last executing test programs: 6.284214165s ago: executing program 2 (id=622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0xfffffffffffffff7, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x101, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x10a, 0x0, 0x1}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}]}) 6.166068917s ago: executing program 2 (id=626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000003680)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r0, 0xfff) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000003a80)={0x0, 0x4, 0x5, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000003ac0)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 5.318390225s ago: executing program 2 (id=629): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x3e, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x8, 0x0, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x1000, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x4, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x2, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x40000009, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1003, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x80000001, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008003, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x800463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000400)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000480)={@remote, 0x6, 0x0, 0xfd, 0xe}, 0x20) close(0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000380)={0x0, 0x257d, [0x3, 0x1, 0x6, 0x4b6c, 0x2, 0x7]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000040)=[{0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x400000000000159, 0x40840) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181643, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000440)={0x66666666666689b}) r3 = socket$inet(0x2, 0xa, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000100)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x21, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x101}, @mss={0x2, 0x81}, @timestamp, @timestamp, @window={0x3, 0xc, 0x3}], 0x5) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r6 = syz_open_pts(r4, 0x200) r7 = dup3(r6, r4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001140)={{0x0, 0x2, 0x3, 0x1, 0x2, 0x1e, 0x9, 0x5, 0x5, 0xffffff2c, 0x3ff, 0x8, 0xfffffffffffffff8, 0xb0, 0x10001}}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000002140)={r8, 0xdf0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r9) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r10, @ANYBLOB="010027bd7000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e4c0008804800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e2100000006000000000000000000000000000000010000000014000200776732"], 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa) mprotect(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x0) read(r3, &(0x7f0000000080)=""/46, 0x2e) 4.513124299s ago: executing program 2 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, r2, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) write(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/ram0\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_clone3(&(0x7f00000002c0)={0x40000000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) sync_file_range(r3, 0x6, 0x1000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x400000000010, 0x5, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, r2, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) (async) write(r0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/ram0\x00', 0x101042, 0x15) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) syz_clone3(&(0x7f00000002c0)={0x40000000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) sync_file_range(r3, 0x6, 0x1000, 0x3) (async) 4.419874399s ago: executing program 2 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181643, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000440)={0x66666666666689b}) (fail_nth: 32) 4.065746336s ago: executing program 2 (id=640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406318, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x101, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x10a, 0x0, 0x1}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}]}) 4.065377056s ago: executing program 32 (id=640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406318, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x101, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x10a, 0x0, 0x1}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}]}) 3.06727212s ago: executing program 1 (id=647): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x101a02, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'cpuset'}, {0x2b, 'rlimit'}]}, 0x10) r1 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4113, 0x80000001, 0x1011}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000100)={0x1f}) 3.035574743s ago: executing program 1 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xb, "4c2e9bfe"}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000380)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008854}, 0x8000080) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000180)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd0ffff00000000) syz_open_dev$evdev(&(0x7f00000001c0), 0xfffdfffffffffffd, 0x109303) 2.148840026s ago: executing program 3 (id=661): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x4280286) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="8f4dc3d89101507b4f206e6cd919cedc8a86be3f8d9334c5bccd47d158634976281f577bbaec0e35577af194f52f4296d4c2186ee57ddfc7ec027d0f1eeb935bb15c6363f2f2c5ca3fdd620c6a758f16a60d7d9c0f2d2475d17a43caee21e5cd1fc2dde0b3905cd603b9c5c2a3025643f770e7f7b08ae168", 0x78}, {0x0}], 0x2, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x76, 0x160341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x1f, 0x16, 0x2, 0x2, 0x7, 0x7ff, &(0x7f0000000000)="4fe4b65f4a11da"}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) 2.135514607s ago: executing program 4 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x4}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000006c0)={0x10000, 0x280, 0x140, &(0x7f00000002c0)=[0x101, 0x4, 0x65ca, 0x2, 0x3, 0x0, 0x10000, 0x1, 0x3ff, 0x5, 0x7fffffff, 0x7, 0xffffffffffffff19, 0xfffffffffffffff9, 0xc55f, 0x5, 0x5, 0x3, 0x5, 0xf8, 0xffff, 0x6, 0x9, 0x2, 0x8, 0x5, 0x401, 0xffffffffd9e67f7d, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x3, 0x9, 0x1, 0x1, 0x3, 0x1, 0x0, 0xfffffffffffffff9, 0x10000, 0x100000001, 0x1d47, 0x8000, 0xcefa, 0xffffffffffffffff, 0x6, 0xb6f, 0x1, 0x0, 0x9, 0x6, 0xffffffff, 0x5, 0x10, 0x4, 0x7fdc2c03, 0x0, 0x2, 0x5, 0x0, 0x9, 0xfffffffffffffff7, 0x22e, 0x0, 0x0, 0x5, 0x668e, 0x843, 0x5, 0x8, 0x8, 0x31d0, 0x2, 0x7ff, 0x5, 0x8001, 0x7, 0x80, 0x6, 0xfffffffffffffffd, 0x2, 0x6, 0xb, 0x2, 0x474f, 0x64d85021, 0x4, 0x401, 0x4b7f, 0x1, 0x6, 0xffff, 0xffffffffffffff01, 0x3, 0x5, 0x8000000000000001, 0x2, 0x5a, 0x0, 0x1, 0x1000, 0xfffffffffffffffe, 0x543, 0x8000000000000000, 0x100000000, 0x7, 0xc, 0x6, 0x9, 0x9, 0x5, 0x8, 0xe4a9, 0x80000001, 0x0, 0x2, 0x4f5a, 0x3, 0x6, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0xb, 0xfffffffffffffff7, 0x1e0c, 0x5, 0xc8]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000000)=[@cr4={0x1, 0x400003}, @dstype0={0x6, 0xe}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.01070197s ago: executing program 3 (id=664): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x207a) 2.01011697s ago: executing program 3 (id=665): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20004880}, 0x0) (async) r1 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000007c0)={r3}, &(0x7f0000000800)=ANY=[], 0x0, 0x0) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (rerun: 32) 2.00976722s ago: executing program 3 (id=666): symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async) symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121400, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5433, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000100)) (async) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000100)) accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x122) openat(r3, &(0x7f0000000240)='./file0\x00', 0x501000, 0x32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0xa9b, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x48}}}, &(0x7f0000000380)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0xa9b, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x48}}}, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x4) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)={0x40c0, 0x10e, 0x10}, 0x18) linkat(r0, &(0x7f0000000580)='./file1\x00', r4, &(0x7f0000000640)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x10b) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x10b) write(r5, &(0x7f0000000500)='7', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x881400, 0x0) 2.008503611s ago: executing program 4 (id=667): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000001b200)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x3}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f000001b280)=""/157, 0x9d) 2.000216411s ago: executing program 3 (id=668): r0 = syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000020000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503"], 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x80) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4112, 0x1010}, {&(0x7f0000001640)=""/194, 0xc2}], 0x2}, 0xb}], 0x1, 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000017c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = gettid() r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/234, 0xea}], 0x1) rt_sigqueueinfo(r5, 0x21, &(0x7f0000000440)={0x33, 0x40000020, 0xfffffffb}) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000000c0)=0x733) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000240), 0x318, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'bridge_slave_1\x00', @broadcast}) recvmmsg(r8, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f0000000300)=0x3, 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.847549277s ago: executing program 4 (id=669): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000540), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000580)={0x1, 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x56c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000400)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a800dd88a8", 0x20, 0x24040011, &(0x7f0000000440)={0x11, 0x8100, r6, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) getegid() capset(&(0x7f00000000c0)={0x20080522, r2}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x3f7d, 0x1, 0x8}) socketpair(0x1, 0x80000, 0x0, &(0x7f00000005c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0), 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee01) sendmmsg$unix(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408a0}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x28}}, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 1.782658304s ago: executing program 4 (id=670): mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='proc\x00', 0x200000, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x63, 0x19}, 0x18) readlinkat(r0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)=""/4096, 0x1000) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='proc\x00', 0x200000, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x63, 0x19}, 0x18) (async) readlinkat(r0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)=""/4096, 0x1000) (async) 1.782182434s ago: executing program 4 (id=671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000180)=0x2) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd0ffff00000000) 1.781669894s ago: executing program 4 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000004300070102734a00fcdbdf25017c000004000180"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ram0\x00', 0x2, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)='}', 0x1}], 0x1, 0x101, 0x1) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000580)=0x9, 0x4) add_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="7e2374eef796cde4fa7a6498b55fb82d97b70f5012b292923f08bfb3f27d2df81e280550cd34a502f93f943adfe5c5c2861703d0cd1723cee8d8bb8bfa409e44e0c0e57a25eb2c", 0x47, r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.203302334s ago: executing program 0 (id=674): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x80802, 0x0) write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xfffffffffffffffc, 0x3a, '', 0x3a, '', 0x3a, './file0'}, 0x27) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8f40, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000280)={0x1, 0x80, 0x3, 0x0, 0x6, "53aac380e2b21309d8d06f93a7e257f8b30a82"}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0xc04, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@posixacl}, {@nodevmap}, {@version_9p2000}], [{@uid_eq={'uid', 0x3d, r6}}]}}) 1.15053329s ago: executing program 0 (id=675): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000640)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000680)=@vmx={0x101, 0x0, 0x2080, {0x30000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}}) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000004780)=@svm={0x102, 0x1, 0xfffffffffffffe39, {0xffff1000}, {"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"}}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000005c0)={{r5}, 0x9, &(0x7f0000000540)=[0xfffffffffffffffd, 0x6, 0x0, 0x10001, 0x5, 0x9f, 0xffffffffffffff81, 0x5, 0x9d7a], 0x7ff, 0xf}) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setgroups(0x1, &(0x7f00000003c0)=[0x0]) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setregid(0xffffffffffffffff, r10) socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) 1.128975342s ago: executing program 1 (id=676): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x207a) 1.098685295s ago: executing program 1 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000580)='./mnt\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r0 = syz_open_dev$usbfs(&(0x7f0000001640), 0x75, 0x109301) bind$inet(0xffffffffffffffff, &(0x7f0000001680)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x8008550e, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x103a42, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000600)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00050002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x300, 0x78bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4050) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x74, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "5c29f12f8626abcbaced08"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "962ba30e0540b78a46949a07a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x9, 0x4, "85bbfd4c3a"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20000) listxattr(0x0, &(0x7f0000000640)=""/4096, 0x1000) 1.038455732s ago: executing program 0 (id=678): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f00000001c0)={0x0, [{0x0, 0x3988, 0x7, &(0x7f00000008c0)="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"}, {0x1, 0x0, 0x1ff, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x29, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x200, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x40007, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0xfffffffe, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000012c0)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x401) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000180)=0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 1.038094652s ago: executing program 1 (id=679): getrandom(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000040)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a000a00"], 0x28}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pipe2$watch_queue(0x0, 0x80) sendto(0xffffffffffffffff, &(0x7f0000000100)="2c00000014000500010000000000000003010000100002007664706173696d5f6e", 0x21, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000180)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x2, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x5, 0x9, 0x6, '\x00', 0x18, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000001c0)=0x10000) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r7, 0x4068aea3, &(0x7f0000000240)={0xdc, 0x0, 0x2a}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000600)=[{&(0x7f0000000640)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b4804000300640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 1.001448665s ago: executing program 0 (id=680): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./dev/sda1\x00', 0x181) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./dev/sda1\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0x2020) listxattr(&(0x7f00000030c0)='./file0\x00', 0x0, 0x0) (async) listxattr(&(0x7f00000030c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000003100)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x2d, 0x9, 0x800, 0x6, 0x5, 0xf, 0xd4a, 0x0, 0x0, 0x10, 0x2fd40faf}}, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000480)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000500)=@v2={0x2, @aes256, 0x3, '\x00', @auto="5b6470438f31fdddeac2337f8fb6fab6"}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) mkdirat(r3, &(0x7f0000000600)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000640)={0x100, 0x0, 0x0, 0x3900}, 0x30, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000640)={0x100, 0x0, 0x0, 0x3900}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000006c0)={0x100, r5}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000006c0)={0x100, r5}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0/file0\x00', 