last executing test programs: 23.896243127s ago: executing program 3 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4c4fc4e6e3223649035442a47fccedbea15ad2fcd7e0cb1215da7e6012a7c9db8", 0x4f) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) 23.092214755s ago: executing program 3 (id=575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f00000021c0)=""/4120, 0x1018}], 0x1, 0x16, 0xfffffff9) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r3, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022abd7000ffdbcf25100000d4aadc14a4249770ff1f3d6df53c30edb96d638efa507b722e4decb283cec37dd4d66e476037108715f31bb97b805f068bfa5799a2baef15ebe687c49be200000000000066b6d0a460834160fbcd147a1e336a148a60a85bc5c3ddfc3c0e0b067fdb02db1162f2a5fa125cdf"], 0x14}, 0x1, 0x0, 0x0, 0x8882}, 0x8011) 23.047886367s ago: executing program 3 (id=578): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000780)={'wg2\x00', {0x2, 0x4e24, @empty}}) 22.99046575s ago: executing program 3 (id=579): r0 = socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) close_range(0xffffffffffffffff, r0, 0x2) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) getitimer(0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x54) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001e00ff0000007000fbdbdf25050000001600010085"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x0, 0x401}, {0x9, 0x2ba}], 0xee01}, 0x18, 0x1) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) r3 = syz_usb_connect(0x2, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) 21.47740784s ago: executing program 3 (id=589): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x480}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x3) write(r1, &(0x7f0000000000)='3', 0x4e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x884000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x7fff}}, {@cache_readahead}, {@uname={'uname', 0x3d, '/dev/ttynull\x00'}}], [{@hash}, {@subj_user={'subj_user', 0x3d, '/dev/ttynull\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0xa}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) 21.328136767s ago: executing program 3 (id=593): chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x38) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x1c, 0x2e, 0x31f, 0x0, 0x0, "", [@typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 21.27739977s ago: executing program 32 (id=593): chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x38) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x1c, 0x2e, 0x31f, 0x0, 0x0, "", [@typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 11.331997898s ago: executing program 0 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="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", 0xd3a}], 0x1}}], 0x1, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.443856159s ago: executing program 0 (id=702): r0 = socket(0x10, 0x3, 0x2001) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000410a00040000008000f4"], 0x20}}, 0x20048000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004da000/0x400000)=nil) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0xc33e, 0x2) getdents64(r4, 0xfffffffffffffffe, 0x29) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x2, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x4020aeb2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7, 0x5, 0x80080001, 0x8003}, 0x10) write(r5, &(0x7f0000000780)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 10.366053203s ago: executing program 0 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x400d4) 10.365743953s ago: executing program 0 (id=704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="352fabd7aff731daecb2781a0c8ae38c5102caaedc5595871524f911005d", 0x1e, 0x2c040081, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 10.347342034s ago: executing program 0 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x82000, 0x94) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x112) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100060000000000040005000000000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="100003000000000020"], 0x34, 0x1) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ftruncate(r4, 0x7) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r5, r5, 0x5) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "3374ae01801c00", "b50454d456dc49c5751afdcb7b83e0df51852236b03802a263af10ded39cb1fb", '\x00', "b6eff950d95e9b5f"}, 0x39) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r2, 0x0, 0x6f4000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "f978961221a4f287", "4df9507caebeac100282f8ba9b3a94c744bc290f9eae1cda12f3b40039854a4d", "289f0911", "65ae50dda48035bf"}, 0x38) mount$incfs(&(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 10.306006216s ago: executing program 0 (id=706): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x480}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x3) write(r1, &(0x7f0000000000)='3', 