last executing test programs: 46.515687181s ago: executing program 2 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0', 0x1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="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", 0xff) 46.453052385s ago: executing program 2 (id=321): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x42}, {0x803, 0x2, 0x5, 0x45, 0x44, 0x0, 0x4, 0xff, 0xfc, 0x4, 0x6, 0x6f, 0x20c}, {0xbfffffff, 0x3, 0x38, 0x3, 0x84, 0x4, 0x3, 0x50, 0xc, 0x2, 0x6f, 0x8, 0x9}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) creat(0x0, 0x8) rename(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 45.014326821s ago: executing program 2 (id=325): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r1, 0xc138fd03, 0x0) ioctl(r1, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) 42.90786671s ago: executing program 2 (id=330): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aad03, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffff"], 0x62) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.48758715s ago: executing program 2 (id=341): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x138) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x100000000000000, 0x2c) 42.388437891s ago: executing program 2 (id=334): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 27.13449254s ago: executing program 32 (id=334): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 11.092797817s ago: executing program 4 (id=401): creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 9.449918027s ago: executing program 0 (id=466): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x0, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf5, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffffa, 0x192, 0x1000, 0xfffffffe, 0x5], [0x2, 0xfffffffa, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x6, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x3, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x0, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x200005, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0xa, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xc20, 0x50, 0x0, 0x0, 0x7}}, 0x50) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.260453657s ago: executing program 4 (id=401): creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 7.426127728s ago: executing program 0 (id=472): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}}}, &(0x7f0000000500)=0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 7.285446648s ago: executing program 0 (id=476): landlock_create_ruleset(0x0, 0x0, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102000200042401000705820200020004240200070583020002000424030007050402000200042404"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x48, &(0x7f00000006c0)=ANY=[]) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) 7.038428671s ago: executing program 4 (id=401): creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 5.16607238s ago: executing program 0 (id=478): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000045) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 5.1656684s ago: executing program 3 (id=480): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0xa120) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.138440326s ago: executing program 0 (id=481): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000180)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8221, 0x20, 0x3, 0x24}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x3, 0xffffffff}, 0xffffffffffffffff}], 0x1, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) mmap$IORING_OFF_CQ_RING(0x0, 0xfffffffc, 0x0, 0x4010, r2, 0x8000000) 5.089566176s ago: executing program 1 (id=482): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), 0x0, &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 4.97731136s ago: executing program 4 (id=401): creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 3.008325669s ago: executing program 0 (id=483): r0 = socket$packet(0x11, 0xa, 0x300) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000003c0)="8000379bfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0xfffffffe, @loopback, 0x4}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 3.007726299s ago: executing program 1 (id=484): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x7, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x6, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x101, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x7, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.0073298s ago: executing program 3 (id=485): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x200}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 2.974626687s ago: executing program 1 (id=486): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) r1 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000780)='\xe6*{\x00', 0xfffffffffffffffc) add_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) clock_gettime(0x1, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="30820555", 0x4, 0xffffffffffffffff) 2.929579316s ago: executing program 3 (id=487): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r1, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0xe2c3}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000b00)=""/258, 0x102}, {&(0x7f0000001040)=""/52, 0x34}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x6}, 0xe}, {{0x0, 0x0, 0x0}, 0x8000}], 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "c53e567fd8c5edfc", "c2e7930af39b84fd4f7f890000000008", "e8289b6a", "0866928ae4ba7a3d"}, 0x33) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x110}, 0x8080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) 2.927709457s ago: executing program 1 (id=488): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) 2.733918558s ago: executing program 3 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e20, @multicast1}}}, 0x88) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000180)={0x2, 0x2, 0x80000000, 0x8, 0x7ff, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.374192084s ago: executing program 4 (id=401): creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 121.922254ms ago: executing program 1 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 121.616524ms ago: executing program 3 (id=491): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a"], 0x20}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 37.610412ms ago: executing program 1 (id=492): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.059079ms ago: executing program 3 (id=493): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), 0x0, &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=401): creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ed memory [ 37.630172][ T31] usb 3-1: USB disconnect, device number 3 [ 37.809782][ T544] loop0: detected capacity change from 0 to 4096 [ 37.832435][ T544] loop0: [ 38.624881][ T590] rust_binder: 589: undelivered TRANSACTION_COMPLETE [ 38.640030][ T31] rust_binder: 589: undelivered transaction 4, process died [ 38.734643][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 38.734661][ T36] audit: type=1400 audit(1790645792.190:216): avc: denied { mount } for pid=591 comm="syz.3.82" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.764830][ T592] sd 0:0:1:0: PR command failed: 1026 [ 38.770498][ T592] sd 0:0:1:0: Sense Key : 0x5 [current] [ 38.776425][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.784123][ T592] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 38.814556][ T36] audit: type=1400 audit(1790645792.250:217): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.889720][ T594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.930800][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 38.941958][ T10] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 38.963321][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 38.973110][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 38.982276][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.990316][ T10] usb 2-1: Product: syz [ 38.994588][ T10] usb 2-1: Manufacturer: syz [ 38.999339][ T10] usb 2-1: SerialNumber: syz [ 39.237164][ T606] tipc: Started in network mode [ 39.242134][ T606] tipc: Node identity 1000001, cluster identity 4711 [ 39.248919][ T606] tipc: Node number set to 16777217 [ 39.254246][ T606] tipc: Cannot configure node identity twice [ 39.261573][ T606] tipc: New replicast peer: 127.0.0.1 [ 39.267179][ T606] tipc: Enabled bearer , priority 10 [ 39.307944][ T609] syzkaller0: entered promiscuous mode [ 39.313953][ T609] syzkaller0: entered allmulticast mode [ 39.428546][ T36] audit: type=1400 audit(1790645792.880:218): avc: denied { read append } for pid=616 comm="syz.2.91" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.454927][ T36] audit: type=1400 audit(1790645792.880:219): avc: denied { open } for pid=616 comm="syz.2.91" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.460912][ T506] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 39.477875][ T36] audit: type=1400 audit(1790645792.880:220): avc: denied { map } for pid=616 comm="syz.2.91" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.639235][ T36] audit: type=1400 audit(1790645793.090:221): avc: denied { write } for pid=621 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 39.658917][ T622] FAULT_INJECTION: forcing a failure. [ 39.658917][ T622] name failslab, interval 1, probability 0, space 0, times 0 [ 39.672660][ T622] CPU: 0 UID: 0 PID: 622 Comm: syz.2.93 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 39.672696][ T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.672712][ T622] Call Trace: [ 39.672720][ T622] [ 39.672729][ T622] __dump_stack+0x21/0x30 [ 39.672772][ T622] dump_stack_lvl+0x140/0x1c0 [ 39.672806][ T622] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.672839][ T622] ? futex_wait+0x2b8/0x7c0 [ 39.672872][ T622] dump_stack+0x19/0x20 [ 39.672903][ T622] should_fail_ex+0x3c2/0x510 [ 39.672933][ T622] should_failslab+0xac/0x100 [ 39.672964][ T622] __kmalloc_node_noprof+0x69/0x500 [ 39.672990][ T622] ? __kvmalloc_node_noprof+0x128/0x300 [ 39.673012][ T622] ? do_futex+0x32a/0x510 [ 39.673043][ T622] __kvmalloc_node_noprof+0x128/0x300 [ 39.673066][ T622] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 39.673089][ T622] ? strncpy_from_user+0x14f/0x280 [ 39.673118][ T622] __se_sys_add_key+0x291/0x4b0 [ 39.673145][ T622] ? __x64_sys_add_key+0xf0/0xf0 [ 39.673174][ T622] ? __kasan_check_write+0x18/0x20 [ 39.673198][ T622] ? fpregs_restore_userregs+0x11c/0x260 [ 39.673227][ T622] __x64_sys_add_key+0xc3/0xf0 [ 39.673254][ T622] x64_sys_call+0x195f/0x2ee0 [ 39.673276][ T622] do_syscall_64+0x57/0xf0 [ 39.673299][ T622] ? clear_bhb_loop+0x50/0xa0 [ 39.673329][ T622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.673358][ T622] RIP: 0033:0x7f03e4b9e159 [ 39.673378][ T622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.673398][ T622] RSP: 002b:00007f03e5a8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 39.673424][ T622] RAX: ffffffffffffffda RBX: 00007f03e4e25fa0 RCX: 00007f03e4b9e159 [ 39.673441][ T622] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 39.673456][ T622] RBP: 00007f03e4c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 39.673472][ T622] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 39.673486][ T622] R13: 00007f03e4e26038 R14: 00007f03e4e25fa0 R15: 00007ffff989a428 [ 39.673505][ T622] [ 39.682802][ T506] usb 1-1: not running at top speed; connect to a high speed hub [ 39.727251][ T624] syzkaller0: entered promiscuous mode [ 39.727272][ T624] syzkaller0: entered allmulticast mode [ 39.734171][ T506] usb 1-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 39.924389][ T506] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 39.933538][ T506] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 39.941959][ T506] usb 1-1: Product: syz [ 39.946161][ T506] usb 1-1: Manufacturer: syz [ 39.953032][ T506] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 40.033037][ T36] audit: type=1400 audit(1790645793.490:222): avc: denied { write } for pid=627 comm="syz.3.96" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.056621][ T628] rust_binder: Failed to allocate buffer. len:12520, is_oneway:false [ 40.056676][ T628] rust_binder: Failure in copy_transaction_data: ENOSPC [ 40.067306][ T628] rust_binder: 627:628 transaction call to 627:0 failed ENOSPC, code 0 size 240-0 [ 40.085773][ T66] rust_binder: 627: undelivered TRANSACTION_COMPLETE [ 40.092601][ T66] rust_binder: 627: undelivered TRANSACTION_ERROR: 29201 [ 40.108310][ T473] rust_binder: 627: undelivered transaction 15, process died [ 40.131793][ T36] audit: type=1400 audit(1790645793.590:223): avc: denied { read write } for pid=632 comm="syz.3.98" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.158312][ T36] audit: type=1400 audit(1790645793.610:224): avc: denied { open } for pid=632 comm="syz.3.98" path="/39/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.182789][ T36] audit: type=1400 audit(1790645793.610:225): avc: denied { ioctl } for pid=632 comm="syz.3.98" path="/39/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.186691][ T633] device-mapper: table: 252:0: multipath: unknown target type [ 40.208846][ T506] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 40.225783][ T506] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 40.235280][ T506] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 40.245931][ T506] usb 1-1: USB disconnect, device number 4 [ 40.261250][ T633] device-mapper: ioctl: error adding target to table [ 40.730785][ T506] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 40.881983][ T506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 40.892918][ T506] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 40.905819][ T506] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 40.914911][ T506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.923734][ T506] usb 3-1: config 0 descriptor?? [ 40.929036][ T642] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 41.070771][ T640] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.139872][ T642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.148722][ T642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.236428][ T640] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 41.245558][ T640] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.258327][ T640] usb 1-1: config 0 has no