last executing test programs: 4.054367371s ago: executing program 3 (id=1372): r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001300)='./sys\x00', &(0x7f0000001340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x5) write(r1, &(0x7f00000013c0), 0x0) 4.054014291s ago: executing program 3 (id=1373): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x1bf, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 3.536843443s ago: executing program 3 (id=1378): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x7c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7300004e46b97f75ab66d266370fc243f5b1bf6553eff4ebf8230834adc3635afed3f3a4f94e998c78b8da598c87482d3c66782c2e483e8c589bbf3af8ce1bf64e92aa3339e5b3ad3a1baed9dedbdcaeb8dd7b5c7c2f4214b012daedd74dd398ca4108a5ecbe9de56e87a6646722a94f7380212c4b4e61000000004e3804f0177f700899a4c26a2528617e3a0a06aaa3e44fd7635e17713ad4a04cd69a7c76d04d2204d4a074f97631cc97a86ec6291b31ee6810810d52294e23987e21c160174265d8900e342797202bd9429fd892caadf506049fe2def784038a89346532506bea758f081c283d"]) syz_usb_control_io$printer(r0, 0x0, 0x0) 950.036327ms ago: executing program 1 (id=1453): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 924.155337ms ago: executing program 1 (id=1454): socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x1e, 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./sys\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f) 869.856809ms ago: executing program 1 (id=1455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 869.651659ms ago: executing program 1 (id=1456): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000980)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/console\x00', 0x1, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 869.421789ms ago: executing program 1 (id=1457): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = open(0x0, 0x60840, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1) syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 449.696419ms ago: executing program 3 (id=1477): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, 0x0, 0x900) 427.80441ms ago: executing program 3 (id=1481): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "6351f36b675d953ebe73ce168e84d5135a5ba63762fcb5da76813382a701d83ed8eddbadab1845a09539233c294dda5568f4f3675066bfaa2140cfb4c024fe77", 0x2c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x34, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x36, 0x7dc121b97e4cf16f, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x38, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x35, 0x30, 0x30, 0x0, 0x30, 0x63, 0x66, 0x50, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x446f9958c1a2aa84, 0x30, 0x30, 0x30, 0x2f, 0x36, 0x64, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 345.786582ms ago: executing program 3 (id=1483): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 315.981532ms ago: executing program 0 (id=1484): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc2}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), 0x0, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x0, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000d80)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000001340)={'fscrypt:', @auto=[0x30, 0x31, 0x61, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x56, 0x30, 0x36, 0x38, 0x30, 0x66]}, &(0x7f0000001380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001400), &(0x7f0000001440)={'fscrypt:', @auto=[0x30, 0x66, 0x30, 0x38, 0x64, 0x35, 0x66, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x6, 0x34]}, &(0x7f0000001480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 254.483904ms ago: executing program 0 (id=1486): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 195.214295ms ago: executing program 0 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 194.977055ms ago: executing program 0 (id=1490): r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f0000000000)=""/149, 0xaa) 141.969937ms ago: executing program 0 (id=1493): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 104.901217ms ago: executing program 2 (id=1494): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc2}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), 0x0, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x0, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000d80)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000001340)={'fscrypt:', @auto=[0x30, 0x31, 0x61, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x56, 0x30, 0x36, 0x38, 0x30, 0x66]}, &(0x7f0000001380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001400), &(0x7f0000001440)={'fscrypt:', @auto=[0x30, 0x66, 0x30, 0x38, 0x64, 0x35, 0x66, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x6, 0x34]}, &(0x7f0000001480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 104.218318ms ago: executing program 2 (id=1495): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x414, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) 45.927009ms ago: executing program 2 (id=1496): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x1, 0x0, &(0x7f0000000240)={0x2f, 0x86dd, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 45.687649ms ago: executing program 2 (id=1497): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 42.573779ms ago: executing program 2 (id=1498): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x2, r2}, 0x10) 34.881309ms ago: executing program 1 (id=1499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010140, 0x0, 0x1}]}) 260.371µs ago: executing program 0 (id=1500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000002c0)) 0s ago: executing program 2 (id=1501): r0 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 21.674146][ T36] audit: type=1400 audit(1792027304.030:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.675193][ T286] cgroup: Unknown subsys name 'net' [ 21.696870][ T36] audit: type=1400 audit(1792027304.030:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.724151][ T36] audit: type=1400 audit(1792027304.060:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.724326][ T286] cgroup: Unknown subsys name 'devices' [ 21.850102][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.855693][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.948035][ T36] audit: type=1400 audit(1792027304.300:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.971173][ T36] audit: type=1400 audit(1792027304.300:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.981451][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.996013][ T36] audit: type=1400 audit(1792027304.310:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.027503][ T36] audit: type=1400 audit(1792027304.370:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.053012][ T36] audit: type=1400 audit(1792027304.370:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.065349][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.078580][ T36] audit: type=1400 audit(1792027304.420:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.078606][ T36] audit: type=1400 audit(1792027304.420:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.416984][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.424081][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.431164][ T296] bridge_slave_0: entered allmulticast mode [ 23.437368][ T296] bridge_slave_0: entered promiscuous mode [ 23.444932][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.451985][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.459079][ T296] bridge_slave_1: entered allmulticast mode [ 23.465227][ T296] bridge_slave_1: entered promiscuous mode [ 23.483967][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.491041][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.498103][ T294] bridge_slave_0: entered allmulticast mode [ 23.504424][ T294] bridge_slave_0: entered promiscuous mode [ 23.518586][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.525611][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.532746][ T294] bridge_slave_1: entered allmulticast mode [ 23.538952][ T294] bridge_slave_1: entered promiscuous mode [ 23.584301][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.591502][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.598572][ T293] bridge_slave_0: entered allmulticast mode [ 23.604688][ T293] bridge_slave_0: entered promiscuous mode [ 23.610857][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.617882][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.625159][ T295] bridge_slave_0: entered allmulticast mode [ 23.631327][ T295] bridge_slave_0: entered promiscuous mode [ 23.637567][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.644620][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.651703][ T293] bridge_slave_1: entered allmulticast mode [ 23.657786][ T293] bridge_slave_1: entered promiscuous mode [ 23.671705][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.678748][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.685777][ T295] bridge_slave_1: entered allmulticast mode [ 23.692068][ T295] bridge_slave_1: entered promiscuous mode [ 23.793545][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.800641][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.807946][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.815000][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.833260][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.840304][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.847543][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.854573][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.875912][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.882974][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.890230][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.897237][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.930480][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.937709][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.945034][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.952211][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.959873][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.967477][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.978798][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.985829][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.001329][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.008365][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.015748][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.022775][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.030759][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.037786][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.048764][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.055791][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.067931][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.074963][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.125574][ T296] veth0_vlan: entered promiscuous mode [ 24.137616][ T295] veth0_vlan: entered promiscuous mode [ 24.150988][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.158006][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.165503][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.172543][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.181322][ T294] veth0_vlan: entered promiscuous mode [ 24.190832][ T296] veth1_macvtap: entered promiscuous mode [ 24.203806][ T295] veth1_macvtap: entered promiscuous mode [ 24.214706][ T294] veth1_macvtap: entered promiscuous mode [ 24.270090][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.272486][ T293] veth0_vlan: entered promiscuous mode [ 24.297655][ T293] veth1_macvtap: entered promiscuous mode [ 24.431291][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.568540][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.621445][ T343] FAULT_INJECTION: forcing a failure. [ 24.621445][ T343] name failslab, interval 1, probability 0, space 0, times 1 [ 24.634176][ T343] CPU: 0 UID: 0 