last executing test programs: 5.680598468s ago: executing program 3 (id=139): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x2, 0x0, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x67, 0x0, 0x2, 0x29, 0x0, @remote, @empty}}}}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000010000), 0x9, 0x101000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r2, 0x4000) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101022000090582"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 4.221607395s ago: executing program 3 (id=161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000f00000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b"], 0xd4}}, 0x0) 4.221471764s ago: executing program 3 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e24, 0xfffd, 0x2, 0x20, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xffffffffffffffff, 0x0, 0x20000000007}, {0x9, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x4, 0x9, 0x110}, [@algo_aead={0x61, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa8, 0x60, "aa3d131e4ee775a19b8f685a0b180bf176e19a822c"}}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c0}, 0x41410) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0x1ff}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'dvmrp1\x00', {0xfffff9d5}, 0x7}) 4.092355818s ago: executing program 3 (id=163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) close_range(r0, 0xffffffffffffffff, 0x204) 4.069802699s ago: executing program 3 (id=164): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x9004}, 0x4) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000100)='S', 0x1}], 0x1}}], 0x1, 0x240880d1) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/dump_invalid_vmcs\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000003700)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x0, 0x2, 0x8000, 0x4ed, 0x6, {0x4, 0x8000000000000000, 0x0, 0x6937, 0x8003, 0x0, 0x3f1b, 0x45, 0x1, 0x1000, 0xaf3e, 0x0, 0x0, 0x1, 0xf0}}, {0x0, 0x16}}}, 0xa0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x1, 0x0, 0x2}) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x7ffffffe) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, &(0x7f0000000240)) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) 3.20719487s ago: executing program 3 (id=167): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xeaa41, 0x4) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) (async) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) (async) ioctl$FICLONE(r2, 0x40049409, r2) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x9, 0x5, 0x3}) (async) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x9, 0x5, 0x3}) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="fa210821000083000021000b03e75300b37488dffc1f57e69cdfbb3d7c61532babcd9f04f6447aff488fcfd9cf74abb38c8d3677900d2839f7bb09492db202badb4f280000000000000000"], 0x0}, 0x0) syz_usb_connect$uac2(0x3, 0xb2, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x5, 0x10, 0x2, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x4, 0x11, 0x2a}, [@source_unit={0x8, 0x24, 0xa, 0x1, 0x4, 0x2, 0x1, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xc3b11a8d8c768f7a, 0xa2, 0x3, 0x0, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x1, 0xb0a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x8, 0x3, "", 's#'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0xdb, 0x58, "ab1240938f7fc8"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xff01, 0xfffa, 0x2a, "5db5850be3e6f1"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x6, 0x2, {0x8, 0x25, 0x1, 0x2, 0x30, 0x5, 0x3815}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x7f, 0xfa, 0x8, 0x8, 0x6}, 0x235, &(0x7f00000002c0)={0x5, 0xf, 0x235, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x9, 0x5, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xe1, 0xc, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f4de228e2d187e6c2293eb1e9f795ea0"}, @generic={0xeb, 0x10, 0x3, "026595761211338fae758dbadd6e55456c3bd5334ef66f3a5d2e2773a5825ae0cd5b1d96ba61a85abaf925bf05351c5dfb7f0f95b3bcfd2284520bdf43fe08341516337a2fcea1c31cb525126965cfc25a400728173108c37289a9ecef73f1a76856b5f33575d198981b9b88014d8da0114c59f737afcb08608bbeb1bea57b2814b8ffaa1ce0a59166d7b3adbe9fbf6ca2b7d2f653a451ce45c4b356b9859f718a40200c24dadfc6995d02110246c660e1d2cbba062a5b63def51cca1031154b0e744cee6452d4ef7780229015ba90c26b4e484c84b34f9bef286691ac2e25a5937e2b8c1e732695"}, @generic={0xba, 0x10, 0x1, "6a7731ca32fc202d7e83f6618602a6fabedcf04d84cf3266416cd3be49e8294e908afbb49dbd7c1a15cac030d184ccb295194dad4e09b6338320688637bc38629baedfdaca0c26fae0ba9466b60c78e519ea8c88942c81fe9d8b53d8522dc57b578b711c9329529263964e15c821e6eb2c5e477f3a06949a5bcf2a55fe3007812630ec9ad07ba6de8654d3885082dc3c12eb71656a2948cef3be4143bca18c6c29ae4626ed6803a122df7e356405d907a7dbb475c43d4a"}, @generic={0x63, 0x10, 0xa, "9158a6a40e7d43cfee68d4638621ac77e5a53e5dc55e2ccd521fd4cab8bbba6df2fc39642992153c5fae2e3a72368f1ce0cfb4fe26f6f80f38b69ba5986bc1b0115005641669cccb5369e73deb1bbc53780a531c05d4d5c6d6694f1d31536949"}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0xff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') exit(0x3) read$FUSE(r4, 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000000c0)=0x2) 2.156726027s ago: executing program 2 (id=169): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x21000000, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.085852848s ago: executing program 2 (id=170): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) setreuid(0xee01, 0xee01) (async) mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$sock(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x56f6}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x10, 0x1, 0x24, 0x9e2e0000}}], 0x10}}], 0x1, 0x0) (async) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x3, 0x8, 0x1) 2.085691688s ago: executing program 2 (id=171): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000000780)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x37}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0, 0xe300}, 0xffffffde}, {{0x0, 0x0, 0x0, 0xffffffffffffff01}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 2.085214168s ago: executing program 2 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000580)) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00!\x00'}, @local=@item_4={0x3, 0x2, 0x0, "034d2500"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r3 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0x1, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x13, 0x9}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x0, 0x6, 0x8, 0xfc, 0x40, 0x7}, 0x50, &(0x7f0000000a00)={0x5, 0xf, 0x50, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x2, 0x0, 0x9, [0xc000]}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xfff, 0x88f, 0x9, [0x3f, 0x3fc0, 0x0, 0x30, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x80, 0x9, 0x7, 0x7}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x3, 0x4, 0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42a}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "3ae9b84fc96783b5b0bb130ba7401fe78137aaca5521107fd2855f0c900f683122b37702282adbbcaa59e87e93cf4f75d6d72b2bcf8f3f4b3f33b2cddbbf585e20efbba82939d09427ba63c661dbd2ae5412fd75b990cc1f15d3b0ca243bd2b82c0a46fdb3"}}, {0xab, &(0x7f0000000b40)=@string={0xab, 0x3, "7faf8ed8b14de3dd361af9ec579b014c50a92e75c9e999fe733092e13b08aa46d6763d124cbfe6e705df64f9bfa03162b3a886dde1420ef84a0f8b87d0cc2fafb839c075ba322f3d152f71762ca5ce825115affbba6b4ee65ef65f9da63e982b78b49e58c8c2c914eaa287e270d1b4f3ad9fa68f230238616f8b3a9688bb39584aaccfb50c8f7dda9625d40d09dc14bb5adea36e9b62ed24a73d8be46265e69fd5cf0f74105cb177de"}}, {0xdd, &(0x7f0000000c00)=@string={0xdd, 0x3, "48602016da7095e3ab7b01bce939e8dddcae79e28f5a72054348acd51d9557e721e7327d71afd787e264881aa0b3364439ae97065d3b759c8410245aec2bf870e7da064b38129870aa7ea1004ef7a5a05e4851c4df82bd8ad26602204f960e4ca4cf17aa862d08674ee224fe289b66da8bd0c327457bf83f7d2d35f001c22b6df3dd9d96e5d384949212683b51d2846cb7d4e64db41d64dbdee792bbfb75027e0ab5c6a22e7153b8a764e8db11ba674b29c5bf41621d9a695ed67d5243c9aba717718b7b49e89a07a9019295294de18db98e53fa02684545126092"}}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014}) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r8, r7, 0x7, r6, &(0x7f0000000080)={r5, r4, 0x8000000}) syz_usb_control_io$printer(r3, &(0x7f0000000e00)={0x14, &(0x7f0000000d80)={0x20, 0x8, 0x22, {0x22, 0x23, "1793b0ac99a8ccb7eebd41cb1f5c006a49237f7b71a03dada52b7fec83c647c2"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f0000001040)={0x34, &(0x7f0000000e40)={0x40, 0x15, 0x71, "f4199d48a1b88665967817e1f1ea63127ef8e258b163b2a8d37f7c3130d3b7e091c0386ce6adbed8e7befaddaab5937c2697951957e053b7572bb54ccba318b51f31ceb0d1709225bbf41a792378c0e9084e29002919fc58dc24b94f2af82aa625ca0475f4203b509d9d1df0982afcfc01"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000f40)={0x20, 0x0, 0x69, {0x67, "9618d95936940bf2d8b9afbce636bc3475300622a09b859a02d4fe12024d76166970d7e683025c4aaee42505b4515d4801b95c3559ee910771fa230d82bf1b41fc81df4988540aaaa27bce8db5ef652e0ef8d65b474bade6087c8e43387f2eebbe7bb2a8298fb1"}}, &(0x7f0000000fc0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000001000)={0x20, 0x0, 0x1, 0xf}}) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x9, 0x4e, {0x4e, 0x11, "b86ad5c69528274eb6bb281710d4f7fe9b3fb49e0935446e7fded1e7219a20b265af39edda2d9c97875c5203b8e5b5cceaa97d4a8991e2751a4cc7a33f311180e70c22c4c1cb027caf3fd36a"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0xd, 0xde, "eeaf60d93b7856890296d26a7b9fd7db1a891726f9ba8a7531f115cdf6326e02b1a1e729914ed7b28cb81f1828e09804092d5d843c75cb8b1f2d0ee3daca234d6d89868c51d5e53942e90add0dd25c0bfff0f2e7ec8e936cab1fb69ba837086ee57076527e8c2c0fbf7c216d9dabad1da0fbdf23c6f4b92f65c33b02e06dc17996189b6279bba0f104615af0cca42c4f30b76f63c1fe2b5a080026fb68bca0d6a483ed4118c23706c616e3ba1446871af60a7f8819a25809ebb4fcb09f1e0581fd9ce15ec6eccadad3d43ff33ae52be093819d9daa517bb5a18783d99ba7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x2, "52c9"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "6838a3"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "b6"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "410ebe01"}, &(0x7f0000000480)={0x20, 0x85, 0x3, 'I`V'}}) ioctl$HIDIOCSFLAG(r9, 0x4004480f, &(0x7f00000000c0)=0x2) 1.683074408s ago: executing program 1 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x30000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x20, r4, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x100000000004, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x1000, 0x3, 0x5, 0x10009c2, 0x7, 0x2000000000000000, 0xc, 0xb, 0x7fff, 0xffffffffffffffff], 0x100000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.644181769s ago: executing program 0 (id=182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x8000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000003500)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000001029"], 