interface number 0 [ 41.264620][ T640] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.277982][ T640] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 41.287097][ T640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.299199][ T640] usb 1-1: config 0 descriptor?? [ 41.316182][ T640] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 41.379620][ T506] usbhid 3-1:0.0: can't add hid device: -71 [ 41.390837][ T506] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 41.403199][ T506] usb 3-1: USB disconnect, device number 4 [ 41.450849][ T10] usb 2-1: USB disconnect, device number 4 [ 41.752942][ T674] ======================================================= [ 41.752942][ T674] WARNING: The mand mount option has been deprecated and [ 41.752942][ T674] and is ignored by this kernel. Remove the mand [ 41.752942][ T674] option from the mount to silence this warning. [ 41.752942][ T674] ======================================================= [ 42.118993][ T644] tipc: Started in network mode [ 42.123952][ T644] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 42.132865][ T644] tipc: Enabling of bearer rejected, failed to enable media [ 42.142008][ T66] usb 1-1: USB disconnect, device number 5 [ 42.160786][ T640] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.221556][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.310912][ T640] usb 3-1: Using ep0 maxpacket: 16 [ 42.317191][ T640] usb 3-1: config 0 has no interfaces? [ 42.324168][ T640] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 42.330861][ T506] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 42.333713][ T640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.348821][ T640] usb 3-1: Product: syz [ 42.353112][ T640] usb 3-1: Manufacturer: syz [ 42.357713][ T640] usb 3-1: SerialNumber: syz [ 42.363056][ T640] usb 3-1: config 0 descriptor?? [ 42.380812][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 42.387229][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.396103][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.404815][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.413940][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.423788][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.433507][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.446569][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 42.455834][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.464560][ T31] usb 2-1: config 0 descriptor?? [ 42.501887][ T506] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.512071][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 42.521760][ T506] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.536007][ T506] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 42.545112][ T506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.553136][ T506] usb 4-1: Product: syz [ 42.557390][ T506] usb 4-1: Manufacturer: syz [ 42.562052][ T506] usb 4-1: SerialNumber: syz [ 42.567436][ T506] usb 4-1: config 0 descriptor?? [ 42.630403][ T640] usb 3-1: USB disconnect, device number 5 [ 42.675162][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.884118][ T506] usb 2-1: USB disconnect, device number 5 [ 42.892791][ T506] usblp0: removed [ 43.860559][ T730] FAULT_INJECTION: forcing a failure. [ 43.860559][ T730] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 43.874340][ T730] CPU: 0 UID: 0 PID: 730 Comm: syz.0.127 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 43.874376][ T730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.874392][ T730] Call Trace: [ 43.874400][ T730] [ 43.874409][ T730] __dump_stack+0x21/0x30 [ 43.874498][ T730] dump_stack_lvl+0x140/0x1c0 [ 43.874535][ T730] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.874571][ T730] dump_stack+0x19/0x20 [ 43.874604][ T730] should_fail_ex+0x3c2/0x510 [ 43.874633][ T730] should_fail_alloc_page+0xec/0x110 [ 43.874666][ T730] __alloc_pages_noprof+0x1c0/0x7e0 [ 43.874698][ T730] ? x64_sys_call+0x1cb3/0x2ee0 [ 43.874723][ T730] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 43.874761][ T730] __folio_alloc_noprof+0x14/0x80 [ 43.874796][ T730] folio_prealloc+0x46/0x220 [ 43.874826][ T730] do_wp_page+0x187e/0x2e80 [ 43.874856][ T730] ? __kasan_slab_free+0x6a/0x80 [ 43.874883][ T730] ? kmem_cache_free+0x1bd/0x4f0 [ 43.874909][ T730] ? fcntl_setlk+0x408/0x10a0 [ 43.874943][ T730] ? folio_put+0x90/0x90 [ 43.874970][ T730] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.874995][ T730] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 43.875019][ T730] handle_mm_fault+0x1017/0x1ba0 [ 43.875052][ T730] ? __cfi_handle_mm_fault+0x10/0x10 [ 43.875079][ T730] ? lock_vma_under_rcu+0x4cf/0x590 [ 43.875115][ T730] do_user_addr_fault+0x951/0x1230 [ 43.875138][ T730] ? fpregs_restore_userregs+0x11c/0x260 [ 43.875169][ T730] exc_page_fault+0x58/0xc0 [ 43.875202][ T730] asm_exc_page_fault+0x2b/0x30 [ 43.875229][ T730] RIP: 0033:0x7f8d1ec64054 [ 43.875249][ T730] Code: 00 00 00 64 f0 83 04 25 a0 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 d8 fe ff ff e8 74 b1 0d 00 85 c0 0f 84 ec 01 00 00 <64> f0 83 2c 25 a0 ff ff ff 01 e8 1d 93 0c 00 48 8b 4c 24 08 8b 00 [ 43.875271][ T730] RSP: 002b:00007f8d1fbe6050 EFLAGS: 00010206 [ 43.875292][ T730] RAX: 0000000000000000 RBX: 00007f8d1f025fa0 RCX: 00007f8d1ee3506b [ 43.875309][ T730] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000004 [ 43.875324][ T730] RBP: 00007f8d1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 43.875337][ T730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.875351][ T730] R13: 00007f8d1f026038 R14: 00007f8d1f025fa0 R15: 00007ffcf659b868 [ 43.875371][ T730] [ 43.875487][ T730] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 44.525454][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 44.525473][ T36] audit: type=1400 audit(1790645797.980:250): avc: denied { mount } for pid=739 comm="syz.2.130" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.572332][ T36] audit: type=1400 audit(1790645798.030:251): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.837291][ T10] usb 4-1: USB disconnect, device number 3 [ 44.868223][ T36] audit: type=1400 audit(1790645798.320:252): avc: denied { setopt } for pid=750 comm="syz.3.134" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.901999][ T36] audit: type=1400 audit(1790645798.360:253): avc: denied { bind } for pid=750 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.932367][ T754] loop5: detected capacity change from 0 to 7 [ 44.951967][ T36] audit: type=1400 audit(1790645798.380:254): avc: denied { write } for pid=750 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.974530][ T36] audit: type=1400 audit(1790645798.380:255): avc: denied { nlmsg_write } for pid=750 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.010755][ T36] audit: type=1400 audit(1790645798.390:256): avc: denied { connect } for pid=753 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.030578][ T760] sd 0:0:1:0: PR command failed: 1026 [ 45.044986][ T760] sd 0:0:1:0: Sense Key : 0x5 [current] [ 45.064166][ T760] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 45.130772][ T36] audit: type=1400 audit(1790645798.580:257): avc: denied { relabelfrom } for pid=763 comm="syz.2.139" name="" dev="pipefs" ino=12555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 45.420826][ T640] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.481817][ T785] netlink: 104 bytes leftover after parsing attributes in process `syz.3.147'. [ 45.490855][ T36] audit: type=1400 audit(1790645798.940:258): avc: denied { nlmsg_read } for pid=784 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.582113][ T640] usb 2-1: Using ep0 maxpacket: 16 [ 45.589380][ T640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.601348][ T640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.620030][ T640] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.630355][ T640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.638581][ T640] usb 2-1: Product: syz [ 45.644826][ T640] usb 2-1: Manufacturer: syz [ 45.649556][ T640] usb 2-1: SerialNumber: syz [ 45.677917][ T791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.802202][ T36] audit: type=1400 audit(1790645799.260:259): avc: denied { setopt } for pid=793 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.865262][ T640] usb 2-1: 0:2 : does not exist [ 45.877475][ T640] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 45.892498][ T640] usb 2-1: USB disconnect, device number 6 [ 45.911566][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.680828][ T640] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.840767][ T640] usb 1-1: Using ep0 maxpacket: 16 [ 46.847216][ T640] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.857553][ T640] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.868354][ T640] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.877654][ T640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.885976][ T640] usb 1-1: Product: syz [ 46.890268][ T640] usb 1-1: Manufacturer: syz [ 46.895025][ T640] usb 1-1: SerialNumber: syz [ 47.103911][ T640] usb 1-1: 0:2 : does not exist [ 47.111535][ T640] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 47.122706][ T640] usb 1-1: USB disconnect, device number 6 [ 47.134857][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.530788][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.704932][ T45] usb 4-1: config 0 has no interfaces? [ 47.711854][ T45] usb 4-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 47.712233][ T837] kvm: kvm [836]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 47.722781][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.740737][ T45] usb 4-1: config 0 descriptor?? [ 47.951133][ T640] usb 4-1: USB disconnect, device number 4 [ 48.310780][ T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.460776][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 48.467098][ T311] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.476664][ T311] usb 2-1: config 0 has no interface number 0 [ 48.483152][ T311] usb 2-1: config 0 interface 184 has no altsetting 0 [ 48.493221][ T311] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 48.504940][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.513130][ T311] usb 2-1: Product: syz [ 48.517367][ T311] usb 2-1: Manufacturer: syz [ 48.522035][ T311] usb 2-1: SerialNumber: syz [ 48.531747][ T311] usb 2-1: config 0 descriptor?? [ 48.541187][ T311] smsc75xx v1.0.0 [ 48.592149][ T859] capability: warning: `syz.0.172' uses deprecated v2 capabilities in a way that may be insecure [ 48.920783][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 49.070766][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 49.077120][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 49.085368][ T45] usb 4-1: config 0 has no interface number 0 [ 49.091497][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 49.099742][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.108878][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.116946][ T45] usb 4-1: Product: syz [ 49.121180][ T45] usb 4-1: Manufacturer: syz [ 49.125804][ T45] usb 4-1: SerialNumber: syz [ 49.131959][ T45] usb 4-1: config 0 descriptor?? [ 49.138043][ T45] smsc75xx v1.0.0 [ 49.251584][ T868] FAULT_INJECTION: forcing a failure. [ 49.251584][ T868] name failslab, interval 1, probability 0, space 0, times 0 [ 49.264400][ T868] CPU: 0 UID: 0 PID: 868 Comm: syz.2.175 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 49.264438][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.264456][ T868] Call Trace: [ 49.264462][ T868] [ 49.264469][ T868] __dump_stack+0x21/0x30 [ 49.264521][ T868] dump_stack_lvl+0x140/0x1c0 [ 49.264549][ T868] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.264582][ T868] dump_stack+0x19/0x20 [ 49.264604][ T868] should_fail_ex+0x3c2/0x510 [ 49.264635][ T868] ? alloc_trace_uprobe+0x4b/0x440 [ 49.264670][ T868] should_failslab+0xac/0x100 [ 49.264699][ T868] __kmalloc_noprof+0x69/0x510 [ 49.264724][ T868] ? alloc_trace_uprobe+0x4b/0x440 [ 49.264744][ T868] alloc_trace_uprobe+0x4b/0x440 [ 49.264765][ T868] __trace_uprobe_create+0x875/0xc50 [ 49.264805][ T868] ? __cfi___trace_uprobe_create+0x10/0x10 [ 49.264839][ T868] ? __kasan_kmalloc+0x96/0xb0 [ 49.264868][ T868] ? __kmalloc_noprof+0x261/0x510 [ 49.264885][ T868] ? argv_split+0x18c/0x4a0 [ 49.264909][ T868] ? argv_split+0x361/0x4a0 [ 49.264950][ T868] trace_probe_create+0xdd/0x140 [ 49.264977][ T868] ? __kasan_check_write+0x18/0x20 [ 49.265003][ T868] ? __cfi___trace_uprobe_create+0x10/0x10 [ 49.265031][ T868] ? __cfi_trace_probe_create+0x10/0x10 [ 49.265051][ T868] ? __check_object_size+0x54c/0x870 [ 49.265082][ T868] ? __cfi___check_object_size+0x10/0x10 [ 49.265108][ T868] trace_uprobe_create+0x20/0x30 [ 49.265136][ T868] dyn_event_create+0x5c/0x80 [ 49.265158][ T868] create_or_delete_trace_uprobe+0x6d/0xb0 [ 49.265182][ T868] trace_parse_run_command+0x219/0x420 [ 49.265205][ T868] ? __cfi_create_or_delete_trace_uprobe+0x10/0x10 [ 49.265247][ T868] probes_write+0x38/0x50 [ 49.265276][ T868] ? __cfi_probes_write+0x10/0x10 [ 49.265305][ T868] vfs_write+0x3c1/0xfd0 [ 49.265335][ T868] ? __cfi_vfs_write+0x10/0x10 [ 49.265360][ T868] ? __kasan_check_write+0x18/0x20 [ 49.265385][ T868] ? mutex_lock+0x97/0x1d0 [ 49.265411][ T868] ? __cfi_mutex_lock+0x10/0x10 [ 49.265450][ T868] ksys_write+0x145/0x260 [ 49.265468][ T868] ? __cfi_ksys_write+0x10/0x10 [ 49.265485][ T868] ? __kasan_check_write+0x18/0x20 [ 49.265518][ T868] ? fpregs_restore_userregs+0x11c/0x260 [ 49.265549][ T868] __x64_sys_write+0x7f/0x90 [ 49.265576][ T868] x64_sys_call+0x271c/0x2ee0 [ 49.265593][ T868] do_syscall_64+0x57/0xf0 [ 49.265608][ T868] ? clear_bhb_loop+0x50/0xa0 [ 49.265629][ T868] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.265666][ T868] RIP: 0033:0x7f03e4b9e159 [ 49.265685][ T868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.265703][ T868] RSP: 002b:00007f03e5a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.265729][ T868] RAX: ffffffffffffffda RBX: 00007f03e4e25fa0 RCX: 00007f03e4b9e159 [ 49.265742][ T868] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 49.265752][ T868] RBP: 00007f03e4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 49.265762][ T868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.265772][ T868] R13: 00007f03e4e26038 R14: 00007f03e4e25fa0 R15: 00007ffff989a428 [ 49.265812][ T868] [ 49.589015][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 