PID: 343 Comm: syz.3.10 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 24.634204][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.634228][ T343] Call Trace: [ 24.634234][ T343] [ 24.634240][ T343] __dump_stack+0x21/0x30 [ 24.634273][ T343] dump_stack_lvl+0x140/0x1c0 [ 24.634297][ T343] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.634330][ T343] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 24.634351][ T343] ? security_kernfs_init_security+0x39/0xf0 [ 24.634377][ T343] dump_stack+0x19/0x20 [ 24.634403][ T343] should_fail_ex+0x3c2/0x510 [ 24.634423][ T343] should_failslab+0xac/0x100 [ 24.634442][ T343] kmem_cache_alloc_noprof+0x42/0x410 [ 24.634468][ T343] ? __kernfs_new_node+0xf1/0x740 [ 24.634487][ T343] ? up_write+0x66/0x280 [ 24.634510][ T343] __kernfs_new_node+0xf1/0x740 [ 24.634528][ T343] ? kernfs_add_one+0x301/0x400 [ 24.634547][ T343] ? kernfs_new_node+0x280/0x280 [ 24.634566][ T343] ? __kernfs_create_file+0x203/0x280 [ 24.634596][ T343] ? __kasan_check_write+0x18/0x20 [ 24.634620][ T343] ? kernfs_put+0x314/0x360 [ 24.634638][ T343] ? sysfs_add_file_mode_ns+0x1f3/0x280 [ 24.634663][ T343] kernfs_new_node+0x154/0x280 [ 24.634682][ T343] kernfs_create_dir_ns+0x4b/0x130 [ 24.634703][ T343] internal_create_group+0x43b/0xe70 [ 24.634730][ T343] ? sysfs_create_groups+0xa5/0x130 [ 24.634757][ T343] ? sysfs_create_group+0x40/0x40 [ 24.634782][ T343] ? device_add_attrs+0x72d/0x850 [ 24.634806][ T343] ? device_add_class_symlinks+0x260/0x260 [ 24.634833][ T343] sysfs_create_group+0x23/0x40 [ 24.634860][ T343] dpm_sysfs_add+0x6e/0x280 [ 24.634881][ T343] device_add+0x521/0xbf0 [ 24.634903][ T343] device_create_groups_vargs+0x1b0/0x2c0 [ 24.634928][ T343] device_create+0xfe/0x170 [ 24.634953][ T343] ? __cfi_device_create+0x10/0x10 [ 24.634979][ T343] bdi_register_va+0x94/0x640 [ 24.635000][ T343] ? bdi_alloc+0x111/0x1d0 [ 24.635021][ T343] super_setup_bdi_name+0xf6/0x210 [ 24.635047][ T343] ? _raw_spin_lock+0x92/0x120 [ 24.635074][ T343] ? __cfi_super_setup_bdi_name+0x10/0x10 [ 24.635100][ T343] ? _raw_spin_unlock+0x45/0x60 [ 24.635116][ T343] ? fuse_dev_install+0x17a/0x1b0 [ 24.635141][ T343] fuse_fill_super_common+0x6d1/0x1450 [ 24.635163][ T343] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 24.635184][ T343] ? _raw_spin_lock+0x92/0x120 [ 24.635210][ T343] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.635243][ T343] ? __kasan_check_write+0x18/0x20 [ 24.635267][ T343] ? shrinker_register+0x162/0x220 [ 24.635294][ T343] fuse_fill_super+0x71/0x250 [ 24.635317][ T343] get_tree_nodev+0xcb/0x170 [ 24.635338][ T343] ? __cfi_fuse_fill_super+0x10/0x10 [ 24.635361][ T343] fuse_get_tree+0x2cb/0x640 [ 24.635384][ T343] vfs_get_tree+0x9e/0x290 [ 24.635408][ T343] do_new_mount+0x251/0xb40 [ 24.635432][ T343] ? security_capable+0x44/0x130 [ 24.635460][ T343] path_mount+0x66a/0xff0 [ 24.635483][ T343] ? putname+0x113/0x150 [ 24.635509][ T343] __se_sys_mount+0x2bf/0x480 [ 24.635535][ T343] ? __x64_sys_mount+0xf0/0xf0 [ 24.635560][ T343] ? __kasan_check_write+0x18/0x20 [ 24.635583][ T343] ? fpregs_restore_userregs+0x11c/0x260 [ 24.635609][ T343] __x64_sys_mount+0xc3/0xf0 [ 24.635634][ T343] x64_sys_call+0x2021/0x2ee0 [ 24.635654][ T343] do_syscall_64+0x57/0xf0 [ 24.635671][ T343] ? clear_bhb_loop+0x50/0xa0 [ 24.635694][ T343] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.635715][ T343] RIP: 0033:0x7f4c42b9e559 [ 24.635739][ T343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.635756][ T343] RSP: 002b:00007f4c43aa3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.635785][ T343] RAX: ffffffffffffffda RBX: 00007f4c42e25fa0 RCX: 00007f4c42b9e559 [ 24.635800][ T343] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 24.635814][ T343] RBP: 00007f4c42c358b0 R08: 0000200000000280 R09: 0000000000000000 [ 24.635828][ T343] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 24.635840][ T343] R13: 00007f4c42e26038 R14: 00007f4c42e25fa0 R15: 00007fff7b692a08 [ 24.635856][ T343] [ 25.129507][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.140475][ T65] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.149532][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.159378][ T65] usb 2-1: config 0 descriptor?? [ 25.367208][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 25.373224][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.381878][ T65] usb 2-1: USB disconnect, device number 2 [ 25.608567][ T375] FAULT_INJECTION: forcing a failure. [ 25.608567][ T375] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.621784][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz.3.24 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 25.621813][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.621820][ T375] Call Trace: [ 25.621823][ T375] [ 25.621828][ T375] __dump_stack+0x21/0x30 [ 25.621850][ T375] dump_stack_lvl+0x140/0x1c0 [ 25.621865][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.621880][ T375] ? futex_wake+0x666/0x950 [ 25.621894][ T375] dump_stack+0x19/0x20 [ 25.621907][ T375] should_fail_ex+0x3c2/0x510 [ 25.621918][ T375] should_fail+0xf/0x20 [ 25.621926][ T375] should_fail_usercopy+0x1e/0x30 [ 25.621936][ T375] _copy_from_user+0x20/0xa0 [ 25.621948][ T375] rawv6_setsockopt+0x221/0x5d0 [ 25.621960][ T375] ? __cfi_rawv6_setsockopt+0x10/0x10 [ 25.621972][ T375] ? do_futex+0x32a/0x510 [ 25.621982][ T375] ? errseq_sample+0x48/0x70 [ 25.621994][ T375] sock_common_setsockopt+0xb8/0xd0 [ 25.622008][ T375] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 25.622023][ T375] do_sock_setsockopt+0x27c/0x410 [ 25.622039][ T375] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 25.622060][ T375] ? __fget_files+0x2bc/0x330 [ 25.622080][ T375] __x64_sys_setsockopt+0x18c/0x220 [ 25.622097][ T375] x64_sys_call+0x2adc/0x2ee0 [ 25.622107][ T375] do_syscall_64+0x57/0xf0 [ 25.622116][ T375] ? clear_bhb_loop+0x50/0xa0 [ 25.622128][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.622159][ T375] RIP: 0033:0x7f4c42b9e559 [ 25.622168][ T375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.622177][ T375] RSP: 002b:00007f4c43aa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 25.622190][ T375] RAX: ffffffffffffffda RBX: 00007f4c42e25fa0 RCX: 00007f4c42b9e559 [ 25.622198][ T375] RDX: 0000000000000007 RSI: 0000000000000029 RDI: 0000000000000004 [ 25.622205][ T375] RBP: 00007f4c42c358b0 R08: 0000000000000004 R09: 0000000000000000 [ 25.622211][ T375] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 25.622218][ T375] R13: 00007f4c42e26038 R14: 00007f4c42e25fa0 R15: 00007fff7b692a08 [ 25.622227][ T375] [ 25.810583][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.999341][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.010375][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 26.019462][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.027935][ T45] usb 2-1: config 0 descriptor?? [ 26.510344][ T387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.582920][ T393] netlink: 108 bytes leftover after parsing attributes in process `syz.0.30'. [ 26.784578][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 26.784593][ T36] audit: type=1400 audit(1792027309.140:153): avc: denied { bind } for pid=405 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.839107][ T45] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 26.846227][ T36] audit: type=1400 audit(1792027309.200:154): avc: denied { execute } for pid=407 comm="syz.3.37" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.873490][ T45] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 27.074238][ T36] audit: type=1400 audit(1792027309.430:155): avc: denied { mount } for pid=423 comm="syz.3.45" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.097241][ T36] audit: type=1400 audit(1792027309.430:156): avc: denied { mount } for pid=423 comm="syz.3.45" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.143638][ T36] audit: type=1400 audit(1792027309.500:157): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.179789][ T45] usb 2-1: USB disconnect, device number 3 [ 27.185644][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 27.453846][ T36] audit: type=1400 audit(1792027309.810:158): avc: denied { mount } for pid=437 comm="syz.2.50" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.476273][ T36] audit: type=1400 audit(1792027309.830:159): avc: denied { search } for pid=437 comm="syz.2.50" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.504846][ T36] audit: type=1400 audit(1792027309.830:160): avc: denied { read } for pid=437 comm="syz.2.50" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.526510][ T36] audit: type=1400 audit(1792027309.830:161): avc: denied { open } for pid=437 comm="syz.2.50" path="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.642183][ T448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 27.647722][ T36] audit: type=1400 audit(1792027310.000:162): avc: denied { read } for pid=446 comm="syz.2.54" dev="nsfs" ino=4026532460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.713149][ T448] team_slave_1: entered promiscuous mode [ 27.718833][ T448] team_slave_1: entered allmulticast mode [ 27.841964][ T487] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 27.853370][ T489] futex_wake_op: syz.1.61 tries to shift op by 144; fix this program [ 28.038895][ T493] FAULT_INJECTION: forcing a failure. [ 28.038895][ T493] name failslab, interval 1, probability 0, space 0, times 0 [ 28.088284][ T493] CPU: 0 UID: 0 PID: 493 Comm: syz.0.62 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 28.088320][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.088333][ T493] Call Trace: [ 28.088339][ T493] [ 28.088347][ T493] __dump_stack+0x21/0x30 [ 28.088382][ T493] dump_stack_lvl+0x140/0x1c0 [ 28.088410][ T493] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.088440][ T493] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 28.088467][ T493] dump_stack+0x19/0x20 [ 28.088493][ T493] should_fail_ex+0x3c2/0x510 [ 28.088511][ T493] should_failslab+0xac/0x100 [ 28.088530][ T493] kmem_cache_alloc_noprof+0x42/0x410 [ 28.088555][ T493] ? __kernfs_new_node+0xf1/0x740 [ 28.088575][ T493] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 28.088596][ T493] __kernfs_new_node+0xf1/0x740 [ 28.088614][ T493] ? __kasan_check_write+0x18/0x20 [ 28.088638][ T493] ? kernfs_new_node+0x280/0x280 [ 28.088657][ T493] ? down_write+0xee/0x2b0 [ 28.088680][ T493] ? __cfi_down_write+0x10/0x10 [ 28.088703][ T493] ? __kasan_check_write+0x18/0x20 [ 28.088727][ T493] ? up_write+0x66/0x280 [ 28.088747][ T493] ? kernfs_activate+0x1ee/0x200 [ 28.088766][ T493] kernfs_new_node+0x154/0x280 [ 28.088783][ T493] __kernfs_create_file+0x52/0x280 [ 28.088805][ T493] sysfs_add_file_mode_ns+0x1d2/0x280 [ 28.088829][ T493] internal_create_group+0x66c/0xe70 [ 28.088858][ T493] ? sysfs_create_group+0x40/0x40 [ 28.088885][ T493] ? kernfs_remove_by_name_ns+0x146/0x180 [ 28.088906][ T493] sysfs_create_group+0x23/0x40 [ 28.088932][ T493] sysfs_slab_add+0x158/0x280 [ 28.088960][ T493] do_kmem_cache_create+0x40a/0x550 [ 28.088995][ T493] __kmem_cache_create_args+0x16f/0x310 [ 28.089024][ T493] copy_pid_ns+0x47a/0xa60 [ 28.089045][ T493] ? __cfi_copy_pid_ns+0x10/0x10 [ 28.089067][ T493] ? __kasan_check_write+0x18/0x20 [ 28.089092][ T493] create_new_namespaces+0x275/0x6f0 [ 28.089112][ T493] unshare_nsproxy_namespaces+0x124/0x180 [ 28.089131][ T493] ksys_unshare+0x4f9/0x920 [ 28.089157][ T493] ? fput+0x1a4/0x230 [ 28.089176][ T493] ? __cfi_ksys_unshare+0x10/0x10 [ 28.089202][ T493] ? __kasan_check_write+0x18/0x20 [ 28.089228][ T493] __x64_sys_unshare+0x3c/0x50 [ 28.089253][ T493] x64_sys_call+0x2998/0x2ee0 [ 28.089272][ T493] do_syscall_64+0x57/0xf0 [ 28.089288][ T493] ? clear_bhb_loop+0x50/0xa0 [ 28.089310][ T493] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.089333][ T493] RIP: 0033:0x7efce1b9e559 [ 28.089349][ T493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.089365][ T493] RSP: 002b:00007efce2aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 28.089386][ T493] RAX: ffffffffffffffda RBX: 