlayfs: overlapping lowerdir path [ 62.817386][ T1180] overlayfs: overlapping lowerdir path [ 62.823199][ T1180] overlayfs: overlapping lowerdir path [ 62.829124][ T1180] overlayfs: overlapping lowerdir path [ 62.834853][ T1180] overlayfs: overlapping lowerdir path [ 62.840754][ T1180] overlayfs: overlapping lowerdir path [ 62.846628][ T1180] overlayfs: overlapping lowerdir path [ 62.850495][ T415] usb 2-1: USB disconnect, device number 23 [ 62.858815][ T1180] overlayfs: overlapping lowerdir path [ 62.865260][ T1180] overlayfs: overlapping lowerdir path [ 62.871378][ T1180] overlayfs: overlapping lowerdir path [ 62.877325][ T1180] overlayfs: overlapping lowerdir path [ 62.883168][ T1180] overlayfs: overlapping lowerdir path [ 62.889194][ T1180] overlayfs: overlapping lowerdir path [ 62.895440][ T1180] overlayfs: overlapping lowerdir path [ 62.901369][ T1180] overlayfs: overlapping lowerdir path [ 62.907294][ T1180] overlayfs: overlapping lowerdir path [ 62.913105][ T1180] overlayfs: overlapping lowerdir path [ 62.965446][ T508] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 63.025288][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 63.116322][ T508] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.129281][ T508] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.135987][ T508] usb 4-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 63.145074][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.153797][ T508] usb 4-1: config 0 descriptor?? [ 63.159917][ T508] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 63.175321][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 63.181780][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.191991][ T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.202936][ T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.212734][ T31] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 63.225559][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.232173][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 63.241276][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.249862][ T31] usb 3-1: config 0 descriptor?? [ 63.362910][ T1182] sd 0:0:1:0: PR command failed: 1026 [ 63.368799][ T1182] sd 0:0:1:0: Sense Key : 0x5 [current] [ 63.374539][ T1182] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 63.379586][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 63.379605][ T36] audit: type=1400 audit(1792393260.140:1448): avc: denied { set_context_mgr } for pid=1183 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.461827][ T1184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.551349][ T1190] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.561118][ T1190] SELinux: failed to load policy [ 63.660257][ T31] logitech-djreceiver 0003:046D:C53A.0008: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 63.757822][ T1199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.767086][ T1199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.614001][ T1204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1204 comm=syz.1.208 [ 64.665254][ T353] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 64.730279][ T1212] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 64.740084][ T1212] SELinux: failed to load policy [ 64.761497][ T36] audit: type=1400 audit(1792393261.520:1449): avc: denied { remount } for pid=1213 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.764090][ T1214] rust_binder: 1213:1214 BC_REQUEST_FREEZE_NOTIFICATION already set [ 64.791333][ T1214] rust_binder: Write failure EINVAL in pid:254 [ 64.798917][ T36] audit: type=1400 audit(1792393261.560:1450): avc: denied { bind } for pid=1213 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.799100][ T9] rust_binder: 1213: undelivered freeze notification, 0000000000000003 [ 64.846387][ T353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.856592][ T353] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.870932][ T353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.880049][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.888097][ T353] usb 1-1: Product: syz [ 64.892280][ T353] usb 1-1: Manufacturer: syz [ 64.897621][ T353] usb 1-1: SerialNumber: syz [ 64.898067][ T36] audit: type=1400 audit(1792393261.660:1451): avc: denied { shutdown } for pid=1215 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.365270][ T36] audit: type=1400 audit(1792393262.120:1452): avc: denied { setopt } for pid=1223 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.393821][ T36] audit: type=1400 audit(1792393262.150:1453): avc: denied { mounton } for pid=1226 comm="syz.2.217" path="/35/file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 65.393871][ T1227] fuse: Unknown parameter 'gr/up' [ 65.421960][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 65.528766][ T1202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 65.538076][ T1202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 