49.600151][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.613916][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 49.613934][ T36] audit: type=1400 audit(1790645803.070:267): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.667968][ T871] FAULT_INJECTION: forcing a failure. [ 49.667968][ T871] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.681135][ T871] CPU: 1 UID: 0 PID: 871 Comm: syz.2.176 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 49.681186][ T871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.681201][ T871] Call Trace: [ 49.681211][ T871] [ 49.681220][ T871] __dump_stack+0x21/0x30 [ 49.681261][ T871] dump_stack_lvl+0x140/0x1c0 [ 49.681293][ T871] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.681326][ T871] ? __alloc_pages_noprof+0x35a/0x7e0 [ 49.681355][ T871] ? __x64_sys_write+0x7f/0x90 [ 49.681373][ T871] dump_stack+0x19/0x20 [ 49.681417][ T871] should_fail_ex+0x3c2/0x510 [ 49.681445][ T871] should_fail+0xf/0x20 [ 49.681486][ T871] should_fail_usercopy+0x1e/0x30 [ 49.681506][ T871] _copy_from_iter+0x1a6/0x1520 [ 49.681529][ T871] ? __cfi__copy_from_iter+0x10/0x10 [ 49.681568][ T871] ? __check_object_size+0x54c/0x870 [ 49.681590][ T871] ? __cfi___check_object_size+0x10/0x10 [ 49.681612][ T871] ? __kmalloc_node_track_caller_noprof+0x349/0x4f0 [ 49.681638][ T871] ? __alloc_skb+0x13f/0x360 [ 49.681673][ T871] ? __kasan_slab_alloc+0x73/0x90 [ 49.681709][ T871] skb_copy_datagram_from_iter+0xf4/0x6f0 [ 49.681740][ T871] ? __kasan_check_write+0x18/0x20 [ 49.681762][ T871] ? __build_skb_around+0x2a4/0x590 [ 49.681799][ T871] skb_copy_datagram_from_iter_full+0x104/0x190 [ 49.681826][ T871] ? __cfi_skb_copy_datagram_from_iter_full+0x10/0x10 [ 49.681871][ T871] ? skb_put+0x10e/0x200 [ 49.681897][ T871] virtio_transport_alloc_skb+0x64f/0xf90 [ 49.681921][ T871] ? trace_raw_output_virtio_transport_recv_pkt+0x360/0x360 [ 49.681945][ T871] ? _raw_spin_lock_bh+0x96/0x130 [ 49.681960][ T871] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 49.681976][ T871] virtio_transport_send_pkt_info+0x6cf/0x1110 [ 49.682040][ T871] virtio_transport_seqpacket_enqueue+0x178/0x210 [ 49.682114][ T871] ? __cfi_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 49.682185][ T871] ? avc_has_perm+0x155/0x240 [ 49.682218][ T871] ? __cfi_avc_has_perm+0x10/0x10 [ 49.682245][ T871] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.682274][ T871] ? remove_wait_queue+0x132/0x150 [ 49.682293][ T871] vsock_connectible_sendmsg+0xb1a/0x10f0 [ 49.682314][ T871] ? __cfi_vsock_connectible_sendmsg+0x10/0x10 [ 49.682358][ T871] ? __cfi_woken_wake_function+0x10/0x10 [ 49.682406][ T871] ? __cfi___futex_wait+0x10/0x10 [ 49.682430][ T871] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 49.682453][ T871] ? security_socket_sendmsg+0x3d/0x100 [ 49.682509][ T871] ? __cfi_vsock_connectible_sendmsg+0x10/0x10 [ 49.682534][ T871] sock_write_iter+0x445/0x490 [ 49.682555][ T871] ? __cfi_sock_write_iter+0x10/0x10 [ 49.682581][ T871] ? __cfi_futex_wait+0x10/0x10 [ 49.682595][ T871] ? vsock_connect+0x8de/0xd80 [ 49.682613][ T871] vfs_write+0x75f/0xfd0 [ 49.682647][ T871] ? __cfi_vfs_write+0x10/0x10 [ 49.682675][ T871] ksys_write+0x145/0x260 [ 49.682698][ T871] ? xfd_validate_state+0x68/0x140 [ 49.682731][ T871] ? __cfi_ksys_write+0x10/0x10 [ 49.682748][ T871] ? __kasan_check_write+0x18/0x20 [ 49.682764][ T871] ? fpregs_restore_userregs+0x11c/0x260 [ 49.682801][ T871] __x64_sys_write+0x7f/0x90 [ 49.682843][ T871] x64_sys_call+0x271c/0x2ee0 [ 49.682870][ T871] do_syscall_64+0x57/0xf0 [ 49.682886][ T871] ? clear_bhb_loop+0x50/0xa0 [ 49.682908][ T871] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.682996][ T871] RIP: 0033:0x7f03e4b9e159 [ 49.683018][ T871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.683037][ T871] RSP: 002b:00007f03e5a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.683066][ T871] RAX: ffffffffffffffda RBX: 00007f03e4e25fa0 RCX: 00007f03e4b9e159 [ 49.683093][ T871] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000005 [ 49.683111][ T871] RBP: 00007f03e4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 49.683126][ T871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.683139][ T871] R13: 00007f03e4e26038 R14: 00007f03e4e25fa0 R15: 00007ffff989a428 [ 49.683158][ T871] [ 50.089155][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 50.100040][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.121721][ T875] veth1_to_bond: entered allmulticast mode [ 50.128248][ T36] audit: type=1400 audit(2000000000.000:268): avc: denied { read write } for pid=874 comm="syz.2.178" name="UDC" dev="configfs" ino=14231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 50.129845][ T875] Config c/1 of g1 needs at least one function. [ 50.151145][ T36] audit: type=1400 audit(2000000000.000:269): avc: denied { open } for pid=874 comm="syz.2.178" path="/45/config/usb_gadget/g1/UDC" dev="configfs" ino=14231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 50.158169][ T875] udc dummy_udc.0: failed to start g1: -22 [ 50.188162][ T875] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 50.198589][ T875] UDC core: g1: couldn't find an available UDC or it's busy [ 50.216207][ T874] veth1_to_bond: left allmulticast mode [ 50.260525][ T36] audit: type=1400 audit(2000000000.130:270): avc: denied { unlink } for pid=879 comm="syz.0.180" name="#1" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.313687][ T36] audit: type=1400 audit(2000000000.160:271): avc: denied { create } for pid=879 comm="syz.0.180" name="#4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.334626][ T36] audit: type=1400 audit(2000000000.160:272): avc: denied { link } for pid=879 comm="syz.0.180" name="#4" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.357088][ T36] audit: type=1400 audit(2000000000.160:273): avc: denied { rename } for pid=879 comm="syz.0.180" name="#5" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.379266][ T36] audit: type=1400 audit(2000000000.170:274): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.545173][ T886] FAULT_INJECTION: forcing a failure. [ 50.545173][ T886] name failslab, interval 1, probability 0, space 0, times 0 [ 50.574489][ T888] FAULT_INJECTION: forcing a failure. [ 50.574489][ T888] name failslab, interval 1, probability 0, space 0, times 0 [ 50.577652][ T886] CPU: 0 UID: 0 PID: 886 Comm: syz.0.182 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 50.577748][ T886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.577785][ T886] Call Trace: [ 50.577805][ T886] [ 50.577826][ T886] __dump_stack+0x21/0x30 [ 50.577931][ T886] dump_stack_lvl+0x140/0x1c0 [ 50.578017][ T886] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.578110][ T886] ? __futex_queue+0x19f/0x350 [ 50.578188][ T886] dump_stack+0x19/0x20 [ 50.578264][ T886] should_fail_ex+0x3c2/0x510 [ 50.578338][ T886] ? inotify_handle_inode_event+0x19f/0x5e0 [ 50.578419][ T886] should_failslab+0xac/0x100 [ 50.578495][ T886] __kmalloc_noprof+0x69/0x510 [ 50.578555][ T886] ? inotify_handle_inode_event+0x19f/0x5e0 [ 50.578628][ T886] ? __futex_wait+0x330/0x3d0 [ 50.578679][ T886] inotify_handle_inode_event+0x19f/0x5e0 [ 50.578754][ T886] ? __cfi___futex_wait+0x10/0x10 [ 50.578836][ T886] ? fsnotify_compare_groups+0x96/0x130 [ 50.578931][ T886] fsnotify+0x1c8a/0x1f80 [ 50.578986][ T886] ? __cfi_inotify_handle_inode_event+0x10/0x10 [ 50.579062][ T886] ? __cfi_fsnotify+0x10/0x10 [ 50.579120][ T886] __fsnotify_parent+0x4c3/0x6e0 [ 50.579176][ T886] ? __asan_memset+0x39/0x50 [ 50.579238][ T886] ? __cfi___fsnotify_parent+0x10/0x10 [ 50.579287][ T886] ? mutex_unlock+0x90/0x240 [ 50.579368][ T886] __fput+0x79d/0xa30 [ 50.579446][ T886] __fput_sync+0x4a/0x70 [ 50.579523][ T886] __se_sys_close+0x172/0x1f0 [ 50.579588][ T886] __x64_sys_close+0x3c/0x60 [ 50.579633][ T886] x64_sys_call+0x2560/0x2ee0 [ 50.579685][ T886] do_syscall_64+0x57/0xf0 [ 50.579737][ T886] ? clear_bhb_loop+0x50/0xa0 [ 50.579825][ T886] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.579898][ T886] RIP: 0033:0x7f8d1ed9e159 [ 50.579946][ T886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.579992][ T886] RSP: 002b:00007f8d1fbe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.580043][ T886] RAX: ffffffffffffffda RBX: 00007f8d1f025fa0 RCX: 00007f8d1ed9e159 [ 50.580090][ T886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 50.580121][ T886] RBP: 00007f8d1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.580157][ T886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.580200][ T886] R13: 00007f8d1f026038 R14: 00007f8d1f025fa0 R15: 00007ffcf659b868 [ 50.580274][ T886] [ 50.833511][ T888] CPU: 0 UID: 0 PID: 888 Comm: syz.2.183 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 50.833546][ T888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.833560][ T888] Call Trace: [ 50.833567][ T888] [ 50.833576][ T888] __dump_stack+0x21/0x30 [ 50.833615][ T888] dump_stack_lvl+0x140/0x1c0 [ 50.833647][ T888] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.833682][ T888] dump_stack+0x19/0x20 [ 50.833714][ T888] should_fail_ex+0x3c2/0x510 [ 50.833744][ T888] should_failslab+0xac/0x100 [ 50.833774][ T888] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 50.833802][ T888] ? kasan_save_alloc_info+0x3a/0x50 [ 50.833831][ T888] ? kstrdup_const+0x45/0x60 [ 50.833846][ T888] ? __kasan_kmalloc+0x96/0xb0 [ 50.833895][ T888] kstrdup+0x4d/0x130 [ 50.833915][ T888] ? kstrdup_const+0x3a/0x60 [ 50.833935][ T888] kstrdup_const+0x45/0x60 [ 50.833954][ T888] eventfs_create_dir+0x9b/0x770 [ 50.833983][ T888] event_create_dir+0x70a/0xb60 [ 50.834007][ T888] ? __kasan_check_write+0x18/0x20 [ 50.834033][ T888] trace_add_event_call+0xed/0x170 [ 50.834056][ T888] trace_probe_register_event_call+0x35e/0x3f0 [ 50.834086][ T888] register_trace_uprobe+0x7e9/0x11a0 [ 50.834116][ T888] ? traceprobe_set_print_fmt+0x92/0x190 [ 50.834145][ T888] __trace_uprobe_create+0xab2/0xc50 [ 50.834177][ T888] ? __cfi___trace_uprobe_create+0x10/0x10 [ 50.834218][ T888] ? __kasan_kmalloc+0x96/0xb0 [ 50.834240][ T888] ? __kmalloc_noprof+0x261/0x510 [ 50.834279][ T888] ? argv_split+0x18c/0x4a0 [ 50.834314][ T888] ? argv_split+0x361/0x4a0 [ 50.834344][ T888] trace_probe_create+0xdd/0x140 [ 50.834372][ T888] ? __kasan_check_write+0x18/0x20 [ 50.834389][ T888] ? __cfi___trace_uprobe_create+0x10/0x10 [ 50.834410][ T888] ? __cfi_trace_probe_create+0x10/0x10 [ 50.834458][ T888] ? __check_object_size+0x54c/0x870 [ 50.834483][ T888] ? __cfi___check_object_size+0x10/0x10 [ 50.834512][ T888] trace_uprobe_create+0x20/0x30 [ 50.834533][ T888] dyn_event_create+0x5c/0x80 [ 50.834548][ T888] create_or_delete_trace_uprobe+0x6d/0xb0 [ 50.834588][ T888] trace_parse_run_command+0x219/0x420 [ 50.834622][ T888] ? __cfi_create_or_delete_trace_uprobe+0x10/0x10 [ 50.834660][ T888] probes_write+0x38/0x50 [ 50.834682][ T888] ? __cfi_probes_write+0x10/0x10 [ 50.834703][ T888] vfs_write+0x3c1/0xfd0 [ 50.834739][ T888] ? __cfi_vfs_write+0x10/0x10 [ 50.834763][ T888] ? __kasan_check_write+0x18/0x20 [ 50.834785][ T888] ? mutex_lock+0x97/0x1d0 [ 50.834816][ T888] ? __cfi_mutex_lock+0x10/0x10 [ 50.834838][ T888] ksys_write+0x145/0x260 [ 50.834855][ T888] ? xfd_validate_state+0x68/0x140 [ 50.834900][ T888] ? __cfi_ksys_write+0x10/0x10 [ 50.834924][ T888] ? __kasan_check_write+0x18/0x20 [ 50.834947][ T888] ? fpregs_restore_userregs+0x11c/0x260 [ 50.834976][ T888] __x64_sys_write+0x7f/0x90 [ 50.834994][ T888] x64_sys_call+0x271c/0x2ee0 [ 50.835009][ T888] do_syscall_64+0x57/0xf0 [ 50.835043][ T888] ? clear_bhb_loop+0x50/0xa0 [ 50.835072][ T888] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.835106][ T888] RIP: 0033:0x7f03e4b9e159 [ 50.835120][ T888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.835150][ T888] RSP: 002b:00007f03e5a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.835184][ T888] RAX: ffffffffffffffda RBX: 00007f03e4e25fa0 RCX: 00007f03e4b9e159 [ 50.835203][ T888] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 50.835217][ T888] RBP: 00007f03e4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.835231][ T888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.835245][ T888] R13: 00007f03e4e26038 R14: 00007f03e4e25fa0 R15: 00007ffff989a428 [ 50.835267][ T888] [ 50.839622][ T888] Could not create tracefs '_' directory [ 51.220662][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 51.231511][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 51.241432][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 51.250921][ T311] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 51.260395][ T311] usb 2-1: USB disconnect, device number 7 [ 51.360536][ T319] udevd[319]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 51.399813][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 51.641540][ T319] udevd[319]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 51.704057][ T36] audit: type=1400 audit(2000000001.580:275): avc: denied { ioctl } for pid=912 comm="syz.1.192" path="socket:[15532]" dev="sockfs" ino=15532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.782586][ T311] rust_binder: 916: undelivered transaction 27, process died [ 51.794046][ T311] rust_binder: 916: undelivered transaction 26, process died [ 52.063183][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 52.076273][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 52.087028][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 52.098025][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 52.126419][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 52.139866][ T45] usb 4-1: USB disconnect, device number 5 [ 52.533643][ T36] audit: type=1400 audit(2000000002.410:276): avc: denied { setopt } for pid=930 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.790880][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 52.960756][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 52.968294][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.040278][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.050466][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.059556][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.068464][ T311] usb 1-1: config 0 descriptor?? [ 53.075195][ T311] hub 1-1:0.0: USB hub found [ 53.170752][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.275422][ T311] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 53.370793][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 53.377791][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.386390][ T10] usb 4-1: config 165 has an invalid interface