00007efce1e25fa0 RCX: 00007efce1b9e559 [ 28.089400][ T493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 28.089412][ T493] RBP: 00007efce1c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 28.089424][ T493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.089436][ T493] R13: 00007efce1e26038 R14: 00007efce1e25fa0 R15: 00007ffc607ff258 [ 28.089453][ T493] [ 28.089634][ T493] __kmem_cache_create_args(pid_3) failed with error -12 [ 28.409589][ T493] CPU: 0 UID: 0 PID: 493 Comm: syz.0.62 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 28.409621][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.409636][ T493] Call Trace: [ 28.409641][ T493] [ 28.409649][ T493] __dump_stack+0x21/0x30 [ 28.409691][ T493] dump_stack_lvl+0x140/0x1c0 [ 28.409719][ T493] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.409747][ T493] ? mutex_unlock+0x90/0x240 [ 28.409769][ T493] ? __cfi_mutex_unlock+0x10/0x10 [ 28.409789][ T493] dump_stack+0x19/0x20 [ 28.409812][ T493] __kmem_cache_create_args+0x244/0x310 [ 28.409837][ T493] copy_pid_ns+0x47a/0xa60 [ 28.409855][ T493] ? __cfi_copy_pid_ns+0x10/0x10 [ 28.409874][ T493] ? __kasan_check_write+0x18/0x20 [ 28.409898][ T493] create_new_namespaces+0x275/0x6f0 [ 28.409917][ T493] unshare_nsproxy_namespaces+0x124/0x180 [ 28.409948][ T493] ksys_unshare+0x4f9/0x920 [ 28.409976][ T493] ? fput+0x1a4/0x230 [ 28.410000][ T493] ? __cfi_ksys_unshare+0x10/0x10 [ 28.410026][ T493] ? __kasan_check_write+0x18/0x20 [ 28.410052][ T493] __x64_sys_unshare+0x3c/0x50 [ 28.410079][ T493] x64_sys_call+0x2998/0x2ee0 [ 28.410098][ T493] do_syscall_64+0x57/0xf0 [ 28.410116][ T493] ? clear_bhb_loop+0x50/0xa0 [ 28.410139][ T493] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.410161][ T493] RIP: 0033:0x7efce1b9e559 [ 28.410178][ T493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.410194][ T493] RSP: 002b:00007efce2aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 28.410215][ T493] RAX: ffffffffffffffda RBX: 00007efce1e25fa0 RCX: 00007efce1b9e559 [ 28.410230][ T493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 28.410243][ T493] RBP: 00007efce1c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 28.410255][ T493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.410267][ T493] R13: 00007efce1e26038 R14: 00007efce1e25fa0 R15: 00007ffc607ff258 [ 28.410281][ T493] [ 29.552238][ T430] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.728409][ T430] usb 1-1: Using ep0 maxpacket: 16 [ 29.738989][ T430] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.758273][ T430] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.779951][ T430] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.790038][ T430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.808843][ T430] usb 1-1: Product: syz [ 29.813041][ T430] usb 1-1: Manufacturer: syz [ 29.817634][ T430] usb 1-1: SerialNumber: syz                                                                                syzkaller syzkaller login: [ 31.259537][ T628] ./dev/sda1: Can't lookup blockdev [ 31.264828][ T624] clocksource: Switched to clocksource kvm-clock [ 31.274561][ T628] FAULT_INJECTION: forcing a failure. [ 31.274561][ T628] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 31.289813][ T628] CPU: 1 UID: 0 PID: 628 Comm: syz.2.109 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 31.289845][ T628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.289858][ T628] Call Trace: [ 31.289864][ T628] [ 31.289871][ T628] __dump_stack+0x21/0x30 [ 31.289904][ T628] dump_stack_lvl+0x140/0x1c0 [ 31.289930][ T628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.289957][ T628] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 31.289981][ T628] dump_stack+0x19/0x20 [ 31.290011][ T628] should_fail_ex+0x3c2/0x510 [ 31.290030][ T628] should_fail_alloc_page+0xec/0x110 [ 31.290050][ T628] __alloc_pages_noprof+0x1c0/0x7e0 [ 31.290073][ T628] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 31.290100][ T628] ? __kasan_check_write+0x18/0x20 [ 31.290137][ T628] __pmd_alloc+0xb0/0x9a0 [ 31.290155][ T628] ? arch_stack_walk+0x10a/0x170 [ 31.290178][ T628] ? __cfi___pmd_alloc+0x10/0x10 [ 31.290198][ T628] copy_page_range+0x3643/0x3990 [ 31.290222][ T628] ? __cfi_mas_destroy+0x10/0x10 [ 31.290245][ T628] ? kasan_save_track+0x4f/0x80 [ 31.290273][ T628] ? kasan_save_track+0x3e/0x80 [ 31.290300][ T628] ? kasan_save_alloc_info+0x3a/0x50 [ 31.290323][ T628] ? __kasan_slab_alloc+0x73/0x90 [ 31.290341][ T628] ? anon_vma_fork+0x1fc/0x610 [ 31.290368][ T628] ? copy_process+0x12a4/0x3350 [ 31.290397][ T628] ? kernel_clone+0x233/0x810 [ 31.290421][ T628] ? __x64_sys_clone+0x1b7/0x230 [ 31.290451][ T628] ? __cfi_copy_page_range+0x10/0x10 [ 31.290476][ T628] ? mas_store+0x897/0xcc0 [ 31.290502][ T628] ? __vma_enter_locked+0x24d/0x3c0 [ 31.290519][ T628] ? __cfi_mas_store+0x10/0x10 [ 31.290542][ T628] ? anon_vma_fork+0x45b/0x610 [ 31.290567][ T628] copy_mm+0x10cd/0x1da0 [ 31.290593][ T628] ? copy_signal+0x6a0/0x6a0 [ 31.290617][ T628] ? _raw_spin_lock+0x92/0x120 [ 31.290645][ T628] ? __asan_memset+0x39/0x50 [ 31.290670][ T628] ? __init_rwsem+0x110/0x1f0 [ 31.290692][ T628] ? copy_signal+0x4d5/0x6a0 [ 31.290716][ T628] copy_process+0x12a4/0x3350 [ 31.290754][ T628] ? __cfi_copy_process+0x10/0x10 [ 31.290781][ T628] kernel_clone+0x233/0x810 [ 31.290808][ T628] ? __cfi_kernel_clone+0x10/0x10 [ 31.290834][ T628] ? __secure_computing+0x2b0/0x2b0 [ 31.290854][ T628] __x64_sys_clone+0x1b7/0x230 [ 31.290881][ T628] ? __cfi___x64_sys_clone+0x10/0x10 [ 31.290917][ T628] ? __secure_computing+0xee/0x2b0 [ 31.290935][ T628] x64_sys_call+0x2b3c/0x2ee0 [ 31.290955][ T628] do_syscall_64+0x57/0xf0 [ 31.290972][ T628] ? clear_bhb_loop+0x50/0xa0 [ 31.290996][ T628] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.291018][ T628] RIP: 0033:0x7f759379e559 [ 31.291039][ T628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.291055][ T628] RSP: 002b:00007f7591f90fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.291077][ T628] RAX: ffffffffffffffda RBX: 00007f7593a26090 RCX: 00007f759379e559 [ 31.291092][ T628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.291104][ T628] RBP: 00007f75938358b0 R08: 0000000000000000 R09: 0000000000000000 [ 31.291117][ T628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.291130][ T628] R13: 00007f7593a26128 R14: 00007f7593a26090 R15: 00007ffc4274e878 [ 31.291147][ T628] [ 31.711766][ T638] tipc: Started in network mode [ 31.716672][ T638] tipc: Node identity feafa934142e, cluster identity 4711 [ 31.724217][ T638] tipc: Enabled bearer , priority 10 [ 31.789623][ T638] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 31.808890][ T637] tipc: Resetting bearer [ 31.815364][ T637] tipc: Disabling bearer [ 31.908136][ T651] tipc: Enabling of bearer rejected, failed to enable media [ 31.918816][ T651] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 31.927337][ T651] tipc: Enabled bearer , priority 10 [ 32.153537][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 32.163805][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 32.163819][ T36] audit: type=1400 audit(1792027314.521:190): avc: denied { mount } for pid=656 comm="syz.1.125" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.192608][ T657] FAULT_INJECTION: forcing a failure. [ 32.192608][ T657] name fail_futex, interval 1, probability 0, space 0, times 1 [ 32.206099][ T657] CPU: 0 UID: 0 PID: 657 Comm: syz.1.125 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 32.206129][ T657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.206142][ T657] Call Trace: [ 32.206149][ T657] [ 32.206157][ T657] __dump_stack+0x21/0x30 [ 32.206192][ T657] dump_stack_lvl+0x140/0x1c0 [ 32.206220][ T657] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.206250][ T657] dump_stack+0x19/0x20 [ 32.206277][ T657] should_fail_ex+0x3c2/0x510 [ 32.206297][ T657] should_fail+0xf/0x20 [ 32.206313][ T657] get_futex_key+0x178/0x940 [ 32.206332][ T657] ? __cfi___futex_wait+0x10/0x10 [ 32.206353][ T657] ? __cfi_get_futex_key+0x10/0x10 [ 32.206369][ T657] ? __cfi_futex_wake_mark+0x10/0x10 [ 32.206392][ T657] futex_wake+0x150/0x950 [ 32.206414][ T657] ? futex_wait+0x2b8/0x7c0 [ 32.206436][ T657] ? __cfi_futex_wake+0x10/0x10 [ 32.206457][ T657] ? cred_has_capability+0x296/0x3a0 [ 32.206485][ T657] do_futex+0x37d/0x510 [ 32.206505][ T657] ? __cfi_do_futex+0x10/0x10 [ 32.206524][ T657] __se_sys_futex+0x13c/0x320 [ 32.206551][ T657] ? __x64_sys_futex+0x110/0x110 [ 32.206573][ T657] __x64_sys_futex+0xe9/0x110 [ 32.206594][ T657] x64_sys_call+0x227f/0x2ee0 [ 32.206614][ T657] do_syscall_64+0x57/0xf0 [ 32.206631][ T657] ? clear_bhb_loop+0x50/0xa0 [ 32.206664][ T657] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.206686][ T657] RIP: 0033:0x7f90e559e559 [ 32.206703][ T657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.206718][ T657] RSP: 002b:00007f90e64eb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.206740][ T657] RAX: ffffffffffffffda RBX: 00007f90e5825fa8 RCX: 00007f90e559e559 [ 32.206756][ T657] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f90e5825fac [ 32.206770][ T657] RBP: 00007f90e5825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 32.206783][ T657] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 32.206797][ T657] R13: 00007f90e5826038 R14: 00007fff0000e130 R15: 00007fff0000e218 [ 32.206814][ T657] [ 32.444798][ T36] audit: type=1400 audit(1792027314.781:191): avc: denied { write } for pid=656 comm="syz.1.125" name="protocols" dev="proc" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.598308][ T36] audit: type=1400 audit(1792027314.931:192): avc: denied { remount } for pid=669 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.620051][ T675] FAULT_INJECTION: forcing a failure. [ 32.620051][ T675] name failslab, interval 1, probability 0, space 0, times 0 [ 32.638201][ T675] CPU: 1 UID: 0 PID: 675 Comm: syz.2.132 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 32.638234][ T675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.638250][ T675] Call Trace: [ 32.638256][ T675] [ 32.638264][ T675] __dump_stack+0x21/0x30 [ 32.638305][ T675] dump_stack_lvl+0x140/0x1c0 [ 32.638332][ T675] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.638359][ T675] ? inode_doinit_with_dentry+0x580/0xde0 [ 32.638383][ T675] dump_stack+0x19/0x20 [ 32.638408][ T675] should_fail_ex+0x3c2/0x510 [ 32.638428][ T675] should_failslab+0xac/0x100 [ 32.638446][ T675] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 32.638473][ T675] ? fuse_alloc_inode+0x49/0x2c0 [ 32.638496][ T675] ? __cfi_ilookup5+0x10/0x10 [ 32.638517][ T675] ? __cfi_fuse_alloc_inode+0x10/0x10 [ 32.638539][ T675] fuse_alloc_inode+0x49/0x2c0 [ 32.638558][ T675] ? alloc_inode+0x63/0x270 [ 32.638576][ T675] ? __cfi_fuse_inode_eq+0x10/0x10 [ 32.638594][ T675] ? __cfi_fuse_alloc_inode+0x10/0x10 [ 32.638627][ T675] alloc_inode+0x7d/0x270 [ 32.638646][ T675] ? _raw_spin_unlock_bh+0x54/0x60 [ 32.638664][ T675] ? __cfi_fuse_inode_set+0x10/0x10 [ 32.638683][ T675] ? __cfi_fuse_inode_eq+0x10/0x10 [ 32.638701][ T675] iget5_locked+0x53/0xb0 [ 32.638721][ T675] ? __cfi_fuse_inode_set+0x10/0x10 [ 32.638741][ T675] fuse_iget+0x38e/0xb30 [ 32.638758][ T675] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 32.638774][ T675] ? __cfi_super_setup_bdi_name+0x10/0x10 [ 32.638798][ T675] ? __cfi_fuse_iget+0x10/0x10 [ 32.638817][ T675] fuse_fill_super_common+0xc43/0x1450 [ 32.638839][ T675] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 32.638858][ T675] ? _raw_spin_lock+0x92/0x120 [ 32.638886][ T675] ? __kasan_check_write+0x18/0x20 [ 32.638909][ T675] ? shrinker_register+0x162/0x220 [ 32.638935][ T675] fuse_fill_super+0x71/0x250 [ 32.638958][ T675] get_tree_nodev+0xcb/0x170 [ 32.638982][ T675] ? __cfi_fuse_fill_super+0x10/0x10 [ 32.639006][ T675] fuse_get_tree+0x2cb/0x640 [ 32.639031][ T675] vfs_get_tree+0x9e/0x290 [ 32.639057][ T675] do_new_mount+0x251/0xb40 [ 32.639083][ T675] ? security_capable+0x44/0x130 [ 32.639113][ T675] path_mount+0x66a/0xff0 [ 32.639138][ T675] ? putname+0x113/0x150 [ 32.639166][ T675] __se_sys_mount+0x2bf/0x480 [ 32.639193][ T675] ? __x64_sys_mount+0xf0/0xf0 [ 32.639220][ T675] ? __kasan_check_write+0x18/0x20 [ 32.639245][ T675] ? fpregs_restore_userregs+0x11c/0x260 [ 32.639272][ T675] __x64_sys_mount+0xc3/0xf0 [ 32.639308][ T675] x64_sys_call+0x2021/0x2ee0 [ 32.639330][ T675] do_syscall_64+0x57/0xf0 [ 32.639350][ T675] ? clear_bhb_loop+0x50/0xa0 [ 32.639375][ T675] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.639399][ T675] RIP: 0033:0x7f759379e559 [ 32.639418][ T675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.639434][ T675] RSP: 002b:00007f75945b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.639457][ T675] RAX: ffffffffffffffda RBX: 00007f7593a25fa0 RCX: 00007f759379e559 [ 32.639473][ T675] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 32.639487][ T675] RBP: 00007f75938358b0 R08: 0000200000000280 R09: 0000000000000000 [ 32.639500][ T675] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 32.639514][ T675] R13: 00007f7593a26038 R14: 00007f7593a25fa0 R15: 00007ffc4274e878 [ 32.639531][ T675] [ 33.008212][ T430] tipc: Node number set to 3934366004 [ 33.078296][ T36] audit: type=1400 audit(1792027315.411:193): avc: denied { create } for pid=677 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.135700][ T36] audit: type=1400 audit(1792027315.411:194): avc: denied { bind } for pid=677 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.191723][ T36] audit: type=1400 audit(1792027315.411:195): avc: denied { connect } for pid=677 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.231890][ T36] audit: type=1400 audit(1792027315.411:196): avc: denied { ioctl } for pid=677 comm="syz.2.134" path="socket:[10611]" dev="sockfs" ino=10611 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.306121][ T36] audit: type=1400 audit(1792027315.411:197): avc: denied { write } for pid=677 comm="syz.2.134" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.378300][ T36] audit: type=1400 audit(1792027315.411:198): avc: denied { open } for pid=677 comm="syz.2.134" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.436580][ T36] audit: type=1400 audit(1792027315.411:199): avc: denied { ioctl } for pid=677 comm="syz.2.134" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.765323][ T327] tipc: Subscription rejected, illegal request [ 33.978543][ T724] mmap: syz.2.152 (724): VmData 29073408 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 34.348295][ T65] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.499306][ T65] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 34.516232][ T65] usb 1-1: config 0 has no interface number 0 [ 34.529520][ T65] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 34.542942][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.559926][ T65] usb 1-1: Product: syz [ 34.568407][ T65] usb 1-1: Manufacturer: syz [ 34.578450][ T65] usb 1-1: SerialNumber: syz [ 34.589691][ T65] usb 1-1: config 0 descriptor?? [ 35.201275][ T65] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 35.215987][ T65] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 35.228224][ T65] asix 1-1:0.251: probe with driver asix failed with error -61 [ 36.464147][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.616587][ T65] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 36.625725][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.633894][ T65] usb 2-1: Product: syz [ 36.638061][ T65] usb 2-1: Manufacturer: syz [ 36.642732][ T65] usb 2-1: SerialNumber: syz [ 36.648805][ T65] ums-karma 2-1:1.0: USB Mass Storage device detected [ 36.656487][ T65] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 36.656487][ T65] Please send a copy of this message to and [ 37.047305][ T65] scsi host1: usb-storage 2-1:1.0 [ 37.058488][ T65] usb 1-1: USB disconnect, device number 3 [ 37.254382][ T431] usb 2-1: USB disconnect, device number 4 [ 37.985290][ T1013] FAULT_INJECTION: forcing a failure. [ 37.985290][ T1013] name failslab, interval 1, probability 0, space 0, times 0 [ 37.997985][ T1013] CPU: 0 UID: 0 PID: 1013 Comm: syz.0.268 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 37.998026][ T1013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.998044][ T1013] Call Trace: [ 37.998051][ T1013] [ 37.998059][ T1013] __dump_stack+0x21/0x30 [ 37.998102][ T1013] dump_stack_lvl+0x140/0x1c0 [ 37.998140][ T1013] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.998173][ T1013] dump_stack+0x19/0x20 [ 37.998212][ T1013] should_fail_ex+0x3c2/0x510 [ 37.998258][ T1013] should_failslab+0xac/0x100 [ 37.998287][ T1013] __kmalloc_cache_noprof+0x41/0x470 [ 37.998318][ T1013] ? __percpu_counter_init_many+0x47e/0x570 [ 37.998336][ T1013] ? io_uring_alloc_task_context+0x1a7/0x6b0 [ 37.998364][ T1013] io_uring_alloc_task_context+0x1a7/0x6b0 [ 37.998393][ T1013] ? alloc_file_pseudo+0x191/0x1f0 [ 37.998417][ T1013] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 37.998444][ T1013] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 37.998472][ T1013] __io_uring_add_tctx_node+0x324/0x590 [ 37.998499][ T1013] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 37.998523][ T1013] ? anon_inode_create_getfile+0x3f/0x50 [ 37.998548][ T1013] io_uring_create+0xc78/0x13f0 [ 37.998573][ T1013] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 37.998595][ T1013] ? __se_sys_futex+0x13c/0x320 [ 37.998616][ T1013] ? __x64_sys_io_uring_setup+0x80/0x80 [ 37.998640][ T1013] ? __kasan_check_write+0x18/0x20 [ 37.998664][ T1013] __x64_sys_io_uring_setup+0x5f/0x80 [ 37.998685][ T1013] x64_sys_call+0x22c0/0x2ee0 [ 37.998700][ T1013] do_syscall_64+0x57/0xf0 [ 37.998714][ T1013] ? clear_bhb_loop+0x50/0xa0 [ 37.998745][ T1013] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.998768][ T1013] RIP: 0033:0x7efce1b9e559 [ 37.998782][ T1013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.998798][ T1013] RSP: 002b:00007efce2aa3fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 37.998815][ T1013] RAX: ffffffffffffffda RBX: 0000200000002540 RCX: 00007efce1b9e559 [ 37.998827][ T1013] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000f00 [ 37.998837][ T1013] RBP: 00007efce1c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 37.998857][ T1013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 37.998870][ T1013] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc607ff258 [ 37.998885][ T1013] [ 38.647971][ T1062] FAULT_INJECTION: forcing a failure. [ 38.647971][ T1062] name failslab, interval 1, probability 0, space 0, times 0 [ 38.660659][ T1062] CPU: 1 UID: 0 PID: 1062 Comm: syz.1.293 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 38.660693][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.660705][ T1062] Call Trace: [ 38.660711][ T1062] [ 38.660720][ T1062] __dump_stack+0x21/0x30 [ 38.660754][ T1062] dump_stack_lvl+0x140/0x1c0 [ 38.660781][ T1062] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.660807][ T1062] dump_stack+0x19/0x20 [ 38.660830][ T1062] should_fail_ex+0x3c2/0x510 [ 38.660850][ T1062] should_failslab+0xac/0x100 [ 38.660870][ T1062] kmem_cache_alloc_noprof+0x42/0x410 [ 38.660895][ T1062] ? security_file_alloc+0x49/0x220 [ 38.660918][ T1062] ? kasan_save_alloc_info+0x3a/0x50 [ 38.660941][ T1062] security_file_alloc+0x49/0x220 [ 38.660964][ T1062] init_file+0x9e/0x210 [ 38.660988][ T1062] alloc_empty_file+0xd9/0x270 [ 38.661007][ T1062] ? _raw_spin_unlock+0x45/0x60 [ 38.661026][ T1062] alloc_file_pseudo+0x142/0x1f0 [ 38.661046][ T1062] ? security_inode_init_security_anon+0x3e/0x110 [ 38.661067][ T1062] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 38.661086][ T1062] ? anon_inode_make_secure_inode+0xf5/0x150 [ 38.661109][ T1062] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 38.661130][ T1062] ? __kasan_kmalloc+0x96/0xb0 [ 38.661149][ T1062] __anon_inode_getfile+0x12e/0x200 [ 38.661170][ T1062] anon_inode_create_getfile+0x3f/0x50 [ 38.661191][ T1062] io_uring_create+0xc61/0x13f0 [ 38.661212][ T1062] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 38.661240][ T1062] ? __se_sys_futex+0x13c/0x320 [ 38.661261][ T1062] ? __x64_sys_io_uring_setup+0x80/0x80 [ 38.661284][ T1062] ? __kasan_check_write+0x18/0x20 [ 38.661310][ T1062] __x64_sys_io_uring_setup+0x5f/0x80 [ 38.661331][ T1062] x64_sys_call+0x22c0/0x2ee0 [ 38.661350][ T1062] do_syscall_64+0x57/0xf0 [ 38.661367][ T1062] ? clear_bhb_loop+0x50/0xa0 [ 38.661389][ T1062] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.661411][ T1062] RIP: 0033:0x7f90e559e559 [ 38.661426][ T1062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.661442][ T1062] RSP: 002b:00007f90e64eafb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 38.661463][ T1062] RAX: ffffffffffffffda RBX: 0000200000002540 RCX: 00007f90e559e559 [ 38.661477][ T1062] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000f00 [ 38.661491][ T1062] RBP: 00007f90e56358b0 R08: 0000000000000000 R09: 0000000000000000 [ 38.661504][ T1062] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 38.661516][ T1062] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff0000e218 [ 38.661531][ T1062] [ 38.975426][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 38.975442][ T36] audit: type=1400 audit(1792027321.364:282): avc: denied { write } for pid=1086 comm="syz.1.304" name="usb_gadget" dev="configfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.004495][ T36] audit: type=1400 audit(1792027321.374:283): avc: denied { add_name } for pid=1086 comm="syz.1.304" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.024882][ T36] audit: type=1400 audit(1792027321.374:284): avc: denied { create } for pid=1086 comm="syz.1.304" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 39.044793][ T36] audit: type=1400 audit(1792027321.374:285): avc: denied { read write } for pid=1086 comm="syz.1.304" name="protocol" dev="configfs" ino=13015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 39.068241][ T36] audit: type=1400 audit(1792027321.374:286): avc: denied { open } for pid=1086 comm="syz.1.304" path="/44/config/usb_gadget/g1/functions/hid.usb0/protocol" dev="configfs" ino=13015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 39.094911][ T36] audit: type=1400 audit(1792027321.374:287): avc: denied { create } for pid=1086 comm="syz.1.304" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 39.115659][ T36] audit: type=1400 audit(1792027321.374:288): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.501757][ T1139] kvm: kvm [1138]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x972e [ 39.510642][ T1139] kvm: kvm [1138]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xcf2e [ 39.895892][ T36] audit: type=1400 audit(1792027322.291:289): avc: denied { bind } for pid=1176 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.917883][ T36] audit: type=1400 audit(1792027322.311:290): avc: denied { nlmsg_read } for pid=1176 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.928452][ T1177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 39.938629][ T36] audit: type=1400 audit(1792027322.311:291): avc: denied { write } for pid=1176 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.971495][ T1177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.343'. [ 40.013302][ T1177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.343'. [ 40.247050][ T1223] Zero length message leads to an empty skb [ 41.072525][ T1284] ======================================================= [ 41.072525][ T1284] WARNING: The mand mount option has been deprecated and [ 41.072525][ T1284] and is ignored by this kernel. Remove the mand [ 41.072525][ T1284] option from the mount to silence this warning. [ 41.072525][ T1284] ======================================================= [ 42.797787][ T1446] 9pnet: Could not find request transport: uý„â-øýÇ¡j‡Ø [ 44.463590][ T1529] 9pnet_virtio: no channels available for device ./proc/thread-self/fail-nth [ 44.538009][ T1545] FAULT_INJECTION: forcing a failure. [ 44.538009][ T1545] name fail_futex, interval 1, probability 0, space 0, times 0 [ 44.550874][ T1545] CPU: 0 UID: 0 PID: 1545 Comm: syz.1.479 