0x4e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x884000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x7fff}}, {@cache_readahead}, {@uname={'uname', 0x3d, '/dev/ttynull\x00'}}], [{@hash}, {@subj_user={'subj_user', 0x3d, '/dev/ttynull\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) 6.907994085s ago: executing program 2 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) 6.762261792s ago: executing program 2 (id=739): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r0 = syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x651}, @window={0x3, 0x2, 0x401}, @window={0x3, 0x5b, 0xff}, @timestamp, @timestamp], 0x8) recvfrom$inet(r1, &(0x7f0000000580)=""/4096, 0x1000, 0x10160, &(0x7f0000001580)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x2, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0xfb, 0x0, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xf4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x0, '\x00', 0x9}, {0x1, 0xa, 0x6}, {0xe, 0x0, 0x1, '\x00', 0xf7}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x7, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x9, 0x3, 0x4, '\x00', 0xfb}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0x36, '\x00', 0x95}]}}) 6.148397881s ago: executing program 2 (id=740): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000001084f9e17500000000000105002400010000107f6b15010914000cfe0300000009218100080122e30f090581030004"], 0x0) syz_usb_connect$midi(0x6, 0xca, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x1, 0x1, 0xd, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x4, [@midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x0, 0x3, [{0x7, 0x10}, {0x7f, 0x1}, {0x81, 0x8}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x6, 0x6, [{0x7, 0x2e}, {0x4, 0x60}, {0x2}, {0x1, 0x4}, {0xb, 0x8}, {0x9, 0xcc}], 0xd}], [{{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x10, 0x6, {0x14, 0x25, 0x1, 0x10, "f55ccad27c7259958f48eb24712e0050"}}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xb, 0x9, 0x2, {0xf, 0x25, 0x1, 0xb, "b378b195886d38640cdc10"}}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xc1, 0x4, 0x7, {0xd, 0x25, 0x1, 0x9, "d8c511bfebacccbfb4"}}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x9, 0x81, 0x4, {0xf, 0x25, 0x1, 0xb, "95db8e32de7df649c68ff6"}}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x10, 0xb, 0x9, {0x5, 0x25, 0x1, 0x1, "91"}}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x5, 0x7, 0x6, {0x5, 0x25, 0x1, 0x1, 'M'}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x0, 0x4, 0x40, 0x10, 0x5}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xf1, &(0x7f0000000300)=@string={0xf1, 0x3, "d14eba9f20752211e6cafa08e7a050adb2d153e16b13e1c014019d144711251885ac8a732ff41622f56c3660bb168f54612b96f3e08a62d9e5f39b7e3f87ee9c748895a21aa2ac204b40940681d88695aa9552c59e2edef40831abcaeb4b411413390c2e60b8a3927cf472c5c4f97a24832756768a08307f61ec90c566a7f1ed78063f554815255437fcb5997efb7ed51e385c78efcb3d633b9b90dbccb8d947d73a6fb53a869d52dbf42016355e2ece227df3b47d570ce38da168425ddc483de17621bba8f8b3efd500cd1e84a37696a93a232b76cb0dfc2dbdd5267e2f331ae78829b9f369dc1751ccb9cb25860e"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000580)=""/23, 0x17}], 0x2) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = eventfd2(0x9, 0xebb5e51226f05db6) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3, r1, 0x1}) open(&(0x7f0000000100)='./file0\x00', 0x34502, 0x79) 3.464408907s ago: executing program 1 (id=749): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x2, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0xfb, 0x0, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xf4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x0, '\x00', 0x9}, {0x1, 0xa, 0x6}, {0xe, 0x0, 0x1, '\x00', 0xf7}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x7, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x9, 0x3, 0x4, '\x00', 0xfb}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0x36, '\x00', 0x95}]}}) 3.454130198s ago: executing program 4 (id=750): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000840)={0x40, 0x5, 0x4, "9b0a8a38"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x40, 0x11, 0x4, {0x4, 0x21, "1463"}}, &(0x7f0000000140)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "324145bb1abee3c6395e160c950ad0879a6148b662793b7653eaf6d63b222272ac7f425acc3e6e7e266c84be9b9aa9037ab18437926520b600eab2866338e8aa20cd5fe93bcc76c9da3b0d13a74df7fed51bb35513931fb3977bf68cade92cbc0af1f0127aa6cb7ea174589f0dff03d3882b1689da3342d7b8db60d8def2070107af5be51e1457704c0e808933d528e2618cafcb525ecd6899552788f3c0d2c7be7486260de5d9e8f10618bf4b619500870b3a391b3ba34ad4eeb876a051c258cdeeb9be279fd596cbcf983910283435486536b7cea8259f5d31c261c82e5d7d925a8d4eb1c0ab"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0x9, 