number: 162 but max is 0 [ 53.394841][ T10] usb 4-1: config 165 has no interface number 0 [ 53.401477][ T10] usb 4-1: config 165 interface 162 has no altsetting 0 [ 53.410074][ T10] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 53.419464][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.427762][ T10] usb 4-1: Product: syz [ 53.432032][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 53.440207][ T10] usb 4-1: Manufacturer: syz [ 53.444972][ T10] usb 4-1: SerialNumber: syz [ 53.608427][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.617098][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 53.624774][ T9] usb 3-1: can't read configurations, error -71 [ 53.680168][ T311] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 53.695904][ T311] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 53.701373][ T946] udevd[946]: open /dev/null failed: No such file or directory [ 54.040896][ T640] usb 1-1: USB disconnect, device number 7 [ 54.564486][ T963] kvm: pic: single mode not supported [ 54.564574][ T963] kvm: pic: single mode not supported [ 54.570401][ T963] kvm: pic: single mode not supported [ 54.576612][ T963] kvm: pic: single mode not supported [ 54.582067][ T963] kvm: pic: level sensitive irq not supported [ 54.587902][ T963] kvm: pic: single mode not supported [ 54.594066][ T963] kvm: pic: level sensitive irq not supported [ 54.599905][ T963] kvm: pic: level sensitive irq not supported [ 54.606265][ T963] kvm: pic: single mode not supported [ 54.612396][ T963] kvm: pic: level sensitive irq not supported [ 54.618461][ T963] kvm: pic: single mode not supported [ 54.625208][ T963] kvm: pic: single mode not supported [ 54.630679][ T963] kvm: pic: level sensitive irq not supported [ 54.641332][ T963] kvm: pic: single mode not supported [ 54.648399][ T963] kvm: pic: single mode not supported [ 54.664645][ T963] kvm: pic: level sensitive irq not supported [ 54.676448][ T963] kvm: pic: level sensitive irq not supported [ 54.682866][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 54.683018][ T36] audit: type=1400 audit(2000000004.550:286): avc: denied { search } for pid=967 comm="syz.2.211" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.683725][ T963] kvm: pic: level sensitive irq not supported [ 54.717064][ T36] audit: type=1400 audit(2000000004.550:287): avc: denied { read } for pid=967 comm="syz.2.211" name="trace" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 54.726623][ T963] kvm: pic: level sensitive irq not supported [ 54.755783][ T963] kvm: pic: level sensitive irq not supported [ 55.050301][ T976] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 55.073668][ T976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.545024][ T983] syzkaller0: entered promiscuous mode [ 55.550600][ T983] syzkaller0: entered allmulticast mode [ 55.600295][ T36] audit: type=1400 audit(2000000005.470:288): avc: denied { read write } for pid=984 comm="syz.0.216" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.623570][ T36] audit: type=1400 audit(2000000005.470:289): avc: denied { open } for pid=984 comm="syz.0.216" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.678840][ T10] usb 4-1: USB disconnect, device number 6 [ 55.704655][ T36] audit: type=1326 audit(2000000005.580:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=989 comm="syz.3.218" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x0 [ 55.744359][ T36] audit: type=1400 audit(2000000005.620:291): avc: denied { accept } for pid=992 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.140810][ T452] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 56.291532][ T452] usb 1-1: not running at top speed; connect to a high speed hub [ 56.300074][ T452] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.311630][ T452] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 56.320801][ T452] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 56.329261][ T452] usb 1-1: Product: syz [ 56.333492][ T452] usb 1-1: Manufacturer: syz [ 56.342090][ T452] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 56.554875][ T452] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 56.570154][ T36] audit: type=1400 audit(2000000006.440:292): avc: denied { write } for pid=1019 comm="syz.3.228" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.574815][ T452] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 56.591220][ T1020] raw_sendmsg: syz.3.228 forgot to set AF_INET. Fix it! [ 56.606922][ T452] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 56.620089][ T452] usb 1-1: USB disconnect, device number 8 [ 56.661465][ T1022] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 56.767393][ T1026] netlink: 104 bytes leftover after parsing attributes in process `syz.3.230'. [ 57.020817][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 57.200783][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 57.305025][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 57.313486][ T31] usb 4-1: config 0 has no interface number 0 [ 57.319688][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 57.328447][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 57.337821][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.346127][ T31] usb 4-1: Product: syz [ 57.350443][ T31] usb 4-1: Manufacturer: syz [ 57.355298][ T31] usb 4-1: SerialNumber: syz [ 57.393894][ T31] usb 4-1: config 0 descriptor?? [ 57.399718][ T31] smsc75xx v1.0.0 [ 57.957776][ T36] audit: type=1400 audit(2000000007.830:293): avc: denied { read } for pid=1044 comm="syz.0.237" path="socket:[16562]" dev="sockfs" ino=16562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.001943][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 58.012937][ T36] audit: type=1400 audit(2000000007.890:294): avc: denied { shutdown } for pid=1044 comm="syz.0.237" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.012952][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.194854][ T311] rust_binder: 1050: undelivered TRANSACTION_COMPLETE [ 58.201816][ T311] rust_binder: 1050: undelivered TRANSACTION_COMPLETE [ 58.208611][ T311] rust_binder: 1050: undelivered TRANSACTION_COMPLETE [ 58.232632][ T311] rust_binder: 1050: undelivered transaction 33, process died [ 58.240167][ T311] rust_binder: 1050: undelivered transaction 34, process died [ 58.247839][ T311] rust_binder: 1050: undelivered transaction 32, process died [ 58.259780][ T36] audit: type=1400 audit(2000000008.130:295): avc: denied { setopt } for pid=1052 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.503033][ T1069] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 58.818237][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 58.860748][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 58.870580][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 58.900888][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 58.910848][ T31] usb 4-1: USB disconnect, device number 7 [ 59.297687][ T1083] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 59.305534][ T1083] udc dummy_udc.0: failed to start g1: -19 [ 59.325511][ T1083] UDC core: g1: couldn't find an available UDC or it's busy [ 59.375928][ T1085] FAULT_INJECTION: forcing a failure. [ 59.375928][ T1085] name failslab, interval 1, probability 0, space 0, times 0 [ 59.400825][ T1085] CPU: 0 UID: 0 PID: 1085 Comm: syz.3.252 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 59.400869][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.400884][ T1085] Call Trace: [ 59.400892][ T1085] [ 59.400901][ T1085] __dump_stack+0x21/0x30 [ 59.400944][ T1085] dump_stack_lvl+0x140/0x1c0 [ 59.400975][ T1085] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.401014][ T1085] dump_stack+0x19/0x20 [ 59.401049][ T1085] should_fail_ex+0x3c2/0x510 [ 59.401079][ T1085] should_failslab+0xac/0x100 [ 59.401108][ T1085] __kmalloc_cache_noprof+0x41/0x470 [ 59.401137][ T1085] ? ioc_cpd_alloc+0x7e/0x1d0 [ 59.401158][ T1085] ioc_cpd_alloc+0x7e/0x1d0 [ 59.401181][ T1085] blkcg_css_alloc+0x33c/0xcd0 [ 59.401211][ T1085] cgroup_apply_control_enable+0x3b2/0xce0 [ 59.401246][ T1085] cgroup_mkdir+0x1274/0x1600 [ 59.401278][ T1085] ? __cfi_cgroup_mkdir+0x10/0x10 [ 59.401317][ T1085] kernfs_iop_mkdir+0x1be/0x2d0 [ 59.401352][ T1085] vfs_mkdir+0x591/0x810 [ 59.401389][ T1085] do_mkdirat+0x240/0x530 [ 59.401422][ T1085] ? __cfi_do_mkdirat+0x10/0x10 [ 59.401456][ T1085] ? __kasan_check_write+0x18/0x20 [ 59.401480][ T1085] ? getname_flags+0x203/0x6b0 [ 59.401508][ T1085] ? __kasan_check_write+0x18/0x20 [ 59.401533][ T1085] __x64_sys_mkdirat+0x8b/0xa0 [ 59.401565][ T1085] x64_sys_call+0x2ba8/0x2ee0 [ 59.401590][ T1085] do_syscall_64+0x57/0xf0 [ 59.401611][ T1085] ? clear_bhb_loop+0x50/0xa0 [ 59.401643][ T1085] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.401671][ T1085] RIP: 0033:0x7f4be459e159 [ 59.401691][ T1085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.401711][ T1085] RSP: 002b:00007f4be54c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 59.401737][ T1085] RAX: ffffffffffffffda RBX: 00007f4be4825fa0 RCX: 00007f4be459e159 [ 59.401756][ T1085] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 59.401773][ T1085] RBP: 00007f4be463506b R08: 0000000000000000 R09: 0000000000000000 [ 59.401789][ T1085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.401803][ T1085] R13: 00007f4be4826038 R14: 00007f4be4825fa0 R15: 00007ffc7683aff8 [ 59.401824][ T1085] [ 60.112412][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 60.112431][ T36] audit: type=1326 audit(2000000009.990:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.0.267" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d1ed9e159 code=0x0 [ 60.340808][ T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 60.493157][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 60.511509][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.528641][ T31] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 60.539158][ T31] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 60.552759][ T31] usb 2-1: Product: syz [ 60.557014][ T31] usb 2-1: Manufacturer: syz [ 60.564059][ T31] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 60.762976][ T1119] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 60.773288][ T31] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 60.775629][ T1119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.784508][ T31] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 60.800368][ T31] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 60.810325][ T31] usb 2-1: USB disconnect, device number 8 [ 60.830828][ T640] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.980801][ T640] usb 3-1: Using ep0 maxpacket: 32 [ 60.990962][ T640] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 60.999187][ T640] usb 3-1: config 0 has no interface number 0 [ 61.007704][ T640] usb 3-1: config 0 interface 184 has no altsetting 0 [ 61.016318][ T640] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 61.025565][ T640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.034741][ T640] usb 3-1: Product: syz [ 61.038942][ T640] usb 3-1: Manufacturer: syz [ 61.043603][ T640] usb 3-1: SerialNumber: syz [ 61.050861][ T640] usb 3-1: config 0 descriptor?? [ 61.056979][ T640] smsc75xx v1.0.0 [ 61.658306][ T640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 61.670828][ T640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 62.410628][ T1145] netlink: 104 bytes leftover after parsing attributes in process `syz.0.274'. [ 62.462935][ T1149] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.491078][ T640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 62.504768][ T1149] pic_ioport_write: 10 callbacks suppressed [ 62.504792][ T1149] kvm: pic: single mode not supported [ 62.510785][ T640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 62.534010][ T640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 62.552110][ T640] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 62.590788][ T640] usb 3-1: USB disconnect, device number 8 [ 62.737833][ T311] rust_binder: 1161: undelivered TRANSACTION_COMPLETE [ 62.744808][ T311] rust_binder: 1161: undelivered TRANSACTION_COMPLETE [ 62.752059][ T311] rust_binder: 1161: undelivered TRANSACTION_COMPLETE [ 62.771310][ T640] rust_binder: 1161: undelivered transaction 40, process died [ 62.778926][ T640] rust_binder: 1161: undelivered transaction 41, process died [ 62.786681][ T640] rust_binder: 1161: undelivered transaction 39, process died [ 64.184413][ T1195] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 64.861863][ T1207] FAULT_INJECTION: forcing a failure. [ 64.861863][ T1207] name failslab, interval 1, probability 0, space 0, times 0 [ 64.883950][ T1207] CPU: 0 UID: 0 PID: 1207 Comm: syz.0.295 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 64.883986][ T1207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.883997][ T1207] Call Trace: [ 64.884003][ T1207] [ 64.884010][ T1207] __dump_stack+0x21/0x30 [ 64.884039][ T1207] dump_stack_lvl+0x140/0x1c0 [ 64.884063][ T1207] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.884088][ T1207] dump_stack+0x19/0x20 [ 64.884111][ T1207] should_fail_ex+0x3c2/0x510 [ 64.884134][ T1207] should_failslab+0xac/0x100 [ 64.884156][ T1207] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 64.884176][ T1207] ? kasan_save_alloc_info+0x3a/0x50 [ 64.884191][ T1207] ? kstrdup_const+0x45/0x60 [ 64.884207][ T1207] ? __kasan_kmalloc+0x96/0xb0 [ 64.884252][ T1207] kstrdup+0x4d/0x130 [ 64.884272][ T1207] ? kstrdup_const+0x3a/0x60 [ 64.884299][ T1207] kstrdup_const+0x45/0x60 [ 64.884314][ T1207] eventfs_create_dir+0x9b/0x770 [ 64.884335][ T1207] event_create_dir+0x70a/0xb60 [ 64.884351][ T1207] ? __kasan_check_write+0x18/0x20 [ 64.884369][ T1207] trace_add_event_call+0xed/0x170 [ 64.884384][ T1207] trace_probe_register_event_call+0x35e/0x3f0 [ 64.884406][ T1207] register_trace_uprobe+0x7e9/0x11a0 [ 64.884428][ T1207] ? traceprobe_set_print_fmt+0x92/0x190 [ 64.884448][ T1207] __trace_uprobe_create+0xab2/0xc50 [ 64.884470][ T1207] ? __cfi___trace_uprobe_create+0x10/0x10 [ 64.884496][ T1207] ? __kasan_kmalloc+0x96/0xb0 [ 64.884516][ T1207] ? __kmalloc_noprof+0x261/0x510 [ 64.884534][ T1207] ? argv_split+0x18c/0x4a0 [ 64.884558][ T1207] ? argv_split+0x361/0x4a0 [ 64.884581][ T1207] trace_probe_create+0xdd/0x140 [ 64.884601][ T1207] ? __kasan_check_write+0x18/0x20 [ 64.884622][ T1207] ? __cfi___trace_uprobe_create+0x10/0x10 [ 64.884651][ T1207] ? __cfi_trace_probe_create+0x10/0x10 [ 64.884670][ T1207] ? __check_object_size+0x54c/0x870 [ 64.884689][ T1207] ? __cfi___check_object_size+0x10/0x10 [ 64.884708][ T1207] trace_uprobe_create+0x20/0x30 [ 64.884728][ T1207] dyn_event_create+0x5c/0x80 [ 64.884743][ T1207] create_or_delete_trace_uprobe+0x6d/0xb0 [ 64.884767][ T1207] trace_parse_run_command+0x219/0x420 [ 64.884791][ T1207] ? __cfi_create_or_delete_trace_uprobe+0x10/0x10 [ 64.884815][ T1207] probes_write+0x38/0x50 [ 64.884837][ T1207] ? __cfi_probes_write+0x10/0x10 [ 64.884858][ T1207] vfs_write+0x3c1/0xfd0 [ 64.884876][ T1207] ? __cfi_vfs_write+0x10/0x10 [ 64.884893][ T1207] ? __kasan_check_write+0x18/0x20 [ 64.884910][ T1207] ? mutex_lock+0x97/0x1d0 [ 64.884930][ T1207] ? __cfi_mutex_lock+0x10/0x10 [ 64.884956][ T1207] ksys_write+0x145/0x260 [ 64.884973][ T1207] ? __cfi_ksys_write+0x10/0x10 [ 64.884991][ T1207] ? __kasan_check_write+0x18/0x20 [ 64.885007][ T1207] ? fpregs_restore_userregs+0x11c/0x260 [ 64.885029][ T1207] __x64_sys_write+0x7f/0x90 [ 64.885047][ T1207] x64_sys_call+0x271c/0x2ee0 [ 64.885063][ T1207] do_syscall_64+0x57/0xf0 [ 64.885078][ T1207] ? clear_bhb_loop+0x50/0xa0 [ 64.885100][ T1207] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.885122][ T1207] RIP: 0033:0x7f8d1ed9e159 [ 64.885159][ T1207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.885179][ T1207] RSP: 002b:00007f8d1fbe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.885209][ T1207] RAX: ffffffffffffffda RBX: 00007f8d1f025fa0 RCX: 00007f8d1ed9e159 [ 64.885239][ T1207] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 64.885255][ T1207] RBP: 00007f8d1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 64.885270][ T1207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.885290][ T1207] R13: 00007f8d1f026038 R14: 00007f8d1f025fa0 R15: 00007ffcf659b868 [ 64.885306][ T1207] [ 64.885319][ T1207] Could not create tracefs '_' directory [ 65.390804][ T311] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 65.514215][ T1220] syzkaller0: entered promiscuous mode [ 65.519897][ T1220] syzkaller0: entered allmulticast mode [ 65.550771][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 65.557433][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.571615][ T311] usb 3-1: config 165 has an invalid interface number: 162 but max is 0 [ 65.580005][ T311] usb 3-1: config 165 has no interface number 0 [ 65.599507][ T311] usb 3-1: config 165 interface 162 has no altsetting 0 [ 65.608257][ T311] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 65.617521][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.625755][ T311] usb 3-1: Product: syz [ 65.629946][ T311] usb 3-1: Manufacturer: syz [ 65.634856][ T311] usb 3-1: SerialNumber: syz [ 66.058029][ T36] audit: type=1400 audit(2000000015.930:300): avc: denied { mounton } for pid=1239 comm="syz.1.304" path="/61/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 66.094206][ T1240] VFS: Mount too revealing [ 66.095940][ T36] audit: type=1400 audit(2000000015.930:301): avc: denied { create } for pid=1239 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.144809][ T36] audit: type=1400 audit(2000000015.930:302): avc: denied { sys_admin } for pid=1239 comm="syz.1.304" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.246092][ T36] audit: type=1400 audit(2000000017.120:303): avc: denied { create } for pid=1272 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.530751][ T506] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 67.618812][ T36] audit: type=1400 audit(2000000017.490:304): avc: denied { ioctl } for pid=1276 comm="syz.0.313" path="socket:[18358]" dev="sockfs" ino=18358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.645851][ T1277] FAULT_INJECTION: forcing a failure. [ 67.645851][ T1277] name failslab, interval 1, probability 0, space 0, times 0 [ 67.659298][ T1277] CPU: 1 UID: 0 PID: 1277 Comm: syz.0.313 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 67.659335][ T1277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.659352][ T1277] Call Trace: [ 67.659360][ T1277] [ 67.659379][ T1277] __dump_stack+0x21/0x30 [ 67.659418][ T1277] dump_stack_lvl+0x140/0x1c0 [ 67.659451][ T1277] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.659485][ T1277] ? __kmalloc_node_noprof+0x252/0x500 [ 67.659511][ T1277] ? __kvmalloc_node_noprof+0x128/0x300 [ 67.659535][ T1277] dump_stack+0x19/0x20 [ 67.659585][ T1277] should_fail_ex+0x3c2/0x510 [ 67.659614][ T1277] ? shmem_initxattrs+0x2a8/0x530 [ 67.659650][ T1277] should_failslab+0xac/0x100 [ 67.659682][ T1277] __kmalloc_noprof+0x69/0x510 [ 67.659706][ T1277] ? shmem_initxattrs+0x2a8/0x530 [ 67.659742][ T1277] ? simple_xattr_alloc+0xa2/0x140 [ 67.659771][ T1277] shmem_initxattrs+0x2a8/0x530 [ 67.659808][ T1277] security_inode_init_security+0x431/0x600 [ 67.659841][ T1277] ? __cfi_shmem_initxattrs+0x10/0x10 [ 67.659881][ T1277] ? __cfi_security_inode_init_security+0x10/0x10 [ 67.659915][ T1277] ? __kasan_check_write+0x18/0x20 [ 67.659939][ T1277] ? set_cached_acl+0xe1/0x1a0 [ 67.659962][ T1277] ? simple_acl_create+0x190/0x1c0 [ 67.659987][ T1277] shmem_mknod+0xd5/0x200 [ 67.660021][ T1277] shmem_rename2+0x258/0x3c0 [ 67.660057][ T1277] ? __cfi_shmem_rename2+0x10/0x10 [ 67.660091][ T1277] vfs_rename+0xd5c/0x1100 [ 67.660113][ T1277] ? hook_file_free_security+0xc0/0xc0 [ 67.660152][ T1277] ? __cfi_vfs_rename+0x10/0x10 [ 67.660176][ T1277] ? hook_path_rename+0x44/0x60 [ 67.660209][ T1277] ? bpf_lsm_path_rename+0xd/0x20 [ 67.660234][ T1277] ? security_path_rename+0x143/0x2a0 [ 67.660269][ T1277] do_renameat2+0x85d/0xc30 [ 67.660291][ T1277] ? __check_object_size+0x99/0x870 [ 67.660321][ T1277] ? __cfi_do_renameat2+0x10/0x10 [ 67.660346][ T1277] ? __kasan_check_write+0x18/0x20 [ 67.660376][ T1277] ? getname_flags+0x203/0x6b0 [ 67.660404][ T1277] ? fpregs_restore_userregs+0x11c/0x260 [ 67.660436][ T1277] __x64_sys_renameat2+0xdc/0x100 [ 67.660461][ T1277] x64_sys_call+0x2e18/0x2ee0 [ 67.660484][ T1277] do_syscall_64+0x57/0xf0 [ 67.660506][ T1277] ? clear_bhb_loop+0x50/0xa0 [ 67.660537][ T1277] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.660568][ T1277] RIP: 0033:0x7f8d1ed9e159 [ 67.660588][ T1277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.660610][ T1277] RSP: 002b:00007f8d1fbe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 67.660636][ T1277] RAX: ffffffffffffffda RBX: 00007f8d1f025fa0 RCX: 00007f8d1ed9e159 [ 67.660655][ T1277] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 67.660673][ T1277] RBP: 00007f8d1ee3506b R08: 0000000000000004 R09: 0000000000000000 [ 67.660688][ T1277] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 67.660705][ T1277] R13: 00007f8d1f026038 R14: 00007f8d1f025fa0 R15: 00007ffcf659b868 [ 67.660725][ T1277] [ 67.722274][ T311] usb 3-1: USB disconnect, device number 9 [ 67.753994][ T506] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 67.981301][ T506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.989440][ T506] usb 4-1: Product: syz [ 67.994208][ T506] usb 4-1: Manufacturer: syz [ 67.998847][ T506] usb 4-1: SerialNumber: syz [ 68.008667][ T506] ums-karma 4-1:1.0: USB Mass Storage device detected [ 68.017002][ T506] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 68.017002][ T506] Please send a copy of this message to and [ 68.159275][ T1286] rust_binder: 1285:1286 got reply transaction with no transaction stack [ 68.167819][ T1286] rust_binder: 1285:1286 transaction reply to 0:0 failed EINVAL, code 0 size 0-24 [ 68.178437][ T311] rust_binder: 1285: undelivered TRANSACTION_COMPLETE [ 68.185550][ T311] rust_binder: 1285: undelivered TRANSACTION_ERROR: 29201 [ 68.422020][ T36] audit: type=1400 audit(2000000018.290:305): avc: denied { bind } for pid=1272 comm="syz.3.311" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.450780][ T36] audit: type=1400 audit(2000000018.290:306): avc: denied { name_bind } for pid=1272 comm="syz.3.311" src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 68.450800][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 68.489586][ T36] audit: type=1400 audit(2000000018.290:307): avc: denied { node_bind } for pid=1272 comm="syz.3.311" saddr=ff02::1 src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.511688][ T36] audit: type=1400 audit(2000000018.290:308): avc: denied { connect } for pid=1272 comm="syz.3.311" laddr=ff02::1 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.515438][ T506] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 68.545300][ T36] audit: type=1400 audit(2000000018.300:309): avc: denied { read write } for pid=1291 comm="syz.2.319" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 68.578084][ T506] usb 4-1: USB disconnect, device number 8 [ 68.629138][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 68.648549][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.657513][ T31] usb 1-1: Product: syz [ 68.662144][ T31] usb 1-1: Manufacturer: syz [ 68.667089][ T31] usb 1-1: SerialNumber: syz [ 68.930794][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 68.990555][ T506] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.999953][ T506] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.010917][ T1303] udevd[1303]: open /dev/null failed: No such file or directory [ 69.090905][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 69.097270][ T45] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 69.105670][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.116023][ T45] usb 3-1: config 0 has no interface number 0 [ 69.122278][ T45] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 69.132362][ T45] usb 3-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.145671][ T45] usb 3-1: config 0 interface 98 has no altsetting 0 [ 69.154077][ T45] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 69.163663][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.171843][ T45] usb 3-1: Product: syz [ 69.176148][ T45] usb 3-1: Manufacturer: syz [ 69.181332][ T45] usb 3-1: SerialNumber: syz [ 69.187170][ T45] usb 3-1: config 0 descriptor?? [ 69.193123][ T1297] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 69.201313][ T45] asix 3-1:0.98: probe with driver asix failed with error -22 [ 69.278091][ T31] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9e:7f:03:43:83:e8 [ 69.290767][ T506] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 69.298762][ T31] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 69.452943][ T506] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.473365][ T31] usb 3-1: USB disconnect, device number 10 [ 69.480912][ T506] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.493300][ T506] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 69.505558][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.526155][ T506] usb 4-1: config 0 descriptor?? [ 69.745578][ T1305] FAULT_INJECTION: forcing a failure. [ 69.745578][ T1305] name failslab, interval 1, probability 0, space 0, times 0 [ 69.758625][ T1305] CPU: 0 UID: 0 PID: 1305 Comm: syz.3.324 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 69.758664][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.758679][ T1305] Call Trace: [ 69.758687][ T1305] [ 69.758695][ T1305] __dump_stack+0x21/0x30 [ 69.758732][ T1305] dump_stack_lvl+0x140/0x1c0 [ 69.758766][ T1305] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.758798][ T1305] dump_stack+0x19/0x20 [ 69.758837][ T1305] should_fail_ex+0x3c2/0x510 [ 69.758871][ T1305] should_failslab+0xac/0x100 [ 69.758904][ T1305] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 69.758935][ T1305] ? kasprintf+0xe3/0x140 [ 69.758960][ T1305] kvasprintf+0xf1/0x260 [ 69.758984][ T1305] ? __cfi_down_write+0x10/0x10 [ 69.759018][ T1305] ? __cfi_kvasprintf+0x10/0x10 [ 69.759042][ T1305] ? __kasan_check_write+0x18/0x20 [ 69.759074][ T1305] ? up_write+0x66/0x280 [ 69.759111][ T1305] kasprintf+0xe3/0x140 [ 69.759136][ T1305] ? __cfi_kasprintf+0x10/0x10 [ 69.759161][ T1305] ? kernfs_create_link+0x18a/0x200 [ 69.759185][ T1305] ? sysfs_do_create_link_sd+0xe9/0x120 [ 69.759214][ T1305] module_add_driver+0x1ad/0x340 [ 69.759245][ T1305] bus_add_driver+0x3ea/0x730 [ 69.759277][ T1305] driver_register+0x2b7/0x3c0 [ 69.759309][ T1305] usb_gadget_register_driver_owner+0xfc/0x270 [ 69.759340][ T1305] raw_ioctl+0x144c/0x37a0 [ 69.759365][ T1305] ? __cfi_raw_ioctl+0x10/0x10 [ 69.759389][ T1305] ? selinux_file_ioctl+0x732/0x1480 [ 69.759417][ T1305] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 69.759449][ T1305] ? __fget_files+0x2bc/0x330 [ 69.759480][ T1305] ? bpf_lsm_file_ioctl+0xd/0x20 [ 69.759512][ T1305] ? security_file_ioctl+0x3e/0x110 [ 69.759537][ T1305] ? __cfi_raw_ioctl+0x10/0x10 [ 69.759557][ T1305] __se_sys_ioctl+0x123/0x1b0 [ 69.759588][ T1305] __x64_sys_ioctl+0x7f/0xa0 [ 69.759619][ T1305] x64_sys_call+0x1878/0x2ee0 [ 69.759642][ T1305] do_syscall_64+0x57/0xf0 [ 69.759666][ T1305] ? clear_bhb_loop+0x50/0xa0 [ 69.759698][ T1305] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.759728][ T1305] RIP: 0033:0x7f4be459ddeb [ 69.759747][ T1305] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 69.759769][ T1305] RSP: 002b:00007f4be54c4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.759795][ T1305] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4be459ddeb [ 69.759821][ T1305] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 69.759836][ T1305] RBP: 00007f4be54c5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 69.759854][ T1305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.759869][ T1305] R13: 0000200000000180 R14: 0000000000000005 R15: 0000000000000868 [ 69.759890][ T1305] [ 69.759944][ T1305] bus_add_driver: failed to create module links for raw-gadget.1 [ 70.043550][ T1305] UDC core: USB Raw Gadget: driver registration failed: -12 [ 70.051017][ T1305] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 70.075704][ T311] usb 4-1: USB disconnect, device number 9 [ 70.348041][ T1290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.350875][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 70.357253][ T1290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.374388][ C0] usb 1-1: eth1: intr status -71 [ 70.379617][ C0] usb 1-1: eth1: intr status -71 [ 70.384756][ C0] usb 1-1: eth1: intr status -71 [ 70.389920][ C0] usb 1-1: eth1: intr status -71 [ 70.394955][ T311] usb 1-1: USB disconnect, device number 9 [ 70.403348][ T150] usb 1-1: device reset failed [ 70.520775][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 