0x200000, 0x0) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0/file0\x00', 0x200000, 0x0) close(r6) (async) close(r6) 945.758711ms ago: executing program 0 (id=681): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x8041) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000680)={0x1, 0x1, 0x5, 0x0, 0x0, 0x1, 0xc8d, 0x3ff, 0x8, 0x8, 0xce, 0xd, 0x3}) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5753fcff"], 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) write(r0, &(0x7f0000000140)="01", 0x1) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x200, 0x138, 0x1, 0x0, 0x85611, 0x0, 0x0, @by_dev={r4}, [@verity={0x0, 0x90, 0x0, 0xc8, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '512', 0x20, '512', 0x20, 0x1f8, 0x20, 0x23a, 0x20, 'crc32c', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, @none, ' 1 ignore_corruption'}}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x100, 0x0, 0x30a30b42, 0x6, 0x1000, 0x2, 0x208000000001002, 0xfffffffffffffffc, 0x4, 0x80, 0x9, 0x2372, 0x8bd6, 0x4, 0x7f, 0x20], 0x26000, 0x216146}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 434.338324ms ago: executing program 3 (id=682): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x3e, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x8, 0x0, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x1000, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x4, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x2, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x40000009, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1003, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x80000001, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008003, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x800463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000400)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000480)={@remote, 0x6, 0x0, 0xfd, 0xe}, 0x20) close(0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000380)={0x0, 0x257d, [0x3, 0x1, 0x6, 0x4b6c, 0x2, 0x7]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000040)=[{0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x400000000000159, 0x40840) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181643, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000440)={0x66666666666689b}) r3 = socket$inet(0x2, 0xa, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000100)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x21, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x101}, @mss={0x2, 0x81}, @timestamp, @timestamp, @window={0x3, 0xc, 0x3}], 0x5) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r6 = syz_open_pts(r4, 0x200) r7 = dup3(r6, r4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001140)={{0x0, 0x2, 0x3, 0x1, 0x2, 0x1e, 0x9, 0x5, 0x5, 0xffffff2c, 0x3ff, 0x8, 0xfffffffffffffff8, 0xb0, 0x10001}}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000002140)={r8, 0xdf0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r9) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r10, @ANYBLOB="010027bd7000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e4c0008804800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e2100000006000000000000000000000000000000010000000014000200776732"], 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa) mprotect(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x0) read(r3, &(0x7f0000000080)=""/46, 0x2e) 18.706208ms ago: executing program 0 (id=683): prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x20) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686172646c696d69743d6565346d3566255e39672c6d706f6c05000000616c3d7374617469632c75737271756f74050000006f636b5f686172646c696d69743d2d70252c687567653d6164766973652c00"]) write$P9_RWALK(r0, &(0x7f00000001c0)={0x4a, 0x6f, 0x2, {0x5, [{0x0, 0x4, 0x3}, {0x2, 0x2, 0x3}, {0x8, 0x3, 0x5}, {0x40, 0x2, 0x5}, {0x2, 0x4, 0x8}]}}, 0x4a) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x009P2000.u'], 0x15) 15.647698ms ago: executing program 33 (id=683): prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x20) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686172646c696d69743d6565346d3566255e39672c6d706f6c05000000616c3d7374617469632c75737271756f74050000006f636b5f686172646c696d69743d2d70252c687567653d6164766973652c00"]) write$P9_RWALK(r0, &(0x7f00000001c0)={0x4a, 0x6f, 0x2, {0x5, [{0x0, 0x4, 0x3}, {0x2, 0x2, 0x3}, {0x8, 0x3, 0x5}, {0x40, 0x2, 0x5}, {0x2, 0x4, 0x8}]}}, 0x4a) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x009P2000.u'], 0x15) 0s ago: executing program 1 (id=684): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x181440, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x88010, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@snapshot={0x0, 0x1840, 0x0, 0x88, 'snapshot-merge\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'PO', 0x20, '8', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x9, 0x40000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000240)) kernel console output (not intermixed with test programs): usercopy, interval 1, probability 0, space 0, times 0 [ 52.050866][ T1330] CPU: 0 UID: 0 PID: 1330 Comm: syz.0.389 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 52.050895][ T1330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.050904][ T1330] Call Trace: [ 52.050909][ T1330] [ 52.050914][ T1330] __dump_stack+0x21/0x30 [ 52.050942][ T1330] dump_stack_lvl+0x140/0x1c0 [ 52.050963][ T1330] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.050988][ T1330] dump_stack+0x19/0x20 [ 52.051010][ T1330] should_fail_ex+0x3c2/0x510 [ 52.051029][ T1330] should_fail+0xf/0x20 [ 52.051045][ T1330] should_fail_usercopy+0x1e/0x30 [ 52.051060][ T1330] _copy_from_user+0x20/0xa0 [ 52.051079][ T1330] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 52.051101][ T1330] ? ioctl_has_perm+0x39a/0x500 [ 52.051124][ T1330] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 52.051146][ T1330] ? __kasan_check_write+0x18/0x20 [ 52.051169][ T1330] kvm_arch_dev_ioctl+0x3fd/0x990 [ 52.051188][ T1330] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 52.051207][ T1330] ? selinux_file_ioctl+0x732/0x1480 [ 52.051231][ T1330] ? vfs_write+0xbcf/0xfd0 [ 52.051254][ T1330] ? __cfi_vfs_write+0x10/0x10 [ 52.051275][ T1330] ? __kasan_check_write+0x18/0x20 [ 52.051296][ T1330] ? mutex_unlock+0x90/0x240 [ 52.051317][ T1330] ? __cfi_mutex_unlock+0x10/0x10 [ 52.051339][ T1330] kvm_dev_ioctl+0x48e/0x14c0 [ 52.051361][ T1330] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 52.051378][ T1330] ? bpf_lsm_file_ioctl+0xd/0x20 [ 52.051397][ T1330] ? security_file_ioctl+0x3e/0x110 [ 52.051419][ T1330] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 52.051435][ T1330] __se_sys_ioctl+0x123/0x1b0 [ 52.051452][ T1330] __x64_sys_ioctl+0x7f/0xa0 [ 52.051470][ T1330] x64_sys_call+0x1878/0x2ee0 [ 52.051486][ T1330] do_syscall_64+0x57/0xf0 [ 52.051505][ T1330] ? clear_bhb_loop+0x50/0xa0 [ 52.051528][ T1330] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.051550][ T1330] RIP: 0033:0x7f6bdab9f559 [ 52.051565][ T1330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.051580][ T1330] RSP: 002b:00007f6bdbb12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.051600][ T1330] RAX: ffffffffffffffda RBX: 00007f6bdae25fa0 RCX: 00007f6bdab9f559 [ 52.051613][ T1330] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 52.051624][ T1330] RBP: 00007f6bdbb12090 R08: 0000000000000000 R09: 0000000000000000 [ 52.051635][ T1330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.051646][ T1330] R13: 00007f6bdae26038 R14: 00007f6bdae25fa0 R15: 00007ffdf1f27808 [ 52.051658][ T1330] [ 52.325876][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 52.325891][ T36] audit: type=1400 audit(1810118153.674:36222): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.363936][ T1336] FAULT_INJECTION: forcing a failure. [ 52.363936][ T1336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.373401][ T1338] ./dev/sda1: Can't lookup blockdev [ 52.377099][ T1336] CPU: 1 UID: 0 PID: 1336 Comm: syz.0.391 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 52.377126][ T1336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.377138][ T1336] Call Trace: [ 52.377144][ T1336] [ 52.377151][ T1336] __dump_stack+0x21/0x30 [ 52.377179][ T1336] dump_stack_lvl+0x140/0x1c0 [ 52.377203][ T1336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.377227][ T1336] ? check_stack_object+0x138/0x150 [ 52.377249][ T1336] dump_stack+0x19/0x20 [ 52.377271][ T1336] should_fail_ex+0x3c2/0x510 [ 52.377288][ T1336] should_fail+0xf/0x20 [ 52.377304][ T1336] should_fail_usercopy+0x1e/0x30 [ 52.377321][ T1336] _copy_to_user+0x24/0xa0 [ 52.377340][ T1336] simple_read_from_buffer+0xed/0x160 [ 52.377360][ T1336] proc_fail_nth_read+0x1aa/0x220 [ 52.377380][ T1336] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.377400][ T1336] ? bpf_lsm_file_permission+0xd/0x20 [ 52.377417][ T1336] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.377435][ T1336] vfs_read+0x28b/0xc70 [ 52.377457][ T1336] ? __cfi_vfs_read+0x10/0x10 [ 52.377477][ T1336] ? __kasan_check_write+0x18/0x20 [ 52.377497][ T1336] ? mutex_lock+0x97/0x1d0 [ 52.377518][ T1336] ? __cfi_mutex_lock+0x10/0x10 [ 52.377540][ T1336] ksys_read+0x145/0x260 [ 52.377560][ T1336] ? __cfi_ksys_read+0x10/0x10 [ 52.377580][ T1336] ? __kasan_check_write+0x18/0x20 [ 52.377600][ T1336] ? fput+0x1a4/0x230 [ 52.377617][ T1336] ? __kasan_check_read+0x15/0x20 [ 52.377637][ T1336] __x64_sys_read+0x7f/0x90 [ 52.377658][ T1336] x64_sys_call+0x2638/0x2ee0 [ 52.377674][ T1336] do_syscall_64+0x57/0xf0 [ 52.377691][ T1336] ? clear_bhb_loop+0x50/0xa0 [ 52.377713][ T1336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.377742][ T1336] RIP: 0033:0x7f6bdab5fd8e [ 52.377756][ T1336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.377769][ T1336] RSP: 002b:00007f6bdbb11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.377788][ T1336] RAX: ffffffffffffffda RBX: 00007f6bdbb126c0 RCX: 00007f6bdab5fd8e [ 52.377801][ T1336] RDX: 000000000000000f RSI: 00007f6bdbb120a0 RDI: 0000000000000006 [ 52.377812][ T1336] RBP: 00007f6bdbb12090 R08: 0000000000000000 R09: 0000000000000000 [ 52.377824][ T1336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.377833][ T1336] R13: 00007f6bdae26038 R14: 00007f6bdae25fa0 R15: 00007ffdf1f27808 [ 52.377848][ T1336] [ 52.652720][ T1341] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.393'. [ 52.672713][ T36] audit: type=1400 audit(1810118154.024:36223): avc: denied { set_context_mgr } for pid=1342 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 52.699645][ T781] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 52.781427][ T1349] overlay: ./bus is not a directory [ 52.787327][ T36] audit: type=1400 audit(1810118154.134:36224): avc: denied { setopt } for pid=1347 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.819303][ T1352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'. [ 52.829823][ T781] usb 4-1: device descriptor read/64, error -71 [ 52.870189][ T309] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 52.878045][ T309] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 52.899696][ T72] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 52.911788][ T1359] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 53.018661][ T1364] FAULT_INJECTION: forcing a failure. [ 53.018661][ T1364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.032096][ T1364] CPU: 0 UID: 0 PID: 1364 Comm: syz.1.401 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 53.032115][ T1364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 53.032124][ T1364] Call Trace: [ 53.032127][ T1364] [ 53.032132][ T1364] __dump_stack+0x21/0x30 [ 53.032151][ T1364] dump_stack_lvl+0x140/0x1c0 [ 53.032165][ T1364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.032180][ T1364] dump_stack+0x19/0x20 [ 53.032193][ T1364] should_fail_ex+0x3c2/0x510 [ 53.032203][ T1364] should_fail+0xf/0x20 [ 53.032212][ T1364] should_fail_usercopy+0x1e/0x30 [ 53.032222][ T1364] _copy_from_user+0x20/0xa0 [ 53.032234][ T1364] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 53.032249][ T1364] ? ioctl_has_perm+0x39a/0x500 [ 53.032271][ T1364] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 53.032289][ T1364] ? __kasan_check_write+0x18/0x20 [ 53.032311][ T1364] kvm_arch_dev_ioctl+0x3fd/0x990 [ 53.032324][ T1364] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 53.032334][ T1364] ? selinux_file_ioctl+0x732/0x1480 [ 53.032348][ T1364] ? vfs_write+0xbcf/0xfd0 [ 53.032362][ T1364] ? __cfi_vfs_write+0x10/0x10 [ 53.032375][ T1364] ? __kasan_check_write+0x18/0x20 [ 53.032387][ T1364] ? mutex_unlock+0x90/0x240 [ 53.032400][ T1364] ? __cfi_mutex_unlock+0x10/0x10 [ 53.032412][ T1364] kvm_dev_ioctl+0x48e/0x14c0 [ 53.032422][ T1364] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 53.032432][ T1364] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.032442][ T1364] ? security_file_ioctl+0x3e/0x110 [ 53.032456][ T1364] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 53.032465][ T1364] __se_sys_ioctl+0x123/0x1b0 [ 53.032475][ T1364] __x64_sys_ioctl+0x7f/0xa0 [ 53.032484][ T1364] x64_sys_call+0x1878/0x2ee0 [ 53.032494][ T1364] do_syscall_64+0x57/0xf0 [ 53.032504][ T1364] ? clear_bhb_loop+0x50/0xa0 [ 53.032520][ T1364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.032534][ T1364] RIP: 0033:0x7f127839f559 [ 53.032543][ T1364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.032552][ T1364] RSP: 002b:00007f12791ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.032564][ T1364] RAX: ffffffffffffffda RBX: 00007f1278625fa0 RCX: 00007f127839f559 [ 53.032571][ T1364] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 53.032578][ T1364] RBP: 00007f12791ee090 R08: 0000000000000000 R09: 0000000000000000 [ 53.032585][ T1364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.032591][ T1364] R13: 00007f1278626038 R14: 00007f1278625fa0 R15: 00007fffacbbacb8 [ 53.032599][ T1364] [ 53.294104][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 53.302071][ T781] usb 4-1: device descriptor read/64, error -71 [ 53.539608][ T781] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 53.547288][ T72] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 53.678325][ T1375] netlink: 'syz.2.406': attribute type 16 has an invalid length. [ 53.686250][ T1375] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.406'. [ 53.695508][ T781] usb 4-1: device descriptor read/64, error -71 [ 53.714680][ T1377] netlink: 216 bytes leftover after parsing attributes in process `syz.2.407'. [ 53.723801][ T1377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.407'. [ 53.788311][ T36] audit: type=1400 audit(1810118155.134:36225): avc: denied { watch watch_reads } for pid=1382 comm="syz.0.409" path="/93/file1" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.871696][ T9] rust_binder: 1388: undelivered TRANSACTION_ERROR: 29189 [ 53.931888][ T1396] FAULT_INJECTION: forcing a failure. [ 53.931888][ T1396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.945422][ T1396] CPU: 1 UID: 0 PID: 1396 Comm: syz.0.414 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 53.945457][ T1396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 53.945469][ T1396] Call Trace: [ 53.945476][ T1396] [ 53.945483][ T1396] __dump_stack+0x21/0x30 [ 53.945512][ T1396] dump_stack_lvl+0x140/0x1c0 [ 53.945537][ T1396] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.945564][ T1396] dump_stack+0x19/0x20 [ 53.945589][ T1396] should_fail_ex+0x3c2/0x510 [ 53.945609][ T1396] should_fail+0xf/0x20 [ 53.945625][ T1396] should_fail_usercopy+0x1e/0x30 [ 53.945645][ T1396] _copy_from_user+0x20/0xa0 [ 53.945667][ T1396] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 53.945690][ T1396] ? ioctl_has_perm+0x39a/0x500 [ 53.945714][ T1396] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 53.945737][ T1396] ? __kasan_check_write+0x18/0x20 [ 53.945762][ T1396] kvm_arch_dev_ioctl+0x3fd/0x990 [ 53.945783][ T1396] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 53.945803][ T1396] ? selinux_file_ioctl+0x732/0x1480 [ 53.945828][ T1396] ? vfs_write+0xbcf/0xfd0 [ 53.945852][ T1396] ? __cfi_vfs_write+0x10/0x10 [ 53.945876][ T1396] ? __kasan_check_write+0x18/0x20 [ 53.945898][ T1396] ? mutex_unlock+0x90/0x240 [ 53.945921][ T1396] ? __cfi_mutex_unlock+0x10/0x10 [ 53.945945][ T1396] kvm_dev_ioctl+0x48e/0x14c0 [ 53.945964][ T1396] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 53.945982][ T1396] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.946010][ T1396] ? security_file_ioctl+0x3e/0x110 [ 53.946033][ T1396] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 53.946048][ T1396] __se_sys_ioctl+0x123/0x1b0 [ 53.946064][ T1396] __x64_sys_ioctl+0x7f/0xa0 [ 53.946079][ T1396] x64_sys_call+0x1878/0x2ee0 [ 53.946095][ T1396] do_syscall_64+0x57/0xf0 [ 53.946111][ T1396] ? clear_bhb_loop+0x50/0xa0 [ 53.946132][ T1396] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.946153][ T1396] RIP: 0033:0x7f6bdab9f559 [ 53.946169][ T1396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.946183][ T1396] RSP: 002b:00007f6bdbb12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.946203][ T1396] RAX: ffffffffffffffda RBX: 00007f6bdae25fa0 RCX: 00007f6bdab9f559 [ 53.946218][ T1396] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 53.946231][ T1396] RBP: 00007f6bdbb12090 R08: 0000000000000000 R09: 0000000000000000 [ 53.946244][ T1396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.946256][ T1396] R13: 00007f6bdae26038 R14: 00007f6bdae25fa0 R15: 00007ffdf1f27808 [ 53.946273][ T1396] [ 53.949610][ T781] usb 4-1: device descriptor read/64, error -71 [ 54.071566][ T1398] 9pnet_fd: Insufficient options for proto=fd [ 54.075745][ T36] audit: type=1400 audit(1810118155.414:36226): avc: denied { append } for pid=1397 comm="syz.0.415" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.205688][ T1402] 9pnet_fd: Insufficient options for proto=fd [ 54.212400][ T36] audit: type=1400 audit(1810118155.424:36227): avc: denied { mounton } for pid=1397 comm="syz.0.415" path="/99/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 54.269207][ T36] audit: type=1400 audit(1810118155.424:36228): avc: denied { write } for pid=1397 comm="syz.0.415" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 54.293971][ T36] audit: type=1400 audit(1810118155.424:36229): avc: denied { open } for pid=1397 comm="syz.0.415" path="/99/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 54.294816][ T1401] tracefs: Invalid uid '0x00000000ffffffff' [ 54.317433][ T36] audit: type=1400 audit(1810118155.424:36230): avc: denied { mounton } for pid=1397 comm="syz.0.415" path="/99/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 54.347251][ T781] usb usb4-port1: attempt power cycle [ 54.353197][ T36] audit: type=1400 audit(1810118155.544:36231): avc: denied { ioctl } for pid=1399 comm="syz.1.416" path="socket:[16797]" dev="sockfs" ino=16797 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.390076][ T1407] FAULT_INJECTION: forcing a failure. [ 54.390076][ T1407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.411400][ T1407] CPU: 1 UID: 0 PID: 1407 Comm: syz.0.417 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 54.411436][ T1407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.411450][ T1407] Call Trace: [ 54.411456][ T1407] [ 54.411463][ T1407] __dump_stack+0x21/0x30 [ 54.411497][ T1407] dump_stack_lvl+0x140/0x1c0 [ 54.411522][ T1407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.411550][ T1407] dump_stack+0x19/0x20 [ 54.411574][ T1407] should_fail_ex+0x3c2/0x510 [ 54.411592][ T1407] should_fail+0xf/0x20 [ 54.411609][ T1407] should_fail_usercopy+0x1e/0x30 [ 54.411628][ T1407] _copy_from_user+0x20/0xa0 [ 54.411652][ T1407] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 54.411675][ T1407] ? ioctl_has_perm+0x39a/0x500 [ 54.411702][ T1407] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 54.411725][ T1407] ? __kasan_check_write+0x18/0x20 [ 54.411751][ T1407] kvm_arch_dev_ioctl+0x3fd/0x990 [ 54.411770][ T1407] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 54.411791][ T1407] ? selinux_file_ioctl+0x732/0x1480 [ 54.411816][ T1407] ? vfs_write+0xbcf/0xfd0 [ 54.411842][ T1407] ? __cfi_vfs_write+0x10/0x10 [ 54.411888][ T1407] ? __kasan_check_write+0x18/0x20 [ 54.411911][ T1407] ? mutex_unlock+0x90/0x240 [ 54.411935][ T1407] ? __cfi_mutex_unlock+0x10/0x10 [ 54.411958][ T1407] kvm_dev_ioctl+0x48e/0x14c0 [ 54.411987][ T1407] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 54.412005][ T1407] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.412025][ T1407] ? security_file_ioctl+0x3e/0x110 [ 54.412049][ T1407] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 54.412067][ T1407] __se_sys_ioctl+0x123/0x1b0 [ 54.412085][ T1407] __x64_sys_ioctl+0x7f/0xa0 [ 54.412103][ T1407] x64_sys_call+0x1878/0x2ee0 [ 54.412122][ T1407] do_syscall_64+0x57/0xf0 [ 54.412140][ T1407] ? clear_bhb_loop+0x50/0xa0 [ 54.412164][ T1407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.412188][ T1407] RIP: 0033:0x7f6bdab9f559 [ 54.412207][ T1407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.412222][ T1407] RSP: 002b:00007f6bdbb12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.412243][ T1407] RAX: ffffffffffffffda RBX: 00007f6bdae25fa0 RCX: 00007f6bdab9f559 [ 54.412259][ T1407] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 54.412272][ T1407] RBP: 00007f6bdbb12090 R08: 0000000000000000 R09: 0000000000000000 [ 54.412284][ T1407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.412297][ T1407] R13: 00007f6bdae26038 R14: 00007f6bdae25fa0 R15: 00007ffdf1f27808 [ 54.412312][ T1407] [ 54.687507][ T1411] ./dev/sda1: Can't lookup blockdev [ 54.693929][ T781] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 54.720608][ T781] usb 4-1: device descriptor read/8, error -71 [ 54.728078][ T1420] Invalid ELF header len 16 [ 54.742384][ T310] rust_binder: 1422: undelivered TRANSACTION_ERROR: 29189 [ 54.860490][ T781] usb 4-1: device descriptor read/8, error -71 [ 54.877538][ T1445] ./dev/sda1: Can't lookup blockdev [ 54.921908][ T1452] FAULT_INJECTION: forcing a failure. [ 54.921908][ T1452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.935214][ T1452] CPU: 0 UID: 0 PID: 1452 Comm: syz.1.433 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 54.935244][ T1452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.935255][ T1452] Call Trace: [ 54.935261][ T1452] [ 54.935267][ T1452] __dump_stack+0x21/0x30 [ 54.935296][ T1452] dump_stack_lvl+0x140/0x1c0 [ 54.935318][ T1452] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.935351][ T1452] dump_stack+0x19/0x20 [ 54.935374][ T1452] should_fail_ex+0x3c2/0x510 [ 54.935393][ T1452] should_fail+0xf/0x20 [ 54.935409][ T1452] should_fail_usercopy+0x1e/0x30 [ 54.935428][ T1452] _copy_from_user+0x20/0xa0 [ 54.935449][ T1452] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 54.935471][ T1452] ? ioctl_has_perm+0x39a/0x500 [ 54.935495][ T1452] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 54.935516][ T1452] ? __kasan_check_write+0x18/0x20 [ 54.935539][ T1452] kvm_arch_dev_ioctl+0x3fd/0x990 [ 54.935558][ T1452] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 54.935578][ T1452] ? selinux_file_ioctl+0x732/0x1480 [ 54.935601][ T1452] ? vfs_write+0xbcf/0xfd0 [ 54.935621][ T1452] ? __cfi_vfs_write+0x10/0x10 [ 54.935642][ T1452] ? __kasan_check_write+0x18/0x20 [ 54.935664][ T1452] ? mutex_unlock+0x90/0x240 [ 54.935686][ T1452] ? __cfi_mutex_unlock+0x10/0x10 [ 54.935707][ T1452] kvm_dev_ioctl+0x48e/0x14c0 [ 54.935726][ T1452] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 54.935743][ T1452] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.935761][ T1452] ? security_file_ioctl+0x3e/0x110 [ 54.935784][ T1452] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 54.935801][ T1452] __se_sys_ioctl+0x123/0x1b0 [ 54.935819][ T1452] __x64_sys_ioctl+0x7f/0xa0 [ 54.935835][ T1452] x64_sys_call+0x1878/0x2ee0 [ 54.935853][ T1452] do_syscall_64+0x57/0xf0 [ 54.935871][ T1452] ? clear_bhb_loop+0x50/0xa0 [ 54.935895][ T1452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.935917][ T1452] RIP: 0033:0x7f127839f559 [ 54.935933][ T1452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.935948][ T1452] RSP: 002b:00007f12791ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.935968][ T1452] RAX: ffffffffffffffda RBX: 00007f1278625fa0 RCX: 00007f127839f559 [ 54.935982][ T1452] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 54.935994][ T1452] RBP: 00007f12791ee090 R08: 0000000000000000 R09: 0000000000000000 [ 54.936006][ T1452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.936018][ T1452] R13: 00007f1278626038 R14: 00007f1278625fa0 R15: 00007fffacbbacb8 [ 54.936033][ T1452] [ 55.294529][ T1468] ./dev/sda1: Can't lookup blockdev [ 55.330170][ T906] tipc: Subscription rejected, illegal request [ 55.338598][ T526] rust_binder: 1461: undelivered TRANSACTION_ERROR: 29189 [ 55.609596][ T310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 55.698692][ T1482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.709316][ T1482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.770005][ T310] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 55.778722][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.786432][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.793988][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.801660][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.809096][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.816788][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.824331][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.832598][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.840807][ T310] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 55.851513][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 55.860431][ T310] usb 1-1: Product: syz [ 55.864706][ T310] usb 1-1: Manufacturer: syz [ 55.869358][ T310] usb 1-1: SerialNumber: syz [ 55.877918][ T310] usb 1-1: config 0 descriptor?? [ 56.089855][ T310] usb 1-1: USB disconnect, device number 13 [ 56.277987][ T1496] ./dev/sda1: Can't lookup blockdev [ 56.281118][ T1498] FAULT_INJECTION: forcing a failure. [ 56.281118][ T1498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.295726][ T1500] ======================================================= [ 56.295726][ T1500] WARNING: The mand mount option has been deprecated and [ 56.295726][ T1500] and is ignored by this kernel. Remove the mand [ 56.295726][ T1500] option from the mount to silence this warning. [ 56.295726][ T1500] ======================================================= [ 56.296715][ T1498] CPU: 0 UID: 0 PID: 1498 Comm: syz.1.450 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 56.296747][ T1498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 56.296758][ T1498] Call Trace: [ 56.296764][ T1498] [ 56.296770][ T1498] __dump_stack+0x21/0x30 [ 56.296798][ T1498] dump_stack_lvl+0x140/0x1c0 [ 56.296820][ T1498] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.296845][ T1498] dump_stack+0x19/0x20 [ 56.296866][ T1498] should_fail_ex+0x3c2/0x510 [ 56.296885][ T1498] should_fail+0xf/0x20 [ 56.296899][ T1498] should_fail_usercopy+0x1e/0x30 [ 56.296914][ T1498] _copy_from_user+0x20/0xa0 [ 56.296931][ T1498] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 56.296952][ T1498] ? ioctl_has_perm+0x39a/0x500 [ 56.296976][ T1498] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 56.296996][ T1498] ? __kasan_check_write+0x18/0x20 [ 56.297018][ T1498] kvm_arch_dev_ioctl+0x3fd/0x990 [ 56.297036][ T1498] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 56.297054][ T1498] ? selinux_file_ioctl+0x732/0x1480 [ 56.297075][ T1498] ? vfs_write+0xbcf/0xfd0 [ 56.297098][ T1498] ? __cfi_vfs_write+0x10/0x10 [ 56.297119][ T1498] ? __kasan_check_write+0x18/0x20 [ 56.297140][ T1498] ? mutex_unlock+0x90/0x240 [ 56.297170][ T1498] ? __cfi_mutex_unlock+0x10/0x10 [ 56.297190][ T1498] kvm_dev_ioctl+0x48e/0x14c0 [ 56.297208][ T1498] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 56.297224][ T1498] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.297242][ T1498] ? security_file_ioctl+0x3e/0x110 [ 56.297262][ T1498] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 56.297278][ T1498] __se_sys_ioctl+0x123/0x1b0 [ 56.297295][ T1498] __x64_sys_ioctl+0x7f/0xa0 [ 56.297311][ T1498] x64_sys_call+0x1878/0x2ee0 [ 56.297329][ T1498] do_syscall_64+0x57/0xf0 [ 56.297345][ T1498] ? clear_bhb_loop+0x50/0xa0 [ 56.297367][ T1498] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.297387][ T1498] RIP: 0033:0x7f127839f559 [ 56.297402][ T1498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.297417][ T1498] RSP: 002b:00007f12791ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.297436][ T1498] RAX: ffffffffffffffda RBX: 00007f1278625fa0 RCX: 00007f127839f559 [ 56.297450][ T1498] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 56.297462][ T1498] RBP: 00007f12791ee090 R08: 0000000000000000 R09: 0000000000000000 [ 56.297473][ T1498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.297484][ T1498] R13: 00007f1278626038 R14: 00007f1278625fa0 R15: 00007fffacbbacb8 [ 56.297499][ T1498] [ 56.539593][ T781] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 56.652196][ T1510] page size migration: [1510 (syz.2.454)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 56.708945][ T1522] netlink: 'syz.2.459': attribute type 13 has an invalid length. [ 56.738487][ T1524] ./dev/sda1: Can't lookup blockdev [ 56.749569][ T781] usb 2-1: Using ep0 maxpacket: 8 [ 56.756062][ T781] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 56.760449][ T1526] netlink: 37 bytes leftover after parsing attributes in process `syz.2.461'. [ 56.764363][ T781] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 56.774656][ T1526] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 56.783457][ T781] usb 2-1: config 3 has no interface number 0 [ 56.794695][ T1526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.797362][ T781] usb 2-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.806582][ T1526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.819615][ T781] usb 2-1: config 3 interface 45 has no altsetting 0 [ 56.834231][ T781] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 56.843454][ T781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.851620][ T781] usb 2-1: Product: syz [ 56.855815][ T781] usb 2-1: Manufacturer: syz [ 56.860540][ T781] usb 2-1: SerialNumber: syz [ 56.929589][ T526] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 57.075951][ T781] usb 2-1: USB disconnect, device number 14 [ 57.078394][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.098788][ T526] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.108955][ T526] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 57.118356][ T526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.128227][ T526] uvcvideo 1-1:1.0: Interface 0 is not authorized for usage [ 57.269650][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 57.349069][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 57.349086][ T36] audit: type=1400 audit(1810118158.694:36243): avc: denied { ioctl } for pid=1527 comm="syz.2.462" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.379970][ T36] audit: type=1400 audit(1810118158.704:36244): avc: denied { bind } for pid=1527 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.438994][ T1534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.447743][ T1534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.839608][ T526] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.967364][ T36] audit: type=1400 audit(1810118159.314:36245): avc: denied { create } for pid=1537 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.990664][ T526] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 58.003141][ T526] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 58.012345][ T526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.020395][ T526] usb 2-1: Product: syz [ 58.024611][ T526] usb 2-1: Manufacturer: syz [ 58.028464][ T1541] netlink: 'syz.2.468': attribute type 27 has an invalid length. [ 58.029239][ T526] usb 2-1: SerialNumber: syz [ 58.052136][ T1541] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.059334][ T1541] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.243989][ T36] audit: type=1400 audit(1810118159.594:36246): avc: denied { getopt } for pid=1535 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.247869][ T526] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 58.271719][ T526] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 58.280308][ T526] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 58.292296][ T526] usb 2-1: USB disconnect, device number 15 [ 58.299004][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.469632][ T738] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 58.619578][ T738] usb 4-1: Using ep0 maxpacket: 8 [ 58.625638][ T738] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 58.633808][ T738] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 58.644619][ T738] usb 4-1: config 3 has no interface number 0 [ 58.650740][ T738] usb 4-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 58.663711][ T738] usb 4-1: config 3 interface 45 has no altsetting 0 [ 58.671787][ T738] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 58.680860][ T738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.688846][ T738] usb 4-1: Product: syz [ 58.693059][ T738] usb 4-1: Manufacturer: syz [ 58.697664][ T738] usb 4-1: SerialNumber: syz [ 58.772649][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 58.909514][ T738] usb 4-1: USB disconnect, device number 18 [ 58.915915][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.019586][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 59.105432][ T1566] FAULT_INJECTION: forcing a failure. [ 59.105432][ T1566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.118547][ T1566] CPU: 0 UID: 0 PID: 1566 Comm: syz.2.479 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 59.118568][ T1566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.118575][ T1566] Call Trace: [ 59.118580][ T1566] [ 59.118585][ T1566] __dump_stack+0x21/0x30 [ 59.118604][ T1566] dump_stack_lvl+0x140/0x1c0 [ 59.118618][ T1566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.118633][ T1566] dump_stack+0x19/0x20 [ 59.118646][ T1566] should_fail_ex+0x3c2/0x510 [ 59.118657][ T1566] should_fail+0xf/0x20 [ 59.118665][ T1566] should_fail_usercopy+0x1e/0x30 [ 59.118675][ T1566] _copy_from_user+0x20/0xa0 [ 59.118687][ T1566] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 59.118701][ T1566] ? ioctl_has_perm+0x39a/0x500 [ 59.118715][ T1566] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 59.118727][ T1566] ? __kasan_check_write+0x18/0x20 [ 59.118740][ T1566] kvm_arch_dev_ioctl+0x3fd/0x990 [ 59.118751][ T1566] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 59.118761][ T1566] ? selinux_file_ioctl+0x732/0x1480 [ 59.118775][ T1566] ? vfs_write+0xbcf/0xfd0 [ 59.118789][ T1566] ? __cfi_vfs_write+0x10/0x10 [ 59.118801][ T1566] ? __kasan_check_write+0x18/0x20 [ 59.118814][ T1566] ? mutex_unlock+0x90/0x240 [ 59.118826][ T1566] ? __cfi_mutex_unlock+0x10/0x10 [ 59.118838][ T1566] kvm_dev_ioctl+0x48e/0x14c0 [ 59.118849][ T1566] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 59.118858][ T1566] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.118869][ T1566] ? security_file_ioctl+0x3e/0x110 [ 59.118883][ T1566] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 59.118892][ T1566] __se_sys_ioctl+0x123/0x1b0 [ 59.118902][ T1566] __x64_sys_ioctl+0x7f/0xa0 [ 59.118911][ T1566] x64_sys_call+0x1878/0x2ee0 [ 59.118921][ T1566] do_syscall_64+0x57/0xf0 [ 59.118937][ T1566] ? clear_bhb_loop+0x50/0xa0 [ 59.118952][ T1566] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.118965][ T1566] RIP: 0033:0x7fe39f39f559 [ 59.118975][ T1566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.118984][ T1566] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.118996][ T1566] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 59.119004][ T1566] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 59.119011][ T1566] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 59.119018][ T1566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.119025][ T1566] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 59.119033][ T1566] [ 59.410489][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 59.416664][ T9] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 59.424968][ T9] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 59.433923][ T9] usb 2-1: config 3 has no interface number 0 [ 59.440098][ T9] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.444984][ T1568] netlink: 'syz.2.480': attribute type 16 has an invalid length. [ 59.452982][ T9] usb 2-1: config 3 interface 45 has no altsetting 0 [ 59.454490][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 59.476582][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.484706][ T9] usb 2-1: Product: syz [ 59.488877][ T9] usb 2-1: Manufacturer: syz [ 59.493535][ T9] usb 2-1: SerialNumber: syz [ 59.679694][ T1574] FAULT_INJECTION: forcing a failure. [ 59.679694][ T1574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.692857][ T1574] CPU: 1 UID: 0 PID: 1574 Comm: syz.2.482 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 59.692885][ T1574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.692897][ T1574] Call Trace: [ 59.692903][ T1574] [ 59.692909][ T1574] __dump_stack+0x21/0x30 [ 59.692936][ T1574] dump_stack_lvl+0x140/0x1c0 [ 59.692958][ T1574] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.692980][ T1574] dump_stack+0x19/0x20 [ 59.693000][ T1574] should_fail_ex+0x3c2/0x510 [ 59.693018][ T1574] should_fail+0xf/0x20 [ 59.693033][ T1574] should_fail_usercopy+0x1e/0x30 [ 59.693050][ T1574] _copy_from_user+0x20/0xa0 [ 59.693069][ T1574] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 59.693091][ T1574] ? ioctl_has_perm+0x39a/0x500 [ 59.693115][ T1574] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 59.693136][ T1574] ? __kasan_check_write+0x18/0x20 [ 59.693151][ T781] usb 1-1: USB disconnect, device number 14 [ 59.693158][ T1574] kvm_arch_dev_ioctl+0x3fd/0x990 [ 59.693177][ T1574] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 59.693192][ T1574] ? selinux_file_ioctl+0x732/0x1480 [ 59.693214][ T1574] ? vfs_write+0xbcf/0xfd0 [ 59.693237][ T1574] ? __cfi_vfs_write+0x10/0x10 [ 59.693260][ T1574] ? __kasan_check_write+0x18/0x20 [ 59.693290][ T1574] ? mutex_unlock+0x90/0x240 [ 59.693312][ T1574] ? __cfi_mutex_unlock+0x10/0x10 [ 59.693332][ T1574] kvm_dev_ioctl+0x48e/0x14c0 [ 59.693351][ T1574] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 59.693368][ T1574] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.693386][ T1574] ? security_file_ioctl+0x3e/0x110 [ 59.693407][ T1574] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 59.693422][ T1574] __se_sys_ioctl+0x123/0x1b0 [ 59.693439][ T1574] __x64_sys_ioctl+0x7f/0xa0 [ 59.693455][ T1574] x64_sys_call+0x1878/0x2ee0 [ 59.693472][ T1574] do_syscall_64+0x57/0xf0 [ 59.693489][ T1574] ? clear_bhb_loop+0x50/0xa0 [ 59.693512][ T1574] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.693532][ T1574] RIP: 0033:0x7fe39f39f559 [ 59.693548][ T1574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.693562][ T1574] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.693582][ T1574] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 59.693595][ T1574] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 59.693607][ T1574] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 59.693617][ T1574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.693629][ T1574] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 59.693644][ T1574] [ 59.769580][ T36] audit: type=1400 audit(1810118161.114:36247): avc: denied { read } for pid=1579 comm="syz.2.485" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 59.783181][ T9] usb 2-1: USB disconnect, device number 16 [ 59.790514][ T36] audit: type=1400 audit(1810118161.114:36248): avc: denied { open } for pid=1579 comm="syz.2.485" path="/170/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 59.801486][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.038445][ T1582] GUP no longer grows the stack in syz.2.486 (1582): 200000001000-200000c01000 (200000000640) [ 60.048817][ T1582] CPU: 0 UID: 0 PID: 1582 Comm: syz.2.486 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 60.048839][ T1582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.048847][ T1582] Call Trace: [ 60.048851][ T1582] [ 60.048856][ T1582] __dump_stack+0x21/0x30 [ 60.048876][ T1582] dump_stack_lvl+0x140/0x1c0 [ 60.048891][ T1582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.048905][ T1582] ? find_vma+0xd3/0x120 [ 60.048919][ T1582] dump_stack+0x19/0x20 [ 60.048933][ T1582] fixup_user_fault+0x616/0x6a0 [ 60.048943][ T1582] fault_in_user_writeable+0x75/0xe0 [ 60.048954][ T1582] futex_lock_pi+0x2ed/0xa70 [ 60.048964][ T1582] ? futex_unqueue+0x136/0x160 [ 60.048974][ T1582] ? __cfi_futex_lock_pi+0x10/0x10 [ 60.048985][ T1582] ? __cfi_futex_wake_mark+0x10/0x10 [ 60.048997][ T1582] ? __cfi_futex_wake_mark+0x10/0x10 [ 60.049009][ T1582] ? call_rcu_hurry+0x30/0x30 [ 60.049022][ T1582] do_futex+0x270/0x510 [ 60.049032][ T1582] ? percpu_counter_add_batch+0x105/0x1a0 [ 60.049042][ T1582] ? __cfi_do_futex+0x10/0x10 [ 60.049052][ T1582] __se_sys_futex+0x13c/0x320 [ 60.049062][ T1582] ? __x64_sys_futex+0x110/0x110 [ 60.049072][ T1582] ? __x64_sys_prctl+0xf0/0xf0 [ 60.049083][ T1582] ? __kasan_check_write+0x18/0x20 [ 60.049096][ T1582] __x64_sys_futex+0xe9/0x110 [ 60.049106][ T1582] x64_sys_call+0x227f/0x2ee0 [ 60.049116][ T1582] do_syscall_64+0x57/0xf0 [ 60.049127][ T1582] ? clear_bhb_loop+0x50/0xa0 [ 60.049141][ T1582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.049153][ T1582] RIP: 0033:0x7fe39f39f559 [ 60.049163][ T1582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.049172][ T1582] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 60.049184][ T1582] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 60.049192][ T1582] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000640 [ 60.049198][ T1582] RBP: 00007fe39f436b20 R08: 0000200000000640 R09: 00000000fffffffc [ 60.049205][ T1582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.049212][ T1582] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 60.049220][ T1582] [ 60.354224][ T1591] FAULT_INJECTION: forcing a failure. [ 60.354224][ T1591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.367357][ T1591] CPU: 0 UID: 0 PID: 1591 Comm: syz.2.490 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 60.367396][ T1591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.367408][ T1591] Call Trace: [ 60.367414][ T1591] [ 60.367421][ T1591] __dump_stack+0x21/0x30 [ 60.367451][ T1591] dump_stack_lvl+0x140/0x1c0 [ 60.367475][ T1591] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.367500][ T1591] dump_stack+0x19/0x20 [ 60.367522][ T1591] should_fail_ex+0x3c2/0x510 [ 60.367542][ T1591] should_fail+0xf/0x20 [ 60.367558][ T1591] should_fail_usercopy+0x1e/0x30 [ 60.367577][ T1591] _copy_from_user+0x20/0xa0 [ 60.367597][ T1591] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 60.367619][ T1591] ? ioctl_has_perm+0x39a/0x500 [ 60.367643][ T1591] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 60.367664][ T1591] ? __kasan_check_write+0x18/0x20 [ 60.367688][ T1591] kvm_arch_dev_ioctl+0x3fd/0x990 [ 60.367707][ T1591] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 60.367727][ T1591] ? selinux_file_ioctl+0x732/0x1480 [ 60.367751][ T1591] ? vfs_write+0xbcf/0xfd0 [ 60.367774][ T1591] ? __cfi_vfs_write+0x10/0x10 [ 60.367797][ T1591] ? __kasan_check_write+0x18/0x20 [ 60.367817][ T1591] ? mutex_unlock+0x90/0x240 [ 60.367838][ T1591] ? __cfi_mutex_unlock+0x10/0x10 [ 60.367857][ T1591] kvm_dev_ioctl+0x48e/0x14c0 [ 60.367874][ T1591] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 60.367891][ T1591] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.367909][ T1591] ? security_file_ioctl+0x3e/0x110 [ 60.367931][ T1591] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 60.367948][ T1591] __se_sys_ioctl+0x123/0x1b0 [ 60.367966][ T1591] __x64_sys_ioctl+0x7f/0xa0 [ 60.367983][ T1591] x64_sys_call+0x1878/0x2ee0 [ 60.368000][ T1591] do_syscall_64+0x57/0xf0 [ 60.368018][ T1591] ? clear_bhb_loop+0x50/0xa0 [ 60.368041][ T1591] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.368064][ T1591] RIP: 0033:0x7fe39f39f559 [ 60.368080][ T1591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.368095][ T1591] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.368116][ T1591] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 60.368130][ T1591] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 60.368142][ T1591] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 60.368154][ T1591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.368166][ T1591] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 60.368181][ T1591] [ 60.653431][ T1603] FAULT_INJECTION: forcing a failure. [ 60.653431][ T1603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.666553][ T1603] CPU: 0 UID: 0 PID: 1603 Comm: syz.3.495 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 60.666582][ T1603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.666594][ T1603] Call Trace: [ 60.666600][ T1603] [ 60.666608][ T1603] __dump_stack+0x21/0x30 [ 60.666630][ T1603] dump_stack_lvl+0x140/0x1c0 [ 60.666644][ T1603] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.666659][ T1603] dump_stack+0x19/0x20 [ 60.666672][ T1603] should_fail_ex+0x3c2/0x510 [ 60.666684][ T1603] should_fail+0xf/0x20 [ 60.666695][ T1603] should_fail_usercopy+0x1e/0x30 [ 60.666705][ T1603] _copy_from_user+0x20/0xa0 [ 60.666717][ T1603] proc_control+0xa9/0x140 [ 60.666731][ T1603] ? destroy_async+0x210/0x210 [ 60.666743][ T1603] ? mutex_lock+0x97/0x1d0 [ 60.666757][ T1603] ? __kasan_check_write+0x18/0x20 [ 60.666770][ T1603] ? mutex_unlock+0x90/0x240 [ 60.666782][ T1603] usbdev_ioctl+0xc96/0x2120 [ 60.666795][ T1603] ? __cfi_usbdev_ioctl+0x10/0x10 [ 60.666808][ T1603] ? __fget_files+0x2bc/0x330 [ 60.666818][ T1603] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.666829][ T1603] ? security_file_ioctl+0x3e/0x110 [ 60.666842][ T1603] ? __cfi_usbdev_ioctl+0x10/0x10 [ 60.666855][ T1603] __se_sys_ioctl+0x123/0x1b0 [ 60.666865][ T1603] __x64_sys_ioctl+0x7f/0xa0 [ 60.666874][ T1603] x64_sys_call+0x1878/0x2ee0 [ 60.666884][ T1603] do_syscall_64+0x57/0xf0 [ 60.666895][ T1603] ? clear_bhb_loop+0x50/0xa0 [ 60.666909][ T1603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.666921][ T1603] RIP: 0033:0x7f63b7d9f559 [ 60.666931][ T1603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.666940][ T1603] RSP: 002b:00007f63b8bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.666952][ T1603] RAX: ffffffffffffffda RBX: 00007f63b8025fa0 RCX: 00007f63b7d9f559 [ 60.666960][ T1603] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 60.666967][ T1603] RBP: 00007f63b8bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.666973][ T1603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.666980][ T1603] R13: 00007f63b8026038 R14: 00007f63b8025fa0 R15: 00007fff1da57788 [ 60.666988][ T1603] [ 60.919659][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.928150][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.950544][ T1605] veth1_to_hsr: entered promiscuous mode [ 60.956246][ T1605] veth1_to_hsr: entered allmulticast mode [ 60.966425][ T36] audit: type=1400 audit(1810118162.324:36249): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.991885][ T36] audit: type=1400 audit(1810118162.324:36250): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.013271][ T36] audit: type=1400 audit(1810118162.324:36251): avc: denied { read } for pid=149 comm="dhcpcd" name="n40" dev="tmpfs" ino=1051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.035018][ T36] audit: type=1400 audit(1810118162.324:36252): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=1051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.110472][ T1614] FAULT_INJECTION: forcing a failure. [ 61.110472][ T1614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.124920][ T1614] CPU: 0 UID: 0 PID: 1614 Comm: syz.3.499 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 61.124948][ T1614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.124959][ T1614] Call Trace: [ 61.124965][ T1614] [ 61.124972][ T1614] __dump_stack+0x21/0x30 [ 61.125000][ T1614] dump_stack_lvl+0x140/0x1c0 [ 61.125023][ T1614] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.125046][ T1614] dump_stack+0x19/0x20 [ 61.125067][ T1614] should_fail_ex+0x3c2/0x510 [ 61.125085][ T1614] should_fail+0xf/0x20 [ 61.125111][ T1614] should_fail_usercopy+0x1e/0x30 [ 61.125128][ T1614] _copy_from_user+0x20/0xa0 [ 61.125148][ T1614] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 61.125169][ T1614] ? ioctl_has_perm+0x39a/0x500 [ 61.125192][ T1614] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 61.125212][ T1614] ? __kasan_check_write+0x18/0x20 [ 61.125232][ T1614] kvm_arch_dev_ioctl+0x3fd/0x990 [ 61.125250][ T1614] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 61.125266][ T1614] ? selinux_file_ioctl+0x732/0x1480 [ 61.125287][ T1614] ? vfs_write+0xbcf/0xfd0 [ 61.125307][ T1614] ? __cfi_vfs_write+0x10/0x10 [ 61.125327][ T1614] ? __kasan_check_write+0x18/0x20 [ 61.125347][ T1614] ? mutex_unlock+0x90/0x240 [ 61.125368][ T1614] ? __cfi_mutex_unlock+0x10/0x10 [ 61.125388][ T1614] kvm_dev_ioctl+0x48e/0x14c0 [ 61.125404][ T1614] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 61.125420][ T1614] ? bpf_lsm_file_ioctl+0xd/0x20 [ 61.125436][ T1614] ? security_file_ioctl+0x3e/0x110 [ 61.125458][ T1614] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 61.125472][ T1614] __se_sys_ioctl+0x123/0x1b0 [ 61.125484][ T1614] __x64_sys_ioctl+0x7f/0xa0 [ 61.125493][ T1614] x64_sys_call+0x1878/0x2ee0 [ 61.125504][ T1614] do_syscall_64+0x57/0xf0 [ 61.125514][ T1614] ? clear_bhb_loop+0x50/0xa0 [ 61.125528][ T1614] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.125541][ T1614] RIP: 0033:0x7f63b7d9f559 [ 61.125551][ T1614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.125559][ T1614] RSP: 002b:00007f63b8bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.125572][ T1614] RAX: ffffffffffffffda RBX: 00007f63b8025fa0 RCX: 00007f63b7d9f559 [ 61.125579][ T1614] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 61.125586][ T1614] RBP: 00007f63b8bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 61.125593][ T1614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.125602][ T1614] R13: 00007f63b8026038 R14: 00007f63b8025fa0 R15: 00007fff1da57788 [ 61.125610][ T1614] [ 61.427479][ T1626] FAULT_INJECTION: forcing a failure. [ 61.427479][ T1626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.440590][ T1626] CPU: 0 UID: 0 PID: 1626 Comm: syz.1.504 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 61.440620][ T1626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.440630][ T1626] Call Trace: [ 61.440637][ T1626] [ 61.440644][ T1626] __dump_stack+0x21/0x30 [ 61.440672][ T1626] dump_stack_lvl+0x140/0x1c0 [ 61.440687][ T1626] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.440701][ T1626] dump_stack+0x19/0x20 [ 61.440715][ T1626] should_fail_ex+0x3c2/0x510 [ 61.440725][ T1626] should_fail+0xf/0x20 [ 61.440734][ T1626] should_fail_usercopy+0x1e/0x30 [ 61.440744][ T1626] _copy_from_user+0x20/0xa0 [ 61.440756][ T1626] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 61.440769][ T1626] ? ioctl_has_perm+0x39a/0x500 [ 61.440784][ T1626] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 61.440795][ T1626] ? __kasan_check_write+0x18/0x20 [ 61.440809][ T1626] kvm_arch_dev_ioctl+0x3fd/0x990 [ 61.440820][ T1626] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 61.440830][ T1626] ? selinux_file_ioctl+0x732/0x1480 [ 61.440844][ T1626] ? vfs_write+0xbcf/0xfd0 [ 61.440859][ T1626] ? __cfi_vfs_write+0x10/0x10 [ 61.440872][ T1626] ? __kasan_check_write+0x18/0x20 [ 61.440884][ T1626] ? mutex_unlock+0x90/0x240 [ 61.440897][ T1626] ? __cfi_mutex_unlock+0x10/0x10 [ 61.440909][ T1626] kvm_dev_ioctl+0x48e/0x14c0 [ 61.440920][ T1626] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 61.440930][ T1626] ? bpf_lsm_file_ioctl+0xd/0x20 [ 61.440940][ T1626] ? security_file_ioctl+0x3e/0x110 [ 61.440954][ T1626] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 61.440963][ T1626] __se_sys_ioctl+0x123/0x1b0 [ 61.440973][ T1626] __x64_sys_ioctl+0x7f/0xa0 [ 61.440982][ T1626] x64_sys_call+0x1878/0x2ee0 [ 61.440993][ T1626] do_syscall_64+0x57/0xf0 [ 61.441003][ T1626] ? clear_bhb_loop+0x50/0xa0 [ 61.441017][ T1626] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.441038][ T1626] RIP: 0033:0x7f127839f559 [ 61.441048][ T1626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.441057][ T1626] RSP: 002b:00007f12791ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.441070][ T1626] RAX: ffffffffffffffda RBX: 00007f1278625fa0 RCX: 00007f127839f559 [ 61.441078][ T1626] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 61.441085][ T1626] RBP: 00007f12791ee090 R08: 0000000000000000 R09: 0000000000000000 [ 61.441092][ T1626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.441098][ T1626] R13: 00007f1278626038 R14: 00007f1278625fa0 R15: 00007fffacbbacb8 [ 61.441107][ T1626] [ 