0x4a) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="7e4575393ba4fec0c17a9d0b70048e65c5c469228c646036729608f930158cc6de2a6c7b28ca96ecfa6a265bdff4b6daa16b823e61ad0e06aac41d866fedb48eeed03f74248d94ce3490829e09bc910b58e16ddc03c990a265dbaa36e54d2b21e77aaccca0f99f430956941e6538fb2d63ecde88507244cc3746f9ea7dc3dfae4eec67d2cbf63e47", 0x88}], 0xd}}, {{0x0, 0x0, &(0x7f0000000700), 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)}}], 0x3, 0x4d0c1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff) r4 = syz_clone(0xbc8a0080, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x258}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r5, 0xffffffff80000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, 0x0) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000000240)="cdd8b0409fe4739b2b766a09039eee17e17e3a93505f0101a0659a51d2f0ad21cd747ae384a4d40527675e0d3da03f479f88513161100a3d5ac8642b10b6d060b4e8c9099cdca83039455f6d00fb04a454576a5f69e2fae7a921edd431f42d60a48bf6b30108743472d84bb661c383b333ede9e594df91c956e40e70bae5550ee3b072737fd10ab57d4739d6ed63217a02e3147e947ed12e9ac48cafdb5364b500ed0eef742a2f5b6263b5770bb329e2c42a84311e1bc7d328dbaf731c7131fb85f4cc349a8d0b7778da1ab4f0ab8dfe2edbf7fa859fe2a87b09d963bbfe06c49e88ab84aafe6868c3aeedf6c78f2adfc396c20e", 0xf4) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)="5d14fecea2d7afa4666f671563c97cdb43cdc7d9ad8140e1130b928cb1c21b5321dd86e5c0099b3b1a", 0x29) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) 1.565794811s ago: executing program 0 (id=183): creat(&(0x7f0000000080)='./file0\x00', 0x47) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x10000, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7f6f, &(0x7f00000003c0)={0x0, 0x441b, 0x8000, 0x0, 0x374}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_ublk_add_dev(0xffffffffffffffff, r3, r1, r2, &(0x7f00000002c0)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdad, 0x0, 0x0, 0x1000, 0x1cca, 0x0, 0x0, 0xa}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x400, 0x401, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x3e1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa028, 0x20, 0x80015, 0x7b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1.565562161s ago: executing program 1 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a20c00", "9e8ecc7cb535247672a2eff75b30ff2bb17b550800", "0002d900", "a1014200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a11fe8000000000000000000000000000aaff0200"/51], 0xffe) 1.476304333s ago: executing program 1 (id=185): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c132023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1000000006153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5619dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = memfd_create(&(0x7f00000006c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc(d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x91_y\xd7mwu\x920x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (fail_nth: 22) 1.344219627s ago: executing program 1 (id=188): r0 = getpid() syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) close(0x3) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40, 0x2, 0x35}, 0x18) mkdirat(r1, &(0x7f0000000240)='./file0/file0\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x26, 0x5, 0xffffffff8e040048, 0x0, 0xfffc, 0x8, 0xfffff5a3, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x22841, 0xb3836f6d7a15f29) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) syz_pidfd_open(r0, 0x0) r5 = syz_open_procfs(r0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) mmap$binder(&(0x7f0000135000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xa45) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, 0x0, 0x38) mount$9p_xen(0x0, &(0x7f0000004580)='.\x00', &(0x7f00000045c0), 0x1000000, &(0x7f0000004940)={'trans=xen,', {[{@version_L}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_gt}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@pcr={'pcr', 0x3d, 0x23}}, {@fsname={'fsname', 0x3d, '/dev/md0\x00'}}, {@uid_eq}, {@obj_role={'obj_role', 0x3d, '&&'}}, {@fowner_lt}, {@obj_user={'obj_user', 0x3d, 'rlimit'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) 1.344116477s ago: executing program 1 (id=189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto(r0, &(0x7f0000000380)="50fbdf12a30d7a48b2c51cb3bf52a6b2cdb77ef9af01603a3e68adff5949f1a05ad2fbb22bae1b24430193d8533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1ebeeafb3b9c984e706165f40ce186881f478339b8932380347120b327f3ea27c07e28e8b0c063013d797231dcd24fbb4eab58234f90e5301df6139d990980000088aabbdce8733c7738e96970380fbdd930e0a44e8cd1cb8bcabcce30059c2ee4b77c9be6600795ab307c6a560439f58627d94273", 0xc4, 0x44, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x2c, 0x0, 0x0) 1.298952388s ago: executing program 0 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000000100007e"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 539.442267ms ago: executing program 1 (id=191): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac059c0200000000000109022400010000300909040000fe0300010009210500fc0122280009058103ff03038302586ce8a48263219d80e0c056382dfa0af7e1d541c0dec730c7ea9b75de58ba1a38ee1037424982e8257eabeb"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x400017e) unlink(&(0x7f0000005cc0)='./file0\x00') write$binfmt_format(r1, &(0x7f0000000080)='1\x00', 0x2) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000002c0)={0x0, 0x31, 0x28, {0x28, 0x3, "f17d3816e9bc787a4d4cdbb3871b0127a523da3556382b1cb20f9dba43b59e7b4eafbd3dff23"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$midi(0x3, 0x0, 0x0, 0x0) 601.47µs ago: executing program 0 (id=192): openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (fail_nth: 8) 412.62µs ago: executing program 2 (id=193): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0xffffffffffffffe8, 0x0}, 0x2}, {{0x0, 0xe300, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 0s ago: executing program 2 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1c}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xea00, 0xfffffffffffffffa, 0x0, 0x8, 0x6}}]}) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000300)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 20.271631][ T36] audit: type=1400 audit(1788367843.590:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.272843][ T286] cgroup: Unknown subsys name 'net' [ 20.294306][ T36] audit: type=1400 audit(1788367843.590:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.322099][ T36] audit: type=1400 audit(1788367843.650:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.322226][ T286] cgroup: Unknown subsys name 'devices' [ 20.424794][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.430419][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.542836][ T36] audit: type=1400 audit(1788367843.860:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.566217][ T36] audit: type=1400 audit(1788367843.870:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.591032][ T36] audit: type=1400 audit(1788367843.870:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.618880][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.627705][ T36] audit: type=1400 audit(1788367843.950:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.653219][ T36] audit: type=1400 audit(1788367843.950:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.686009][ T36] audit: type=1400 audit(1788367844.010:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.686472][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.711615][ T36] audit: type=1400 audit(1788367844.010:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.524765][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.531839][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.538953][ T295] bridge_slave_0: entered allmulticast mode [ 21.545316][ T295] bridge_slave_0: entered promiscuous mode [ 21.562291][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.569402][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.576512][ T295] bridge_slave_1: entered allmulticast mode [ 21.582637][ T295] bridge_slave_1: entered promiscuous mode [ 21.634491][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.641554][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.648923][ T296] bridge_slave_0: entered allmulticast mode [ 21.655154][ T296] bridge_slave_0: entered promiscuous mode [ 21.664108][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.671147][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.678261][ T294] bridge_slave_0: entered allmulticast mode [ 21.684481][ T294] bridge_slave_0: entered promiscuous mode [ 21.690747][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.697861][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.704966][ T293] bridge_slave_0: entered allmulticast mode [ 21.711152][ T293] bridge_slave_0: entered promiscuous mode [ 21.717441][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.724533][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.731600][ T296] bridge_slave_1: entered allmulticast mode [ 21.737904][ T296] bridge_slave_1: entered promiscuous mode [ 21.749732][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.756852][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.763940][ T294] bridge_slave_1: entered allmulticast mode [ 21.770052][ T294] bridge_slave_1: entered promiscuous mode [ 21.776224][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.783271][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.790316][ T293] bridge_slave_1: entered allmulticast mode [ 21.796613][ T293] bridge_slave_1: entered promiscuous mode [ 21.946908][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.953987][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.961271][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.968327][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.985982][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.993054][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.000345][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.007381][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.019599][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.026671][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.033968][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.040984][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.054019][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.061075][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.068370][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.075409][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.107142][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.114576][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.121747][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.129899][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.137108][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.144615][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.151828][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.159125][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.174861][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.181916][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.202534][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.209624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.218113][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.225166][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.238429][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.245575][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.258194][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.265247][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.279738][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.286798][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.312130][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.319207][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.326950][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.334010][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.359648][ T295] veth0_vlan: entered promiscuous mode [ 22.367689][ T296] veth0_vlan: entered promiscuous mode [ 22.385472][ T293] veth0_vlan: entered promiscuous mode [ 22.399367][ T296] veth1_macvtap: entered promiscuous mode [ 22.407775][ T295] veth1_macvtap: entered promiscuous mode [ 22.434705][ T293] veth1_macvtap: entered promiscuous mode [ 22.453900][ T294] veth0_vlan: entered promiscuous mode [ 22.471021][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.491948][ T294] veth1_macvtap: entered promiscuous mode [ 22.526917][ T317] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.543807][ T314] mmap: syz.2.3 (314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 22.586102][ T317] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 22.607012][ T327] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.640979][ T327] __vm_enough_memory: pid: 327, comm: syz.0.5, bytes: 4403415220224 not enough memory for the allocation [ 22.732332][ T333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 22.822993][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.838507][ T336] netlink: 'syz.0.7': attribute type 16 has an invalid length. [ 22.842916][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.984680][ T312] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 23.005017][ T312] usb 3-1: config 0 has no interface number 0 [ 23.011152][ T312] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.022111][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 23.044403][ T9] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 23.054676][ T312] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.072894][ T312] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 23.082003][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.103228][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 23.112339][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.133418][ T9] usb 4-1: Product: syz [ 23.137622][ T9] usb 4-1: Manufacturer: syz [ 23.142239][ T9] usb 4-1: SerialNumber: syz [ 23.147815][ T312] usb 3-1: config 0 descriptor?? [ 23.155036][ T9] usb 4-1: config 0 descriptor?? [ 23.162652][ T9] usb 4-1: bad CDC descriptors [ 23.167929][ T9] usb 4-1: unsupported MDLM descriptors [ 23.389369][ T45] usb 4-1: USB disconnect, device number 2 [ 23.564716][ T312] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 23.577523][ T312] hid_prodikeys: hid-prodikeys: failed to find output report [ 23.577523][ T312] [ 23.638874][ T344] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 23.648698][ T344] SELinux: failed to load policy [ 23.657612][ T344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 23.768250][ T66] usb 3-1: USB disconnect, device number 2 [ 23.886908][ T347] FAULT_INJECTION: forcing a failure. [ 23.886908][ T347] name failslab, interval 1, probability 0, space 0, times 1 [ 23.899844][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz.0.10 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 23.899878][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 23.899892][ T347] Call Trace: [ 23.899896][ T347] [ 23.899900][ T347] __dump_stack+0x21/0x30 [ 23.899924][ T347] dump_stack_lvl+0x140/0x1c0 [ 23.899938][ T347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.899953][ T347] ? release_sock+0x171/0x1f0 [ 23.899964][ T347] dump_stack+0x19/0x20 [ 23.899976][ T347] should_fail_ex+0x3c2/0x510 [ 23.899988][ T347] should_failslab+0xac/0x100 [ 23.900001][ T347] kmem_cache_alloc_node_noprof+0x45/0x420 [ 23.900012][ T347] ? netlink_data_ready+0x20/0x20 [ 23.900026][ T347] ? __alloc_skb+0x10c/0x360 [ 23.900037][ T347] __alloc_skb+0x10c/0x360 [ 23.900048][ T347] netlink_alloc_large_skb+0xf7/0x1b0 [ 23.900060][ T347] netlink_sendmsg+0x576/0xad0 [ 23.900074][ T347] ? __cfi_netlink_sendmsg+0x10/0x10 [ 23.900087][ T347] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 23.900099][ T347] ? security_socket_sendmsg+0x3d/0x100 [ 23.900113][ T347] ____sys_sendmsg+0x99e/0xa00 [ 23.900126][ T347] ? __import_iovec+0x3fa/0x7d0 [ 23.900140][ T347] ? __sys_sendmsg_sock+0x50/0x50 [ 23.900153][ T347] ? import_iovec+0x80/0xb0 [ 23.900167][ T347] ___sys_sendmsg+0x2a6/0x370 [ 23.900180][ T347] ? __sys_sendmsg+0x260/0x260 [ 23.900193][ T347] ? __cfi_futex_wait+0x10/0x10 [ 23.900204][ T347] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 23.900215][ T347] ? __fget_files+0x2bc/0x330 [ 23.900227][ T347] __x64_sys_sendmsg+0x1be/0x2a0 [ 23.900240][ T347] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 23.900254][ T347] ? __kasan_check_write+0x18/0x20 [ 23.900264][ T347] ? fpregs_restore_userregs+0x11c/0x260 [ 23.900276][ T347] ? switch_fpu_return+0x12/0x20 [ 23.900288][ T347] x64_sys_call+0x2a4c/0x2ee0 [ 23.900298][ T347] do_syscall_64+0x57/0xf0 [ 23.900312][ T347] ? clear_bhb_loop+0x50/0xa0 [ 23.900324][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.900335][ T347] RIP: 0033:0x7fee5db9e159 [ 23.900355][ T347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.900365][ T347] RSP: 002b:00007fee5eaae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 23.900383][ T347] RAX: ffffffffffffffda RBX: 00007fee5de25fa0 RCX: 00007fee5db9e159 [ 23.900391][ T347] RDX: 0000000000004010 RSI: 00002000000007c0 RDI: 0000000000000004 [ 23.900399][ T347] RBP: 00007fee5dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 23.900406][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.900413][ T347] R13: 00007fee5de26038 R14: 00007fee5de25fa0 R15: 00007fff4121aba8 [ 23.900421][ T347] [ 23.942818][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.202916][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.342815][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 24.352825][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.364102][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.364918][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.374010][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.385235][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.397291][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 24.413195][ T355] rust_binder: 354:355 got transaction to invalid handle 2147483646 [ 24.419505][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.426530][ T355] rust_binder: 354:355 transaction call to 0:0 failed ENOENT, code 0 size 104-24 [ 24.435406][ T45] usb 2-1: config 0 descriptor?? [ 24.445835][ T312] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 24.458638][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.467515][ T312] usb 4-1: config 0 descriptor?? [ 24.489800][ T9] rust_binder: 354: undelivered TRANSACTION_ERROR: 29201 [ 24.762829][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.861258][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 24.868589][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 24.875698][ T349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.875910][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 24.886126][ T349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.891509][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 24.906629][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 24.910708][ T312] dragonrise 0003:0079:0006.0003: No inputs registered, leaving [ 24.914256][ T45] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 24.922315][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 24.930423][ T45] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 24.938562][ T312] dragonrise 0003:0079:0006.0003: hidraw1: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 24.957627][ T312] dragonrise 0003:0079:0006.0003: no inputs found [ 24.962789][ T45] microsoft 0003:045E:07DA.0002: no inputs found [ 24.966657][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.974434][ T45] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 24.991454][ T312] dragonrise 0003:0079:0006.0003: force feedback init failed [ 24.999174][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.008539][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.020185][ T9] usb 1-1: config 0 descriptor?? [ 25.026081][ T9] hub 1-1:0.0: USB hub found [ 25.090824][ T312] usb 2-1: USB disconnect, device number 2 [ 25.169663][ T326] usb 4-1: USB disconnect, device number 3 [ 25.226623][ T9] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 25.444517][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 25.451051][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 25.473668][ T9] usb 1-1: USB disconnect, device number 2 [ 25.527142][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 25.527157][ T36] audit: type=1400 audit(1788367848.850:136): avc: denied { mounton } for pid=362 comm="syz.2.15" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 25.531773][ T363] capability: warning: `syz.2.15' uses deprecated v2 capabilities in a way that may be insecure [ 25.533441][ T36] audit: type=1400 audit(1788367848.850:137): avc: denied { read write } for pid=362 comm="syz.2.15" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.590371][ T36] audit: type=1400 audit(1788367848.850:138): avc: denied { open } for pid=362 comm="syz.2.15" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.613867][ T36] audit: type=1400 audit(1788367848.850:139): avc: denied { create } for pid=362 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.633761][ T36] audit: type=1400 audit(1788367848.850:140): avc: denied { setopt } for pid=362 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.701170][ T36] audit: type=1400 audit(1788367849.020:141): avc: denied { create } for pid=367 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 25.735844][ T36] audit: type=1400 audit(1788367849.020:142): avc: denied { create } for pid=367 comm="syz.3.17" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.757300][ T36] audit: type=1400 audit(1788367849.020:143): avc: denied { map } for pid=367 comm="syz.3.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.801705][ T36] audit: type=1400 audit(1788367849.020:144): avc: denied { read write } for pid=367 comm="syz.3.