0x5c, "4bdbc7c00d4a76f9cb18afd57745dd38ace93d1b15c830f58a86b938837aa2a24c4283aa300fa2e774ba80b52a29d1a0af131886c42312e106c3dd7560f22c0a24b0aa7e6f1576022d37037d0b0902a2d81c3c125446cc156cec8510"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0xfffffffa}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "d4a7d2104efb8a908db712b0b71de06bf12f7037f430e4a2b05d0d0e326f023ee2ee569e9c9519ca9f10559c572510"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="201005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.309354325s ago: executing program 1 (id=751): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="352fabd7aff731daecb2781a0c8ae38c5102caaedc5595871524f911005de0", 0x1f, 0x2c040081, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.282307175s ago: executing program 1 (id=752): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x87d}], 0x1, 0x40000040, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4104, 0x1008}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f0000000080)=""/77, 0x4d}, {0x0}], 0x6}, 0x5e}], 0x1, 0x10160, 0x0) 3.267860136s ago: executing program 1 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) lsm_set_self_attr(0x64, &(0x7f0000001b00)={0x65, 0x698, 0x20}, 0x20, 0x0) (async) lsm_set_self_attr(0x64, &(0x7f0000001b00)={0x65, 0x698, 0x20}, 0x20, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020400020c0000000000deffffff0005000600330000000a004e2300000001fe8804000000000000000000000001010f0000e88c3ce7e758777d970200010000000000ff00000000000000030005000000000002004e23000000000000000000000000002042f44ce25c90293382ca74a474dea51cffa9b389623f2b7d95a8f03fdd81563a598cdf0472bf8549a5d55c47078645f3931a5c3c08218491283ace61356105ddb90ab595b01446b70e10c0f98ca6d22ba56881da39418cf1a3dffe905c1565893ae76b47a020dad8324856a0718c962da5ed83dd5d"], 0x60}, 0x1, 0x7}, 0x804) (async) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020400020c0000000000deffffff0005000600330000000a004e2300000001fe8804000000000000000000000001010f0000e88c3ce7e758777d970200010000000000ff00000000000000030005000000000002004e23000000000000000000000000002042f44ce25c90293382ca74a474dea51cffa9b389623f2b7d95a8f03fdd81563a598cdf0472bf8549a5d55c47078645f3931a5c3c08218491283ace61356105ddb90ab595b01446b70e10c0f98ca6d22ba56881da39418cf1a3dffe905c1565893ae76b47a020dad8324856a0718c962da5ed83dd5d"], 0x60}, 0x1, 0x7}, 0x804) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xb) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000180), 0x4) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f000037b000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6c0b, &(0x7f0000000040)={0x0, 0x1323, 0xc002, 0x6, 0x3c7}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x6c0b, &(0x7f0000000040)={0x0, 0x1323, 0xc002, 0x6, 0x3c7}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 3.072288205s ago: executing program 2 (id=754): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca00090506"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x40, 0x11, 0x4, {0x4, 0x21, "1463"}}, &(0x7f0000000140)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "324145bb1abee3c6395e160c950ad0879a6148b662793b7653eaf6d63b222272ac7f425acc3e6e7e266c84be9b9aa9037ab18437926520b600eab2866338e8aa20cd5fe93bcc76c9da3b0d13a74df7fed51bb35513931fb3977bf68cade92cbc0af1f0127aa6cb7ea174589f0dff03d3882b1689da3342d7b8db60d8def2070107af5be51e1457704c0e808933d528e2618cafcb525ecd6899552788f3c0d2c7be7486260de5d9e8f10618bf4b619500870b3a391b3ba34ad4eeb876a051c258cdeeb9be279fd596cbcf983910283435486536b7cea8259f5d31c261c82e5d7d925a8d4eb1c0ab"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0x9, 0x5c, "4bdbc7c00d4a76f9cb18afd57745dd38ace93d1b15c830f58a86b938837aa2a24c4283aa300fa2e774ba80b52a29d1a0af131886c42312e106c3dd7560f22c0a24b0aa7e6f1576022d37037d0b0902a2d81c3c125446cc156cec8510"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0xfffffffa}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "d4a7d2104efb8a908db712b0b71de06bf12f7037f430e4a2b05d0d0e326f023ee2ee569e9c9519ca9f10559c572510"}}) 2.673926695s ago: executing program 1 (id=755): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="1400000010000100"/18], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x5, 0x3c]}}) 2.327102331s ago: executing program 1 (id=756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f00000021c0)=""/4120, 0x1018}], 0x1, 0x16, 0xfffffff9) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r3, 0x0, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022abd7000ffdbcf25100000d4aadc14a4249770ff1f3d6df53c30edb96d638efa507b722e4decb283cec37dd4d66e476037108715f31bb97b805f068bfa5799a2baef15ebe687c49be200000000000066b6d0a460834160fbcd147a1e336a148a60a85bc5c3ddfc3c0e0b067fdb02db1162f2a5fa125cdf"], 0x14}, 0x1, 0x0, 0x0, 0x8882}, 0x8011) 2.264241683s ago: executing program 33 (id=756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f00000021c0)=""/4120, 0x1018}], 0x1, 0x16, 0xfffffff9) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r3, 0x0, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022abd7000ffdbcf25100000d4aadc14a4249770ff1f3d6df53c30edb96d638efa507b722e4decb283cec37dd4d66e476037108715f31bb97b805f068bfa5799a2baef15ebe687c49be200000000000066b6d0a460834160fbcd147a1e336a148a60a85bc5c3ddfc3c0e0b067fdb02db1162f2a5fa125cdf"], 