65.565650][ T415] usb 3-1: USB disconnect, device number 11 [ 65.577731][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.586371][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 65.598697][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 65.608824][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 65.618734][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 65.628240][ T9] usb 2-1: string descriptor 0 read error: -22 [ 65.634502][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.643705][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.652985][ T1216] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 65.660330][ T1216] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 65.667722][ T1216] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 65.675714][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 65.720141][ T9] usb 4-1: USB disconnect, device number 11 [ 65.876649][ T36] audit: type=1400 audit(1792393262.640:1454): avc: denied { accept } for pid=1215 comm="syz.1.214" path="socket:[9659]" dev="sockfs" ino=9659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.921546][ T1240] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 65.931442][ T1240] SELinux: failed to load policy [ 65.952165][ T353] cdc_ncm 1-1:1.0: bind() failure [ 65.967169][ T353] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 65.977007][ T353] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 65.987082][ T1242] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 65.997169][ T353] usb 1-1: USB disconnect, device number 16 [ 66.016669][ T36] audit: type=1400 audit(1792393262.770:1455): avc: denied { cmd } for pid=1241 comm="iou-wrk-1242" path="socket:[9768]" dev="sockfs" ino=9768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.047578][ T415] usb 2-1: USB disconnect, device number 24 [ 66.240670][ T1246] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000 [ 66.249711][ T1246] flags: 0x4000000000000000(zone=1) [ 66.255393][ T1246] page_type: f2(table) [ 66.259539][ T1246] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 66.268287][ T1246] raw: 0000000000000000 0000000000000000 00000001f2000000 0000000000000000 [ 66.276921][ T1246] page dumped because: unmovable page [ 66.282326][ T1246] page_owner tracks the page as allocated [ 66.288249][ T1246] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 943976011, free_ts 0 [ 66.301102][ T1246] register_early_stack+0x99/0x100 [ 66.306354][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 66.314046][ T36] audit: type=1400 audit(1792393263.070:1456): avc: denied { write } for pid=1245 comm="syz.2.223" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 66.315360][ T1246] init_page_owner+0x40/0x840 [ 66.340403][ T36] audit: type=1400 audit(1792393263.070:1457): avc: denied { add_name } for pid=1245 comm="syz.2.223" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 66.345149][ T1246] page_ext_init+0x3f8/0x44b [ 66.373554][ T1246] mm_core_init+0x4b/0x7b [ 66.377946][ T1246] page_owner free stack trace missing [ 66.505566][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 66.511811][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 66.520050][ T9] usb 4-1: config 0 has no interface number 0 [ 66.527357][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 66.546356][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 66.555489][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.563519][ T9] usb 4-1: Product: syz [ 66.567982][ T9] usb 4-1: Manufacturer: syz [ 66.572663][ T9] usb 4-1: SerialNumber: syz [ 66.578471][ T9] usb 4-1: config 0 descriptor?? [ 66.583752][ T1244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.706375][ T1269] futex_wake_op: syz.2.227 tries to shift op by 144; fix this program [ 66.729660][ T1271] input: syz0 as /devices/virtual/input/input10 [ 66.740899][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 66.744737][ T1269] Dead loop on virtual device ip6_vti0, fix it urgently! [ 66.795304][ T1242] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.885272][ T10] usb 1-1: device descriptor read/64, error -71 [ 67.135302][ T10] usb 1-1: device descriptor read/64, error -71 [ 67.375518][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 67.505310][ T10] usb 1-1: device descriptor read/64, error -71 [ 67.584481][ T1281] ------------[ cut here ]------------ [ 67.590082][ T1281] WARNING: CPU: 0 PID: 1281 at mm/vmalloc.c:3805 __vmalloc_node_range_noprof+0x12d4/0x1300 [ 67.600257][ T1281] Modules linked in: [ 67.604175][ T1281] CPU: 0 UID: 0 PID: 1281 Comm: syz.2.232 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 67.615717][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.625823][ T1281] RIP: 0010:__vmalloc_node_range_noprof+0x12d4/0x1300 [ 67.632649][ T1281] Code: 00 74 08 48 89 df e8 9b 91 09 00 80 23 df 43 80 3c 2f 00 74 08 4c 89 f7 e8 89 91 09 00 49 8b 1e e9 2c ff ff ff e8 fc 1b b0 ff <0f> 0b e9 1e ff ff ff