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 44.550894][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.550901][ T1545] Call Trace: [ 44.550905][ T1545] [ 44.550909][ T1545] __dump_stack+0x21/0x30 [ 44.550930][ T1545] dump_stack_lvl+0x140/0x1c0 [ 44.550945][ T1545] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.550960][ T1545] ? ip4_datagram_release_cb+0x637/0x820 [ 44.550972][ T1545] dump_stack+0x19/0x20 [ 44.550990][ T1545] should_fail_ex+0x3c2/0x510 [ 44.551000][ T1545] should_fail+0xf/0x20 [ 44.551009][ T1545] get_futex_key+0x178/0x940 [ 44.551020][ T1545] ? __cfi_get_futex_key+0x10/0x10 [ 44.551029][ T1545] ? release_sock+0x171/0x1f0 [ 44.551040][ T1545] futex_wake+0x150/0x950 [ 44.551051][ T1545] ? __cfi_futex_wake+0x10/0x10 [ 44.551062][ T1545] ? selinux_socket_setsockopt+0x324/0x3d0 [ 44.551077][ T1545] do_futex+0x37d/0x510 [ 44.551087][ T1545] ? __cfi_do_futex+0x10/0x10 [ 44.551097][ T1545] __se_sys_futex+0x13c/0x320 [ 44.551107][ T1545] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 44.551119][ T1545] ? __x64_sys_futex+0x110/0x110 [ 44.551129][ T1545] ? __kasan_check_write+0x18/0x20 [ 44.551143][ T1545] __x64_sys_futex+0xe9/0x110 [ 44.551153][ T1545] x64_sys_call+0x227f/0x2ee0 [ 44.551163][ T1545] do_syscall_64+0x57/0xf0 [ 44.551173][ T1545] ? clear_bhb_loop+0x50/0xa0 [ 44.551185][ T1545] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.551196][ T1545] RIP: 0033:0x7f90e559e559 [ 44.551206][ T1545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.551214][ T1545] RSP: 002b:00007f90e64eb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 44.551226][ T1545] RAX: ffffffffffffffda RBX: 00007f90e5825fa8 RCX: 00007f90e559e559 [ 44.551234][ T1545] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f90e5825fac [ 44.551241][ T1545] RBP: 00007f90e5825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 44.551247][ T1545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.551254][ T1545] R13: 00007f90e5826038 R14: 00007fff0000e130 R15: 00007fff0000e218 [ 44.551262][ T1545] [ 44.552315][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 44.552327][ T36] audit: type=1400 audit(1792027326.983:316): avc: denied { mounton } for pid=1544 comm="syz.1.479" path="/98/proc/250/task/251/fail-nth" dev="proc" ino=15307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 44.576705][ T1545] 9pnet: Could not find request transport: uý„â-øýÇ¡j‡Ø [ 44.600184][ T36] audit: type=1400 audit(1792027327.013:317): avc: denied { mounton } for pid=1544 comm="syz.1.479" path="/98/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 46.443370][ T1654] tipc: Started in network mode [ 46.449732][ T1654] tipc: Node identity 2000004, cluster identity 4711 [ 46.456466][ T1654] tipc: Node number set to 33554436 [ 47.789088][ T36] audit: type=1400 audit(1792027330.245:318): avc: denied { create } for pid=1756 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.824077][ T36] audit: type=1400 audit(1792027330.245:319): avc: denied { bind } for pid=1756 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.843689][ T36] audit: type=1400 audit(1792027330.255:320): avc: denied { listen } for pid=1756 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.867337][ T36] audit: type=1400 audit(1792027330.255:321): avc: denied { connect } for pid=1756 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.914053][ T36] audit: type=1400 audit(1792027330.255:322): avc: denied { accept } for pid=1756 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.720578][ T36] audit: type=1400 audit(1792027331.180:323): avc: denied { mount } for pid=1805 comm="syz.2.582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.800550][ T1796] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 48.826700][ T36] audit: type=1400 audit(1792027331.281:324): avc: denied { read } for pid=95 comm="acpid" name="event2" dev="devtmpfs" ino=452 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.859502][ T36] audit: type=1400 audit(1792027331.281:325): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=452 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.205911][ T430] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 49.365925][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.376853][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.386594][ T430] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.399378][ T430] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 49.408404][ T430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.418267][ T430] usb 1-1: config 0 descriptor?? [ 49.560789][ T1854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.591002][ T1854] FAULT_INJECTION: forcing a failure. [ 49.591002][ T1854] name failslab, interval 1, probability 0, space 0, times 0 [ 49.613346][ T1854] CPU: 0 UID: 0 PID: 1854 Comm: syz.1.596 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 49.613381][ T1854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.613393][ T1854] Call Trace: [ 49.613398][ T1854] [ 49.613405][ T1854] __dump_stack+0x21/0x30 [ 49.613437][ T1854] dump_stack_lvl+0x140/0x1c0 [ 49.613460][ T1854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.613483][ T1854] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.613502][ T1854] dump_stack+0x19/0x20 [ 49.613525][ T1854] should_fail_ex+0x3c2/0x510 [ 49.613543][ T1854] should_failslab+0xac/0x100 [ 49.613562][ T1854] kmem_cache_alloc_node_noprof+0x45/0x420 [ 49.613588][ T1854] ? arp_constructor+0x69d/0x9b0 [ 49.613606][ T1854] ? ___neigh_create+0xfb7/0x2100 [ 49.613633][ T1854] ? __alloc_skb+0x10c/0x360 [ 49.613653][ T1854] __alloc_skb+0x10c/0x360 [ 49.613671][ T1854] __neigh_notify+0x83/0x140 [ 49.613690][ T1854] __neigh_update+0xbc7/0x2140 [ 49.613719][ T1854] neigh_update+0x3c/0x60 [ 49.613744][ T1854] arp_req_set+0x461/0x710 [ 49.613762][ T1854] ? arp_req_delete+0x350/0x350 [ 49.613781][ T1854] arp_ioctl+0x2e7/0x3c0 [ 49.613800][ T1854] ? __cfi_arp_ioctl+0x10/0x10 [ 49.613821][ T1854] inet_ioctl+0x3cb/0x570 [ 49.613838][ T1854] ? __cfi_inet_ioctl+0x10/0x10 [ 49.613857][ T1854] ? __cfi_futex_wait+0x10/0x10 [ 49.613882][ T1854] sock_do_ioctl+0x115/0x330 [ 49.613908][ T1854] ? sock_show_fdinfo+0xd0/0xd0 [ 49.613946][ T1854] ? __cfi_do_futex+0x10/0x10 [ 49.613965][ T1854] ? mutex_unlock+0x90/0x240 [ 49.613988][ T1854] sock_ioctl+0x568/0x7e0 [ 49.614013][ T1854] ? __cfi_sock_ioctl+0x10/0x10 [ 49.614036][ T1854] ? __fget_files+0x2bc/0x330 [ 49.614054][ T1854] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.614073][ T1854] ? security_file_ioctl+0x3e/0x110 [ 49.614097][ T1854] ? __cfi_sock_ioctl+0x10/0x10 [ 49.614123][ T1854] __se_sys_ioctl+0x126/0x1b0 [ 49.614141][ T1854] __x64_sys_ioctl+0x7f/0xa0 [ 49.614157][ T1854] x64_sys_call+0x1878/0x2ee0 [ 49.614174][ T1854] do_syscall_64+0x57/0xf0 [ 49.614189][ T1854] ? clear_bhb_loop+0x50/0xa0 [ 49.614212][ T1854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.614232][ T1854] RIP: 0033:0x7f90e559e559 [ 49.614248][ T1854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.614263][ T1854] RSP: 002b:00007f90e64eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.614284][ T1854] RAX: ffffffffffffffda RBX: 00007f90e5825fa0 RCX: 00007f90e559e559 [ 49.614298][ T1854] RDX: 0000200000000640 RSI: 0000000000008955 RDI: 000000000000000a [ 49.614312][ T1854] RBP: 00007f90e56358b0 R08: 0000000000000000 R09: 0000000000000000 [ 49.614325][ T1854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.614336][ T1854] R13: 00007f90e5826038 R14: 00007f90e5825fa0 R15: 00007fff0000e218 [ 49.614353][ T1854] [ 49.926110][ T1854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.952276][ T1854] fuse: Bad value for 'fd' [ 50.136949][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.143890][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.150780][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.157631][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.164487][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.171357][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.178201][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.185054][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.191938][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.198774][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.205655][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.212527][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.219374][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.226241][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.233129][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.239996][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.246847][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.253726][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.260592][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.267426][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.274288][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.281153][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.288002][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.294862][ T430] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 50.302304][ T430] apple 0003:05AC:026C.0001: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.0-1/input0 [ 50.378788][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 50.378804][ T36] audit: type=1400 audit(1792027332.841:327): avc: denied { getopt } for pid=1825 comm="syz.0.587" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.393282][ T65] usb 1-1: USB disconnect, device number 4 [ 50.669952][ T1909] tipc: Started in network mode [ 50.674921][ T1909] tipc: Node identity 2000004, cluster identity 4711 [ 50.681724][ T1909] tipc: Node number set to 33554436 [ 50.826436][ T1907] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 51.429487][ T1947] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 51.455134][ T36] audit: type=1400 audit(1792027333.927:328): avc: denied { remount } for pid=1946 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.482612][ T1947] overlayfs: failed to clone lowerpath [ 52.014357][ T36] audit: type=1400 audit(1792027334.491:329): avc: denied { bind } for pid=1970 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.014488][ T1971] tipc: Can't bind to reserved service type 0 [ 52.044230][ T36] audit: type=1400 audit(1792027334.521:330): avc: denied { ioctl } for pid=1970 comm="syz.2.639" path="socket:[17397]" dev="sockfs" ino=17397 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.073801][ T36] audit: type=1400 audit(1792027334.551:331): avc: denied { create } for pid=1972 comm="syz.2.640" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.605198][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 52.615140][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.755306][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.764249][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 52.766891][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 52.771842][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.779864][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.788020][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 52.795463][ T10] usb 4-1: Product: syz [ 52.807725][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 52.810623][ T10] usb 4-1: Manufacturer: syz [ 52.819475][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.824241][ T10] usb 4-1: SerialNumber: syz [ 52.832040][ T45] usb 1-1: Product: syz [ 52.840732][ T45] usb 1-1: Manufacturer: syz [ 52.845372][ T45] usb 1-1: SerialNumber: syz [ 53.044442][ T10] usb 4-1: USB disconnect, device number 2 [ 53.055917][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.062871][ T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 53.074019][ T45] usb 1-1: USB disconnect, device number 5 [ 53.089074][ T1800] udevd[1800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.798221][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 53.948325][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 135 [ 