0x14}, 0x1, 0x0, 0x0, 0x8882}, 0x8011) 1.728463109s ago: executing program 5 (id=757): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) syz_io_uring_setup(0x31cf, &(0x7f00000002c0)={0x0, 0xae31, 0x4, 0x80000004, 0x40040382}, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0xce7, 0x4) eventfd(0x7fff) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x0) linkat(r3, &(0x7f00000000c0)='./dev\x00', r3, &(0x7f0000000100)='./dev\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080027bd7000fbdbdf250f0000000c0006000240000002000000000000000000050005000f000c000600114266b6f9e3808e0c000600000000000000000008000300"/82, @ANYRES32=r7, @ANYBLOB="05000f00080000000c0006000100000001000000"], 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x4080) r8 = open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88) sendfile(r8, r3, 0x0, 0x1020000201000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x20) bind$can_raw(r3, &(0x7f0000000140), 0x10) 1.146019586s ago: executing program 4 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x6, 0x1000000000, 0x0, 0x200000000000043, 0x8000007, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x8000000009, 0x20000da9d, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.042428951s ago: executing program 4 (id=759): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x2, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0xfb, 0x0, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xf4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x0, '\x00', 0x9}, {0x1, 0xa, 0x6}, {0xe, 0x0, 0x1, '\x00', 0xf7}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x7, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x9, 0x3, 0x4, '\x00', 0xfb}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0x36, '\x00', 0x95}]}}) 915.604137ms ago: executing program 4 (id=760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="352fabd7aff731daecb2781a0c8ae38c5102caaedc5595871524f911005de0", 0x1f, 0x2c040081, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 874.221959ms ago: executing program 4 (id=761): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x87d}], 0x1, 0x40000040, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4104, 0x1008}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x5}, 0x5e}], 0x1, 0x10160, 0x0) 873.572739ms ago: executing program 4 (id=762): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x9da, 0xff, 0x0, 0x0, 0xfd}, 0x8) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2}) syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0xfb, 0xb0, 0xc, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c8"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x9, 0x9, 0x10}, {0x6, 0x24, 0x1a, 0x100, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0x3, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x0, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x35, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x8}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7, 0x16, 0x5, 0x8, 0x5}, 0xfa, &(0x7f0000000180)={0x5, 0xf, 0xfa, 0x5, [@generic={0x18, 0x10, 0x4, "26213a47bdcd92cc3522d57186227d022019e78a68"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xe, 0x3, 0xc34}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x0, 0xf, 0xffff, [0xff0000, 0xc000, 0x3f30, 0xd7, 0x30, 0xff00ff]}, @generic={0x9e, 0x10, 0x9, "cd965f578a6fbd136819b312738ed6571648d09ed880a1dfac51bb651e5875db05254649f47f7cec0ba70d115530212593409b409107b8fd80d075d20bf22c912e7252c7f339a5f133371c6635910743db5bb2fcf034d2ff4c59f87f75bba68f41c76c5a478c0d60f7df0f924f0d3cda7c02cfeb3425914b63d3043e11efc8c205bf789abff2c206d325785d477c9614524a7c76e36d462c2ffd12"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "75df7ebfa8641f9a0c308327089497a3"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}, {0xea, &(0x7f0000000340)=@string={0xea, 0x3, "9db171ce8de142c29d9c087c7f6f383c336d4573011b5319e13e6b96d5f61dc18cc6c1b8dcd0f954cb594aeddc925f04f1096eb592b8edfcd7ecf9ef7e45a12e394598ebad3598d3f43e46181f1ea04b9133c248dad7aab6c79923e904a3667eee8a45d65988f01a0d1cba88a23b2f38d456b4064bb5121b914f991c32bc0098875be243f9e75c16e855c570282377d46b12b183cd99a05deb09bcfbbd9fa68a0d8ac4f7da0d097cfad955be0d391fad13c32f9d3beaa092738f0551870e1070a8fcd1b8af9b40ebeb7f4a5b6707151e3d42594a01ff8564b1c288176d246754be0dfef26afb9f46"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x20, 0x6, 0x9, "78fb76791713d5179a"}, 0x0, 0x0, 0x0, 0x0}) unshare(0x0) 85.827806ms ago: executing program 2 (id=763): openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x2, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0xfb, 0x0, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xf4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x0, '\x00', 0x9}, {0x1, 0xa, 0x6}, {0xe, 0x0, 0x1, '\x00', 