61.829622][ T781] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 61.959606][ T781] usb 4-1: device descriptor read/64, error -71 [ 61.989650][ T526] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 62.140649][ T526] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 62.151608][ T526] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 62.164064][ T526] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 62.173155][ T526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.181252][ T526] usb 2-1: Product: syz [ 62.185409][ T526] usb 2-1: Manufacturer: syz [ 62.190009][ T526] usb 2-1: SerialNumber: syz [ 62.199594][ T781] usb 4-1: device descriptor read/64, error -71 [ 62.400035][ T526] usb 2-1: Can't get UAC3 power state for id 10 [ 62.407216][ T526] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 62.415588][ T526] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.427847][ T526] usb 2-1: USB disconnect, device number 17 [ 62.436433][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.452252][ T781] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 62.609596][ T781] usb 4-1: device descriptor read/64, error -71 [ 62.655948][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 62.655964][ T36] audit: type=1400 audit(1810118164.004:36256): avc: denied { read write } for pid=1645 comm="syz.0.512" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.686099][ T36] audit: type=1400 audit(1810118164.004:36257): avc: denied { open } for pid=1645 comm="syz.0.512" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.694370][ T1649] FAULT_INJECTION: forcing a failure. [ 62.694370][ T1649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.710113][ T36] audit: type=1400 audit(1810118164.004:36258): avc: denied { ioctl } for pid=1645 comm="syz.0.512" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.723028][ T1649] CPU: 0 UID: 0 PID: 1649 Comm: syz.0.513 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 62.723055][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.723066][ T1649] Call Trace: [ 62.723072][ T1649] [ 62.723079][ T1649] __dump_stack+0x21/0x30 [ 62.723112][ T1649] dump_stack_lvl+0x140/0x1c0 [ 62.723135][ T1649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.723159][ T1649] dump_stack+0x19/0x20 [ 62.723181][ T1649] should_fail_ex+0x3c2/0x510 [ 62.723199][ T1649] should_fail+0xf/0x20 [ 62.723213][ T1649] should_fail_usercopy+0x1e/0x30 [ 62.723230][ T1649] _copy_from_user+0x20/0xa0 [ 62.723250][ T1649] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 62.723271][ T1649] ? ioctl_has_perm+0x39a/0x500 [ 62.723293][ T1649] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 62.723313][ T1649] ? __kasan_check_write+0x18/0x20 [ 62.723335][ T1649] kvm_arch_dev_ioctl+0x3fd/0x990 [ 62.723354][ T1649] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 62.723372][ T1649] ? selinux_file_ioctl+0x732/0x1480 [ 62.723401][ T1649] ? vfs_write+0xbcf/0xfd0 [ 62.723424][ T1649] ? __cfi_vfs_write+0x10/0x10 [ 62.723445][ T1649] ? __kasan_check_write+0x18/0x20 [ 62.723465][ T1649] ? mutex_unlock+0x90/0x240 [ 62.723486][ T1649] ? __cfi_mutex_unlock+0x10/0x10 [ 62.723506][ T1649] kvm_dev_ioctl+0x48e/0x14c0 [ 62.723523][ T1649] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 62.723540][ T1649] ? bpf_lsm_file_ioctl+0xd/0x20 [ 62.723557][ T1649] ? security_file_ioctl+0x3e/0x110 [ 62.723578][ T1649] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 62.723594][ T1649] __se_sys_ioctl+0x123/0x1b0 [ 62.723610][ T1649] __x64_sys_ioctl+0x7f/0xa0 [ 62.723626][ T1649] x64_sys_call+0x1878/0x2ee0 [ 62.723644][ T1649] do_syscall_64+0x57/0xf0 [ 62.723660][ T1649] ? clear_bhb_loop+0x50/0xa0 [ 62.723682][ T1649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.723704][ T1649] RIP: 0033:0x7f6bdab9f559 [ 62.723719][ T1649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.723733][ T1649] RSP: 002b:00007f6bdbb12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.723752][ T1649] RAX: ffffffffffffffda RBX: 00007f6bdae25fa0 RCX: 00007f6bdab9f559 [ 62.723765][ T1649] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 62.723778][ T1649] RBP: 00007f6bdbb12090 R08: 0000000000000000 R09: 0000000000000000 [ 62.723789][ T1649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.723800][ T1649] R13: 00007f6bdae26038 R14: 00007f6bdae25fa0 R15: 00007ffdf1f27808 [ 62.723815][ T1649] [ 62.859580][ T781] usb 4-1: device descriptor read/64, error -71 [ 63.016914][ T1658] No source specified [ 63.090473][ T1665] input: syz1 as /devices/virtual/input/input14 [ 63.097192][ T36] audit: type=1400 audit(1810118164.444:36259): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=501 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.119652][ T36] audit: type=1400 audit(1810118164.444:36260): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=501 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.143328][ T36] audit: type=1400 audit(1810118164.444:36261): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=501 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.168610][ T781] usb usb4-port1: attempt power cycle [ 63.409583][ T526] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 63.468771][ T1653] FAULT_INJECTION: forcing a failure. [ 63.468771][ T1653] name failslab, interval 1, probability 0, space 0, times 0 [ 63.481469][ T1653] CPU: 0 UID: 0 PID: 1653 Comm: syz.1.516 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 63.481490][ T1653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.481498][ T1653] Call Trace: [ 63.481501][ T1653] [ 63.481505][ T1653] __dump_stack+0x21/0x30 [ 63.481525][ T1653] dump_stack_lvl+0x140/0x1c0 [ 63.481538][ T1653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.481553][ T1653] dump_stack+0x19/0x20 [ 63.481566][ T1653] should_fail_ex+0x3c2/0x510 [ 63.481578][ T1653] should_failslab+0xac/0x100 [ 63.481588][ T1653] kmem_cache_alloc_noprof+0x42/0x410 [ 63.481601][ T1653] ? __kasan_check_write+0x18/0x20 [ 63.481614][ T1653] ? taskstats_exit+0x161/0xb50 [ 63.481625][ T1653] ? acct_update_integrals+0x2e5/0x330 [ 63.481635][ T1653] taskstats_exit+0x161/0xb50 [ 63.481657][ T1653] ? _raw_spin_unlock_irq+0x45/0x70 [ 63.481669][ T1653] do_exit+0x7f7/0x2850 [ 63.481683][ T1653] ? futex_wake+0x627/0x950 [ 63.481695][ T1653] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 63.481707][ T1653] ? __cfi_do_exit+0x10/0x10 [ 63.481720][ T1653] ? futex_wait+0x2b8/0x7c0 [ 63.481731][ T1653] ? __cfi_futex_wait+0x10/0x10 [ 63.481742][ T1653] ? _raw_spin_lock_irq+0x116/0x120 [ 63.481753][ T1653] do_group_exit+0x21f/0x2f0 [ 63.481765][ T1653] ? __kasan_check_write+0x18/0x20 [ 63.481778][ T1653] ? recalc_sigpending+0x16c/0x1d0 [ 63.481797][ T1653] get_signal+0x134c/0x1490 [ 63.481821][ T1653] arch_do_signal_or_restart+0xbc/0x700 [ 63.481836][ T1653] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 63.481848][ T1653] syscall_exit_to_user_mode+0x57/0xb0 [ 63.481862][ T1653] do_syscall_64+0x63/0xf0 [ 63.481871][ T1653] ? clear_bhb_loop+0x50/0xa0 [ 63.481885][ T1653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.481898][ T1653] RIP: 0033:0x7f127839f559 [ 63.481910][ T1653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.481918][ T1653] RSP: 002b:00007f12791ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.481930][ T1653] RAX: fffffffffffffe00 RBX: 00007f1278625fa8 RCX: 00007f127839f559 [ 63.481938][ T1653] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1278625fa8 [ 63.481945][ T1653] RBP: 00007f1278625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 63.481951][ T1653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.481957][ T1653] R13: 00007f1278626038 R14: 00007fffacbbabd0 R15: 00007fffacbbacb8 [ 63.481966][ T1653] [ 63.560627][ T526] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.566240][ T781] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 63.573237][ T526] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 63.600641][ T781] usb 4-1: device descriptor read/8, error -71 [ 63.605066][ T526] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.750671][ T781] usb 4-1: device descriptor read/8, error -71 [ 63.755494][ T526] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 63.779777][ T1671] FAULT_INJECTION: forcing a failure. [ 63.779777][ T1671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.780983][ T526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.787187][ T1671] CPU: 0 UID: 0 PID: 1671 Comm: syz.1.522 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 63.787212][ T1671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.787224][ T1671] Call Trace: [ 63.787229][ T1671] [ 63.787237][ T1671] __dump_stack+0x21/0x30 [ 63.787266][ T1671] dump_stack_lvl+0x140/0x1c0 [ 63.787289][ T1671] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.787314][ T1671] dump_stack+0x19/0x20 [ 63.787335][ T1671] should_fail_ex+0x3c2/0x510 [ 63.787354][ T1671] should_fail+0xf/0x20 [ 63.787369][ T1671] should_fail_usercopy+0x1e/0x30 [ 63.787387][ T1671] _copy_from_user+0x20/0xa0 [ 63.787407][ T1671] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 63.787428][ T1671] ? ioctl_has_perm+0x39a/0x500 [ 63.787451][ T1671] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 63.787471][ T1671] ? __kasan_check_write+0x18/0x20 [ 63.787493][ T1671] kvm_arch_dev_ioctl+0x3fd/0x990 [ 63.787511][ T1671] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 63.787529][ T1671] ? selinux_file_ioctl+0x732/0x1480 [ 63.787551][ T1671] ? vfs_write+0xbcf/0xfd0 [ 63.787572][ T1671] ? __cfi_vfs_write+0x10/0x10 [ 63.787593][ T1671] ? __kasan_check_write+0x18/0x20 [ 63.787613][ T1671] ? mutex_unlock+0x90/0x240 [ 63.787639][ T1671] ? __cfi_mutex_unlock+0x10/0x10 [ 63.787659][ T1671] kvm_dev_ioctl+0x48e/0x14c0 [ 63.787676][ T1671] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 63.787693][ T1671] ? bpf_lsm_file_ioctl+0xd/0x20 [ 63.787710][ T1671] ? security_file_ioctl+0x3e/0x110 [ 63.787732][ T1671] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 63.787748][ T1671] __se_sys_ioctl+0x123/0x1b0 [ 63.787764][ T1671] __x64_sys_ioctl+0x7f/0xa0 [ 63.787779][ T1671] x64_sys_call+0x1878/0x2ee0 [ 63.787797][ T1671] do_syscall_64+0x57/0xf0 [ 63.787815][ T1671] ? clear_bhb_loop+0x50/0xa0 [ 63.787837][ T1671] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.787858][ T1671] RIP: 0033:0x7f127839f559 [ 63.787873][ T1671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.787887][ T1671] RSP: 002b:00007f12791ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.787906][ T1671] RAX: ffffffffffffffda RBX: 00007f1278625fa0 RCX: 00007f127839f559 [ 63.787922][ T1671] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 63.787934][ T1671] RBP: 00007f12791ee090 R08: 0000000000000000 R09: 0000000000000000 [ 63.787945][ T1671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.787956][ T1671] R13: 00007f1278626038 R14: 00007f1278625fa0 R15: 00007fffacbbacb8 [ 63.787976][ T1671] [ 63.866799][ T1677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 63.882434][ T526] usb 1-1: config 0 descriptor?? [ 64.029605][ T781] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 64.039191][ T526] usbhid 1-1:0.0: Interface 0 is not authorized for usage [ 64.045192][ T517] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 64.120588][ T781] usb 4-1: device descriptor read/8, error -71 [ 64.142583][ T1680] No source specified [ 64.154919][ T1682] FAULT_INJECTION: forcing a failure. [ 64.154919][ T1682] name failslab, interval 1, probability 0, space 0, times 0 [ 64.167673][ T1682] CPU: 0 UID: 0 PID: 1682 Comm: syz.3.527 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 64.167695][ T1682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.167703][ T1682] Call Trace: [ 64.167708][ T1682] [ 64.167713][ T1682] __dump_stack+0x21/0x30 [ 64.167734][ T1682] dump_stack_lvl+0x140/0x1c0 [ 64.167748][ T1682] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.167763][ T1682] dump_stack+0x19/0x20 [ 64.167776][ T1682] should_fail_ex+0x3c2/0x510 [ 64.167786][ T1682] ? usb_alloc_urb+0x5f/0x1f0 [ 64.167796][ T1682] should_failslab+0xac/0x100 [ 64.167806][ T1682] __kmalloc_noprof+0x69/0x510 [ 64.167827][ T1682] ? usb_alloc_urb+0x5f/0x1f0 [ 64.167836][ T1682] usb_alloc_urb+0x5f/0x1f0 [ 64.167845][ T1682] ? do_proc_control+0x1e9/0xfd0 [ 64.167860][ T1682] do_proc_control+0x1fe/0xfd0 [ 64.167874][ T1682] proc_control+0xd7/0x140 [ 64.167887][ T1682] ? destroy_async+0x210/0x210 [ 64.167899][ T1682] ? mutex_lock+0x97/0x1d0 [ 64.167913][ T1682] ? __kasan_check_write+0x18/0x20 [ 64.167926][ T1682] ? mutex_unlock+0x90/0x240 [ 64.167938][ T1682] usbdev_ioctl+0xc96/0x2120 [ 64.167951][ T1682] ? __cfi_usbdev_ioctl+0x10/0x10 [ 64.167963][ T1682] ? __fget_files+0x2bc/0x330 [ 64.167973][ T1682] ? bpf_lsm_file_ioctl+0xd/0x20 [ 64.167984][ T1682] ? security_file_ioctl+0x3e/0x110 [ 64.167998][ T1682] ? __cfi_usbdev_ioctl+0x10/0x10 [ 64.168010][ T1682] __se_sys_ioctl+0x123/0x1b0 [ 64.168020][ T1682] __x64_sys_ioctl+0x7f/0xa0 [ 64.168029][ T1682] x64_sys_call+0x1878/0x2ee0 [ 64.168039][ T1682] do_syscall_64+0x57/0xf0 [ 64.168049][ T1682] ? clear_bhb_loop+0x50/0xa0 [ 64.168063][ T1682] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.168076][ T1682] RIP: 0033:0x7f63b7d9f559 [ 64.168086][ T1682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.168094][ T1682] RSP: 002b:00007f63b8bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.168106][ T1682] RAX: ffffffffffffffda RBX: 00007f63b8025fa0 RCX: 00007f63b7d9f559 [ 64.168120][ T1682] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 64.168127][ T1682] RBP: 00007f63b8bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.168137][ T1682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.168143][ T1682] R13: 00007f63b8026038 R14: 00007f63b8025fa0 R15: 00007fff1da57788 [ 64.168151][ T1682] [ 64.420231][ T781] usb 4-1: device descriptor read/8, error -71 [ 64.479599][ T517] usb 2-1: Using ep0 maxpacket: 32 [ 64.485820][ T517] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 64.493934][ T517] usb 2-1: config 0 has no interface number 0 [ 64.501315][ T517] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 64.510372][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.518377][ T517] usb 2-1: Product: syz [ 64.522550][ T517] usb 2-1: Manufacturer: syz [ 64.527154][ T517] usb 2-1: SerialNumber: syz [ 64.532124][ T781] usb usb4-port1: unable to enumerate USB device [ 64.538746][ T517] usb 2-1: config 0 descriptor?? [ 64.546013][ T517] smsc95xx v2.0.0 [ 64.601937][ T36] audit: type=1400 audit(1810118165.954:36262): avc: denied { write } for pid=1666 comm="syz.0.520" path="socket:[18825]" dev="sockfs" ino=18825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.776141][ T1691] rust_binder: validate_parent_fixup: fixup_min_offset=16, parent_offset=8 [ 64.784177][ T1693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.784889][ T36] audit: type=1400 audit(1810118166.124:36263): avc: denied { map } for pid=1689 comm="syz.3.531" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.793990][ T1693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.818644][ T1691] rust_binder: 1689:1691 error while translating object: EINVAL [ 64.833933][ T1691] rust_binder: 1689:1691 transaction call to 1689:0 failed EINVAL, code 0 size 112-24 line thread.rs:955 [ 64.835683][ T1693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.845757][ T36] audit: type=1400 audit(1810118166.124:36264): avc: denied { call } for pid=1689 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.854858][ T1693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.874082][ T72] rust_binder: 1689: undelivered TRANSACTION_ERROR: 29201 [ 64.946507][ T517] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 64.957455][ T517] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.053689][ T1700] netlink: 'syz.3.534': attribute type 4 has an invalid length. [ 65.061456][ T1700] netlink: 17 bytes leftover after parsing attributes in process `syz.3.534'. [ 65.167992][ T36] audit: type=1400 audit(1810118166.514:36265): avc: denied { read write } for pid=1674 comm="syz.1.524" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 65.179979][ T1675] zero sized request [ 65.339593][ T72] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 65.408447][ T1708] FAULT_INJECTION: forcing a failure. [ 65.408447][ T1708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.421742][ T1708] CPU: 0 UID: 0 PID: 1708 Comm: syz.2.537 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 65.421762][ T1708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.421770][ T1708] Call Trace: [ 65.421773][ T1708] [ 65.421777][ T1708] __dump_stack+0x21/0x30 [ 65.421797][ T1708] dump_stack_lvl+0x140/0x1c0 [ 65.421810][ T1708] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.421828][ T1708] dump_stack+0x19/0x20 [ 65.421841][ T1708] should_fail_ex+0x3c2/0x510 [ 65.421851][ T1708] should_fail+0xf/0x20 [ 65.421860][ T1708] should_fail_usercopy+0x1e/0x30 [ 65.421870][ T1708] _copy_from_user+0x20/0xa0 [ 65.421882][ T1708] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 65.421895][ T1708] ? ioctl_has_perm+0x39a/0x500 [ 65.421910][ T1708] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 65.421922][ T1708] ? __kasan_check_write+0x18/0x20 [ 65.421935][ T1708] kvm_arch_dev_ioctl+0x3fd/0x990 [ 65.421946][ T1708] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 65.421956][ T1708] ? selinux_file_ioctl+0x732/0x1480 [ 65.421970][ T1708] ? vfs_write+0xbcf/0xfd0 [ 65.421985][ T1708] ? __cfi_vfs_write+0x10/0x10 [ 65.421997][ T1708] ? __kasan_check_write+0x18/0x20 [ 65.422010][ T1708] ? mutex_unlock+0x90/0x240 [ 65.422022][ T1708] ? __cfi_mutex_unlock+0x10/0x10 [ 65.422034][ T1708] kvm_dev_ioctl+0x48e/0x14c0 [ 65.422045][ T1708] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 65.422055][ T1708] ? bpf_lsm_file_ioctl+0xd/0x20 [ 65.422065][ T1708] ? security_file_ioctl+0x3e/0x110 [ 65.422077][ T1708] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 65.422087][ T1708] __se_sys_ioctl+0x123/0x1b0 [ 65.422097][ T1708] __x64_sys_ioctl+0x7f/0xa0 [ 65.422106][ T1708] x64_sys_call+0x1878/0x2ee0 [ 65.422116][ T1708] do_syscall_64+0x57/0xf0 [ 65.422126][ T1708] ? clear_bhb_loop+0x50/0xa0 [ 65.422141][ T1708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.422157][ T1708] RIP: 0033:0x7fe39f39f559 [ 65.422166][ T1708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.422175][ T1708] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.422188][ T1708] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 65.422196][ T1708] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 65.422203][ T1708] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 65.422210][ T1708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.422217][ T1708] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 65.422225][ T1708] [ 65.699615][ T72] usb 4-1: Using ep0 maxpacket: 8 [ 65.705724][ T72] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 65.713844][ T72] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 65.722585][ T72] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 65.732696][ T72] usb 4-1: config 3 has no interface number 0 [ 65.738779][ T72] usb 4-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.751737][ T72] usb 4-1: config 3 interface 45 has no altsetting 0 [ 65.759769][ T72] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 65.768820][ T72] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.776848][ T72] usb 4-1: Product: syz [ 65.781028][ T72] usb 4-1: Manufacturer: syz [ 65.785621][ T72] usb 4-1: SerialNumber: syz [ 65.996984][ T72] usb 4-1: USB disconnect, device number 23 [ 66.003360][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.079601][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 66.091631][ T517] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 66.102781][ T517] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 66.112796][ T517] usb 2-1: USB disconnect, device number 18 [ 66.161559][ T1715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 66.186704][ T738] usb 1-1: USB disconnect, device number 15 [ 66.206076][ T1718] fuse: Bad value for 'group_id' [ 66.211135][ T1718] fuse: Bad value for 'group_id' [ 66.564171][ T1739] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.630360][ T1747] usb usb7: usbfs: process 1747 (syz.1.549) did not claim interface 0 before use [ 66.899588][ T517] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 67.029626][ T517] usb 2-1: device descriptor read/64, error -71 [ 67.199451][ T1759] usb usb8: usbfs: process 1759 (syz.0.553) did not claim interface 0 before use [ 67.219441][ T1765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.229888][ T1765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.248054][ T1771] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.269669][ T517] usb 2-1: device descriptor read/64, error -71 [ 67.466946][ T1779] usb usb8: usbfs: process 1779 (syz.3.565) did not claim interface 0 before use [ 67.499580][ T738] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 67.519616][ T517] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 67.629585][ T738] usb 1-1: device descriptor read/64, error -71 [ 67.649598][ T517] usb 2-1: device descriptor read/64, error -71 [ 67.751442][ T1785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.760000][ T1785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.869582][ T738] usb 1-1: device descriptor read/64, error -71 [ 67.899594][ T517] usb 2-1: device descriptor read/64, error -71 [ 68.009675][ T517] usb usb2-port1: attempt power cycle [ 68.049489][ T1788] loop8: detected capacity change from 0 to 16384 [ 68.119603][ T738] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 68.209703][ T1788] loop8: detected capacity change from 16384 to 16383 [ 68.265147][ T1791] FAULT_INJECTION: forcing a failure. [ 68.265147][ T1791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.278264][ T738] usb 1-1: device descriptor read/64, error -71 [ 68.284630][ T1791] CPU: 1 UID: 0 PID: 1791 Comm: syz.3.570 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 68.284658][ T1791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.284669][ T1791] Call Trace: [ 68.284675][ T1791] [ 68.284681][ T1791] __dump_stack+0x21/0x30 [ 68.284708][ T1791] dump_stack_lvl+0x140/0x1c0 [ 68.284730][ T1791] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.284752][ T1791] dump_stack+0x19/0x20 [ 68.284773][ T1791] should_fail_ex+0x3c2/0x510 [ 68.284791][ T1791] should_fail+0xf/0x20 [ 68.284805][ T1791] should_fail_usercopy+0x1e/0x30 [ 68.284823][ T1791] _copy_from_user+0x20/0xa0 [ 68.284842][ T1791] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 68.284872][ T1791] ? ioctl_has_perm+0x39a/0x500 [ 68.284896][ T1791] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 68.284919][ T1791] ? __kasan_check_write+0x18/0x20 [ 68.284942][ T1791] kvm_arch_dev_ioctl+0x3fd/0x990 [ 68.284961][ T1791] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 68.284981][ T1791] ? selinux_file_ioctl+0x732/0x1480 [ 68.285005][ T1791] ? vfs_write+0xbcf/0xfd0 [ 68.285029][ T1791] ? __cfi_vfs_write+0x10/0x10 [ 68.285051][ T1791] ? __kasan_check_write+0x18/0x20 [ 68.285072][ T1791] ? mutex_unlock+0x90/0x240 [ 68.285094][ T1791] ? __cfi_mutex_unlock+0x10/0x10 [ 68.285116][ T1791] kvm_dev_ioctl+0x48e/0x14c0 [ 68.285134][ T1791] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 68.285152][ T1791] ? bpf_lsm_file_ioctl+0xd/0x20 [ 68.285171][ T1791] ? security_file_ioctl+0x3e/0x110 [ 68.285194][ T1791] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 68.285211][ T1791] __se_sys_ioctl+0x123/0x1b0 [ 68.285230][ T1791] __x64_sys_ioctl+0x7f/0xa0 [ 68.285247][ T1791] x64_sys_call+0x1878/0x2ee0 [ 68.285265][ T1791] do_syscall_64+0x57/0xf0 [ 68.285283][ T1791] ? clear_bhb_loop+0x50/0xa0 [ 68.285307][ T1791] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.285330][ T1791] RIP: 0033:0x7f63b7d9f559 [ 68.285346][ T1791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.285361][ T1791] RSP: 002b:00007f63b8bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.285381][ T1791] RAX: ffffffffffffffda RBX: 00007f63b8025fa0 RCX: 00007f63b7d9f559 [ 68.285395][ T1791] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 68.285408][ T1791] RBP: 00007f63b8bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 68.285419][ T1791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.285430][ T1791] R13: 00007f63b8026038 R14: 00007f63b8025fa0 R15: 00007fff1da57788 [ 68.285446][ T1791] [ 68.429621][ T517] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 68.560063][ T738] usb 1-1: device descriptor read/64, error -71 [ 68.570670][ T517] usb 2-1: device descriptor read/8, error -71 [ 68.679689][ T738] usb usb1-port1: attempt power cycle [ 68.699575][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 68.716277][ T517] usb 2-1: device descriptor read/8, error -71 [ 68.802365][ T1810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.810934][ T1810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.829612][ T31] usb 4-1: device descriptor read/64, error -71 [ 68.959629][ T517] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 68.980513][ T517] usb 2-1: device descriptor read/8, error -71 [ 69.019590][ T738] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 69.040541][ T738] usb 1-1: device descriptor read/8, error -71 [ 69.069592][ T31] usb 4-1: device descriptor read/64, error -71 [ 69.110558][ T517] usb 2-1: device descriptor read/8, error -71 [ 69.170555][ T738] usb 1-1: device descriptor read/8, error -71 [ 69.219722][ T517] usb usb2-port1: unable to enumerate USB device [ 69.309631][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 69.419580][ T738] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 69.439617][ T31] usb 4-1: device descriptor read/64, error -71 [ 69.446748][ T738] usb 1-1: device descriptor read/8, error -71 [ 69.580558][ T738] usb 1-1: device descriptor read/8, error -71 [ 69.679588][ T31] usb 4-1: device descriptor read/64, error -71 [ 69.689687][ T738] usb usb1-port1: unable to enumerate USB device [ 69.789697][ T31] usb usb4-port1: attempt power cycle [ 70.129582][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 70.150573][ T31] usb 4-1: device descriptor read/8, error -71 [ 70.211039][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 70.211054][ T36] audit: type=1400 audit(1810118171.564:36273): avc: denied { search } for pid=1822 comm="syz.2.580" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.280586][ T31] usb 4-1: device descriptor read/8, error -71 [ 70.388750][ T517] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.410174][ T517] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.529579][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 70.550545][ T31] usb 4-1: device descriptor read/8, error -71 [ 70.680611][ T31] usb 4-1: device descriptor read/8, error -71 [ 70.719587][ T72] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 70.789696][ T31] usb usb4-port1: unable to enumerate USB device [ 70.869762][ T72] usb 1-1: Using ep0 maxpacket: 32 [ 70.876004][ T72] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 70.887264][ T72] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.900139][ T72] usb 1-1: config 0 interface 0 has no altsetting 0 [ 70.906730][ T72] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 70.915761][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.924338][ T72] usb 1-1: config 0 descriptor?? [ 70.930338][ T72] usbhid 1-1:0.0: Interface 0 is not authorized for usage [ 71.418185][ T36] audit: type=1400 audit(1810118172.764:36274): avc: denied { read } for pid=1832 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.441619][ T36] audit: type=1400 audit(1810118172.764:36275): avc: denied { open } for pid=1832 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.473817][ T36] audit: type=1400 audit(1810118172.764:36276): avc: denied { getattr } for pid=1832 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.506872][ T36] audit: type=1400 audit(1810118172.854:36277): avc: denied { write } for pid=1831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.534327][ T36] audit: type=1400 audit(1810118172.854:36278): avc: denied { add_name } for pid=1831 comm="dhcpcd-run-hook" name="resolv.conf.veth1_to_hsr.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.558214][ T36] audit: type=1400 audit(1810118172.854:36279): avc: denied { create } for pid=1831 comm="dhcpcd-run-hook" name="resolv.conf.veth1_to_hsr.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.582263][ T36] audit: type=1400 audit(1810118172.854:36280): avc: denied { write } for pid=1831 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.veth1_to_hsr.ipv4ll" dev="tmpfs" ino=1202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.609791][ T36] audit: type=1400 audit(1810118172.854:36281): avc: denied { append } for pid=1831 comm="dhcpcd-run-hook" name="resolv.conf.veth1_to_hsr.ipv4ll" dev="tmpfs" ino=1202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.635591][ T36] audit: type=1400 audit(1810118172.884:36282): avc: denied { write } for pid=1846 comm="syz.2.583" name="usb_gadget" dev="configfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.660373][ T1862] FAULT_INJECTION: forcing a failure. [ 71.660373][ T1862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.673531][ T1862] CPU: 1 UID: 0 PID: 1862 Comm: syz.2.586 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 71.673559][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.673571][ T1862] Call Trace: [ 71.673577][ T1862] [ 71.673584][ T1862] __dump_stack+0x21/0x30 [ 71.673612][ T1862] dump_stack_lvl+0x140/0x1c0 [ 71.673635][ T1862] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.673660][ T1862] dump_stack+0x19/0x20 [ 71.673681][ T1862] should_fail_ex+0x3c2/0x510 [ 71.673699][ T1862] should_fail+0xf/0x20 [ 71.673714][ T1862] should_fail_usercopy+0x1e/0x30 [ 71.673732][ T1862] _copy_from_user+0x20/0xa0 [ 71.673751][ T1862] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 71.673772][ T1862] ? ioctl_has_perm+0x39a/0x500 [ 71.673795][ T1862] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 71.673815][ T1862] ? __kasan_check_write+0x18/0x20 [ 71.673837][ T1862] kvm_arch_dev_ioctl+0x3fd/0x990 [ 71.673855][ T1862] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 71.673874][ T1862] ? selinux_file_ioctl+0x732/0x1480 [ 71.673896][ T1862] ? vfs_write+0xbcf/0xfd0 [ 71.673919][ T1862] ? __cfi_vfs_write+0x10/0x10 [ 71.673940][ T1862] ? __kasan_check_write+0x18/0x20 [ 71.673961][ T1862] ? mutex_unlock+0x90/0x240 [ 71.673982][ T1862] ? __cfi_mutex_unlock+0x10/0x10 [ 71.674002][ T1862] kvm_dev_ioctl+0x48e/0x14c0 [ 71.674021][ T1862] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 71.674038][ T1862] ? bpf_lsm_file_ioctl+0xd/0x20 [ 71.674055][ T1862] ? security_file_ioctl+0x3e/0x110 [ 71.674077][ T1862] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 71.674094][ T1862] __se_sys_ioctl+0x123/0x1b0 [ 71.674123][ T1862] __x64_sys_ioctl+0x7f/0xa0 [ 71.674140][ T1862] x64_sys_call+0x1878/0x2ee0 [ 71.674158][ T1862] do_syscall_64+0x57/0xf0 [ 71.674190][ T1862] ? clear_bhb_loop+0x50/0xa0 [ 71.674213][ T1862] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.674234][ T1862] RIP: 0033:0x7fe39f39f559 [ 71.674250][ T1862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.674265][ T1862] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.674285][ T1862] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 71.674298][ T1862] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 71.674310][ T1862] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 71.674322][ T1862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.674333][ T1862] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 71.674348][ T1862] [ 71.674679][ T1860] SELinux: Context system_u: is not valid (left unmapped). [ 72.018231][ T1873] FAULT_INJECTION: forcing a failure. [ 72.018231][ T1873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.031300][ T1873] CPU: 0 UID: 0 PID: 1873 Comm: syz.2.595 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 72.031329][ T1873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.031345][ T1873] Call Trace: [ 72.031349][ T1873] [ 72.031354][ T1873] __dump_stack+0x21/0x30 [ 72.031375][ T1873] dump_stack_lvl+0x140/0x1c0 [ 72.031389][ T1873] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.031404][ T1873] ? check_stack_object+0x138/0x150 [ 72.031418][ T1873] dump_stack+0x19/0x20 [ 72.031432][ T1873] should_fail_ex+0x3c2/0x510 [ 72.031443][ T1873] should_fail+0xf/0x20 [ 72.031452][ T1873] should_fail_usercopy+0x1e/0x30 [ 72.031463][ T1873] _copy_to_user+0x24/0xa0 [ 72.031476][ T1873] simple_read_from_buffer+0xed/0x160 [ 72.031488][ T1873] proc_fail_nth_read+0x1aa/0x220 [ 72.031501][ T1873] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.031512][ T1873] ? bpf_lsm_file_permission+0xd/0x20 [ 72.031524][ T1873] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.031535][ T1873] vfs_read+0x28b/0xc70 [ 72.031549][ T1873] ? __cfi_vfs_read+0x10/0x10 [ 72.031568][ T1873] ? __kasan_check_write+0x18/0x20 [ 72.031590][ T1873] ? mutex_lock+0x97/0x1d0 [ 72.031607][ T1873] ? __cfi_mutex_lock+0x10/0x10 [ 72.031620][ T1873] ksys_read+0x145/0x260 [ 72.031633][ T1873] ? __cfi_ksys_read+0x10/0x10 [ 72.031646][ T1873] ? __kasan_check_write+0x18/0x20 [ 72.031658][ T1873] ? __kasan_check_write+0x18/0x20 [ 72.031671][ T1873] ? fpregs_restore_userregs+0x11c/0x260 [ 72.031685][ T1873] __x64_sys_read+0x7f/0x90 [ 72.031698][ T1873] x64_sys_call+0x2638/0x2ee0 [ 72.031708][ T1873] do_syscall_64+0x57/0xf0 [ 72.031719][ T1873] ? clear_bhb_loop+0x50/0xa0 [ 72.031734][ T1873] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.031746][ T1873] RIP: 0033:0x7fe39f35fd8e [ 72.031757][ T1873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.031766][ T1873] RSP: 002b:00007fe3a0247fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.031779][ T1873] RAX: ffffffffffffffda RBX: 00007fe3a02486c0 RCX: 00007fe39f35fd8e [ 72.031788][ T1873] RDX: 000000000000000f RSI: 00007fe3a02480a0 RDI: 0000000000000004 [ 72.031795][ T1873] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 72.031802][ T1873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.031808][ T1873] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 72.031817][ T1873] [ 72.209582][ T31] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 72.211966][ T72] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 72.369590][ T31] usb 2-1: device descriptor read/64, error -71 [ 72.377226][ T1882] FAULT_INJECTION: forcing a failure. [ 72.377226][ T1882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.390354][ T1882] CPU: 1 UID: 0 PID: 1882 Comm: syz.2.599 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 72.390385][ T1882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.390397][ T1882] Call Trace: [ 72.390404][ T1882] [ 72.390412][ T1882] __dump_stack+0x21/0x30 [ 72.390434][ T1882] dump_stack_lvl+0x140/0x1c0 [ 72.390449][ T1882] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.390464][ T1882] dump_stack+0x19/0x20 [ 72.390477][ T1882] should_fail_ex+0x3c2/0x510 [ 72.390489][ T1882] should_fail+0xf/0x20 [ 72.390498][ T1882] should_fail_usercopy+0x1e/0x30 [ 72.390509][ T1882] _copy_from_user+0x20/0xa0 [ 72.390521][ T1882] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 72.390534][ T1882] ? ioctl_has_perm+0x39a/0x500 [ 72.390550][ T1882] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 72.390562][ T1882] ? __kasan_check_write+0x18/0x20 [ 72.390576][ T1882] kvm_arch_dev_ioctl+0x3fd/0x990 [ 72.390587][ T1882] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 72.390598][ T1882] ? selinux_file_ioctl+0x732/0x1480 [ 72.390612][ T1882] ? vfs_write+0xbcf/0xfd0 [ 72.390627][ T1882] ? __cfi_vfs_write+0x10/0x10 [ 72.390640][ T1882] ? __kasan_check_write+0x18/0x20 [ 72.390653][ T1882] ? mutex_unlock+0x90/0x240 [ 72.390666][ T1882] ? __cfi_mutex_unlock+0x10/0x10 [ 72.390678][ T1882] kvm_dev_ioctl+0x48e/0x14c0 [ 72.390689][ T1882] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 72.390699][ T1882] ? bpf_lsm_file_ioctl+0xd/0x20 [ 72.390710][ T1882] ? security_file_ioctl+0x3e/0x110 [ 72.390723][ T1882] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 72.390732][ T1882] __se_sys_ioctl+0x123/0x1b0 [ 72.390742][ T1882] __x64_sys_ioctl+0x7f/0xa0 [ 72.390752][ T1882] x64_sys_call+0x1878/0x2ee0 [ 72.390762][ T1882] do_syscall_64+0x57/0xf0 [ 72.390773][ T1882] ? clear_bhb_loop+0x50/0xa0 [ 72.390787][ T1882] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.390800][ T1882] RIP: 0033:0x7fe39f39f559 [ 72.390810][ T1882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.390819][ T1882] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.390832][ T1882] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 72.390843][ T1882] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 72.390853][ T1882] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 72.390860][ T1882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.390866][ T1882] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 72.390875][ T1882] [ 72.398204][ T1884] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 72.439569][ T72] usb 4-1: Using ep0 maxpacket: 8 [ 72.441004][ T1884] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 72.445550][ T72] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 72.619602][ T31] usb 2-1: device descriptor read/64, error -71 [ 72.626286][ T72] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 72.687849][ T1890] FAULT_INJECTION: forcing a failure. [ 72.687849][ T1890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.690094][ T72] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 72.698871][ T1890] CPU: 1 UID: 0 PID: 1890 Comm: syz.2.602 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 72.698897][ T1890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.698909][ T1890] Call Trace: [ 72.698916][ T1890] [ 72.698923][ T1890] __dump_stack+0x21/0x30 [ 72.698954][ T1890] dump_stack_lvl+0x140/0x1c0 [ 72.698977][ T1890] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.699003][ T1890] dump_stack+0x19/0x20 [ 72.699025][ T1890] should_fail_ex+0x3c2/0x510 [ 72.699043][ T1890] should_fail+0xf/0x20 [ 72.699059][ T1890] should_fail_usercopy+0x1e/0x30 [ 72.699077][ T1890] _copy_from_user+0x20/0xa0 [ 72.699097][ T1890] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 72.699120][ T1890] ? ioctl_has_perm+0x39a/0x500 [ 72.699143][ T1890] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 72.699163][ T1890] ? __kasan_check_write+0x18/0x20 [ 72.699186][ T1890] kvm_arch_dev_ioctl+0x3fd/0x990 [ 72.699205][ T1890] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 72.699223][ T1890] ? selinux_file_ioctl+0x732/0x1480 [ 72.699256][ T1890] ? vfs_write+0xbcf/0xfd0 [ 72.699280][ T1890] ? __cfi_vfs_write+0x10/0x10 [ 72.699303][ T1890] ? __kasan_check_write+0x18/0x20 [ 72.699324][ T1890] ? mutex_unlock+0x90/0x240 [ 72.699346][ T1890] ? __cfi_mutex_unlock+0x10/0x10 [ 72.699367][ T1890] kvm_dev_ioctl+0x48e/0x14c0 [ 72.699386][ T1890] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 72.699404][ T1890] ? bpf_lsm_file_ioctl+0xd/0x20 [ 72.699421][ T1890] ? security_file_ioctl+0x3e/0x110 [ 72.699442][ T1890] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 72.699458][ T1890] __se_sys_ioctl+0x123/0x1b0 [ 72.699475][ T1890] __x64_sys_ioctl+0x7f/0xa0 [ 72.699492][ T1890] x64_sys_call+0x1878/0x2ee0 [ 72.699510][ T1890] do_syscall_64+0x57/0xf0 [ 72.699530][ T1890] ? clear_bhb_loop+0x50/0xa0 [ 72.699552][ T1890] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.699573][ T1890] RIP: 0033:0x7fe39f39f559 [ 72.699589][ T1890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.699603][ T1890] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.699623][ T1890] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 72.699637][ T1890] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 72.699649][ T1890] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 72.699660][ T1890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.699693][ T1890] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 72.699711][ T1890] [ 72.889591][ T31] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 72.890776][ T72] usb 4-1: config 3 has no interface number 0 [ 72.990063][ T72] usb 4-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 73.000922][ T72] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.013789][ T72] usb 4-1: config 3 interface 45 has no altsetting 0 [ 73.021780][ T72] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 73.029575][ T31] usb 2-1: device descriptor read/64, error -71 [ 73.030922][ T72] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.045084][ T72] usb 4-1: Product: syz [ 73.049243][ T72] usb 4-1: Manufacturer: syz [ 73.053847][ T72] usb 4-1: SerialNumber: syz [ 73.266707][ T72] usb 4-1: USB disconnect, device number 28 [ 73.269618][ T31] usb 2-1: device descriptor read/64, error -71 [ 73.276200][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.381813][ T517] usb 1-1: USB disconnect, device number 20 [ 73.389680][ T31] usb usb2-port1: attempt power cycle [ 73.633433][ T1908] FAULT_INJECTION: forcing a failure. [ 73.633433][ T1908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.646564][ T1908] CPU: 1 UID: 0 PID: 1908 Comm: syz.2.611 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 73.646592][ T1908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.646600][ T1908] Call Trace: [ 73.646605][ T1908] [ 73.646610][ T1908] __dump_stack+0x21/0x30 [ 73.646630][ T1908] dump_stack_lvl+0x140/0x1c0 [ 73.646644][ T1908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.646660][ T1908] dump_stack+0x19/0x20 [ 73.646678][ T1908] should_fail_ex+0x3c2/0x510 [ 73.646691][ T1908] should_fail+0xf/0x20 [ 73.646700][ T1908] should_fail_usercopy+0x1e/0x30 [ 73.646710][ T1908] _copy_from_user+0x20/0xa0 [ 73.646723][ T1908] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 73.646736][ T1908] ? ioctl_has_perm+0x39a/0x500 [ 73.646751][ T1908] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 73.646763][ T1908] ? __kasan_check_write+0x18/0x20 [ 73.646777][ T1908] kvm_arch_dev_ioctl+0x3fd/0x990 [ 73.646787][ T1908] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 73.646798][ T1908] ? selinux_file_ioctl+0x732/0x1480 [ 73.646812][ T1908] ? vfs_write+0xbcf/0xfd0 [ 73.646827][ T1908] ? __cfi_vfs_write+0x10/0x10 [ 73.646840][ T1908] ? __kasan_check_write+0x18/0x20 [ 73.646852][ T1908] ? mutex_unlock+0x90/0x240 [ 73.646866][ T1908] ? __cfi_mutex_unlock+0x10/0x10 [ 73.646878][ T1908] kvm_dev_ioctl+0x48e/0x14c0 [ 73.646889][ T1908] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 73.646899][ T1908] ? bpf_lsm_file_ioctl+0xd/0x20 [ 73.646910][ T1908] ? security_file_ioctl+0x3e/0x110 [ 73.646924][ T1908] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 73.646934][ T1908] __se_sys_ioctl+0x123/0x1b0 [ 73.646944][ T1908] __x64_sys_ioctl+0x7f/0xa0 [ 73.646953][ T1908] x64_sys_call+0x1878/0x2ee0 [ 73.646964][ T1908] do_syscall_64+0x57/0xf0 [ 73.646974][ T1908] ? clear_bhb_loop+0x50/0xa0 [ 73.646989][ T1908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.647002][ T1908] RIP: 0033:0x7fe39f39f559 [ 73.647012][ T1908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.647020][ T1908] RSP: 002b:00007fe3a0248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.647032][ T1908] RAX: ffffffffffffffda RBX: 00007fe39f625fa0 RCX: 00007fe39f39f559 [ 73.647040][ T1908] RDX: 0000200000000440 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 73.647047][ T1908] RBP: 00007fe3a0248090 R08: 0000000000000000 R09: 0000000000000000 [ 73.647054][ T1908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.647061][ T1908] R13: 00007fe39f626038 R14: 00007fe39f625fa0 R15: 00007ffcb1238a58 [ 73.647070][ T1908] [ 73.799613][ T517] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 73.859685][ T31] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 73.940532][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.010598][ T517] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 74.020692][ T517] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 74.030610][ T517] usb 1-1: config 1 interface 0 has no altsetting 0 [ 74.038600][ T517] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 74.047908][ T517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.055928][ T517] usb 1-1: Product: syz [ 74.060105][ T517] usb 1-1: Manufacturer: syz [ 74.064686][ T517] usb 1-1: SerialNumber: syz [ 74.070504][ T1894] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.071606][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.077669][ T1894] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.169616][ T72] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 74.299588][ T72] usb 4-1: device descriptor read/64, error -71 [ 74.309602][ T31] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 74.330658][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.461184][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.543713][ T1894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.553047][ T72] usb 4-1: device descriptor read/64, error -71 [ 74.560916][ T517] rtl8150 1-1:1.0: Interface 0 is not authorized for usage [ 74.569950][ T31] usb usb2-port1: unable to enumerate USB device [ 74.570367][ T1894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.789583][ T72] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 74.861930][ T1940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.870522][ T1940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.929600][ T72] usb 4-1: device descriptor read/64, error -71 [ 74.989582][ T517] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 75.139580][ T517] usb 2-1: Using ep0 maxpacket: 8 [ 75.145702][ T517] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 75.153833][ T517] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 75.162537][ T517] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 75.172645][ T72] usb 4-1: device descriptor read/64, error -71 [ 75.178907][ T517] usb 2-1: config 3 has no interface number 0 [ 75.185050][ T517] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.198030][ T517] usb 2-1: config 3 interface 45 has no altsetting 0 [ 75.206118][ T517] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 75.215193][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.223196][ T517] usb 2-1: Product: syz [ 75.227353][ T517] usb 2-1: Manufacturer: syz [ 75.231961][ T517] usb 2-1: SerialNumber: syz [ 75.289675][ T72] usb usb4-port1: attempt power cycle [ 75.442891][ T517] usb 2-1: USB disconnect, device number 27 [ 75.449714][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.629578][ T72] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 75.660685][ T72] usb 4-1: device descriptor read/8, error -71 [ 75.800563][ T72] usb 4-1: device descriptor read/8, error -71 [ 76.049674][ T72] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 76.070706][ T72] usb 4-1: device descriptor read/8, error -71 [ 76.199597][ T517] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 76.210671][ T72] usb 4-1: device descriptor read/8, error -71 [ 76.319705][ T72] usb usb4-port1: unable to enumerate USB device [ 76.349582][ T517] usb 2-1: Using ep0 maxpacket: 8 [ 76.355980][ T517] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.365813][ T517] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 76.374917][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.382917][ T517] usb 2-1: Product: syz [ 76.387062][ T517] usb 2-1: Manufacturer: syz [ 76.391667][ T517] usb 2-1: SerialNumber: syz [ 76.409168][ T72] usb 1-1: USB disconnect, device number 21 [ 76.423592][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 76.423608][ T36] audit: type=1400 audit(1810118177.774:36299): avc: denied { remount } for pid=1954 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.464004][ T36] audit: type=1326 audit(1810118177.814:36300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1956 comm="syz.0.628" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bdab9f559 code=0x0 [ 76.565325][ T36] audit: type=1400 audit(1810118177.914:36301): avc: granted { setsecparam } for pid=1956 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 76.584595][ T36] audit: type=1400 audit(1810118177.924:36302): avc: denied { getopt } for pid=1956 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.814499][ T1961] syz.2.629 uses obsolete (PF_INET,SOCK_PACKET) [ 77.474550][ T1979] /dev/nbd3: Can't lookup blockdev [ 77.549598][ T72] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 77.719580][ T72] usb 1-1: Using ep0 maxpacket: 8 [ 77.730277][ T72] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 77.738389][ T72] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 77.769554][ T72] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 77.789583][ T72] usb 1-1: config 3 has no interface number 0 [ 77.796888][ T31] usb 3-1: USB disconnect, device number 2 [ 77.799582][ T72] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.831486][ T72] usb 1-1: config 3 interface 45 has no altsetting 0 [ 77.846400][ T72] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 77.855588][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.863633][ T72] usb 1-1: Product: syz [ 77.867835][ T72] usb 1-1: Manufacturer: syz [ 77.872460][ T72] usb 1-1: SerialNumber: syz [ 78.087818][ T72] snd-usb-audio 1-1:3.45: Interface 45 is not authorized for usage [ 78.097263][ T72] usb 1-1: USB disconnect, device number 22 [ 78.155363][ T36] audit: type=1400 audit(1810118179.504:36303): avc: denied { mounton } for pid=1991 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.177047][ T36] audit: type=1400 audit(1810118179.504:36304): avc: denied { create } for pid=1991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.199203][ T1071] bridge_slave_1: left allmulticast mode [ 78.205205][ T1071] bridge_slave_1: left promiscuous mode [ 78.210939][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.218320][ T1071] bridge_slave_0: left allmulticast mode [ 78.224055][ T1071] bridge_slave_0: left promiscuous mode [ 78.230020][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.275017][ T1991] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.282130][ T1991] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.289196][ T1991] bridge_slave_0: entered allmulticast mode [ 78.296889][ T1991] bridge_slave_0: entered promiscuous mode [ 78.303503][ T1991] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.310603][ T1991] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.317693][ T1991] bridge_slave_1: entered allmulticast mode [ 78.324040][ T1991] bridge_slave_1: entered promiscuous mode [ 78.409118][ T1991] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.416182][ T1991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.423471][ T1991] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.430509][ T1991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.458212][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.465998][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.475955][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.483032][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.511290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.518385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.554708][ T1991] veth0_vlan: entered promiscuous mode [ 78.580516][ T1991] veth1_macvtap: entered promiscuous mode [ 78.609213][ T36] audit: type=1400 audit(1810118179.954:36305): avc: denied { mount } for pid=1991 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.642948][ T2009] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 78.646137][ T36] audit: type=1400 audit(1810118179.954:36306): avc: denied { mounton } for pid=1991 comm="syz-executor" path="/root/syzkaller.4sABzY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.657540][ T2009] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 78.689629][ T2009] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 78.697379][ T2009] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 78.839594][ T72] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.949646][ T781] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 79.010681][ T72] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 79.021860][ T72] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 79.035561][ T517] usb 2-1: selecting invalid altsetting 1 [ 79.042840][ T72] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 79.053536][ T517] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 79.062832][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.072104][ T517] usb 2-1: USB disconnect, device number 28 [ 79.079613][ T72] usb 5-1: Product: syz [ 79.084563][ T72] usb 5-1: Manufacturer: syz [ 79.090655][ T72] usb 5-1: SerialNumber: syz [ 79.091720][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.120735][ T781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 79.136556][ T781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.145871][ T781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.153912][ T781] usb 1-1: Product: syz [ 79.158739][ T781] usb 1-1: Manufacturer: 茁ჲ菦䑗橣簜Ⳳ뷛ዽỉ᧌⤿ฑᢾৣֶ䧹⏪ [ 79.168231][ T781] usb 1-1: SerialNumber: syz [ 79.173715][ T2010] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.387507][ T2009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.392274][ T2029] syz.3.652: attempt to access beyond end of device [ 79.392274][ T2029] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 79.396520][ T2009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.409485][ T2029] EXT4-fs (loop3): unable to read superblock [ 79.421235][ T2009] netlink: 'syz.0.644': attribute type 7 has an invalid length. [ 79.430298][ T2009] netlink: 'syz.0.644': attribute type 5 has an invalid length. [ 79.438182][ T2009] netlink: 17 bytes leftover after parsing attributes in process `syz.0.644'. [ 79.445291][ T36] audit: type=1400 audit(1810118180.794:36307): avc: denied { mount } for pid=2028 comm="syz.3.652" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.454673][ T781] cdc_ncm 1-1:1.0: Interface 0 is not authorized for usage [ 79.478497][ T781] cdc_mbim 1-1:1.0: Interface 0 is not authorized for usage [ 79.486752][ T781] cdc_ncm 1-1:1.1: Interface 1 is not authorized for usage [ 79.495352][ T781] cdc_mbim 1-1:1.1: Interface 1 is not authorized for usage [ 79.502747][ T517] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 79.515664][ T781] usb 1-1: USB disconnect, device number 23 [ 79.591955][ T2048] FAULT_INJECTION: forcing a failure. [ 79.591955][ T2048] name failslab, interval 1, probability 0, space 0, times 0 [ 79.605687][ T2048] CPU: 0 UID: 0 PID: 2048 Comm: syz.3.656 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 79.605720][ T2048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.605733][ T2048] Call Trace: [ 79.605740][ T2048] [ 79.605747][ T2048] __dump_stack+0x21/0x30 [ 79.605781][ T2048] dump_stack_lvl+0x140/0x1c0 [ 79.605805][ T2048] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.605831][ T2048] dump_stack+0x19/0x20 [ 79.605854][ T2048] should_fail_ex+0x3c2/0x510 [ 79.605873][ T2048] should_failslab+0xac/0x100 [ 79.605891][ T2048] kmem_cache_alloc_noprof+0x42/0x410 [ 79.605915][ T2048] ? security_file_alloc+0x49/0x220 [ 79.605938][ T2048] ? kasan_save_alloc_info+0x3a/0x50 [ 79.605961][ T2048] security_file_alloc+0x49/0x220 [ 79.605993][ T2048] init_file+0x9e/0x210 [ 79.606012][ T2048] alloc_empty_file+0xd9/0x270 [ 79.606031][ T2048] ? __mutex_init+0xa6/0x1a0 [ 79.606052][ T2048] alloc_file_clone+0x5a/0xe0 [ 79.606072][ T2048] create_pipe_files+0x3bf/0x6c0 [ 79.606095][ T2048] __do_pipe_flags+0x50/0x2f0 [ 79.606118][ T2048] do_pipe2+0xab/0x190 [ 79.606141][ T2048] ? xfd_validate_state+0x68/0x140 [ 79.606165][ T2048] ? pipe_fcntl+0x520/0x520 [ 79.606189][ T2048] __x64_sys_pipe2+0x5e/0x70 [ 79.606211][ T2048] x64_sys_call+0x8be/0x2ee0 [ 79.606229][ T2048] do_syscall_64+0x57/0xf0 [ 79.606248][ T2048] ? clear_bhb_loop+0x50/0xa0 [ 79.606271][ T2048] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.606294][ T2048] RIP: 0033:0x7f63b7d9f559 [ 79.606310][ T2048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.606325][ T2048] RSP: 002b:00007f63b8bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 79.606345][ T2048] RAX: ffffffffffffffda RBX: 00007f63b8025fa0 RCX: 00007f63b7d9f559 [ 79.606360][ T2048] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 00002000000009c0 [ 79.606372][ T2048] RBP: 00007f63b7e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.606384][ T2048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.606396][ T2048] R13: 00007f63b8026038 R14: 00007f63b8025fa0 R15: 00007fff1da57788 [ 79.606411][ T2048] [ 79.839611][ T517] usb 2-1: Using ep0 maxpacket: 32 [ 79.845862][ T517] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 79.857198][ T517] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.870307][ T517] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.876959][ T517] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 79.886024][ T517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.895299][ T517] usb 2-1: config 0 descriptor?? [ 80.041144][ T72] usb 5-1: USB disconnect, device number 2 [ 80.057806][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.143591][ T36] audit: type=1400 audit(1810118181.494:36308): avc: denied { accept } for pid=2082 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.305250][ T517] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v10.01 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 80.326952][ T2094] usb usb8: usbfs: process 2094 (syz.4.669) did not claim interface 0 before use [ 80.409660][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 80.570617][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.581628][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 80.591663][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.602715][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.609580][ T517] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.611791][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.627293][ T31] usb 4-1: Product: syz [ 80.631660][ T31] usb 4-1: Manufacturer: syz [ 80.636237][ T31] usb 4-1: SerialNumber: syz [ 80.643268][ T31] cdc_mbim 4-1:1.0: skipping garbage [ 80.759620][ T517] usb 5-1: Using ep0 maxpacket: 16 [ 80.765973][ T517] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.776988][ T517] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 80.786855][ T517] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 80.796770][ T517] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.810729][ T517] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.819808][ T517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.827804][ T517] usb 5-1: SerialNumber: syz [ 80.833578][ T2101] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 80.840807][ T2101] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 80.848743][ T517] hub 5-1:1.0: bad descriptor, ignoring hub [ 80.856603][ T517] hub 5-1:1.0: probe with driver hub failed with error -5 [ 80.917962][ T2089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.031289][ T738] usb 2-1: USB disconnect, device number 29 [ 81.049197][ T2101] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 81.056916][ T2101] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 81.077013][ T2114] netlink: 'syz.1.677': attribute type 5 has an invalid length. [ 81.084734][ T2114] netlink: 45 bytes leftover after parsing attributes in process `syz.1.677'. [ 81.096341][ T2114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2114 comm=syz.1.677 [ 81.173813][ T2121] random: crng reseeded on system resumption [ 81.182904][ T31] cdc_mbim 4-1:1.0: bind() failure [ 81.189281][ T31] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 81.197582][ T31] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 81.207752][ T31] usb 4-1: USB disconnect, device number 33 [ 81.467397][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 81.467413][ T36] audit: type=1400 audit(1810118182.814:36312): avc: denied { ioctl } for pid=2100 comm="syz.4.672" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.469422][ T517] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 81.896419][ T781] usb 5-1: USB disconnect, device number 3 [ 81.904189][ T781] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 81.927370][ T293] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid [ 81.938769][ T293] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid [ 82.156463][ T906] bridge_slave_1: left allmulticast mode [ 82.165478][ T906] bridge_slave_1: left promiscuous mode [ 82.173684][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.180944][ T36] audit: type=1400 audit(1810118183.524:36313): avc: denied { append } for pid=2134 comm="syz.1.684" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 82.205333][ T2135] ================================================================== [ 82.213428][ T2135] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 82.220999][ T2135] Read of size 8 at addr ffff888119892b98 by task syz.1.684/2135 [ 82.228723][ T2135] [ 82.231052][ T2135] CPU: 0 UID: 0 PID: 2135 Comm: syz.1.684 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 82.231088][ T2135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.231103][ T2135] Call Trace: [ 82.231110][ T2135] [ 82.231119][ T2135] __dump_stack+0x21/0x30 [ 82.231154][ T2135] dump_stack_lvl+0x140/0x1c0 [ 82.231182][ T2135] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.231211][ T2135] ? __cfi__printk+0x10/0x10 [ 82.231237][ T2135] print_address_description+0x71/0x210 [ 82.231264][ T2135] print_report+0x4a/0x70 [ 82.231291][ T2135] kasan_report+0x162/0x1a0 [ 82.231311][ T2135] ? snapshot_ctr+0x586/0x1350 [ 82.231335][ T2135] ? snapshot_ctr+0x586/0x1350 [ 82.231357][ T2135] __asan_report_load8_noabort+0x18/0x20 [ 82.231382][ T2135] snapshot_ctr+0x586/0x1350 [ 82.231405][ T2135] ? dm_split_args+0xa1/0x740 [ 82.231425][ T2135] ? __cfi_snapshot_ctr+0x10/0x10 [ 82.231447][ T2135] ? dm_split_args+0x5d0/0x740 [ 82.231468][ T2135] dm_table_add_target+0x59f/0xcb0 [ 82.231489][ T2135] table_load+0x2eb/0x7d0 [ 82.231514][ T2135] ? __check_object_size+0x99/0x870 [ 82.231540][ T2135] ? __cfi_table_load+0x10/0x10 [ 82.231566][ T2135] ? __kasan_check_write+0x18/0x20 [ 82.231588][ T2135] ? __cfi_table_load+0x10/0x10 [ 82.231613][ T2135] dm_ctl_ioctl+0x8f0/0xde0 [ 82.231638][ T2135] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 82.231668][ T2135] ? __fget_files+0x2bc/0x330 [ 82.231687][ T2135] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.231707][ T2135] ? security_file_ioctl+0x3e/0x110 [ 82.231733][ T2135] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 82.231759][ T2135] __se_sys_ioctl+0x123/0x1b0 [ 82.231779][ T2135] __x64_sys_ioctl+0x7f/0xa0 [ 82.231797][ T2135] x64_sys_call+0x1878/0x2ee0 [ 82.231817][ T2135] do_syscall_64+0x57/0xf0 [ 82.231837][ T2135] ? clear_bhb_loop+0x50/0xa0 [ 82.231861][ T2135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.231885][ T2135] RIP: 0033:0x7f127839f559 [ 82.231903][ T2135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.231919][ T2135] RSP: 002b:00007f12791ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.231941][ T2135] RAX: ffffffffffffffda RBX: 00007f1278625fa0 RCX: 00007f127839f559 [ 82.231957][ T2135] RDX: 0000200000000280 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 82.231971][ T2135] RBP: 00007f1278436b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.231985][ T2135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.231999][ T2135] R13: 00007f1278626038 R14: 00007f1278625fa0 R15: 00007fffacbbacb8 [ 82.232017][ T2135] [ 82.232024][ T2135] [ 82.350997][ T2137] mmap: syz.1.684 (2137) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.351242][ T2135] Allocated by task 2135: [ 82.507569][ T2135] kasan_save_track+0x3e/0x80 [ 82.512256][ T2135] kasan_save_alloc_info+0x3a/0x50 [ 82.517377][ T2135] __kasan_kmalloc+0x96/0xb0 [ 82.521970][ T2135] __kmalloc_cache_node_noprof+0x225/0x430 [ 82.527782][ T2135] dm_get_table_device+0x1e3/0x6c0 [ 82.532912][ T2135] dm_get_device+0x32b/0x7f0 [ 82.537510][ T2135] snapshot_ctr+0x292/0x1350 [ 82.542107][ T2135] dm_table_add_target+0x59f/0xcb0 [ 82.547222][ T2135] table_load+0x2eb/0x7d0 [ 82.551561][ T2135] dm_ctl_ioctl+0x8f0/0xde0 [ 82.556109][ T2135] __se_sys_ioctl+0x123/0x1b0 [ 82.560789][ T2135] __x64_sys_ioctl+0x7f/0xa0 [ 82.565379][ T2135] x64_sys_call+0x1878/0x2ee0 [ 82.570057][ T2135] do_syscall_64+0x57/0xf0 [ 82.574468][ T2135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.580371][ T2135] [ 82.582684][ T2135] Freed by task 2135: [ 82.586655][ T2135] kasan_save_track+0x3e/0x80 [ 82.591346][ T2135] kasan_save_free_info+0x44/0x50 [ 82.596379][ T2135] __kasan_slab_free+0x5f/0x80 [ 82.601234][ T2135] kfree+0x158/0x440 [ 82.605139][ T2135] dm_put_table_device+0x298/0x2e0 [ 82.610258][ T2135] dm_get_device+0x571/0x7f0 [ 82.614849][ T2135] snapshot_ctr+0x435/0x1350 [ 82.619433][ T2135] dm_table_add_target+0x59f/0xcb0 [ 82.624550][ T2135] table_load+0x2eb/0x7d0 [ 82.628893][ T2135] dm_ctl_ioctl+0x8f0/0xde0 [ 82.633403][ T2135] __se_sys_ioctl+0x123/0x1b0 [ 82.638082][ T2135] __x64_sys_ioctl+0x7f/0xa0 [ 82.642671][ T2135] x64_sys_call+0x1878/0x2ee0 [ 82.647353][ T2135] do_syscall_64+0x57/0xf0 [ 82.651773][ T2135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.657663][ T2135] [ 82.659974][ T2135] The buggy address belongs to the object at ffff888119892b80 [ 82.659974][ T2135] which belongs to the cache kmalloc-96 of size 96 [ 82.673844][ T2135] The buggy address is located 24 bytes inside of [ 82.673844][ T2135] freed 96-byte region [ffff888119892b80, ffff888119892be0) [ 82.687462][ T2135] [ 82.689780][ T2135] The buggy address belongs to the physical page: [ 82.696194][ T2135] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119892 [ 82.705038][ T2135] anon flags: 0x4000000000000000(zone=1) [ 82.710676][ T2135] page_type: f5(slab) [ 82.714659][ T2135] raw: 4000000000000000 ffff888100041280 ffffea00045ecf00 dead000000000007 [ 82.723236][ T2135] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 82.731818][ T2135] page dumped because: kasan: bad access detected [ 82.738233][ T2135] page_owner tracks the page as allocated [ 82.743941][ T2135] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 296, tgid 296 (syz-executor), ts 37191590047, free_ts 37190915606 [ 82.762954][ T2135] post_alloc_hook+0x37d/0x3b0 [ 82.767720][ T2135] prep_new_page+0x2d/0x180 [ 82.772217][ T2135] get_page_from_freelist+0x4aea/0x4ba0 [ 82.777771][ T2135] __alloc_pages_noprof+0x35a/0x7e0 [ 82.782986][ T2135] alloc_slab_page+0x6b/0x1e0 [ 82.787663][ T2135] allocate_slab+0x69/0x430 [ 82.792178][ T2135] ___slab_alloc+0x591/0x8c0 [ 82.796790][ T2135] __kmalloc_cache_node_noprof+0x2ae/0x430 [ 82.802613][ T2135] __get_vm_area_node+0x150/0x390 [ 82.807649][ T2135] __vmalloc_node_range_noprof+0x340/0x1300 [ 82.813551][ T2135] vzalloc_noprof+0x103/0x1d0 [ 82.818238][ T2135] xt_counters_alloc+0x6c/0xe0 [ 82.823267][ T2135] __do_replace+0xb3/0x9b0 [ 82.827679][ T2135] do_ip6t_set_ctl+0xa7f/0xd70 [ 82.832440][ T2135] nf_setsockopt+0x28d/0x2b0 [ 82.837027][ T2135] ipv6_setsockopt+0x130/0x170 [ 82.841798][ T2135] page last free pid 296 tgid 296 stack trace: [ 82.847936][ T2135] free_unref_page+0xb99/0xf50 [ 82.852706][ T2135] __free_pages+0x6b/0x3b0 [ 82.857119][ T2135] vfree+0x3ea/0x5b0 [ 82.861011][ T2135] do_ip6t_get_ctl+0xeee/0x1210 [ 82.865864][ T2135] nf_getsockopt+0x288/0x2b0 [ 82.870459][ T2135] ipv6_getsockopt+0x203/0x2b0 [ 82.875228][ T2135] tcp_getsockopt+0x106/0x130 [ 82.879911][ T2135] sock_common_getsockopt+0xb2/0xd0 [ 82.885110][ T2135] do_sock_getsockopt+0x3a1/0x6c0 [ 82.890148][ T2135] __x64_sys_getsockopt+0x1aa/0x250 [ 82.895357][ T2135] x64_sys_call+0x10db/0x2ee0 [ 82.900043][ T2135] do_syscall_64+0x57/0xf0 [ 82.904469][ T2135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.910380][ T2135] [ 82.912694][ T2135] Memory state around the buggy address: [ 82.918317][ T2135] ffff888119892a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.926383][ T2135] ffff888119892b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.934456][ T2135] >ffff888119892b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.942534][ T2135] ^ [ 82.947377][ T2135] ffff888119892c00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.955441][ T2135] ffff888119892c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.963500][ T2135] ================================================================== [ 82.972151][ T906] bridge_slave_0: left allmulticast mode [ 82.978329][ T2135] Disabling lock debugging due to kernel taint [ 82.987997][ T906] bridge_slave_0: left promiscuous mode [ 82.990063][ T2135] device-mapper: table: 252:0: device 1:3 not in table devices list [ 83.000106][ T36] audit: type=1400 audit(1810118184.334:36314): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2809]" dev="pipefs" ino=2809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 83.010658][ T2135] device-mapper: table: 252:0: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 83.049666][ T906] bridge0: port 1(bridge_slave_0) entered disabled state May 12 10:36:24 syzkaller kern.alert kernel: [ 82.738233][ T2135] page_owner tracks the page as allocated May 12 10:36:24 syzkaller kern.alert kernel: [ 82.743941][ T2135] page last alloc[ 83.073257][ T2135] device-mapper: ioctl: error adding target to table ated via order 0[ 83.080497][ T2135] device-mapper: table: 252:0: dm_table_destroy: dm_put_device call missing for 1:3 , migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 296, tgid 296 (syz-executor), ts 37191590047, free_ts 37190915606 May 12 10:36:24 syzkaller kern.alert kernel: [ 82.841798][ T2135] page last free pid 296 tgid 296 stack trace: [ 83.281572][ T906] veth1_macvtap: left promiscuous mode [ 83.287089][ T906] veth0_vlan: left promiscuous mode [ 83.521674][ T906] bridge_slave_1: left allmulticast mode [ 83.527341][ T906] bridge_slave_1: left promiscuous mode [ 83.532982][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.540352][ T906] bridge_slave_0: left allmulticast mode [ 83.545977][ T906] bridge_slave_0: left promiscuous mode [ 83.551698][ T906] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.559204][ T906] bridge_slave_1: left allmulticast mode [ 83.564917][ T906] bridge_slave_1: left promiscuous mode [ 83.570609][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.577956][ T906] bridge_slave_0: left allmulticast mode [ 83.583700][ T906] bridge_slave_0: left promiscuous mode [ 83.589283][ T906] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.596872][ T906] bridge_slave_1: left allmulticast mode [ 83.602576][ T906] bridge_slave_1: left promiscuous mode [ 83.608151][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.615632][ T906] bridge_slave_0: left allmulticast mode [ 83.621354][ T906] bridge_slave_0: left promiscuous mode [ 83.626924][ T906] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.853912][ T906] veth1_macvtap: left promiscuous mode [ 83.859415][ T906] veth0_vlan: left promiscuous mode [ 83.864882][ T906] veth1_macvtap: left promiscuous mode [ 83.870423][ T906] veth0_vlan: left promiscuous mode [ 83.875749][ T906] veth1_macvtap: left promiscuous mode [ 83.881263][ T906] veth0_vlan: left promiscuous mode