53.958303][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.972540][ T10] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 53.981665][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.989660][ T10] usb 4-1: Product: syz [ 53.993867][ T10] usb 4-1: Manufacturer: syz [ 53.998467][ T10] usb 4-1: SerialNumber: syz [ 54.003972][ T2015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.011712][ T10] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 54.086529][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.218021][ T10] usb 4-1: USB disconnect, device number 3 [ 54.235679][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 54.242173][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.250628][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 54.263012][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.272057][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.280058][ T45] usb 2-1: Product: syz [ 54.284205][ T45] usb 2-1: Manufacturer: syz [ 54.288793][ T45] usb 2-1: SerialNumber: syz [ 54.496192][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.503122][ T45] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 54.503713][ T2049] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.514896][ T45] usb 2-1: USB disconnect, device number 5 [ 55.239921][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 55.389067][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 55.395258][ T10] usb 2-1: config 3 has an invalid interface number: 160 but max is 0 [ 55.403855][ T10] usb 2-1: config 3 has no interface number 0 [ 55.410032][ T10] usb 2-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 55.420027][ T10] usb 2-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.431073][ T10] usb 2-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 55.441069][ T10] usb 2-1: config 3 interface 160 has no altsetting 0 [ 55.449184][ T10] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 55.458235][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.466262][ T10] usb 2-1: Product: syz [ 55.470444][ T10] usb 2-1: Manufacturer: syz [ 55.475020][ T10] usb 2-1: SerialNumber: syz [ 55.480696][ T2071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.692192][ T10] usb 2-1: USB disconnect, device number 6 [ 55.826619][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 55.996839][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.007029][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.019867][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 56.028979][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.046825][ T45] net1080 4-1:1.0: probe with driver net1080 failed with error -22 [ 56.259292][ T10] usb 4-1: USB disconnect, device number 4 [ 56.318572][ T2113] process 'syz.1.700' launched './file2' with NULL argv: empty string added [ 56.327829][ T36] audit: type=1400 audit(1792027338.836:332): avc: denied { execute_no_trans } for pid=2112 comm="syz.1.700" path="/148/file2" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.351429][ T36] audit: type=1400 audit(1792027338.836:333): avc: denied { rename } for pid=2112 comm="syz.1.700" name="file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.373828][ T36] audit: type=1400 audit(1792027338.836:334): avc: denied { rename } for pid=2112 comm="syz.1.700" name="file5" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.633833][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 56.785058][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 56.790674][ T9] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 56.802035][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.812443][ T9] usb 2-1: config 0 has no interfaces? [ 56.829497][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.842641][ T9] usb 2-1: config 0 has no interfaces? [ 56.851450][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.862200][ T9] usb 2-1: config 0 has no interfaces? [ 56.868449][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.880213][ T9] usb 2-1: config 0 has no interfaces? [ 56.886535][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.901602][ T9] usb 2-1: config 0 has no interfaces? [ 56.908977][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.922181][ T9] usb 2-1: config 0 has no interfaces? [ 56.928582][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.943882][ T9] usb 2-1: config 0 has no interfaces? [ 56.954087][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.968028][ T9] usb 2-1: config 0 has no interfaces? [ 56.974414][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 56.983975][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.996058][ T9] usb 2-1: config 0 descriptor?? [ 57.041670][ T36] audit: type=1400 audit(1792027339.542:335): avc: denied { read } for pid=2149 comm="syz.3.718" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.065393][ T36] audit: type=1400 audit(1792027339.542:336): avc: denied { open } for pid=2149 comm="syz.3.718" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.089497][ T36] audit: type=1400 audit(1792027339.542:337): avc: denied { ioctl } for pid=2149 comm="syz.3.718" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.127907][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 57.205741][ T2165] usb 2-1: USB disconnect, device number 7 [ 57.279871][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.297937][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.308798][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 57.317859][ T45] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 57.326204][ T45] usb 1-1: Product: syz [ 57.330363][ T45] usb 1-1: Manufacturer: syz [ 57.337018][ T45] hub 1-1:4.0: USB hub found [ 57.430040][ T431] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 57.539347][ T45] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 57.561402][ T45] usb 1-1: USB disconnect, device number 6 [ 57.582583][ T431] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.590585][ T431] usb 4-1: not running at top speed; connect to a high speed hub [ 57.599302][ T431] usb 4-1: config 87 has an invalid interface number: 152 but max is 0 [ 57.607647][ T431] usb 4-1: config 87 has no interface number 0 [ 57.613877][ T431] usb 4-1: config 87 interface 152 has no altsetting 0 [ 57.622055][ T431] usb 4-1: New USB device found, idVendor=0df6, idProduct=004a, bcdDevice=36.71 [ 57.631097][ T431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.639126][ T431] usb 4-1: Product: syz [ 57.643298][ T431] usb 4-1: Manufacturer: syz [ 57.647902][ T431] usb 4-1: SerialNumber: syz [ 57.860185][ T431] cdc_ether 4-1:87.152: More than one union descriptor, skipping ... [ 57.868341][ T431] usb 4-1: bad CDC descriptors [ 57.874014][ T431] usb 4-1: USB disconnect, device number 5 [ 57.967905][ T2169] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 58.256438][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 58.417634][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 58.423617][ T9] usb 2-1: config 0 has an invalid interface number: 118 but max is 0 [ 58.431825][ T9] usb 2-1: config 0 has no interface number 0 [ 58.437922][ T9] usb 2-1: New USB device found, idVendor=ff3a, idProduct=7e49, bcdDevice=79.77 [ 58.446943][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.455506][ T9] usb 2-1: config 0 descriptor?? [ 58.619970][ T2199] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 58.664474][ T9] usb 2-1: string descriptor 0 read error: -71 [ 58.672342][ T9] usb-storage 2-1:0.118: USB Mass Storage device detected [ 58.723021][ T9] usb 2-1: USB disconnect, device number 8 [ 59.196570][ T36] audit: type=1400 audit(1792027341.676:338): avc: denied { accept } for pid=2245 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 59.496641][ T2248] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 59.637130][ T2267] tipc: Trying to set illegal importance in message [ 59.846244][ T36] audit: type=1400 audit(1792027342.321:339): avc: denied { read write } for pid=2278 comm="syz.0.777" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.871697][ T36] audit: type=1400 audit(1792027342.321:340): avc: denied { open } for pid=2278 comm="syz.0.777" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.872600][ T45] hid-generic 0003:80046D:C082.0002: item fetching failed at offset 0/1 [ 59.922617][ T45] hid-generic 0003:80046D:C082.0002: probe with driver hid-generic failed with error -22 [ 60.191010][ T431] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 60.211159][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 60.226508][ T36] audit: type=1400 audit(1792027342.698:341): avc: denied { write } for pid=2294 comm="syz.1.785" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.342927][ T431] usb 4-1: not running at top speed; connect to a high speed hub [ 60.351351][ T431] usb 4-1: config 6 has an invalid interface number: 6 but max is 0 [ 60.359493][ T431] usb 4-1: config 6 has no interface number 0 [ 60.365662][ T431] usb 4-1: config 6 interface 6 altsetting 4 endpoint 0xB has invalid maxpacket 65, setting to 64 [ 60.372356][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 60.376372][ T431] usb 4-1: config 6 interface 6 has no altsetting 0 [ 60.382840][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.389251][ T431] usb 4-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 60.396503][ T10] usb 1-1: config 1 has an invalid interface number: 180 but max is 0 [ 60.404533][ T431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.412950][ T10] usb 1-1: config 1 has no interface number 0 [ 60.420691][ T431] usb 4-1: Product: syz [ 60.420709][ T431] usb 4-1: Manufacturer: syz [ 60.427047][ T10] usb 1-1: config 1 interface 180 has no altsetting 0 [ 60.431093][ T431] usb 4-1: SerialNumber: syz [ 60.437900][ T10] usb 1-1: string descriptor 0 read error: -22 [ 60.453266][ T10] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c1.ae [ 60.453704][ T2287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.462425][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.682007][ T10] snd-usb-audio 1-1:1.180: probe with driver snd-usb-audio failed with error -71 [ 60.696054][ T431] usb 4-1: Found UVC 0.00 device syz (174f:8a12) [ 60.696944][ T10] usb 1-1: USB disconnect, device number 7 [ 60.704406][ T431] usb 4-1: No valid video chain found. [ 60.716714][ T431] usb 4-1: USB disconnect, device number 6 [ 61.347027][ T2384] netlink: 176 bytes leftover after parsing attributes in process `syz.3.828'. [ 61.422509][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 61.422526][ T36] audit: type=1400 audit(1792027343.889:347): avc: denied { read append } for pid=2397 comm="syz.1.835" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.458764][ T36] audit: type=1400 audit(1792027343.919:348): avc: denied { open } for pid=2397 comm="syz.1.835" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.581249][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 61.702964][ T2404] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 61.733038][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 61.741745][ T10] usb 1-1: config 6 has an invalid interface number: 6 but max is 0 [ 61.751799][ T10] usb 1-1: config 6 has no interface number 0 [ 61.758108][ T10] usb 1-1: config 6 interface 6 altsetting 4 endpoint 0xB has invalid maxpacket 65, setting to 64 [ 61.768877][ T10] usb 1-1: config 6 interface 6 has no altsetting 0 [ 61.777098][ T10] usb 1-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 61.786413][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.795600][ T10] usb 1-1: Product: syz [ 61.799823][ T10] usb 1-1: Manufacturer: syz [ 61.804596][ T10] usb 1-1: SerialNumber: syz [ 61.809226][ T36] audit: type=1400 audit(1792027344.267:349): avc: denied { bind } for pid=2417 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.829646][ T2380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.042572][ T10] usb 1-1: Found UVC 0.00 device syz (174f:8a12) [ 62.048983][ T10] usb 1-1: No valid video chain found. [ 62.056567][ T10] usb 1-1: USB disconnect, device number 8 [ 62.624673][ T2432] tipc: Started