70.527187][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.538228][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.548121][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.557566][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.570999][ T31] usb 3-1: config 0 descriptor?? [ 70.581504][ T31] hub 3-1:0.0: USB hub found [ 70.777741][ T31] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 71.180141][ T31] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 71.193175][ T31] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 71.208178][ T1341] udevd[1341]: open /dev/null failed: No such file or directory [ 71.690778][ T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 71.710950][ T506] usb 3-1: USB disconnect, device number 11 [ 71.846173][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.861115][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 71.868692][ T9] usb 4-1: can't read configurations, error -71 [ 72.272524][ T1348] kvm: pic: single mode not supported [ 72.272613][ T1348] kvm: pic: single mode not supported [ 72.278308][ T1348] kvm: pic: single mode not supported [ 72.283996][ T1348] kvm: pic: single mode not supported [ 72.289397][ T1348] kvm: pic: level sensitive irq not supported [ 72.295283][ T1348] kvm: pic: single mode not supported [ 72.301402][ T1348] kvm: pic: level sensitive irq not supported [ 72.307078][ T1348] kvm: pic: level sensitive irq not supported [ 72.313706][ T1348] kvm: pic: single mode not supported [ 72.319826][ T1348] kvm: pic: level sensitive irq not supported [ 72.326235][ T1348] kvm: pic: single mode not supported [ 72.333082][ T1348] kvm: pic: single mode not supported [ 72.338525][ T1348] kvm: pic: level sensitive irq not supported [ 72.344781][ T1348] kvm: pic: single mode not supported [ 72.351033][ T1348] kvm: pic: single mode not supported [ 72.357376][ T1348] kvm: pic: level sensitive irq not supported [ 72.363622][ T1348] kvm: pic: level sensitive irq not supported [ 72.370092][ T1348] kvm: pic: level sensitive irq not supported [ 72.378389][ T1348] kvm: pic: level sensitive irq not supported [ 72.385224][ T1348] kvm: pic: level sensitive irq not supported [ 72.651299][ T1355] VFS: Mount too revealing [ 73.030817][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 73.193324][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 73.210737][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.228931][ T9] usb 4-1: Product: syz [ 73.233173][ T9] usb 4-1: Manufacturer: syz [ 73.237786][ T9] usb 4-1: SerialNumber: syz [ 73.580763][ T640] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 73.731962][ T640] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.760755][ T640] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.769818][ T640] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 73.800744][ T640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.821260][ T640] usb 1-1: config 0 descriptor?? [ 74.032999][ T1364] FAULT_INJECTION: forcing a failure. [ 74.032999][ T1364] name failslab, interval 1, probability 0, space 0, times 0 [ 74.060772][ T1364] CPU: 1 UID: 0 PID: 1364 Comm: syz.0.336 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 74.060811][ T1364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.060826][ T1364] Call Trace: [ 74.060834][ T1364] [ 74.060842][ T1364] __dump_stack+0x21/0x30 [ 74.060884][ T1364] dump_stack_lvl+0x140/0x1c0 [ 74.060916][ T1364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.060948][ T1364] dump_stack+0x19/0x20 [ 74.060980][ T1364] should_fail_ex+0x3c2/0x510 [ 74.061010][ T1364] should_failslab+0xac/0x100 [ 74.061039][ T1364] kmem_cache_alloc_noprof+0x42/0x410 [ 74.061064][ T1364] ? __kernfs_new_node+0xf1/0x740 [ 74.061095][ T1364] __kernfs_new_node+0xf1/0x740 [ 74.061125][ T1364] ? kernfs_new_node+0x280/0x280 [ 74.061156][ T1364] ? kvasprintf+0x126/0x260 [ 74.061181][ T1364] ? __cfi_down_write+0x10/0x10 [ 74.061214][ T1364] ? __cfi_kvasprintf+0x10/0x10 [ 74.061238][ T1364] ? __kasan_check_write+0x18/0x20 [ 74.061264][ T1364] ? up_write+0x66/0x280 [ 74.061302][ T1364] kernfs_new_node+0x154/0x280 [ 74.061334][ T1364] kernfs_create_link+0xa8/0x200 [ 74.061367][ T1364] sysfs_do_create_link_sd+0x8a/0x120 [ 74.061398][ T1364] sysfs_create_link+0x6c/0x90 [ 74.061468][ T1364] module_add_driver+0x285/0x340 [ 74.061512][ T1364] bus_add_driver+0x3ea/0x730 [ 74.061558][ T1364] driver_register+0x2b7/0x3c0 [ 74.061599][ T1364] usb_gadget_register_driver_owner+0xfc/0x270 [ 74.061631][ T1364] raw_ioctl+0x144c/0x37a0 [ 74.061670][ T1364] ? __cfi_raw_ioctl+0x10/0x10 [ 74.061693][ T1364] ? selinux_file_ioctl+0x732/0x1480 [ 74.061732][ T1364] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 74.061764][ T1364] ? __fget_files+0x2bc/0x330 [ 74.061797][ T1364] ? bpf_lsm_file_ioctl+0xd/0x20 [ 74.061830][ T1364] ? security_file_ioctl+0x3e/0x110 [ 74.061854][ T1364] ? __cfi_raw_ioctl+0x10/0x10 [ 74.061875][ T1364] __se_sys_ioctl+0x123/0x1b0 [ 74.061912][ T1364] __x64_sys_ioctl+0x7f/0xa0 [ 74.061943][ T1364] x64_sys_call+0x1878/0x2ee0 [ 74.061967][ T1364] do_syscall_64+0x57/0xf0 [ 74.061991][ T1364] ? clear_bhb_loop+0x50/0xa0 [ 74.062023][ T1364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.062053][ T1364] RIP: 0033:0x7f8d1ed9ddeb [ 74.062073][ T1364] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 74.062095][ T1364] RSP: 002b:00007f8d1fbe3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.062122][ T1364] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f8d1ed9ddeb [ 74.062140][ T1364] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 74.062155][ T1364] RBP: 00007f8d1fbe4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 74.062172][ T1364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.062187][ T1364] R13: 0000200000000180 R14: 0000000000000005 R15: 0000000000000868 [ 74.062208][ T1364] [ 74.062258][ T1364] bus_add_driver: failed to create module links for raw-gadget.2 [ 74.370808][ T1364] UDC core: USB Raw Gadget: driver registration failed: -12 [ 74.378426][ T1364] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 74.398499][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:67:aa:50:eb:f2 [ 74.419615][ T9] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 74.474718][ T506] usb 1-1: USB disconnect, device number 10 [ 74.783886][ C1] read_bulk_callback: 23 callbacks suppressed [ 74.783914][ C1] usb 4-1: Rx status -71 [ 74.788223][ T9] usb 4-1: USB disconnect, device number 12 [ 74.790153][ C1] usb 4-1: eth1: intr status -71 [ 74.807297][ T150] usb 4-1: device reset failed [ 76.140764][ T506] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 76.280757][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 76.300745][ T506] usb 4-1: Using ep0 maxpacket: 32 [ 76.309510][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.330737][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.340534][ T506] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 76.370762][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.381110][ T506] usb 4-1: config 0 descriptor?? [ 76.399797][ T506] hub 4-1:0.0: USB hub found [ 76.450748][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 76.460898][ T45] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 76.469049][ T45] usb 1-1: config 0 has no interface number 0 [ 76.480739][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 76.491034][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 76.502687][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 76.520746][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.530762][ T45] usb 1-1: Product: syz [ 76.534985][ T45] usb 1-1: Manufacturer: syz [ 76.549806][ T45] usb 1-1: SerialNumber: syz [ 76.561506][ T45] usb 1-1: config 0 descriptor?? [ 76.566772][ T1402] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 76.580773][ T1402] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 76.589029][ T506] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 76.811025][ T1402] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 76.820900][ T1402] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 76.992597][ T506] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 77.011797][ T506] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 77.027591][ T1403] udevd[1403]: open /dev/null failed: No such file or directory [ 77.041837][ T45] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 77.340924][ T640] usb 4-1: USB disconnect, device number 13 [ 77.441959][ T45] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 77.462241][ T45] asix 1-1:0.34: probe with driver asix failed with error -71 [ 77.481730][ T45] usb 1-1: USB disconnect, device number 11 [ 77.850616][ T36] audit: type=1400 audit(2000000027.720:330): avc: denied { mount } for pid=1405 comm="syz.3.343" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.891300][ T36] audit: type=1400 audit(2000000027.770:331): avc: denied { unmount } for pid=1405 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.665768][ T1417] FAULT_INJECTION: forcing a failure. [ 79.665768][ T1417] name fail_futex, interval 1, probability 0, space 0, times 1 [ 79.678933][ T1417] CPU: 0 UID: 0 PID: 1417 Comm: syz.1.305 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 79.678980][ T1417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.678997][ T1417] Call Trace: [ 79.679005][ T1417] [ 79.679015][ T1417] __dump_stack+0x21/0x30 [ 79.679057][ T1417] dump_stack_lvl+0x140/0x1c0 [ 79.679092][ T1417] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.679129][ T1417] dump_stack+0x19/0x20 [ 79.679161][ T1417] should_fail_ex+0x3c2/0x510 [ 79.679193][ T1417] should_fail+0xf/0x20 [ 79.679220][ T1417] get_futex_key+0x178/0x940 [ 79.679253][ T1417] ? __cfi_get_futex_key+0x10/0x10 [ 79.679286][ T1417] futex_wake+0x150/0x950 [ 79.679308][ T1417] ? __kasan_slab_free+0x6a/0x80 [ 79.679341][ T1417] ? __cfi_futex_wake+0x10/0x10 [ 79.679365][ T1417] ? probes_write+0x38/0x50 [ 79.679397][ T1417] ? vfs_write+0xbcf/0xfd0 [ 79.679424][ T1417] do_futex+0x37d/0x510 [ 79.679457][ T1417] ? __cfi_do_futex+0x10/0x10 [ 79.679489][ T1417] ? mutex_unlock+0x90/0x240 [ 79.679520][ T1417] __se_sys_futex+0x13c/0x320 [ 79.679554][ T1417] ? fput+0x1a4/0x230 [ 79.679587][ T1417] ? __x64_sys_futex+0x110/0x110 [ 79.679620][ T1417] ? __cfi_ksys_write+0x10/0x10 [ 79.679648][ T1417] __x64_sys_futex+0xe9/0x110 [ 79.679682][ T1417] x64_sys_call+0x227f/0x2ee0 [ 79.679704][ T1417] do_syscall_64+0x57/0xf0 [ 79.679728][ T1417] ? clear_bhb_loop+0x50/0xa0 [ 79.679760][ T1417] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.679790][ T1417] RIP: 0033:0x7f2f0579e159 [ 79.679810][ T1417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.679832][ T1417] RSP: 002b:00007f2f067400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.679858][ T1417] RAX: ffffffffffffffda RBX: 00007f2f05a25fa8 RCX: 00007f2f0579e159 [ 79.679877][ T1417] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f05a25fac [ 79.679893][ T1417] RBP: 00007f2f05a25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 79.679910][ T1417] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 79.679925][ T1417] R13: 00007f2f05a26038 R14: 00007ffc84280080 R15: 00007ffc84280168 [ 79.679953][ T1417] [ 80.160759][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 80.341810][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.357711][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.372152][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 80.382970][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.392742][ T9] usb 2-1: config 0 descriptor?? [ 80.522674][ T1432] FAULT_INJECTION: forcing a failure. [ 80.522674][ T1432] name failslab, interval 1, probability 0, space 0, times 0 [ 80.538725][ T1432] CPU: 0 UID: 0 PID: 1432 Comm: syz.0.354 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 80.538763][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.538780][ T1432] Call Trace: [ 80.538788][ T1432] [ 80.538797][ T1432] __dump_stack+0x21/0x30 [ 80.538838][ T1432] dump_stack_lvl+0x140/0x1c0 [ 80.538872][ T1432] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.538906][ T1432] ? __kasan_kmalloc+0x96/0xb0 [ 80.538937][ T1432] ? __kmalloc_node_noprof+0x252/0x500 [ 80.538966][ T1432] dump_stack+0x19/0x20 [ 80.538998][ T1432] should_fail_ex+0x3c2/0x510 [ 80.539030][ T1432] should_failslab+0xac/0x100 [ 80.539059][ T1432] __kmalloc_cache_noprof+0x41/0x470 [ 80.539085][ T1432] ? __asan_memset+0x39/0x50 [ 80.539109][ T1432] ? alloc_netdev_mqs+0xc3d/0x13d0 [ 80.539137][ T1432] ? __xdp_rxq_info_reg+0x16c/0x2e0 [ 80.539175][ T1432] alloc_netdev_mqs+0xc3d/0x13d0 [ 80.539205][ T1432] ip6gre_tunnel_locate+0x23d/0x6b0 [ 80.539229][ T1432] ? ip6gre_tnl_link_config+0x240/0x240 [ 80.539253][ T1432] ? selinux_capable+0x38/0x50 [ 80.539287][ T1432] ? ip6gre_changelink_common+0x4a0/0x4a0 [ 80.539311][ T1432] ? ip6gre_tnl_parm_from_user+0x21d/0x420 [ 80.539347][ T1432] ip6gre_tunnel_siocdevprivate+0x542/0x870 [ 80.539373][ T1432] ? __cfi_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 80.539402][ T1432] ? full_name_hash+0xa1/0xf0 [ 80.539432][ T1432] dev_ifsioc+0x951/0xc10 [ 80.539463][ T1432] dev_ioctl+0xa62/0x1000 [ 80.539494][ T1432] sock_ioctl+0x74e/0x7e0 [ 80.539516][ T1432] ? __cfi_sock_ioctl+0x10/0x10 [ 80.539539][ T1432] ? __fget_files+0x2bc/0x330 [ 80.539569][ T1432] ? bpf_lsm_file_ioctl+0xd/0x20 [ 80.539600][ T1432] ? security_file_ioctl+0x3e/0x110 [ 80.539623][ T1432] ? __cfi_sock_ioctl+0x10/0x10 [ 80.539646][ T1432] __se_sys_ioctl+0x123/0x1b0 [ 80.539677][ T1432] __x64_sys_ioctl+0x7f/0xa0 [ 80.539707][ T1432] x64_sys_call+0x1878/0x2ee0 [ 80.539729][ T1432] do_syscall_64+0x57/0xf0 [ 80.539752][ T1432] ? clear_bhb_loop+0x50/0xa0 [ 80.539784][ T1432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.539814][ T1432] RIP: 0033:0x7f8d1ed9e159 [ 80.539834][ T1432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.539856][ T1432] RSP: 002b:00007f8d1fbe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.539883][ T1432] RAX: ffffffffffffffda RBX: 00007f8d1f025fa0 RCX: 00007f8d1ed9e159 [ 80.539903][ T1432] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000006 [ 80.539919][ T1432] RBP: 00007f8d1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 80.539935][ T1432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.539950][ T1432] R13: 00007f8d1f026038 R14: 00007f8d1f025fa0 R15: 00007ffcf659b868 [ 80.539971][ T1432] [ 80.701955][ T1423] FAULT_INJECTION: forcing a failure. [ 80.701955][ T1423] name failslab, interval 1, probability 0, space 0, times 0 [ 80.834849][ T1423] CPU: 1 UID: 0 PID: 1423 Comm: syz.1.348 