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.828669][ T36] audit: type=1400 audit(1788367849.020:145): avc: denied { map } for pid=367 comm="syz.3.17" path="socket:[4336]" dev="sockfs" ino=4336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 25.833159][ T368] futex_wake_op: syz.3.17 tries to shift op by 144; fix this program [ 25.966771][ T381] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.007846][ T387] rust_binder: 386:387 got transaction to invalid handle 2147483646 [ 26.015970][ T387] rust_binder: 386:387 transaction call to 0:0 failed ENOENT, code 0 size 104-24 [ 26.027311][ T9] rust_binder: 386: undelivered TRANSACTION_ERROR: 29201 [ 26.156943][ T398] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 26.166796][ T398] SELinux: failed to load policy [ 26.173667][ T398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 26.323056][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.382826][ T312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.462846][ T399] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.473852][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.483833][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.496648][ T9] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 26.505885][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.514611][ T9] usb 1-1: config 0 descriptor?? [ 26.532818][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 26.539097][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.550087][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.559159][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.568036][ T312] usb 2-1: config 0 descriptor?? [ 26.576036][ T312] hub 2-1:0.0: USB hub found [ 26.612820][ T399] usb 4-1: Using ep0 maxpacket: 16 [ 26.625192][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.638316][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.648300][ T399] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.665723][ T399] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.675127][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.684980][ T399] usb 4-1: config 0 descriptor?? [ 26.737618][ T404] futex_wake_op: syz.2.28 tries to shift op by 144; fix this program [ 26.775200][ T312] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 26.790288][ T406] FAULT_INJECTION: forcing a failure. [ 26.790288][ T406] name failslab, interval 1, probability 0, space 0, times 0 [ 26.803270][ T406] CPU: 1 UID: 0 PID: 406 Comm: syz.2.29 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 26.803303][ T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.803315][ T406] Call Trace: [ 26.803321][ T406] [ 26.803329][ T406] __dump_stack+0x21/0x30 [ 26.803361][ T406] dump_stack_lvl+0x140/0x1c0 [ 26.803383][ T406] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.803408][ T406] ? release_sock+0x171/0x1f0 [ 26.803428][ T406] dump_stack+0x19/0x20 [ 26.803451][ T406] should_fail_ex+0x3c2/0x510 [ 26.803472][ T406] should_failslab+0xac/0x100 [ 26.803503][ T406] kmem_cache_alloc_node_noprof+0x45/0x420 [ 26.803522][ T406] ? netlink_data_ready+0x20/0x20 [ 26.803545][ T406] ? __alloc_skb+0x10c/0x360 [ 26.803567][ T406] __alloc_skb+0x10c/0x360 [ 26.803587][ T406] netlink_alloc_large_skb+0xf7/0x1b0 [ 26.803607][ T406] netlink_sendmsg+0x576/0xad0 [ 26.803632][ T406] ? __cfi_netlink_sendmsg+0x10/0x10 [ 26.803657][ T406] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 26.803677][ T406] ? security_socket_sendmsg+0x3d/0x100 [ 26.803697][ T406] ____sys_sendmsg+0x99e/0xa00 [ 26.803722][ T406] ? __import_iovec+0x3fa/0x7d0 [ 26.803745][ T406] ? __sys_sendmsg_sock+0x50/0x50 [ 26.803768][ T406] ? import_iovec+0x80/0xb0 [ 26.803793][ T406] ___sys_sendmsg+0x2a6/0x370 [ 26.803814][ T406] ? __kasan_check_read+0x15/0x20 [ 26.803835][ T406] ? __sys_sendmsg+0x260/0x260 [ 26.803859][ T406] ? __cfi_futex_wait+0x10/0x10 [ 26.803879][ T406] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 26.803900][ T406] ? __fget_files+0x2bc/0x330 [ 26.803923][ T406] __x64_sys_sendmsg+0x1be/0x2a0 [ 26.803947][ T406] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 26.803962][ T406] ? __kasan_check_write+0x18/0x20 [ 26.803972][ T406] ? fpregs_restore_userregs+0x11c/0x260 [ 26.803989][ T406] ? switch_fpu_return+0x12/0x20 [ 26.804008][ T406] x64_sys_call+0x2a4c/0x2ee0 [ 26.804027][ T406] do_syscall_64+0x57/0xf0 [ 26.804054][ T406] ? clear_bhb_loop+0x50/0xa0 [ 26.804075][ T406] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.804090][ T406] RIP: 0033:0x7ff32139e159 [ 26.804100][ T406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.804109][ T406] RSP: 002b:00007ff31fde3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 26.804122][ T406] RAX: ffffffffffffffda RBX: 00007ff321625fa0 RCX: 00007ff32139e159 [ 26.804130][ T406] RDX: 0000000000004010 RSI: 00002000000007c0 RDI: 0000000000000004 [ 26.804137][ T406] RBP: 00007ff321435024 R08: 0000000000000000 R09: 0000000000000000 [ 26.804146][ T406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.804157][ T406] R13: 00007ff321626038 R14: 00007ff321625fa0 R15: 00007fffa0fb3718 [ 26.804175][ T406] [ 26.924547][ T394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.097508][ T394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.131226][ T9] dragonrise 0003:0079:0006.0004: No inputs registered, leaving [ 27.139468][ T9] dragonrise 0003:0079:0006.0004: hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 27.152290][ T399] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 27.159646][ T399] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 27.166989][ T399] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 27.174257][ T9] dragonrise 0003:0079:0006.0004: no inputs found [ 27.180712][ T9] dragonrise 0003:0079:0006.0004: force feedback init failed [ 27.188192][ T399] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 27.195482][ T399] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 27.203232][ T399] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 27.211445][ T399] microsoft 0003:045E:07DA.0005: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 27.223400][ T399] microsoft 0003:045E:07DA.0005: no inputs found [ 27.231440][ T399] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 27.257896][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 27.265729][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 27.293282][ T312] usb 2-1: USB disconnect, device number 3 [ 27.333294][ T399] usb 1-1: USB disconnect, device number 3 [ 27.359752][ T310] usb 4-1: USB disconnect, device number 4 [ 27.562837][ T66] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.713944][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.725013][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.734798][ T66] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 27.743907][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.752353][ T66] usb 3-1: config 0 descriptor?? [ 28.162927][ T66] hid-generic 0003:04F3:0755.0006: unknown main item tag 0x0 [ 28.170496][ T66] hid-generic 0003:04F3:0755.0006: unknown main item tag 0x0 [ 28.214648][ T66] hid-generic 0003:04F3:0755.0006: failed to start in urb: -90 [ 28.223065][ T66] hid-generic 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 28.328485][ T513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 28.479148][ T66] usb 3-1: USB disconnect, device number 3 [ 29.070191][ T544] FAULT_INJECTION: forcing a failure. [ 29.070191][ T544] name failslab, interval 1, probability 0, space 0, times 0 [ 29.083000][ T544] CPU: 0 UID: 0 PID: 544 Comm: syz.1.57 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 29.083029][ T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.083036][ T544] Call Trace: [ 29.083040][ T544] [ 29.083044][ T544] __dump_stack+0x21/0x30 [ 29.083063][ T544] dump_stack_lvl+0x140/0x1c0 [ 29.083077][ T544] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.083091][ T544] dump_stack+0x19/0x20 [ 29.083104][ T544] should_fail_ex+0x3c2/0x510 [ 29.083117][ T544] should_failslab+0xac/0x100 [ 29.083130][ T544] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 29.083142][ T544] ? pcpu_block_refresh_hint+0x201/0x320 [ 29.083155][ T544] ? kstrdup_const+0x45/0x60 [ 29.083163][ T544] ? pcpu_block_update_hint_alloc+0x8a0/0xc50 [ 29.083176][ T544] kstrdup+0x4d/0x130 [ 29.083190][ T544] ? kstrdup_const+0x3a/0x60 [ 29.083198][ T544] kstrdup_const+0x45/0x60 [ 29.083207][ T544] __kernfs_new_node+0xaa/0x740 [ 29.083220][ T544] ? mutex_unlock+0x90/0x240 [ 29.083232][ T544] ? pcpu_alloc_noprof+0x1440/0x1440 [ 29.083243][ T544] ? kernfs_new_node+0x280/0x280 [ 29.083256][ T544] ? pcpu_alloc_noprof+0xd93/0x1440 [ 29.083268][ T544] kernfs_new_node+0x154/0x280 [ 29.083280][ T544] kernfs_create_dir_ns+0x4b/0x130 [ 29.083294][ T544] cgroup_mkdir+0x396/0x1600 [ 29.083314][ T544] ? __kasan_check_write+0x18/0x20 [ 29.083325][ T544] ? __cfi_cgroup_mkdir+0x10/0x10 [ 29.083336][ T544] kernfs_iop_mkdir+0x1bb/0x2d0 [ 29.083350][ T544] vfs_mkdir+0x591/0x810 [ 29.083365][ T544] do_mkdirat+0x240/0x530 [ 29.083378][ T544] ? __cfi_do_mkdirat+0x10/0x10 [ 29.083392][ T544] ? __kasan_check_write+0x18/0x20 [ 29.083401][ T544] ? getname_flags+0x203/0x6b0 [ 29.083412][ T544] ? __kasan_check_read+0x15/0x20 [ 29.083422][ T544] __x64_sys_mkdirat+0x8b/0xa0 [ 29.083435][ T544] x64_sys_call+0x2ba8/0x2ee0 [ 29.083445][ T544] do_syscall_64+0x57/0xf0 [ 29.083458][ T544] ? clear_bhb_loop+0x50/0xa0 [ 29.083471][ T544] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.083482][ T544] RIP: 0033:0x7f3238f9e159 [ 29.083492][ T544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.083500][ T544] RSP: 002b:00007f3239eea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 29.083512][ T544] RAX: ffffffffffffffda RBX: 00007f3239225fa0 RCX: 00007f3238f9e159 [ 29.083520][ T544] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 29.083527][ T544] RBP: 00007f3239eea090 R08: 0000000000000000 R09: 0000000000000000 [ 29.083533][ T544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.083539][ T544] R13: 00007f3239226038 R14: 00007f3239225fa0 R15: 00007ffd84dbb4e8 [ 29.083548][ T544] [ 29.417700][ T559] __vm_enough_memory: pid: 559, comm: syz.1.63, bytes: 4403415220224 not enough memory for the allocation [ 29.424470][ T555] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 29.441065][ T312] rust_binder: 554: undelivered TRANSACTION_ERROR: 29189 [ 29.651260][ T587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 29.662353][ T589] FAULT_INJECTION: forcing a failure. [ 29.662353][ T589] name failslab, interval 1, probability 0, space 0, times 0 [ 29.675042][ T589] CPU: 1 UID: 0 PID: 589 Comm: syz.2.74 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 29.675078][ T589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.675090][ T589] Call Trace: [ 29.675097][ T589] [ 29.675106][ T589] __dump_stack+0x21/0x30 [ 29.675137][ T589] dump_stack_lvl+0x140/0x1c0 [ 29.675163][ T589] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.675189][ T589] dump_stack+0x19/0x20 [ 29.675213][ T589] should_fail_ex+0x3c2/0x510 [ 29.675235][ T589] should_failslab+0xac/0x100 [ 29.675258][ T589] kmem_cache_alloc_noprof+0x42/0x410 [ 29.675278][ T589] ? security_inode_alloc+0x51/0x230 [ 29.675300][ T589] ? kasan_save_alloc_info+0x3a/0x50 [ 29.675318][ T589] security_inode_alloc+0x51/0x230 [ 29.675341][ T589] inode_init_always_gfp+0x756/0x9e0 [ 29.675364][ T589] alloc_inode+0xc5/0x270 [ 29.675387][ T589] iget_locked+0x198/0x9a0 [ 29.675411][ T589] ? __cfi_iget_locked+0x10/0x10 [ 29.675435][ T589] ? __kasan_check_write+0x18/0x20 [ 29.675453][ T589] ? rwsem_read_trylock+0x275/0x5a0 [ 29.675481][ T589] ? downgrade_write+0x470/0x470 [ 29.675507][ T589] ? kasan_save_alloc_info+0x3a/0x50 [ 29.675524][ T589] ? __kasan_slab_alloc+0x73/0x90 [ 29.675548][ T589] kernfs_get_inode+0x50/0x830 [ 29.675570][ T589] kernfs_iop_lookup+0x213/0x320 [ 29.675594][ T589] lookup_one_qstr_excl+0x129/0x280 [ 29.675617][ T589] do_rmdir+0x1d2/0x590 [ 29.675641][ T589] ? __cfi_do_rmdir+0x10/0x10 [ 29.675666][ T589] ? strncpy_from_user+0x14f/0x280 [ 29.675688][ T589] ? __kasan_check_write+0x18/0x20 [ 29.675706][ T589] ? getname_flags+0x203/0x6b0 [ 29.675727][ T589] ? __kasan_check_read+0x15/0x20 [ 29.675745][ T589] __x64_sys_unlinkat+0xc9/0xf0 [ 29.675771][ T589] x64_sys_call+0x2974/0x2ee0 [ 29.675796][ T589] do_syscall_64+0x57/0xf0 [ 29.675822][ T589] ? clear_bhb_loop+0x50/0xa0 [ 29.675844][ T589] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.675864][ T589] RIP: 0033:0x7ff32139e159 [ 29.675881][ T589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.675896][ T589] RSP: 002b:00007ff31fde3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 29.675917][ T589] RAX: ffffffffffffffda RBX: 00007ff321625fa0 RCX: 00007ff32139e159 [ 29.675932][ T589] RDX: 0000000000000200 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 29.675946][ T589] RBP: 00007ff31fde3090 R08: 0000000000000000 R09: 0000000000000000 [ 29.675958][ T589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.675970][ T589] R13: 00007ff321626038 R14: 00007ff321625fa0 R15: 00007fffa0fb3718 [ 29.675986][ T589] [ 29.694832][ T312] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 29.727820][ T596] Zero length message leads to an empty skb [ 29.903929][ T312] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 29.972687][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 29.983790][ T312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 29.996808][ T312] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 30.005980][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.014632][ T312] usb 2-1: config 0 descriptor?? [ 30.019874][ T562] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.082417][ T603] futex_wake_op: syz.0.79 tries to shift op by 144; fix this program [ 30.091408][ T603] FAULT_INJECTION: forcing a failure. [ 30.091408][ T603] name failslab, interval 1, probability 0, space 0, times 0 [ 30.104351][ T603] CPU: 1 UID: 0 PID: 603 Comm: syz.0.79 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 30.104381][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.104392][ T603] Call Trace: [ 30.104398][ T603] [ 30.104405][ T603] __dump_stack+0x21/0x30 [ 30.104433][ T603] dump_stack_lvl+0x140/0x1c0 [ 30.104453][ T603] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.104476][ T603] dump_stack+0x19/0x20 [ 30.104497][ T603] should_fail_ex+0x3c2/0x510 [ 30.104517][ T603] should_failslab+0xac/0x100 [ 30.104536][ T603] kmem_cache_alloc_noprof+0x42/0x410 [ 30.104555][ T603] ? security_inode_alloc+0x51/0x230 [ 30.104577][ T603] ? __cfi_make_kgid+0x10/0x10 [ 30.104599][ T603] security_inode_alloc+0x51/0x230 [ 30.104619][ T603] inode_init_always_gfp+0x756/0x9e0 [ 30.104640][ T603] alloc_inode+0xc5/0x270 [ 30.104662][ T603] new_inode_pseudo+0x19/0x40 [ 30.104683][ T603] alloc_anon_inode+0x21/0x340 [ 30.104708][ T603] anon_inode_make_secure_inode+0x76/0x150 [ 30.104733][ T603] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 30.104768][ T603] ? kasan_save_alloc_info+0x3a/0x50 [ 30.104786][ T603] ? __kasan_kmalloc+0x96/0xb0 [ 30.104808][ T603] __anon_inode_getfile+0xd1/0x200 [ 30.104833][ T603] anon_inode_create_getfile+0x3f/0x50 [ 30.104858][ T603] io_uring_create+0xc61/0x13f0 [ 30.104878][ T603] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 30.104905][ T603] ? __kasan_check_write+0x18/0x20 [ 30.104923][ T603] ? __x64_sys_io_uring_setup+0x80/0x80 [ 30.104950][ T603] ? __kasan_check_read+0x15/0x20 [ 30.104969][ T603] __x64_sys_io_uring_setup+0x5f/0x80 [ 30.104993][ T603] x64_sys_call+0x22c0/0x2ee0 [ 30.105010][ T603] do_syscall_64+0x57/0xf0 [ 30.105036][ T603] ? clear_bhb_loop+0x50/0xa0 [ 30.105057][ T603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.105077][ T603] RIP: 0033:0x7fee5db9e159 [ 30.105094][ T603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.105109][ T603] RSP: 002b:00007fee5eaadee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 30.105130][ T603] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fee5db9e159 [ 30.105143][ T603] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 30.105156][ T603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 30.105166][ T603] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 30.105178][ T603] R13: 0000000000000090 R14: 00007fee5eaadfd8 R15: 0000000000000000 [ 30.105194][ T603] [ 30.370818][ T615] netlink: 'syz.0.84': attribute type 27 has an invalid length. [ 30.507216][ T630] block device autoloading is deprecated and will be removed. [ 30.584221][ T636] ./dev: Can't lookup blockdev [ 30.593288][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 30.599277][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.628671][ T641] incfs: mount failed -22 [ 30.632227][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 30.632244][ T36] audit: type=1400 audit(1788367853.950:188): avc: denied { mounton } for pid=640 comm="syz.3.92" path="/23/file0" dev="incremental-fs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.635510][ T312] usb 2-1: USB disconnect, device number 4 [ 30.642015][ T641] FAULT_INJECTION: forcing a failure. [ 30.642015][ T641] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.681369][ T641] CPU: 0 UID: 0 PID: 641 Comm: syz.3.92 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 30.681400][ T641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.681410][ T641] Call Trace: [ 30.681416][ T641] [ 30.681422][ T641] __dump_stack+0x21/0x30 [ 30.681452][ T641] dump_stack_lvl+0x140/0x1c0 [ 30.681476][ T641] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.681499][ T641] ? vsnprintf+0x7b4/0x1ad0 [ 30.681522][ T641] ? check_stack_object+0x10f/0x150 [ 30.681543][ T641] dump_stack+0x19/0x20 [ 30.681564][ T641] should_fail_ex+0x3c2/0x510 [ 30.681586][ T641] should_fail+0xf/0x20 [ 30.681604][ T641] should_fail_usercopy+0x1e/0x30 [ 30.681627][ T641] _copy_from_user+0x20/0xa0 [ 30.681652][ T641] kstrtouint_from_user+0xde/0x170 [ 30.681673][ T641] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 30.681694][ T641] ? selinux_file_permission+0x318/0xb60 [ 30.681715][ T641] ? __cfi_selinux_file_permission+0x10/0x10 [ 30.681733][ T641] proc_fail_nth_write+0x8f/0x220 [ 30.681760][ T641] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 30.681785][ T641] ? bpf_lsm_file_permission+0xd/0x20 [ 30.681808][ T641] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 30.681833][ T641] vfs_write+0x3c1/0xfd0 [ 30.681853][ T641] ? __cfi_vfs_write+0x10/0x10 [ 30.681871][ T641] ? __kasan_check_write+0x18/0x20 [ 30.681890][ T641] ? mutex_lock+0x97/0x1d0 [ 30.681909][ T641] ? __cfi_mutex_lock+0x10/0x10 [ 30.681930][ T641] ksys_write+0x145/0x260 [ 30.681948][ T641] ? xfd_validate_state+0x68/0x140 [ 30.681972][ T641] ? __cfi_ksys_write+0x10/0x10 [ 30.681990][ T641] ? __kasan_check_read+0x15/0x20 [ 30.682008][ T641] __x64_sys_write+0x7f/0x90 [ 30.682029][ T641] x64_sys_call+0x271c/0x2ee0 [ 30.682046][ T641] do_syscall_64+0x57/0xf0 [ 30.682071][ T641] ? clear_bhb_loop+0x50/0xa0 [ 30.682091][ T641] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.682111][ T641] RIP: 0033:0x7f54c135e98e [ 30.682128][ T641] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 30.682143][ T641] RSP: 002b:00007f54c2196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 30.682164][ T641] RAX: ffffffffffffffda RBX: 00007f54c21976c0 RCX: 00007f54c135e98e [ 30.682178][ T641] RDX: 0000000000000001 RSI: 00007f54c21970a0 RDI: 0000000000000003 [ 30.682191][ T641] RBP: 00007f54c2197090 R08: 0000000000000000 R09: 0000000000000000 [ 30.682202][ T641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 30.682214][ T641] R13: 00007f54c1626038 R14: 00007f54c1625fa0 R15: 00007fff4c67d1d8 [ 30.682237][ T641] [ 30.946526][ T36] audit: type=1400 audit(1788367854.270:189): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.953337][ T643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.973997][ T643] rust_binder: 642:643 got transaction to invalid handle 1 [ 30.988225][ T643] rust_binder: 642:643 transaction call to 0:0 failed ENOENT, code 16777216 size 104-24 [ 30.990573][ T647] futex_wake_op: syz.0.95 tries to shift op by 144; fix this program [ 31.005830][ T9] rust_binder: 642: undelivered TRANSACTION_ERROR: 29201 [ 31.006623][ T36] audit: type=1400 audit(1788367854.300:190): avc: denied { create } for pid=644 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.040997][ T649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 31.053239][ T36] audit: type=1400 audit(1788367854.300:191): avc: denied { getopt } for pid=644 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.077098][ T651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.97'. [ 31.078090][ T36] audit: type=1400 audit(1788367854.360:192): avc: denied { create } for pid=648 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.110275][ T36] audit: type=1400 audit(1788367854.360:193): avc: denied { name_bind } for pid=648 comm="syz.3.96" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 31.122144][ T655] veth1: entered allmulticast mode [ 31.138516][ T36] audit: type=1400 audit(1788367854.380:194): avc: denied { connect } for pid=646 comm="syz.0.95" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.147367][ T655] veth1: left allmulticast mode [ 31.160368][ T36] audit: type=1400 audit(1788367854.380:195): avc: denied { write } for pid=646 comm="syz.0.95" path="socket:[7371]" dev="sockfs" ino=7371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.186678][ T36] audit: type=1400 audit(1788367854.410:196): avc: denied { ioctl } for pid=648 comm="syz.3.96" path="socket:[6348]" dev="sockfs" ino=6348 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.211622][ T36] audit: type=1400 audit(1788367854.540:197): avc: denied { connect } for pid=648 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.241933][ T664] FAULT_INJECTION: forcing a failure. [ 31.241933][ T664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.242001][ T665] netlink: 228 bytes leftover after parsing attributes in process `syz.0.102'. [ 31.255397][ T664] CPU: 1 UID: 0 PID: 664 Comm: syz.2.101 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 31.255425][ T664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.255436][ T664] Call Trace: [ 31.255442][ T664] [ 31.255449][ T664] __dump_stack+0x21/0x30 [ 31.255478][ T664] dump_stack_lvl+0x140/0x1c0 [ 31.255501][ T664] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.255525][ T664] dump_stack+0x19/0x20 [ 31.255547][ T664] should_fail_ex+0x3c2/0x510 [ 31.255573][ T664] should_fail+0xf/0x20 [ 31.255591][ T664] should_fail_usercopy+0x1e/0x30 [ 31.255612][ T664] _copy_from_iter+0x1a6/0x1520 [ 31.255637][ T664] ? __schedule+0x149e/0x20b0 [ 31.255654][ T664] ? __cfi__copy_from_iter+0x10/0x10 [ 31.255677][ T664] ? __kasan_check_write+0x18/0x20 [ 31.255696][ T664] copy_page_from_iter+0x1e5/0x2a0 [ 31.255720][ T664] pipe_write+0x774/0x18d0 [ 31.255738][ T664] ? __asan_memcpy+0x5a/0x80 [ 31.255759][ T664] ? __cfi_pipe_write+0x10/0x10 [ 31.255777][ T664] ? selinux_file_permission+0x8a4/0xb60 [ 31.255797][ T664] do_iter_readv_writev+0x62c/0x820 [ 31.255824][ T664] ? vfs_iter_read+0x5e0/0x5e0 [ 31.255845][ T664] ? bpf_lsm_file_permission+0xd/0x20 [ 31.255868][ T664] vfs_writev+0x4a5/0xe90 [ 31.255890][ T664] ? do_writev+0x2e0/0x2e0 [ 31.255916][ T664] do_writev+0x151/0x2e0 [ 31.255938][ T664] ? vfs_readv+0xa00/0xa00 [ 31.255959][ T664] ? __kasan_check_write+0x18/0x20 [ 31.255977][ T664] ? fpregs_restore_userregs+0x11c/0x260 [ 31.255999][ T664] __x64_sys_writev+0x81/0x90 [ 31.256018][ T664] x64_sys_call+0x1fbb/0x2ee0 [ 31.256035][ T664] do_syscall_64+0x57/0xf0 [ 31.256059][ T664] ? clear_bhb_loop+0x50/0xa0 [ 31.256080][ T664] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.256098][ T664] RIP: 0033:0x7ff32139e159 [ 31.256114][ T664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.256128][ T664] RSP: 002b:00007ff31fdc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 31.256148][ T664] RAX: ffffffffffffffda RBX: 00007ff321626090 RCX: 00007ff32139e159 [ 31.256161][ T664] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000006 [ 31.256173][ T664] RBP: 00007ff321435024 R08: 0000000000000000 R09: 0000000000000000 [ 31.256185][ T664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.256195][ T664] R13: 00007ff321626128 R14: 00007ff321626090 R15: 00007fffa0fb3718 [ 31.256210][ T664] [ 31.323756][ T667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.380085][ T665] rust_binder: 662:665 got transaction to invalid handle 1 [ 31.526264][ T665] rust_binder: 662:665 transaction call to 0:0 failed ENOENT, code 0 size 104-24 [ 31.539603][ T310] rust_binder: 662: undelivered TRANSACTION_ERROR: 29201 [ 31.577798][ T674] __vm_enough_memory: pid: 674, comm: syz.1.104, bytes: 4403415220224 not enough memory for the allocation [ 31.590951][ T674] FAULT_INJECTION: forcing a failure. [ 31.590951][ T674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.604961][ T674] CPU: 0 UID: 0 PID: 674 Comm: syz.1.104 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 31.604996][ T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.605008][ T674] Call Trace: [ 31.605014][ T674] [ 31.605021][ T674] __dump_stack+0x21/0x30 [ 31.605050][ T674] dump_stack_lvl+0x140/0x1c0 [ 31.605074][ T674] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.605095][ T674] ? vsnprintf+0x7b4/0x1ad0 [ 31.605117][ T674] ? check_stack_object+0x10f/0x150 [ 31.605137][ T674] dump_stack+0x19/0x20 [ 31.605161][ T674] should_fail_ex+0x3c2/0x510 [ 31.605184][ T674] should_fail+0xf/0x20 [ 31.605204][ T674] should_fail_usercopy+0x1e/0x30 [ 31.605238][ T674] _copy_from_user+0x20/0xa0 [ 31.605259][ T674] kstrtouint_from_user+0xde/0x170 [ 31.605277][ T674] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 31.605294][ T674] ? selinux_file_permission+0x318/0xb60 [ 31.605314][ T674] ? __cfi_selinux_file_permission+0x10/0x10 [ 31.605334][ T674] proc_fail_nth_write+0x8f/0x220 [ 31.605359][ T674] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 31.605386][ T674] ? bpf_lsm_file_permission+0xd/0x20 [ 31.605410][ T674] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 31.605435][ T674] vfs_write+0x3c1/0xfd0 [ 31.605452][ T674] ? __cfi_vfs_write+0x10/0x10 [ 31.605468][ T674] ? __kasan_check_write+0x18/0x20 [ 31.605485][ T674] ? mutex_lock+0x97/0x1d0 [ 31.605505][ T674] ? __cfi_mutex_lock+0x10/0x10 [ 31.605526][ T674] ksys_write+0x145/0x260 [ 31.605545][ T674] ? xfd_validate_state+0x68/0x140 [ 31.605575][ T674] ? __cfi_ksys_write+0x10/0x10 [ 31.605595][ T674] ? __kasan_check_read+0x15/0x20 [ 31.605613][ T674] __x64_sys_write+0x7f/0x90 [ 31.605632][ T674] x64_sys_call+0x271c/0x2ee0 [ 31.605649][ T674] do_syscall_64+0x57/0xf0 [ 31.605672][ T674] ? clear_bhb_loop+0x50/0xa0 [ 31.605694][ T674] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.605715][ T674] RIP: 0033:0x7f3238f5e98e [ 31.605732][ T674] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 31.605748][ T674] RSP: 002b:00007f3239ee9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 31.605769][ T674] RAX: ffffffffffffffda RBX: 00007f3239eea6c0 RCX: 00007f3238f5e98e [ 31.605784][ T674] RDX: 0000000000000001 RSI: 00007f3239eea0a0 RDI: 0000000000000004 [ 31.605797][ T674] RBP: 00007f3239eea090 R08: 0000000000000000 R09: 0000000000000000 [ 31.605810][ T674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 31.605822][ T674] R13: 00007f3239226038 R14: 00007f3239225fa0 R15: 00007ffd84dbb4e8 [ 31.605838][ T674] [ 31.698314][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.707848][ T686] rust_binder: 685:686 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 31.711581][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 31.715187][ T312] rust_binder: 685: undelivered TRANSACTION_ERROR: 29201 [ 31.726540][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.744654][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 31.775272][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.790866][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 31.798000][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.798022][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.798033][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.798045][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.798056][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.798068][ T684] futex_wake_op: syz.0.107 tries to shift op by 144; fix this program [ 31.810688][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 31.998172][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 32.048498][ T697] random: crng reseeded on system resumption [ 32.105636][ T705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.124169][ T705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.135260][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.308293][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.318918][ T310] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 32.328202][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.339333][ T310] usb 4-1: config 0 descriptor?? [ 32.346669][ T310] usb 4-1: unsupported MDLM descriptors [ 32.372802][ T312] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.523028][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 32.564891][ T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.575692][ T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.865129][ T312] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 32.877802][ T312] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 32.886901][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.894943][ T312] usb 2-1: Product: syz [ 32.899991][ T312] usb 2-1: Manufacturer: syz [ 32.904620][ T312] usb 2-1: SerialNumber: syz [ 32.913794][ T9] usb 4-1: USB disconnect, device number 5 [ 33.105917][ T729] tipc: Trying to set illegal importance in message [ 33.116800][ T312] usb 2-1: 2:1 : bogus bTerminalLink 13 [ 33.122854][ T312] usb 2-1: 0:3 : does not exist [ 33.127935][ T312] usb 2-1: 0:4 : does not exist [ 33.133269][ T312] usb 2-1: unit 6 not found! [ 33.137920][ T312] usb 2-1: unit 7 not found! [ 33.145411][ T312] usb 2-1: USB disconnect, device number 5 [ 33.167299][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.291867][ T732] FAULT_INJECTION: forcing a failure. [ 33.291867][ T732] name failslab, interval 1, probability 0, space 0, times 0 [ 33.304609][ T732] CPU: 1 UID: 0 PID: 732 Comm: syz.0.125 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 33.304638][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.304648][ T732] Call Trace: [ 33.304654][ T732] [ 33.304662][ T732] __dump_stack+0x21/0x30 [ 33.304690][ T732] dump_stack_lvl+0x140/0x1c0 [ 33.304705][ T732] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.304719][ T732] ? __kasan_kmalloc+0x96/0xb0 [ 33.304733][ T732] ? __kmalloc_cache_noprof+0x23c/0x470 [ 33.304744][ T732] dump_stack+0x19/0x20 [ 33.304757][ T732] should_fail_ex+0x3c2/0x510 [ 33.304769][ T732] should_failslab+0xac/0x100 [ 33.304782][ T732] kmem_cache_alloc_noprof+0x42/0x410 [ 33.304792][ T732] ? __kernfs_new_node+0xf1/0x740 [ 33.304806][ T732] __kernfs_new_node+0xf1/0x740 [ 33.304818][ T732] ? mutex_unlock+0x90/0x240 [ 33.304830][ T732] ? kernfs_new_node+0x280/0x280 [ 33.304842][ T732] ? pcpu_alloc_noprof+0xd93/0x1440 [ 33.304855][ T732] kernfs_new_node+0x154/0x280 [ 33.304868][ T732] kernfs_create_dir_ns+0x4b/0x130 [ 33.304881][ T732] cgroup_mkdir+0x396/0x1600 [ 33.304895][ T732] ? __kasan_check_write+0x18/0x20 [ 33.304905][ T732] ? __cfi_cgroup_mkdir+0x10/0x10 [ 33.304917][ T732] kernfs_iop_mkdir+0x1bb/0x2d0 [ 33.304930][ T732] vfs_mkdir+0x591/0x810 [ 33.304945][ T732] do_mkdirat+0x240/0x530 [ 33.304959][ T732] ? __cfi_do_mkdirat+0x10/0x10 [ 33.304972][ T732] ? __kasan_check_write+0x18/0x20 [ 33.304982][ T732] ? getname_flags+0x203/0x6b0 [ 33.304992][ T732] ? __kasan_check_read+0x15/0x20 [ 33.305002][ T732] __x64_sys_mkdirat+0x8b/0xa0 [ 33.305016][ T732] x64_sys_call+0x2ba8/0x2ee0 [ 33.305025][ T732] do_syscall_64+0x57/0xf0 [ 33.305039][ T732] ? clear_bhb_loop+0x50/0xa0 [ 33.305051][ T732] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.305062][ T732] RIP: 0033:0x7fee5db9e159 [ 33.305072][ T732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.305081][ T732] RSP: 002b:00007fee5eaae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 33.305093][ T732] RAX: ffffffffffffffda RBX: 00007fee5de25fa0 RCX: 00007fee5db9e159 [ 33.305100][ T732] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 33.305107][ T732] RBP: 00007fee5eaae090 R08: 0000000000000000 R09: 0000000000000000 [ 33.305114][ T732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.305120][ T732] R13: 00007fee5de26038 R14: 00007fee5de25fa0 R15: 00007fff4121aba8 [ 33.305129][ T732] [ 33.626706][ T738] __vm_enough_memory: pid: 738, comm: syz.1.128, bytes: 4403415220224 not enough memory for the allocation [ 33.833099][ T758] FAULT_INJECTION: forcing a failure. [ 33.833099][ T758] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.846430][ T758] CPU: 0 UID: 0 PID: 758 Comm: syz.3.138 