in network mode [ 62.629581][ T2432] tipc: Node identity 2000004, cluster identity 4711 [ 62.636301][ T2432] tipc: Node number set to 33554436 [ 62.780724][ T2431] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 63.243074][ T2458] syz.2.860 uses obsolete (PF_INET,SOCK_PACKET) [ 63.250845][ T36] audit: type=1400 audit(1792027345.696:350): avc: denied { connect } for pid=2457 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.291527][ T36] audit: type=1400 audit(1792027345.736:351): avc: denied { getopt } for pid=2462 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.322433][ T36] audit: type=1400 audit(1792027345.766:352): avc: denied { bind } for pid=2466 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.341682][ T36] audit: type=1400 audit(1792027345.766:353): avc: denied { name_bind } for pid=2466 comm="syz.2.864" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 63.364030][ T36] audit: type=1400 audit(1792027345.766:354): avc: denied { node_bind } for pid=2466 comm="syz.2.864" saddr=ff02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 63.385957][ T36] audit: type=1400 audit(1792027345.815:355): avc: denied { getopt } for pid=2468 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.429577][ T36] audit: type=1400 audit(1792027345.875:356): avc: denied { setopt } for pid=2476 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.817811][ T2506] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 64.315569][ T2545] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 64.508863][ T2572] rust_binder: Write failure EFAULT in pid:641 [ 64.543315][ T2547] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 64.781103][ T2611] netlink: 'syz.3.932': attribute type 27 has an invalid length. [ 64.797861][ T2614] netlink: 'syz.2.933': attribute type 7 has an invalid length. [ 64.805621][ T2614] netlink: 'syz.2.933': attribute type 5 has an invalid length. [ 64.813348][ T2614] netlink: 17 bytes leftover after parsing attributes in process `syz.2.933'. [ 64.919015][ T2624] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 64.926732][ T2624] SELinux: failed to load policy [ 64.946201][ T2599] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 65.054389][ T2645] rust_binder: 2644:2645 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 65.063928][ T2645] rust_binder: Write failure EINVAL in pid:679 [ 65.101174][ T2654] bridge0: port 3(veth0_vlan) entered blocking state [ 65.107939][ T2654] bridge0: port 3(veth0_vlan) entered disabled state [ 65.114701][ T2654] veth0_vlan: entered allmulticast mode [ 65.121409][ T2654] bridge0: port 3(veth0_vlan) entered blocking state [ 65.128121][ T2654] bridge0: port 3(veth0_vlan) entered forwarding state [ 65.279269][ T2647] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 65.964727][ T2710] netlink: 76 bytes leftover after parsing attributes in process `syz.2.972'. [ 65.973732][ T2710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 66.385536][ T2746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 66.607494][ T2757] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 66.646016][ T2767] rust_binder: Write failure EINVAL in pid:709 [ 66.679663][ T2777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 66.762994][ T2791] usb usb5: usbfs: process 2791 (syz.0.1009) did not claim interface 0 before use [ 66.868149][ T2814] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1020'. [ 66.892260][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 66.892277][ T36] audit: type=1400 audit(1792027349.321:364): avc: denied { read } for pid=2817 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.956489][ T2826] __vm_enough_memory: pid: 2826, comm: syz.0.1026, bytes: 11727698087936 not enough memory for the allocation [ 67.012403][ T36] audit: type=1400 audit(1792027349.440:365): avc: denied { nlmsg_write } for pid=2858 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 67.238006][ T2880] usb usb7: usbfs: process 2880 (syz.0.1041) did not claim interface 0 before use [ 67.345924][ T2875] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 67.704817][ T2913] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 67.905032][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.980236][ T2936] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 67.989223][ T2936] overlayfs: missing 'lowerdir' [ 68.056092][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 68.062668][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.071043][ T31] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 68.079482][ T31] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 68.089932][ T31] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 68.099143][ T31] usb 4-1: config 128 has no interface number 0 [ 68.105439][ T31] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 68.116695][ T31] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.126786][ T31] usb 4-1: config 128 interface 127 has no altsetting 0 [ 68.135103][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 68.144209][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.152211][ T31] usb 4-1: Product: syz [ 68.156374][ T31] usb 4-1: Manufacturer: syz [ 68.160979][ T31] usb 4-1: SerialNumber: syz [ 68.220010][ T2951] syz.0.1075: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 68.234954][ T2951] CPU: 0 UID: 0 PID: 2951 Comm: syz.0.1075 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 68.234983][ T2951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.234996][ T2951] Call Trace: [ 68.235003][ T2951] [ 68.235009][ T2951] __dump_stack+0x21/0x30 [ 68.235042][ T2951] dump_stack_lvl+0x140/0x1c0 [ 68.235070][ T2951] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.235097][ T2951] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 68.235109][ T2951] dump_stack+0x19/0x20 [ 68.235122][ T2951] warn_alloc+0x1e7/0x2c0 [ 68.235133][ T2951] ? stack_depot_save_flags+0x399/0x800 [ 68.235145][ T2951] ? __cfi_warn_alloc+0x10/0x10 [ 68.235166][ T2951] ? kasan_save_track+0x3e/0x80 [ 68.235195][ T2951] ? kasan_save_alloc_info+0x3a/0x50 [ 68.235219][ T2951] ? xsk_init_queue+0xb2/0x120 [ 68.235240][ T2951] ? xsk_setsockopt+0x411/0x760 [ 68.235250][ T2951] ? do_sock_setsockopt+0x27c/0x410 [ 68.235262][ T2951] ? __x64_sys_setsockopt+0x18c/0x220 [ 68.235273][ T2951] ? x64_sys_call+0x2adc/0x2ee0 [ 68.235283][ T2951] ? do_syscall_64+0x57/0xf0 [ 68.235292][ T2951] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.235310][ T2951] __vmalloc_node_range_noprof+0x136/0x1300 [ 68.235339][ T2951] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 68.235363][ T2951] ? kasan_save_alloc_info+0x3a/0x50 [ 68.235384][ T2951] ? __kasan_kmalloc+0x96/0xb0 [ 68.235393][ T2951] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.235407][ T2951] vmalloc_user_noprof+0x77/0x90 [ 68.235419][ T2951] ? xskq_create+0xdb/0x290 [ 68.235429][ T2951] xskq_create+0xdb/0x290 [ 68.235440][ T2951] xsk_init_queue+0xb2/0x120 [ 68.235457][ T2951] xsk_setsockopt+0x411/0x760 [ 68.235476][ T2951] ? __cfi_xsk_setsockopt+0x10/0x10 [ 68.235495][ T2951] ? do_futex+0x32a/0x510 [ 68.235514][ T2951] ? errseq_sample+0x48/0x70 [ 68.235530][ T2951] ? file_init_path+0x434/0x590 [ 68.235541][ T2951] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 68.235555][ T2951] ? security_socket_setsockopt+0x3d/0x100 [ 68.235567][ T2951] ? __cfi_xsk_setsockopt+0x10/0x10 [ 68.235577][ T2951] do_sock_setsockopt+0x27c/0x410 [ 68.235593][ T2951] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 68.235616][ T2951] ? __fget_files+0x2bc/0x330 [ 68.235635][ T2951] __x64_sys_setsockopt+0x18c/0x220 [ 68.235658][ T2951] x64_sys_call+0x2adc/0x2ee0 [ 68.235672][ T2951] do_syscall_64+0x57/0xf0 [ 68.235680][ T2951] ? clear_bhb_loop+0x50/0xa0 [ 68.235692][ T2951] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.235704][ T2951] RIP: 0033:0x7efce1b9e559 [ 68.235714][ T2951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.235723][ T2951] RSP: 002b:00007efce2aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.235739][ T2951] RAX: ffffffffffffffda RBX: 00007efce1e25fa0 RCX: 00007efce1b9e559 [ 68.235755][ T2951] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 68.235767][ T2951] RBP: 00007efce1c358b0 R08: 0000000000000029 R09: 0000000000000000 [ 68.235781][ T2951] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 68.235794][ T2951] R13: 00007efce1e26038 R14: 00007efce1e25fa0 R15: 00007ffc607ff258 [ 68.235809][ T2951] [ 68.235823][ T2951] Mem-Info: [ 68.401926][ T31] usb 4-1: USB disconnect, device number 7 [ 68.404035][ T2951] active_anon:40563 inactive_anon:0 isolated_anon:0 [ 68.404035][ T2951] active_file:18251 inactive_file:2348 isolated_file:0 [ 68.404035][ T2951] unevictable:16431 dirty:104 writeback:0 [ 68.404035][ T2951] slab_reclaimable:12452 slab_unreclaimable:63940 [ 68.404035][ T2951] mapped:24915 shmem:33555 pagetables:1387 [ 68.404035][ T2951] sec_pagetables:0 bounce:0 [ 68.404035][ T2951] kernel_misc_reclaimable:0 [ 68.404035][ T2951] free:1469881 free_pcp:6254 free_cma:0 [ 68.435986][ T2007] udevd[2007]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.439307][ T2951] Node 0 active_anon:162252kB inactive_anon:0kB active_file:73004kB inactive_file:9392kB unevictable:65724kB isolated(anon):0kB isolated(file):0kB mapped:99660kB dirty:416kB writeback:0kB shmem:134220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5612kB pagetables:5548kB sec_pagetables:0kB all_unreclaimable? no [ 68.591268][ T36] audit: type=1400 audit(1792027350.970:366): avc: denied { ioctl } for pid=2954 comm="syz.1.1077" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.604045][ T2951] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955032kB mlocked:0kB bounce:0kB free_pcp:5060kB local_pcp:5060kB free_cma:0kB [ 68.706846][ T2951] lowmem_reserve[]: 0 3920 3920 [ 68.712078][ T2951] Normal free:2933164kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:162176kB inactive_anon:0kB active_file:73052kB inactive_file:9392kB unevictable:65724kB writepending:416kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:15316kB local_pcp:12988kB free_cma:0kB [ 68.747669][ T2951] lowmem_reserve[]: 0 0 0 [ 68.752203][ T2951] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 68.767659][ T2951] Normal: 40*4kB (ME) 26*8kB (UME) 20*16kB (UME) 217*32kB (UME) 396*64kB (UME) 154*128kB (UME) 57*256kB (UME) 20*512kB (UME) 5*1024kB (UME) 0*2048kB 697*4096kB (ME) = 2937552kB [ 68.785235][ T2951] 70592 total pagecache pages [ 68.789939][ T2951] 0 pages in swap cache [ 68.794110][ T2951] Free swap = 124472kB [ 68.798260][ T2951] Total swap = 124996kB [ 68.802515][ T2951] 2097051 pages RAM [ 68.806328][ T2951] 0 pages HighMem/MovableOnly [ 68.811031][ T2951] 354583 pages reserved [ 68.815179][ T2951] 0 pages cma reserved [ 68.820322][ T2951] Memory allocations: [ 68.824337][ T2951] 0 B 0 init/main.c:1477 func:do_initcalls [ 68.831553][ T2951] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 68.839615][ T2951] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 68.847273][ T2951] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 68.855191][ T2951] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 68.863245][ T2951] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 68.872273][ T2951] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 68.880419][ T2951] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 68.890959][ T2951] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 68.898924][ T2951] 0 B 0 init/initramfs.c:101 func:find_link [ 69.057406][ T2996] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1096'. [ 69.066663][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 69.075827][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 69.306031][ T3018] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1107'. [ 69.579427][ T36] audit: type=1400 audit(1792027351.993:367): avc: denied { setattr } for pid=3043 comm="iou-wrk-3044" name="" dev="pipefs" ino=50254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 69.876536][ T36] audit: type=1400 audit(1792027352.282:368): avc: denied { create } for pid=3096 comm="syz.2.