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 80.834890][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.834907][ T1423] Call Trace: [ 80.834914][ T1423] [ 80.834925][ T1423] __dump_stack+0x21/0x30 [ 80.834966][ T1423] dump_stack_lvl+0x140/0x1c0 [ 80.835000][ T1423] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.835037][ T1423] dump_stack+0x19/0x20 [ 80.835068][ T1423] should_fail_ex+0x3c2/0x510 [ 80.835098][ T1423] should_failslab+0xac/0x100 [ 80.835129][ T1423] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 80.835156][ T1423] ? widen_string+0x41/0x2e0 [ 80.835179][ T1423] ? kstrdup_const+0x45/0x60 [ 80.835203][ T1423] kstrdup+0x4d/0x130 [ 80.835221][ T1423] ? kstrdup_const+0x3a/0x60 [ 80.835242][ T1423] kstrdup_const+0x45/0x60 [ 80.835263][ T1423] __kernfs_new_node+0xaa/0x740 [ 80.835296][ T1423] ? kernfs_new_node+0x280/0x280 [ 80.835325][ T1423] ? kvasprintf+0x126/0x260 [ 80.835349][ T1423] ? __cfi_down_write+0x10/0x10 [ 80.835380][ T1423] ? __cfi_kvasprintf+0x10/0x10 [ 80.835404][ T1423] ? __kasan_check_write+0x18/0x20 [ 80.835429][ T1423] ? up_write+0x66/0x280 [ 80.835464][ T1423] kernfs_new_node+0x154/0x280 [ 80.835501][ T1423] kernfs_create_link+0xa8/0x200 [ 80.835524][ T1423] sysfs_do_create_link_sd+0x8a/0x120 [ 80.835551][ T1423] sysfs_create_link+0x6c/0x90 [ 80.835577][ T1423] module_add_driver+0x285/0x340 [ 80.835607][ T1423] bus_add_driver+0x3ea/0x730 [ 80.835639][ T1423] driver_register+0x2b7/0x3c0 [ 80.835665][ T1423] usb_gadget_register_driver_owner+0xfc/0x270 [ 80.835704][ T1423] raw_ioctl+0x144c/0x37a0 [ 80.835729][ T1423] ? __cfi_raw_ioctl+0x10/0x10 [ 80.835751][ T1423] ? selinux_file_ioctl+0x732/0x1480 [ 80.835777][ T1423] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 80.835808][ T1423] ? __fget_files+0x2bc/0x330 [ 80.835839][ T1423] ? bpf_lsm_file_ioctl+0xd/0x20 [ 80.835869][ T1423] ? security_file_ioctl+0x3e/0x110 [ 80.835893][ T1423] ? __cfi_raw_ioctl+0x10/0x10 [ 80.835914][ T1423] __se_sys_ioctl+0x123/0x1b0 [ 80.835943][ T1423] __x64_sys_ioctl+0x7f/0xa0 [ 80.835971][ T1423] x64_sys_call+0x1878/0x2ee0 [ 80.835993][ T1423] do_syscall_64+0x57/0xf0 [ 80.836016][ T1423] ? clear_bhb_loop+0x50/0xa0 [ 80.836047][ T1423] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.836077][ T1423] RIP: 0033:0x7f2f0579ddeb [ 80.836098][ T1423] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 80.836119][ T1423] RSP: 002b:00007f2f0673df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.836145][ T1423] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f2f0579ddeb [ 80.836161][ T1423] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 80.836176][ T1423] RBP: 00007f2f0673efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 80.836193][ T1423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.836207][ T1423] R13: 0000200000000180 R14: 0000000000000005 R15: 0000000000000868 [ 80.836226][ T1423] [ 80.836258][ T1423] bus_add_driver: failed to create module links for raw-gadget.1 [ 81.158610][ T1423] UDC core: USB Raw Gadget: driver registration failed: -12 [ 81.167020][ T1423] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 81.197863][ T506] usb 2-1: USB disconnect, device number 9 [ 81.337632][ T36] audit: type=1400 audit(2000000031.210:332): avc: denied { read } for pid=1446 comm="syz.0.360" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.366147][ T36] audit: type=1400 audit(2000000031.240:333): avc: denied { open } for pid=1446 comm="syz.0.360" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.610808][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 81.760742][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 81.771749][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.790293][ T9] usb 1-1: config 179 has no interface number 0 [ 81.796883][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 81.818414][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 81.850114][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.866535][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 81.878530][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 81.891956][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 81.901050][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.914666][ T1447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.328736][ T640] usb 1-1: USB disconnect, device number 12 [ 82.334775][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 82.334817][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 82.756712][ T1472] netlink: 'syz.3.368': attribute type 12 has an invalid length. [ 82.780712][ T36] audit: type=1400 audit(2000000032.650:334): avc: denied { sys_nice } for pid=1471 comm="syz.3.368" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 82.791185][ T1472] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 83.425613][ T1480] FAULT_INJECTION: forcing a failure. [ 83.425613][ T1480] name failslab, interval 1, probability 0, space 0, times 0 [ 83.453493][ T1480] CPU: 1 UID: 0 PID: 1480 Comm: syz.0.371 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 83.453533][ T1480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.453548][ T1480] Call Trace: [ 83.453556][ T1480] [ 83.453583][ T1480] __dump_stack+0x21/0x30 [ 83.453625][ T1480] dump_stack_lvl+0x140/0x1c0 [ 83.453660][ T1480] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.453697][ T1480] dump_stack+0x19/0x20 [ 83.453730][ T1480] should_fail_ex+0x3c2/0x510 [ 83.453761][ T1480] should_failslab+0xac/0x100 [ 83.453794][ T1480] kmem_cache_alloc_noprof+0x42/0x410 [ 83.453820][ T1480] ? security_inode_alloc+0x51/0x230 [ 83.453854][ T1480] security_inode_alloc+0x51/0x230 [ 83.453887][ T1480] inode_init_always_gfp+0x756/0x9e0 [ 83.453919][ T1480] ? __cfi_sock_alloc_inode+0x10/0x10 [ 83.453946][ T1480] alloc_inode+0xc5/0x270 [ 83.453977][ T1480] ? bpf_lsm_socket_create+0xd/0x20 [ 83.454005][ T1480] new_inode_pseudo+0x19/0x40 [ 83.454037][ T1480] __sock_create+0x130/0x810 [ 83.454066][ T1480] __sys_socket+0xe1/0x1c0 [ 83.454095][ T1480] __x64_sys_socket+0x7e/0x90 [ 83.454124][ T1480] x64_sys_call+0x2608/0x2ee0 [ 83.454147][ T1480] do_syscall_64+0x57/0xf0 [ 83.454170][ T1480] ? clear_bhb_loop+0x50/0xa0 [ 83.454203][ T1480] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.454233][ T1480] RIP: 0033:0x7f8d1ed9e159 [ 83.454254][ T1480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.454276][ T1480] RSP: 002b:00007f8d1fbe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 83.454303][ T1480] RAX: ffffffffffffffda RBX: 00007f8d1f025fa0 RCX: 00007f8d1ed9e159 [ 83.454322][ T1480] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 83.454336][ T1480] RBP: 00007f8d1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 83.454351][ T1480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.454367][ T1480] R13: 00007f8d1f026038 R14: 00007f8d1f025fa0 R15: 00007ffcf659b868 [ 83.454388][ T1480] [ 83.454414][ T1480] socket: no more sockets [ 83.770183][ T36] audit: type=1326 audit(2000000033.640:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1483 comm="syz.0.372" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d1ed9e159 code=0x0 [ 83.838446][ T1490] Bluetooth: hci0: sending frame failed (-49) [ 83.844732][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 85.178440][ T1508] overlayfs: statfs failed on './file0' [ 85.612007][ T1516] »»»»»»: renamed from vlan0 (while UP) [ 85.675330][ T36] audit: type=1400 audit(2000000035.550:336): avc: denied { map } for pid=1519 comm="syz.0.383" path="pipe:[2863]" dev="pipefs" ino=2863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 85.876499][ T1526] Zero length message leads to an empty skb [ 85.936043][ T1526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.158949][ T36] audit: type=1400 audit(2000000036.030:337): avc: denied { cmd } for pid=1534 comm="iou-wrk-1535" path="socket:[20803]" dev="sockfs" ino=20803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.050789][ T36] audit: type=1326 audit(2000000037.920:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 88.120768][ T36] audit: type=1326 audit(2000000037.920:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 88.197901][ T36] audit: type=1326 audit(2000000037.920:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 88.305547][ T1591] kernel profiling enabled (shift: 23) [ 88.941094][ T36] audit: type=1326 audit(2000000037.920:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 88.967360][ T36] audit: type=1326 audit(2000000037.920:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 88.992599][ T36] audit: type=1326 audit(2000000037.920:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 88.997114][ T1607] FAULT_INJECTION: forcing a failure. [ 88.997114][ T1607] name failslab, interval 1, probability 0, space 0, times 0 [ 89.017694][ T36] audit: type=1326 audit(2000000037.920:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 89.055492][ T36] audit: type=1326 audit(2000000037.920:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 89.080678][ T36] audit: type=1326 audit(2000000037.920:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 89.105909][ T36] audit: type=1326 audit(2000000037.920:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1582 comm="syz.3.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4be459e159 code=0x7ffc0000 [ 89.121608][ T1607] CPU: 1 UID: 0 PID: 1607 Comm: syz.1.410 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 89.121717][ T1607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.121764][ T1607] Call Trace: [ 89.121784][ T1607] [ 89.121806][ T1607] __dump_stack+0x21/0x30 [ 89.121912][ T1607] dump_stack_lvl+0x140/0x1c0 [ 89.122005][ T1607] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.122086][ T1607] ? vfs_mkdir+0x591/0x810 [ 89.122183][ T1607] dump_stack+0x19/0x20 [ 89.122263][ T1607] should_fail_ex+0x3c2/0x510 [ 89.122342][ T1607] should_failslab+0xac/0x100 [ 89.122420][ T1607] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 89.122510][ T1607] ? kstrdup_const+0x45/0x60 [ 89.122569][ T1607] kstrdup+0x4d/0x130 [ 89.122618][ T1607] ? kstrdup_const+0x3a/0x60 [ 89.122670][ T1607] kstrdup_const+0x45/0x60 [ 89.122750][ T1607] __kernfs_new_node+0xaa/0x740 [ 89.122858][ T1607] ? kernfs_new_node+0x280/0x280 [ 89.122944][ T1607] ? snprintf+0xe9/0x140 [ 89.122998][ T1607] kernfs_new_node+0x154/0x280 [ 89.123077][ T1607] __kernfs_create_file+0x52/0x280 [ 89.123169][ T1607] cgroup_addrm_files+0x775/0xac0 [ 89.123265][ T1607] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 89.123354][ T1607] ? delete_node+0x3df/0xa60 [ 89.123423][ T1607] ? __radix_tree_replace+0x27c/0x310 [ 89.123492][ T1607] ? __cfi_idr_replace+0x10/0x10 [ 89.123581][ T1607] ? __kasan_check_write+0x18/0x20 [ 89.123654][ T1607] css_populate_dir+0x12d/0x3d0 [ 89.123720][ T1607] cgroup_apply_control_enable+0x62f/0xce0 [ 89.123812][ T1607] cgroup_mkdir+0x1274/0x1600 [ 89.123891][ T1607] ? __cfi_cgroup_mkdir+0x10/0x10 [ 89.123966][ T1607] kernfs_iop_mkdir+0x1be/0x2d0 [ 89.124051][ T1607] vfs_mkdir+0x591/0x810 [ 89.124163][ T1607] do_mkdirat+0x240/0x530 [ 89.124260][ T1607] ? __cfi_do_mkdirat+0x10/0x10 [ 89.124345][ T1607] ? __kasan_check_write+0x18/0x20 [ 89.124409][ T1607] ? getname_flags+0x203/0x6b0 [ 89.124479][ T1607] ? __kasan_check_write+0x18/0x20 [ 89.124544][ T1607] __x64_sys_mkdirat+0x8b/0xa0 [ 89.124628][ T1607] x64_sys_call+0x2ba8/0x2ee0 [ 89.124678][ T1607] do_syscall_64+0x57/0xf0 [ 89.124735][ T1607] ? clear_bhb_loop+0x50/0xa0 [ 89.124811][ T1607] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.124887][ T1607] RIP: 0033:0x7f2f0579e159 [ 89.124935][ T1607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.124995][ T1607] RSP: 002b:00007f2f06740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 89.125055][ T1607] RAX: ffffffffffffffda RBX: 00007f2f05a25fa0 RCX: 00007f2f0579e159 [ 89.125102][ T1607] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 89.125149][ T1607] RBP: 00007f2f0583506b R08: 0000000000000000 R09: 0000000000000000 [ 89.125187][ T1607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.125244][ T1607] R13: 00007f2f05a26038 R14: 00007f2f05a25fa0 R15: 00007ffc84280168 [ 89.125288][ T1607] [ 89.125317][ T1607] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 89.432565][ T452] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 89.590763][ T452] usb 1-1: Using ep0 maxpacket: 16 [ 89.616738][ T452] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.640732][ T452] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.670591][ T452] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.700570][ T452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.716856][ T452] usb 1-1: Product: syz [ 89.730668][ T452] usb 1-1: Manufacturer: syz [ 89.735499][ T452] usb 1-1: SerialNumber: syz [ 89.955735][ T452] usb 1-1: 0:2 : does not exist [ 89.966574][ T452] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 89.988099][ T452] usb 1-1: USB disconnect, device number 13 [ 90.014236][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.340870][ T506] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 90.501891][ T506] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 90.513239][ T506] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.526168][ T506] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.532821][ T506] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 90.542003][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.551227][ T506] usb 4-1: config 0 descriptor?? [ 90.960594][ T506] cherry 0003:046A:0027.0006: invalid report_count 27269 [ 90.967770][ T506] cherry 0003:046A:0027.0006: item 0 2 1 9 parsing failed [ 90.975172][ T506] cherry 0003:046A:0027.0006: probe with driver cherry failed with error -22 [ 91.166977][ T452] usb 4-1: USB disconnect, device number 14 [ 91.296440][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.350819][ T1490] Bluetooth: hci0: command 0x1003 tx timeout [ 93.350815][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.430779][ T506] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 95.470769][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 95.580760][ T506] usb 4-1: Using ep0 maxpacket: 16 [ 95.601532][ T506] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.611816][ T506] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.622466][ T506] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.631663][ T506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.639776][ T506] usb 4-1: Product: syz [ 95.644019][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 95.649442][ T506] usb 4-1: Manufacturer: syz [ 95.654451][ T506] usb 4-1: SerialNumber: syz [ 95.659529][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 95.672053][ T31] usb 1-1: config 0 has no interface number 0 [ 95.679718][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 95.689123][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.697326][ T31] usb 1-1: Product: syz [ 95.701700][ T31] usb 1-1: Manufacturer: syz [ 95.706343][ T31] usb 1-1: SerialNumber: syz [ 95.715073][ T31] usb 1-1: config 0 descriptor?? [ 95.722835][ T31] smsc95xx v2.0.0 [ 95.871136][ T506] usb 4-1: 0:2 : does not exist [ 95.881636][ T506] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 95.894199][ T506] usb 4-1: USB disconnect, device number 15 [ 95.904637][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.123677][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 96.134445][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.748927][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 97.759907][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 97.769366][ T31] usb 1-1: USB disconnect, device number 14 [ 98.900291][ T1717] ./dev/sda1: Can't lookup blockdev [ 100.435391][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 100.435410][ T36] audit: type=1400 audit(2000000050.310:355): avc: denied { name_bind } for pid=1729 comm="syz.1.446" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 100.571176][ T1743] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 100.585273][ T1743] udc dummy_udc.0: failed to start g1: -19 [ 100.596585][ T1743] UDC core: g1: couldn't find an available UDC or it's busy [ 100.955789][ T1731] syz.0.445 (1731): drop_caches: 3 [ 104.190801][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 104.341635][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 104.350199][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.361621][ T10] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 104.370730][ T10] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 104.379073][ T10] usb 1-1: Product: syz [ 104.383276][ T10] usb 1-1: Manufacturer: syz [ 104.390181][ T10] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 104.590264][ T10] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 104.601405][ T10] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 104.610263][ T10] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 104.620472][ T10] usb 1-1: USB disconnect, device number 15 [ 105.879227][ T36] audit: type=1400 audit(2000000055.750:356): avc: denied { execute } for pid=1795 comm="syz.3.471" path="/144/cpuacct.usage_percpu" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.703183][ T1803] FAULT_INJECTION: forcing a failure. [ 107.703183][ T1803] name failslab, interval 1, probability 0, space 0, times 0 [ 107.725161][ T1807] ./dev/sda1: Can't lookup blockdev [ 107.730841][ T1803] CPU: 0 UID: 0 PID: 1803 Comm: syz.3.474 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 107.730886][ T1803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.730903][ T1803] Call Trace: [ 107.730910][ T1803] [ 107.730919][ T1803] __dump_stack+0x21/0x30 [ 107.730960][ T1803] dump_stack_lvl+0x140/0x1c0 [ 107.730994][ T1803] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.731029][ T1803] dump_stack+0x19/0x20 [ 107.731060][ T1803] should_fail_ex+0x3c2/0x510 [ 107.731089][ T1803] should_failslab+0xac/0x100 [ 107.731120][ T1803] __kmalloc_cache_noprof+0x41/0x470 [ 107.731147][ T1803] ? x509_cert_parse+0x18c/0xbd0 [ 107.731185][ T1803] x509_cert_parse+0x18c/0xbd0 [ 107.731222][ T1803] x509_key_preparse+0x6a/0x880 [ 107.731244][ T1803] ? __cfi_down_read+0x10/0x10 [ 107.731277][ T1803] asymmetric_key_preparse+0xb3/0x100 [ 107.731309][ T1803] __key_create_or_update+0x433/0xa90 [ 107.731333][ T1803] ? security_key_permission+0x3d/0x100 [ 107.731359][ T1803] ? key_create_or_update+0x70/0x70 [ 107.731391][ T1803] ? __kasan_kmalloc+0x96/0xb0 [ 107.731425][ T1803] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 107.731462][ T1803] key_create_or_update+0x47/0x70 [ 107.731484][ T1803] __se_sys_add_key+0x355/0x4b0 [ 107.731513][ T1803] ? __x64_sys_add_key+0xf0/0xf0 [ 107.731541][ T1803] ? __kasan_check_write+0x18/0x20 [ 107.731564][ T1803] ? fpregs_restore_userregs+0x11c/0x260 [ 107.731592][ T1803] __x64_sys_add_key+0xc3/0xf0 [ 107.731617][ T1803] x64_sys_call+0x195f/0x2ee0 [ 107.731639][ T1803] do_syscall_64+0x57/0xf0 [ 107.731662][ T1803] ? clear_bhb_loop+0x50/0xa0 [ 107.731692][ T1803] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.731722][ T1803] RIP: 0033:0x7f4be459e159 [ 107.731741][ T1803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.731762][ T1803] RSP: 002b:00007f4be54c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 107.731788][ T1803] RAX: ffffffffffffffda RBX: 00007f4be4825fa0 RCX: 00007f4be459e159 [ 107.731807][ T1803] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 107.731823][ T1803] RBP: 00007f4be463506b R08: ffffffffffffffff R09: 0000000000000000 [ 107.731839][ T1803] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 107.731854][ T1803] R13: 00007f4be4826038 R14: 00007f4be4825fa0 R15: 00007ffc7683aff8 [ 107.731886][ T1803] [ 107.734543][ T36] audit: type=1400 audit(2000000057.610:357): avc: denied { remount } for pid=1806 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.260899][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 108.413187][ T31] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 108.422344][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.430563][ T31] usb 1-1: Product: syz [ 108.434798][ T31] usb 1-1: Manufacturer: syz [ 108.995573][ T31] scsi host1: uas [ 109.000711][ C0] usb 1-1: stat urb: no pending cmd for uas-tag 8 [ 109.209594][ T31] usb 1-1: USB disconnect, device number 16 [ 109.209593][ C0] usb 1-1: cmd cmplt err -71 [ 109.221653][ T31] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 109.229497][ T31] scsi 1:0:0:0: tag#16 CDB: opcode=0x12 12 00 00 00 24 00 [ 112.157257][ T36] audit: type=1400 audit(2000000062.030:358): avc: denied { append } for pid=1845 comm="syz.3.487" name="uprobe_events" dev="tracefs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 112.187729][ T36] audit: type=1400 audit(2000000062.060:359): avc: denied { setopt } for pid=1838 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.213579][ T36] audit: type=1400 audit(2000000062.060:360): avc: denied { write } for pid=1838 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.251093][ T1846] event trace: Could not enable event p [ 112.257835][ T1847] FAULT_INJECTION: forcing a failure. [ 112.257835][ T1847] name failslab, interval 1, probability 0, space 0, times 0 [ 112.270813][ T1847] CPU: 0 UID: 0 PID: 1847 Comm: syz.0.483 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 112.270845][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.270860][ T1847] Call Trace: [ 112.270867][ T1847] [ 112.270876][ T1847] __dump_stack+0x21/0x30 [ 112.270931][ T1847] dump_stack_lvl+0x140/0x1c0 [ 112.270965][ T1847] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.271002][ T1847] dump_stack+0x19/0x20 [ 112.271034][ T1847] should_fail_ex+0x3c2/0x510 [ 112.271072][ T1847] ? kvm_io_bus_register_dev+0x161/0x710 [ 112.271104][ T1847] should_failslab+0xac/0x100 [ 112.271135][ T1847] __kmalloc_noprof+0x69/0x510 [ 112.271161][ T1847] ? kvm_io_bus_register_dev+0x161/0x710 [ 112.271191][ T1847] ? mod_delayed_work_on+0x140/0x140 [ 112.271223][ T1847] kvm_io_bus_register_dev+0x161/0x710 [ 112.271252][ T1847] ? mutex_lock+0x97/0x1d0 [ 112.271283][ T1847] kvm_ioapic_init+0x84e/0xfb0 [ 112.271305][ T1847] kvm_arch_vm_ioctl+0x138b/0x16d0 [ 112.271332][ T1847] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 112.271360][ T1847] ? _raw_spin_unlock+0x45/0x60 [ 112.271382][ T1847] ? finish_task_switch+0x139/0x770 [ 112.271417][ T1847] ? __sched_text_start+0x10/0x10 [ 112.271442][ T1847] ? __kasan_check_write+0x18/0x20 [ 112.271466][ T1847] ? resched_curr+0x119/0x440 [ 112.271488][ T1847] ? __cfi_resched_curr+0x10/0x10 [ 112.271511][ T1847] ? preempt_schedule_common+0x2d/0x60 [ 112.271537][ T1847] ? preempt_schedule+0xc5/0xe0 [ 112.271563][ T1847] ? __asan_set_shadow_00+0x12/0x20 [ 112.271598][ T1847] ? do_vfs_ioctl+0x1824/0x2010 [ 112.271628][ T1847] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 112.271659][ T1847] ? preempt_schedule_thunk+0x1a/0x40 [ 112.271686][ T1847] ? try_to_wake_up+0x119e/0x1fd0 [ 112.271715][ T1847] kvm_vm_ioctl+0x82b/0xc40 [ 112.271749][ T1847] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 112.271781][ T1847] ? ioctl_has_perm+0x1bc/0x500 [ 112.271807][ T1847] ? __asan_memcpy+0x5a/0x80 [ 112.271830][ T1847] ? ioctl_has_perm+0x408/0x500 [ 112.271855][ T1847] ? has_cap_mac_admin+0xd0/0xd0 [ 112.271880][ T1847] ? proc_fail_nth_write+0x184/0x220 [ 112.271916][ T1847] ? selinux_file_ioctl+0x732/0x1480 [ 112.271941][ T1847] ? vfs_write+0xbcf/0xfd0 [ 112.271965][ T1847] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 112.271990][ T1847] ? do_futex+0x37d/0x510 [ 112.272023][ T1847] ? __cfi_do_futex+0x10/0x10 [ 112.272059][ T1847] ? mutex_unlock+0x90/0x240 [ 112.272092][ T1847] ? __fget_files+0x2bc/0x330 [ 112.272136][ T1847] ? bpf_lsm_file_ioctl+0xd/0x20 [ 112.272168][ T1847] ? security_file_ioctl+0x3e/0x110 [ 112.272192][ T1847] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 112.272226][ T1847] __se_sys_ioctl+0x123/0x1b0 [ 112.272257][ T1847] __x64_sys_ioctl+0x7f/0xa0 [ 112.272287][ T1847] x64_sys_call+0x1878/0x2ee0 [ 112.272310][ T1847] do_syscall_64+0x57/0xf0 [ 112.272333][ T1847] ? clear_bhb_loop+0x50/0xa0 [ 112.272364][ T1847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.272395][ T1847] RIP: 0033:0x7f8d1ed9e159 [ 112.272414][ T1847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.272436][ T1847] RSP: 002b:00007f8d1fbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.272461][ T1847] RAX: ffffffffffffffda RBX: 00007f8d1f026090 RCX: 00007f8d1ed9e159 [ 112.272479][ T1847] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000005 [ 112.272495][ T1847] RBP: 00007f8d1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 112.272511][ T1847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.272526][ T1847] R13: 00007f8d1f026128 R14: 00007f8d1f026090 R15: 00007ffcf659b868 [ 112.272547][ T1847] [ 112.705537][ T1862] FAULT_INJECTION: forcing a failure. [ 112.705537][ T1862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.728247][ T1862] CPU: 0 UID: 0 PID: 1862 Comm: syz.3.489 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 112.728282][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.728297][ T1862] Call Trace: [ 112.728305][ T1862] [ 112.728313][ T1862] __dump_stack+0x21/0x30 [ 112.728353][ T1862] dump_stack_lvl+0x140/0x1c0 [ 112.728388][ T1862] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.728424][ T1862] ? exc_page_fault+0x65/0xc0 [ 112.728459][ T1862] dump_stack+0x19/0x20 [ 112.728492][ T1862] should_fail_ex+0x3c2/0x510 [ 112.728523][ T1862] should_fail+0xf/0x20 [ 112.728552][ T1862] should_fail_usercopy+0x1e/0x30 [ 112.728585][ T1862] _copy_from_iter+0x3b6/0x1520 [ 112.728623][ T1862] ? __cfi__copy_from_iter+0x10/0x10 [ 112.728657][ T1862] ? folio_unlock+0x137/0x1b0 [ 112.728688][ T1862] ? pin_user_pages_remote+0x177/0x230 [ 112.728724][ T1862] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 112.728759][ T1862] ? gup_put_folio+0xde/0x170 [ 112.728790][ T1862] copy_page_from_iter+0x1e5/0x2a0 [ 112.728826][ T1862] ? __kasan_check_write+0x18/0x20 [ 112.728853][ T1862] process_vm_rw+0x88e/0xc70 [ 112.728886][ T1862] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 112.728928][ T1862] ? __se_sys_futex+0x13c/0x320 [ 112.728966][ T1862] ? __kasan_check_write+0x18/0x20 [ 112.728992][ T1862] __x64_sys_process_vm_writev+0xeb/0x100 [ 112.729025][ T1862] x64_sys_call+0x1ab/0x2ee0 [ 112.729048][ T1862] do_syscall_64+0x57/0xf0 [ 112.729080][ T1862] ? clear_bhb_loop+0x50/0xa0 [ 112.729112][ T1862] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.729142][ T1862] RIP: 0033:0x7f4be459e159 [ 112.729162][ T1862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.729184][ T1862] RSP: 002b:00007f4be54c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 112.729211][ T1862] RAX: ffffffffffffffda RBX: 00007f4be4825fa0 RCX: 00007f4be459e159 [ 112.729230][ T1862] RDX: 0000000000000053 RSI: 0000200000001c80 RDI: 000000000000019a [ 112.729247][ T1862] RBP: 00007f4be463506b R08: 0000000000000001 R09: 0000000000000000 [ 112.729267][ T1862] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000 [ 112.729284][ T1862] R13: 00007f4be4826038 R14: 00007f4be4825fa0 R15: 00007ffc7683aff8 [ 112.729306][ T1862] SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=401 state=3 status=67 (errno 9: Bad file descriptor) [ 115.180724][ T36] audit: type=1400 audit(2000000065.050:361): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1603]" dev="pipefs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 115.365866][ T378] bridge_slave_1: left allmulticast mode [ 115.371599][ T378] bridge_slave_1: left promiscuous mode [ 115.377283][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.384972][ T378] bridge_slave_0: left allmulticast mode [ 115.390639][ T378] bridge_slave_0: left promiscuous mode [ 115.396944][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.492302][ T378] tipc: Left network mode [ 115.497541][ T378] veth1_macvtap: left promiscuous mode [ 115.503096][ T378] veth0_vlan: left promiscuous mode [ 115.762557][ T378] bridge_slave_1: left allmulticast mode [ 115.768222][ T378] bridge_slave_1: left promiscuous mode [ 115.774003][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.781694][ T378] bridge_slave_0: left allmulticast mode [ 115.787367][ T378] bridge_slave_0: left promiscuous mode [ 115.793168][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.801070][ T378] bridge_slave_1: left allmulticast mode [ 115.806732][ T378] bridge_slave_1: left promiscuous mode [ 115.812387][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.819851][ T378] bridge_slave_0: left allmulticast mode [ 115.825635][ T378] bridge_slave_0: left promiscuous mode [ 115.831309][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.972961][ T378] tipc: Disabling bearer [ 115.978326][ T378] tipc: Left network mode [ 115.984361][ T378] veth1_macvtap: left promiscuous mode [ 115.989861][ T378] veth0_vlan: left promiscuous mode [ 115.995419][ T378] veth1_macvtap: left promiscuous mode [ 116.000967][ T378] veth0_vlan: left promiscuous mode