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 33.846461][ T758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.846471][ T758] Call Trace: [ 33.846475][ T758] [ 33.846480][ T758] __dump_stack+0x21/0x30 [ 33.846499][ T758] dump_stack_lvl+0x140/0x1c0 [ 33.846512][ T758] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.846527][ T758] dump_stack+0x19/0x20 [ 33.846540][ T758] should_fail_ex+0x3c2/0x510 [ 33.846553][ T758] should_fail_alloc_page+0xec/0x110 [ 33.846566][ T758] __alloc_pages_noprof+0x1c0/0x7e0 [ 33.846581][ T758] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.846597][ T758] ? __kasan_check_write+0x18/0x20 [ 33.846607][ T758] ? lockref_get+0x131/0x1c0 [ 33.846629][ T758] ? __kasan_check_write+0x18/0x20 [ 33.846639][ T758] get_free_pages_noprof+0x14/0x40 [ 33.846653][ T758] selinux_genfs_get_sid+0x63/0x2d0 [ 33.846667][ T758] inode_doinit_with_dentry+0x8f8/0xde0 [ 33.846680][ T758] ? sb_finish_set_opts+0xa40/0xa40 [ 33.846692][ T758] ? __kasan_slab_alloc+0x73/0x90 [ 33.846705][ T758] selinux_d_instantiate+0x2b/0x40 [ 33.846718][ T758] security_d_instantiate+0xb8/0xf0 [ 33.846730][ T758] d_splice_alias+0x71/0x3a0 [ 33.846741][ T758] kernfs_iop_lookup+0x2c6/0x320 [ 33.846755][ T758] lookup_one_qstr_excl+0x129/0x280 [ 33.846767][ T758] do_rmdir+0x1d2/0x590 [ 33.846781][ T758] ? __cfi_do_rmdir+0x10/0x10 [ 33.846794][ T758] ? strncpy_from_user+0x14f/0x280 [ 33.846807][ T758] ? __kasan_check_write+0x18/0x20 [ 33.846817][ T758] ? getname_flags+0x203/0x6b0 [ 33.846827][ T758] ? __kasan_check_read+0x15/0x20 [ 33.846837][ T758] __x64_sys_unlinkat+0xc9/0xf0 [ 33.846851][ T758] x64_sys_call+0x2974/0x2ee0 [ 33.846860][ T758] do_syscall_64+0x57/0xf0 [ 33.846875][ T758] ? clear_bhb_loop+0x50/0xa0 [ 33.846887][ T758] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.846897][ T758] RIP: 0033:0x7f54c139e159 [ 33.846907][ T758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.846915][ T758] RSP: 002b:00007f54c2197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 33.846928][ T758] RAX: ffffffffffffffda RBX: 00007f54c1625fa0 RCX: 00007f54c139e159 [ 33.846935][ T758] RDX: 0000000000000200 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 33.846942][ T758] RBP: 00007f54c2197090 R08: 0000000000000000 R09: 0000000000000000 [ 33.846948][ T758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.846955][ T758] R13: 00007f54c1626038 R14: 00007f54c1625fa0 R15: 00007fff4c67d1d8 [ 33.846963][ T758] [ 34.114668][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.274102][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 34.282072][ T9] usb 2-1: can't read configurations, error -22 [ 34.362800][ T326] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.412802][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.514111][ T326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.522467][ T326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.532818][ T326] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 34.548660][ T326] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 34.557772][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.565958][ T326] usb 4-1: Product: syz [ 34.570161][ T326] usb 4-1: Manufacturer: syz [ 34.574906][ T326] usb 4-1: SerialNumber: syz [ 34.580645][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 34.589581][ T9] usb 2-1: can't read configurations, error -22 [ 34.596030][ T9] usb usb2-port1: attempt power cycle [ 34.611009][ T776] rust_binder: Write failure EFAULT in pid:99 [ 34.611115][ T776] rust_binder: 775:776 got reply transaction with no transaction stack [ 34.625549][ T776] rust_binder: 775:776 transaction reply to 0:0 failed EINVAL, code 0 size 96-24 [ 34.635332][ T312] rust_binder: 775: undelivered TRANSACTION_ERROR: 29201 [ 34.790965][ T326] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.802780][ T326] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 34.819564][ T326] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 34.830879][ T326] usb 4-1: USB disconnect, device number 6 [ 34.836807][ T709] udevd[709]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.942822][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.974458][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 34.982407][ T9] usb 2-1: can't read configurations, error -22 [ 35.053196][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.054108][ T802] rust_binder: 801:802 error while translating object: EINVAL [ 35.068358][ T802] rust_binder: Failure in copy_transaction_data: EINVAL [ 35.068379][ T802] rust_binder: 801:802 transaction call to 801:0 failed EINVAL, code 1275068416 size 104-24 [ 35.087762][ T326] rust_binder: 801: undelivered TRANSACTION_ERROR: 29201 [ 35.112828][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.134343][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 35.142281][ T9] usb 2-1: can't read configurations, error -22 [ 35.148899][ T9] usb usb2-port1: unable to enumerate USB device [ 35.205030][ T66] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 35.214145][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.222123][ T66] usb 3-1: Product: syz [ 35.226606][ T66] usb 3-1: Manufacturer: syz [ 35.231224][ T66] usb 3-1: SerialNumber: syz [ 35.325203][ T812] __nla_validate_parse: 29 callbacks suppressed [ 35.325225][ T812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'. [ 35.449958][ T66] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 35.461427][ T66] usb 3-1: USB disconnect, device number 4 [ 35.489264][ T822] veth1: entered allmulticast mode [ 35.494735][ T821] veth1: left allmulticast mode [ 35.516126][ T407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.533481][ T407] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.892804][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.046243][ T66] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 36.055480][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.063708][ T66] usb 3-1: Product: syz [ 36.067967][ T66] usb 3-1: Manufacturer: syz [ 36.072557][ T66] usb 3-1: SerialNumber: syz [ 36.362614][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 36.362630][ T36] audit: type=1400 audit(1788367859.680:232): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.362806][ T45] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 36.480173][ T66] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 36.543760][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.554848][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 36.565708][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.578541][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.585355][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 36.594422][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.603128][ T45] usb 1-1: config 0 descriptor?? [ 36.608424][ T830] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.643199][ T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.669772][ T36] audit: type=1400 audit(1788367859.990:233): avc: denied { map } for pid=833 comm="syz.1.168" path="socket:[8322]" dev="sockfs" ino=8322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.793809][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.804883][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.814652][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.827613][ T310] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.836723][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.845664][ T310] usb 4-1: config 0 descriptor?? [ 36.905137][ T9] usb 3-1: USB disconnect, device number 5 [ 37.038132][ T45] wacom 0003:056A:0100.0008: hidraw0: USB HID v0.00 Joystick [HID 056a:0100] on usb-dummy_hcd.0-1/input0 [ 37.055689][ T838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.064296][ T838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.240982][ T45] usb 1-1: USB disconnect, device number 4 [ 37.425866][ T842] rust_binder: 841:842 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 37.435130][ T9] rust_binder: 841: undelivered TRANSACTION_ERROR: 29201 [ 37.452522][ T36] audit: type=1400 audit(1788367860.770:234): avc: denied { create } for pid=843 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.548860][ T861] FAULT_INJECTION: forcing a failure. [ 37.548860][ T861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.562227][ T861] CPU: 0 UID: 0 PID: 861 Comm: syz.1.175 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 37.562265][ T861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.562276][ T861] Call Trace: [ 37.562283][ T861] [ 37.562291][ T861] __dump_stack+0x21/0x30 [ 37.562322][ T861] dump_stack_lvl+0x140/0x1c0 [ 37.562347][ T861] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.562371][ T861] ? lock_sock_nested+0x216/0x2a0 [ 37.562382][ T861] dump_stack+0x19/0x20 [ 37.562395][ T861] should_fail_ex+0x3c2/0x510 [ 37.562407][ T861] should_fail+0xf/0x20 [ 37.562417][ T861] should_fail_usercopy+0x1e/0x30 [ 37.562429][ T861] _copy_from_user+0x20/0xa0 [ 37.562451][ T861] sco_sock_setsockopt+0x5cb/0xcd0 [ 37.562475][ T861] ? __cfi_sco_sock_setsockopt+0x10/0x10 [ 37.562500][ T861] ? __cfi_vfs_write+0x10/0x10 [ 37.562518][ T861] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 37.562530][ T861] ? security_socket_setsockopt+0x3d/0x100 [ 37.562544][ T861] ? __cfi_sco_sock_setsockopt+0x10/0x10 [ 37.562555][ T861] do_sock_setsockopt+0x27c/0x410 [ 37.562568][ T861] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 37.562582][ T861] ? __fget_files+0x2bc/0x330 [ 37.562607][ T861] __x64_sys_setsockopt+0x18c/0x220 [ 37.562630][ T861] x64_sys_call+0x2adc/0x2ee0 [ 37.562648][ T861] do_syscall_64+0x57/0xf0 [ 37.562667][ T861] ? clear_bhb_loop+0x50/0xa0 [ 37.562679][ T861] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.562689][ T861] RIP: 0033:0x7f3238f9e159 [ 37.562699][ T861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.562708][ T861] RSP: 002b:00007f3239eea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 37.562720][ T861] RAX: ffffffffffffffda RBX: 00007f3239225fa0 RCX: 00007f3238f9e159 [ 37.562737][ T861] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 37.562747][ T861] RBP: 00007f3239eea090 R08: 00000000000000e8 R09: 0000000000000000 [ 37.562757][ T861] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 37.562767][ T861] R13: 00007f3239226038 R14: 00007f3239225fa0 R15: 00007ffd84dbb4e8 [ 37.562783][ T861] [ 37.816710][ T36] audit: type=1400 audit(1788367861.140:235): avc: denied { mounton } for pid=866 comm="syz.1.178" path="/35/mnt" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.839645][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.857563][ T869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 37.864719][ T865] kvm: Disabled LAPIC found during irq injection [ 37.940985][ T36] audit: type=1400 audit(1788367861.260:236): avc: denied { sqpoll } for pid=875 