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 70.866564][ T3138] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1159'. [ 70.876272][ T3138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1159'. [ 71.617952][ T36] audit: type=1400 audit(1792027354.011:369): avc: denied { accept } for pid=3170 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.822898][ T3164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 71.947279][ T3203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 71.957673][ T3207] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1191'. [ 72.002068][ T36] audit: type=1400 audit(1792027354.398:370): avc: denied { ioctl } for pid=3214 comm="syz.1.1195" path="socket:[70904]" dev="sockfs" ino=70904 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.069295][ T36] audit: type=1400 audit(1792027354.458:371): avc: denied { connect } for pid=3227 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.095981][ T36] audit: type=1400 audit(1792027354.458:372): avc: denied { write } for pid=3227 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.141998][ T36] audit: type=1400 audit(1792027354.527:373): avc: denied { block_suspend } for pid=3241 comm="syz.0.1208" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.933433][ T3287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'. [ 73.093339][ T36] audit: type=1400 audit(1792027355.482:374): avc: denied { bind } for pid=3313 comm="syz.3.1242" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.121880][ T36] audit: type=1400 audit(1792027355.482:375): avc: denied { name_bind } for pid=3313 comm="syz.3.1242" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.128308][ T3320] netlink: 'syz.1.1245': attribute type 4 has an invalid length. [ 73.143236][ T36] audit: type=1400 audit(1792027355.482:376): avc: denied { node_bind } for pid=3313 comm="syz.3.1242" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.172982][ T36] audit: type=1400 audit(1792027355.511:377): avc: denied { name_bind } for pid=3317 comm="syz.3.1244" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.405142][ T36] audit: type=1400 audit(1792027355.790:378): avc: denied { ioctl } for pid=3360 comm="syz.3.1261" path="socket:[71220]" dev="sockfs" ino=71220 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.453363][ T36] audit: type=1400 audit(1792027355.839:379): avc: denied { create } for pid=3366 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 73.659388][ T3372] tipc: New replicast peer: 255.255.255.255 [ 73.665574][ T3372] tipc: Enabled bearer , priority 10 [ 74.916873][ T3471] netlink: 'syz.2.1309': attribute type 2 has an invalid length. [ 74.924686][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 75.475755][ T3517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1331'. [ 75.731818][ T3570] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1356'. [ 76.709222][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 76.863217][ T31] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 76.875496][ T31] usb 4-1: config 0 has no interface number 0 [ 76.883220][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 76.892503][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.901016][ T31] usb 4-1: Product: syz [ 76.903672][ T3630] capability: warning: `syz.0.1384' uses deprecated v2 capabilities in a way that may be insecure [ 76.906585][ T31] usb 4-1: Manufacturer: syz [ 76.921782][ T31] usb 4-1: SerialNumber: syz [ 76.927339][ T31] usb 4-1: config 0 descriptor?? [ 77.125404][ T3655] netlink: 480 bytes leftover after parsing attributes in process `syz.1.1396'. [ 77.837760][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 77.837778][ T36] audit: type=1400 audit(1792027360.204:387): avc: denied { bind } for pid=3686 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.938306][ T3699] bridge_slave_0: default FDB implementation only supports local addresses [ 78.011944][ T3709] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1417'. [ 78.740193][ T3766] capability: warning: `syz.2.1443' uses 32-bit capabilities (legacy support in use) [ 78.767587][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 79.339194][ T36] audit: type=1400 audit(1792027361.685:388): avc: denied { mount } for pid=3811 comm="syz.2.1464" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.483497][ T36] audit: type=1400 audit(1792027361.825:389): avc: denied { search } for pid=3831 comm="syz.0.1474" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 79.516301][ T31] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 79.530080][ T36] audit: type=1400 audit(1792027361.855:390): avc: denied { setopt } for pid=3833 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.550307][ T31] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 79.558502][ T36] audit: type=1400 audit(1792027361.855:391): avc: denied { read } for pid=3833 comm="syz.2.1475" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.571564][ T31] asix 4-1:0.251: probe with driver asix failed with error -5 [ 79.583009][ T36] audit: type=1400 audit(1792027361.864:392): avc: denied { read write } for pid=3831 comm="syz.0.1474" name="set_event" dev="tracefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 79.592095][ T31] usb 4-1: USB disconnect, device number 8 [ 79.650335][ T36] audit: type=1400 audit(1792027361.864:393): avc: denied { open } for pid=3831 comm="syz.0.1474" path="/332/trace/set_event" dev="tracefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 79.704543][ T36] audit: type=1400 audit(1792027361.874:394): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.866915][ T65] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 79.898885][ T3882] fuse: blksize only supported for fuseblk [ 79.931156][ T36] audit: type=1400 audit(1792027362.282:395): avc: denied { setopt } for pid=3887 comm="syz.2.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.965783][ T36] audit: type=1400 audit(1792027362.312:396): avc: denied { bind } for pid=3889 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.040722][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.050554][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.064168][ T65] usb 1-1: Dual-Role OTG device on HNP port [ 80.070625][ T65] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 80.079844][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.088751][ C0] ------------[ cut here ]------------ [ 80.094218][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 80.100899][ C0] WARNING: CPU: 0 PID: 3891 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0 [ 80.110878][ C0] Modules linked in: [ 80.114754][ C0] CPU: 0 UID: 0 PID: 3891 Comm: syz.1.1499 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 80.126277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.136318][ C0] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 80.141696][ C0] Code: 4d 00 48 c7 c0 a0 9f 6d 86 49 c7 c0 c0 9f 6d 86 4c 0f 44 c0 48 c7 c7 60 9f 6d 86 48 c7 c6 2b 35 1f 87 44 89 f2 e8 e0 c8 48 fd <0f> 0b e9 4c ff ff ff e8 e4 c9 cd fd 49 bc 00 00 00 00 00 fc ff df [ 80.161296][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 80.167386][ C0] RAX: dfaa0c269cd8c800 RBX: ffff88810d6840b0 RCX: ffff888115ab93c0 [ 80.175355][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 80.183335][ C0] RBP: ffffc900000078a0 R08: ffff8881f6c29593 R09: 1ffff1103ed852b2 [ 80.191301][ C0] R10: dffffc0000000000 R11: ffffed103ed852b3 R12: dffffc0000000000 [ 80.199278][ C0] R13: ffff88810d6840b8 R14: 0000000000000081 R15: ffff88811c4f74ba [ 80.207237][ C0] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 80.216154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.222750][ C0] CR2: 00007f75937ebc40 CR3: 000000011acc8000 CR4: 00000000003526b0 [ 80.230724][ C0] Call Trace: [ 80.233989][ C0] [ 80.236833][ C0] hidg_set_alt+0x138/0xa70 [ 80.241334][ C0] set_config+0x812/0xd10 [ 80.245651][ C0] composite_setup+0x18b0/0x3320 [ 80.250573][ C0] ? __kasan_check_write+0x18/0x20 [ 80.255670][ C0] configfs_composite_setup+0xc6/0x110 [ 80.261118][ C0] dummy_timer+0x2eee/0x4900 [ 80.265701][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 80.271436][ C0] ? sched_clock_cpu+0x75/0x400 [ 80.276275][ C0] ? __kasan_check_read+0x15/0x20 [ 80.281286][ C0] ? __cfi_sched_balance_trigger+0x10/0x10 [ 80.287081][ C0] ? run_posix_cpu_timers+0x2d1/0x620 [ 80.292870][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 80.297795][ C0] ? timerqueue_del+0xd7/0x130 [ 80.302543][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 80.307901][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 80.312825][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 80.318018][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 80.323116][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 80.329229][ C0] hrtimer_run_softirq+0x159/0x560 [ 80.334361][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 80.339573][ C0] handle_softirqs+0x1aa/0x5b0 [ 80.344321][ C0] __irq_exit_rcu+0x47/0xb0 [ 80.348811][ C0] irq_exit_rcu+0xd/0x30 [ 80.353038][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 80.358680][ C0] [ 80.361597][ C0] [ 80.364509][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 80.370511][ C0] RIP: 0010:unmap_page_range+0xae9/0x48f0 [ 80.376241][ C0] Code: 01 00 00 48 8b 18 48 89 de 48 83 e6 08 31 ff e8 1d e8 b6 ff 48 83 e3 08 0f 85 00 30 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 9d 58 10 00 4d 8b 2c 24 4c 89 6c 24 18 4c 89 e3 [ 80.395831][ C0] RSP: 0018:ffffc9000eddf720 EFLAGS: 00000246 [ 80.401890][ C0] RAX: 1ffff11022834c30 RBX: 0000000000000000 RCX: ffff888115ab93c0 [ 80.409861][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.417820][ C0] RBP: ffffc9000eddf9d0 R08: ffff88811e44ded7 R09: 1ffff11023c89bda [ 80.425780][ C0] R10: dffffc0000000000 R11: ffffed1023c89bdb R12: ffff8881141a6180 [ 80.433740][ C0] R13: dffffc0000000000 R14: 000000110c230000 R15: 000000110c400000 [ 80.441702][ C0] ? lru_gen_update_size+0x566/0x620 [ 80.446981][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 80.452429][ C0] ? folio_batch_move_lru+0x39c/0x400 [ 80.457784][ C0] ? uprobe_munmap+0x180/0x580 [ 80.462533][ C0] ? __asan_memcpy+0x5a/0x80 [ 80.467107][ C0] unmap_vmas+0x2dd/0x400 [ 80.471422][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 80.476259][ C0] ? lru_add_drain_cpu+0x338/0x450 [ 80.481352][ C0] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 80.486794][ C0] ? __kasan_check_write+0x18/0x20 [ 80.491920][ C0] exit_mmap+0x28a/0xc20 [ 80.496172][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 80.500936][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 80.505945][ C0] __mmput+0x92/0x330 [ 80.509913][ C0] mmput+0x55/0x170 [ 80.513705][ C0] do_exit+0x9a5/0x2850 [ 80.517868][ C0] ? preempt_schedule_common+0x2d/0x60 [ 80.523311][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 80.528674][ C0] ? __cfi_do_exit+0x10/0x10 [ 80.533281][ C0] ? __kasan_check_write+0x18/0x20 [ 80.538414][ C0] do_group_exit+0x21f/0x2f0 [ 80.543028][ C0] __x64_sys_exit_group+0x43/0x50 [ 80.548058][ C0] x64_sys_call+0x2ed2/0x2ee0 [ 80.552723][ C0] do_syscall_64+0x57/0xf0 [ 80.557142][ C0] ? clear_bhb_loop+0x50/0xa0 [ 80.561822][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.567699][ C0] RIP: 0033:0x7f90e559e559 [ 80.572095][ C0] Code: Unable to access opcode bytes at 0x7f90e559e52f. [ 80.579091][ C0] RSP: 002b:00007fff0000e558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 80.587483][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f90e559e559 [ 80.595438][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.603389][ C0] RBP: 00007fff0000e5bc R08: 0000000000000000 R09: 00000000000927c0 [ 80.611341][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000146 [ 80.619294][ C0] R13: 00000000000927c0 R14: 000000000001382e R15: 00007fff0000e610 [ 80.627249][ C0] [ 80.630271][ C0] ---[ end trace 0000000000000000 ]--- [ 80.635713][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 80.643811][ T65] usb 1-1: can't set config #1, error -32