e8 20 1d cf 03 e8 eb 1b b0 ff 0f 0b e8 e4 1b [ 67.652386][ T1281] RSP: 0018:ffffc90010b6f860 EFLAGS: 00010293 [ 67.658532][ T1281] RAX: ffffffff81d930c4 RBX: 0000000000000dc0 RCX: ffff8881166e13c0 [ 67.666592][ T1281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.674614][ T1281] RBP: ffffc90010b6fa58 R08: 0000000000000dc0 R09: 8000000000000063 [ 67.682803][ T1281] R10: dffffc0000000000 R11: ffffed1021bda499 R12: 0000000000000000 [ 67.690846][ T1281] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff835561bb [ 67.698914][ T1281] FS: 00007fb43ba156c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 67.707925][ T1281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.714611][ T1281] CR2: 00007fb43b9d2ff8 CR3: 0000000116b2c000 CR4: 00000000003526b0 [ 67.722685][ T1281] Call Trace: [ 67.726037][ T1281] [ 67.729029][ T1281] ? stack_depot_save_flags+0x38/0x800 [ 67.734558][ T1281] ? plist_add+0x4d4/0x570 [ 67.739104][ T1281] ? _parse_integer_limit+0x195/0x1e0 [ 67.744550][ T1281] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 67.750988][ T1281] ? simple_strntoull+0x112/0x190 [ 67.756094][ T1281] ? simple_strtoull+0x50/0x50 [ 67.760938][ T1281] ? disksize_store+0x10b/0x910 [ 67.765880][ T1281] vzalloc_noprof+0x103/0x1d0 [ 67.770618][ T1281] ? disksize_store+0x10b/0x910 [ 67.775585][ T1281] ? __kasan_check_write+0x18/0x20 [ 67.780770][ T1281] ? down_write+0xee/0x2b0 [ 67.785284][ T1281] ? __cfi_vzalloc_noprof+0x10/0x10 [ 67.790544][ T1281] ? __kasan_check_write+0x18/0x20 [ 67.795776][ T1281] ? _copy_from_iter+0x215/0x1520 [ 67.800911][ T1281] ? irqentry_exit+0x4a/0x60 [ 67.805605][ T1281] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 67.811480][ T1281] disksize_store+0x10b/0x910 [ 67.816259][ T1281] ? __cfi_disksize_store+0x10/0x10 [ 67.821519][ T1281] dev_attr_store+0x73/0xa0 [ 67.826113][ T1281] ? __cfi_dev_attr_store+0x10/0x10 [ 67.831424][ T1281] sysfs_kf_write+0x141/0x160 [ 67.836216][ T1281] ? __cfi_sysfs_kf_write+0x10/0x10 [ 67.841484][ T1281] kernfs_fop_write_iter+0x319/0x510 [ 67.846868][ T1281] vfs_write+0x762/0xfd0 [ 67.851195][ T1281] ? __cfi_vfs_write+0x10/0x10 [ 67.856062][ T1281] ? __cfi_mutex_lock+0x10/0x10 [ 67.860972][ T1281] ksys_write+0x145/0x260 [ 67.865402][ T1281] ? __cfi_ksys_write+0x10/0x10 [ 67.870327][ T1281] ? __kasan_check_write+0x18/0x20 [ 67.875336][ T415] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 67.875624][ T1281] ? fpregs_restore_userregs+0x11c/0x260 [ 67.888751][ T1281] __x64_sys_write+0x7f/0x90 [ 67.893410][ T1281] x64_sys_call+0x271c/0x2ee0 [ 67.898206][ T1281] do_syscall_64+0x57/0xf0 [ 67.902681][ T1281] ? clear_bhb_loop+0x50/0xa0 [ 67.907436][ T1281] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.913392][ T1281] RIP: 0033:0x7fb43ab9e559 [ 67.918023][ T1281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.937729][ T1281] RSP: 002b:00007fb43ba15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.946262][ T1281] RAX: ffffffffffffffda RBX: 00007fb43ae25fa0 RCX: 00007fb43ab9e559 [ 67.954279][ T1281] RDX: 00000000000000f5 RSI: 0000200000000440 RDI: 0000000000000004 [ 67.962334][ T1281] RBP: 00007fb43ac35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 67.970378][ T1281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.978425][ T1281] R13: 00007fb43ae26038 R14: 00007fb43ae25fa0 R15: 00007fff045cabb8 [ 67.986468][ T1281] [ 67.989523][ T1281] ---[ end trace 0000000000000000 ]--- [ 67.996516][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 68.006788][ T9] asix 4-1:0.188: probe with driver asix failed with error -71 [ 68.016005][ T9] usb 4-1: USB disconnect, device number 12 [ 68.035264][ T415] usb 3-1: Using ep0 maxpacket: 32 [ 68.041574][ T415] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.051979][ T415] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 4 [ 68.061017][ T415] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.072360][ T415] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 68.081627][ T415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.089717][ T415] usb 3-1: Product: syz [ 68.093926][ T415] usb 3-1: Manufacturer: syz [ 68.098701][ T415] usb 3-1: SerialNumber: syz [ 68.145353][ T10] usb 1-1: device descriptor read/64, error -71 [ 68.255407][ T10] usb usb1-port1: attempt power cycle [ 68.595274][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 68.616420][ T10] usb 1-1: device descriptor read/8, error -71 [ 68.707143][ T415] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 68.714312][ T415] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 68.746386][ T10] usb 1-1: device descriptor read/8, error -71 [ 68.914635][ T9] usb 3-1: USB disconnect, device number 12 [ 68.985308][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 69.006442][ T10] usb 1-1: device descriptor read/8, error -71 [ 69.136543][ T10] usb 1-1: device descriptor read/8, error -71 [ 69.245398][ T10] usb usb1-port1: unable to enumerate USB device