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.996508][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.013841][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.026205][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.040450][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.049780][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.060156][ T45] usb 3-1: config 0 descriptor?? [ 38.125527][ T884] process 'syz.1.185' launched '/dev/fd/4' with NULL argv: empty string added [ 38.132833][ T36] audit: type=1400 audit(1788367861.450:237): avc: denied { execute } for pid=883 comm="syz.1.185" dev="tmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.163201][ T888] futex_atomic_op_inuser: 25 callbacks suppressed [ 38.163218][ T888] futex_wake_op: syz.0.187 tries to shift op by 144; fix this program [ 38.165876][ T890] 9pnet: Could not find request transport: xen [ 38.170710][ T36] audit: type=1400 audit(1788367861.460:238): avc: denied { execute_no_trans } for pid=883 comm="syz.1.185" path=2F6D656D66643A21BA29EECD8B8C87981C4FB1FBBAAA4E8AA077EC98DE1362FC7AF7A0AC5E3297FD0D924124B2E255B5CC4F6B0873F3D34418D5AE0D6F734628F38CB9B856B2DB3FBB2FAFB76983EABC51A348E55789E997FA25CBE6E5031BD2E33D4E2686F964A65D1ABF7F96A20A8B270B1522ACE4ADF6FDADE5CD3F101574960D13267E2382F7202864656C6574656429 dev="tmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.214706][ T888] FAULT_INJECTION: forcing a failure. [ 38.214706][ T888] name failslab, interval 1, probability 0, space 0, times 0 [ 38.268479][ T888] CPU: 0 UID: 0 PID: 888 Comm: syz.0.187 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 38.268514][ T888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.268525][ T888] Call Trace: [ 38.268530][ T888] [ 38.268538][ T888] __dump_stack+0x21/0x30 [ 38.268568][ T888] dump_stack_lvl+0x140/0x1c0 [ 38.268590][ T888] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.268612][ T888] dump_stack+0x19/0x20 [ 38.268631][ T888] should_fail_ex+0x3c2/0x510 [ 38.268650][ T888] should_failslab+0xac/0x100 [ 38.268669][ T888] kmem_cache_alloc_noprof+0x42/0x410 [ 38.268686][ T888] ? alloc_empty_file+0xbf/0x270 [ 38.268706][ T888] ? _raw_spin_unlock+0x45/0x60 [ 38.268741][ T888] alloc_empty_file+0xbf/0x270 [ 38.268762][ T888] ? _raw_spin_unlock+0x45/0x60 [ 38.268786][ T888] alloc_file_pseudo+0x142/0x1f0 [ 38.268809][ T888] ? security_inode_init_security_anon+0x3e/0x110 [ 38.268833][ T888] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 38.268855][ T888] ? anon_inode_make_secure_inode+0xf5/0x150 [ 38.268880][ T888] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 38.268904][ T888] ? __kasan_kmalloc+0x96/0xb0 [ 38.268926][ T888] __anon_inode_getfile+0x12e/0x200 [ 38.268949][ T888] anon_inode_create_getfile+0x3f/0x50 [ 38.268973][ T888] io_uring_create+0xc61/0x13f0 [ 38.268991][ T888] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 38.269017][ T888] ? __kasan_check_write+0x18/0x20 [ 38.269037][ T888] ? __x64_sys_io_uring_setup+0x80/0x80 [ 38.269060][ T888] ? __kasan_check_read+0x15/0x20 [ 38.269076][ T888] __x64_sys_io_uring_setup+0x5f/0x80 [ 38.269095][ T888] x64_sys_call+0x22c0/0x2ee0 [ 38.269111][ T888] do_syscall_64+0x57/0xf0 [ 38.269132][ T888] ? clear_bhb_loop+0x50/0xa0 [ 38.269151][ T888] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.269169][ T888] RIP: 0033:0x7fee5db9e159 [ 38.269184][ T888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.269200][ T888] RSP: 002b:00007fee5eaadee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 38.269218][ T888] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fee5db9e159 [ 38.269232][ T888] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 38.269244][ T888] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000000 [ 38.269256][ T888] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 38.269269][ T888] R13: 0000200000000890 R14: 00007fee5eaadfd8 R15: 0000000000000000 [ 38.269284][ T888] [ 38.472515][ T45] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 38.573446][ T45] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 38.680252][ T899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.190'. [ 38.802551][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.812766][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.978197][ T45] usb 3-1: USB disconnect, device number 6 [ 39.282809][ T407] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 39.349600][ T904] FAULT_INJECTION: forcing a failure. [ 39.349600][ T904] name failslab, interval 1, probability 0, space 0, times 0 [ 39.362425][ T904] CPU: 1 UID: 0 PID: 904 Comm: syz.0.192 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 39.362456][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.362468][ T904] Call Trace: [ 39.362474][ T904] [ 39.362481][ T904] __dump_stack+0x21/0x30 [ 39.362506][ T904] dump_stack_lvl+0x140/0x1c0 [ 39.362520][ T904] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.362533][ T904] ? cgroup_bpf_inherit+0x472/0x4c0 [ 39.362544][ T904] dump_stack+0x19/0x20 [ 39.362557][ T904] should_fail_ex+0x3c2/0x510 [ 39.362570][ T904] should_failslab+0xac/0x100 [ 39.362582][ T904] __kmalloc_cache_noprof+0x41/0x470 [ 39.362594][ T904] ? cgroup_mkdir+0xbe2/0x1600 [ 39.362608][ T904] cgroup_mkdir+0xbe2/0x1600 [ 39.362621][ T904] ? __cfi_cgroup_mkdir+0x10/0x10 [ 39.362632][ T904] kernfs_iop_mkdir+0x1bb/0x2d0 [ 39.362646][ T904] vfs_mkdir+0x591/0x810 [ 39.362662][ T904] do_mkdirat+0x240/0x530 [ 39.362675][ T904] ? __cfi_do_mkdirat+0x10/0x10 [ 39.362689][ T904] ? __kasan_check_write+0x18/0x20 [ 39.362699][ T904] ? getname_flags+0x203/0x6b0 [ 39.362710][ T904] ? __kasan_check_read+0x15/0x20 [ 39.362723][ T904] __x64_sys_mkdirat+0x8b/0xa0 [ 39.362741][ T904] x64_sys_call+0x2ba8/0x2ee0 [ 39.362755][ T904] do_syscall_64+0x57/0xf0 [ 39.362779][ T904] ? clear_bhb_loop+0x50/0xa0 [ 39.362797][ T904] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.362808][ T904] RIP: 0033:0x7fee5db9e159 [ 39.362818][ T904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.362827][ T904] RSP: 002b:00007fee5eaae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 39.362840][ T904] RAX: ffffffffffffffda RBX: 00007fee5de25fa0 RCX: 00007fee5db9e159 [ 39.362848][ T904] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 39.362855][ T904] RBP: 00007fee5eaae090 R08: 0000000000000000 R09: 0000000000000000 [ 39.362862][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.362868][ T904] R13: 00007fee5de26038 R14: 00007fee5de25fa0 R15: 00007fff4121aba8 [ 39.362877][ T904] [ 39.580433][ T904] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 39.589643][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 39.593095][ T904] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 39.593115][ T904] CPU: 0 UID: 0 PID: 904 Comm: syz.0.192 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 39.593140][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.599082][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.607409][ T904] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 39.607445][ T904] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 b7 27 61 00 48 8b bb 08 01 00 00 [ 39.607459][ T904] RSP: 0018:ffffc9000f967c88 EFLAGS: 00010206 [ 39.607475][ T904] RAX: 8cf859f74216ab00 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 39.607487][ T904] RDX: ffff888115d90100 RSI: ffff88811a60b000 RDI: ffff888100042000 [ 39.607499][ T904] RBP: ffffc9000f967d38 R08: 0000000000fc3d46 R09: 000000009c0eb57d [ 39.607511][ T904] R10: 000000000000000c R11: ffffffff8175a5c0 R12: 0000000000000021 [ 39.607522][ T904] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88811a60b010 [ 39.607534][ T904] FS: 00007fee5eaae6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.607550][ T904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.607562][ T904] CR2: 00007ff321270050 CR3: 00000001341bc000 CR4: 00000000003526b0 [ 39.607578][ T904] Call Trace: [ 39.607583][ T904] [ 39.607593][ T904] ? __cfi_cgroup_mkdir+0x10/0x10 [ 39.632255][ T310] usb 4-1: USB disconnect, device number 7 [ 39.636722][ T904] kernfs_iop_mkdir+0x1bb/0x2d0 [ 39.636759][ T904] vfs_mkdir+0x591/0x810 [ 39.636782][ T904] do_mkdirat+0x240/0x530 [ 39.644111][ T36] audit: type=1400 audit(1788367862.950:239): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.661817][ T904] ? __cfi_do_mkdirat+0x10/0x10 [ 39.661851][ T904] ? __kasan_check_write+0x18/0x20 [ 39.661870][ T904] ? getname_flags+0x203/0x6b0 [ 39.661887][ T904] ? __kasan_check_read+0x15/0x20 [ 39.661904][ T904] __x64_sys_mkdirat+0x8b/0xa0 [ 39.661925][ T904] x64_sys_call+0x2ba8/0x2ee0 [ 39.668036][ T36] audit: type=1400 audit(1788367862.950:240): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.675932][ T904] do_syscall_64+0x57/0xf0 [ 39.675960][ T904] ? clear_bhb_loop+0x50/0xa0 [ 39.683948][ T36] audit: type=1400 audit(1788367862.950:241): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.691871][ T904] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.869489][ T904] RIP: 0033:0x7fee5db9e159 [ 39.873900][ T904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.893502][ T904] RSP: 002b:00007fee5eaae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 39.901948][ T904] RAX: ffffffffffffffda RBX: 00007fee5de25fa0 RCX: 00007fee5db9e159 [ 39.909928][ T904] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 39.917891][ T904] RBP: 00007fee5eaae090 R08: 0000000000000000 R09: 0000000000000000 [ 39.925850][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.933813][ T904] R13: 00007fee5de26038 R14: 00007fee5de25fa0 R15: 00007fff4121aba8 [ 39.941775][ T904] [ 39.944780][ T904] Modules linked in: [ 39.948863][ T904] ---[ end trace 0000000000000000 ]--- [ 39.954585][ T904] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 39.955403][ T407] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 39.960320][ T904] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 b7 27 61 00 48 8b bb 08 01 00 00 [ 39.971052][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 39.990698][ T904] RSP: 0018:ffffc9000f967c88 EFLAGS: 00010206 [ 40.007891][ T904] RAX: 8cf859f74216ab00 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 40.017844][ T904] RDX: ffff888115d90100 RSI: ffff88811a60b000 RDI: ffff888100042000 [ 40.018292][ T407] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 40.025937][ T904] RBP: ffffc9000f967d38 R08: 0000000000fc3d46 R09: 000000009c0eb57d [ 40.046845][ T407] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 40.046977][ T904] R10: 000000000000000c R11: ffffffff8175a5c0 R12: 0000000000000021 [ 40.056136][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.064022][ T904] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88811a60b010 [ 40.073170][ T407] usb 2-1: config 0 descriptor?? [ 40.082647][ T904] FS: 00007fee5eaae6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.085465][ T902] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.093849][ T904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.107566][ T904] CR2: 00007fa946946df4 CR3: 00000001341bc000 CR4: 00000000003526b0 [ 40.119977][ T904] Kernel panic - not syncing: Fatal exception [ 40.126289][ T904] Kernel Offset: disabled [ 40.130603][ T904] Rebooting in 86400 seconds..