0xf7}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x7, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x9, 0x3, 0x4, '\x00', 0xfb}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0x36, '\x00', 0x95}]}}) 0s ago: executing program 2 (id=764): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r0 = syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x651}, @window={0x3, 0x2, 0x401}, @window={0x3, 0x5b, 0xff}, @timestamp, @timestamp], 0x8) recvfrom$inet(r1, &(0x7f0000000580)=""/4096, 0x1000, 0x10160, &(0x7f0000001580)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x2, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0xfb, 0x0, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xf4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x0, '\x00', 0x9}, {0x1, 0xa, 0x6}, {0xe, 0x0, 0x1, '\x00', 0xf7}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x7, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x9, 0x3, 0x4, '\x00', 0xfb}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0x36, '\x00', 0x95}]}}) kernel console output (not intermixed with test programs): c75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 69.558877][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 69.570316][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 69.637174][ T1345] wireguard: wg1: Could not create IPv4 socket [ 69.684066][ T10] usb 3-1: USB disconnect, device number 11 [ 69.816597][ T1357] ./dev/sda1: Can't lookup blockdev [ 69.910418][ T1365] wireguard: wg1: Could not create IPv4 socket [ 69.951405][ T1369] netlink: 'syz.1.367': attribute type 27 has an invalid length. [ 70.094354][ T1375] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 70.196495][ T1379] ./dev/sda1: Can't lookup blockdev [ 70.307781][ T1390] wireguard: wg1: Could not create IPv4 socket [ 70.401435][ T1397] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 70.565591][ T1399] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2822905896 (361331954688 ns) > initial count (78097839872 ns). Using initial count to start timer. [ 70.680791][ T1404] ./dev/sda1: Can't lookup blockdev [ 70.906830][ T1414] wireguard: wg1: Could not create IPv4 socket [ 70.944280][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 71.023579][ T1417] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 71.114250][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 71.121087][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.130145][ T45] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 71.138815][ T45] usb 2-1: config 0 has no interface number 0 [ 71.145262][ T45] usb 2-1: config 0 interface 148 has no altsetting 0 [ 71.153709][ T45] usb 2-1: New USB device found, idVendor=0408, idProduct=ea06, bcdDevice=3a.83 [ 71.168537][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.184271][ T45] usb 2-1: Product: syz [ 71.188605][ T45] usb 2-1: Manufacturer: syz [ 71.201169][ T45] usb 2-1: SerialNumber: syz [ 71.206858][ T45] usb 2-1: config 0 descriptor?? [ 71.225602][ T1419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2822905896 (361331954688 ns) > initial count (78097839872 ns). Using initial count to start timer. [ 71.417831][ T1434] wireguard: wg1: Could not create IPv4 socket [ 71.473752][ T312] usb 1-1: USB disconnect, device number 16 [ 71.554640][ T36] audit: type=1400 audit(1789815644.110:289): avc: denied { read append } for pid=1444 comm="syz.0.400" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.579489][ T36] audit: type=1400 audit(1789815644.110:290): avc: denied { open } for pid=1444 comm="syz.0.400" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.703087][ T45] usb 2-1: USB disconnect, device number 7 [ 72.076947][ T1457] wireguard: wg1: Could not create IPv4 socket [ 72.362868][ T1473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.411'. [ 72.436436][ T1478] wireguard: wg1: Could not create IPv4 socket [ 72.466694][ T1484] FAULT_INJECTION: forcing a failure. [ 72.466694][ T1484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.480188][ T1484] CPU: 0 UID: 0 PID: 1484 Comm: syz.2.416 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 72.480227][ T1484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.480240][ T1484] Call Trace: [ 72.480246][ T1484] [ 72.480254][ T1484] __dump_stack+0x21/0x30 [ 72.480290][ T1484] dump_stack_lvl+0x140/0x1c0 [ 72.480317][ T1484] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.480336][ T1484] ? kernel_text_address+0xa9/0xe0 [ 72.480353][ T1484] ? unwind_get_return_address+0x51/0x90 [ 72.480369][ T1484] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 72.480385][ T1484] dump_stack+0x19/0x20 [ 72.480400][ T1484] should_fail_ex+0x3c2/0x510 [ 72.480417][ T1484] should_fail+0xf/0x20 [ 72.480430][ T1484] should_fail_usercopy+0x1e/0x30 [ 72.480446][ T1484] _copy_from_user+0x20/0xa0 [ 72.480463][ T1484] ___sys_recvmsg+0x174/0x590 [ 72.480482][ T1484] ? kstrtoull+0x13b/0x1e0 [ 72.480495][ T1484] ? __sys_recvmsg+0x260/0x260 [ 72.480512][ T1484] ? kstrtouint_from_user+0x117/0x170 [ 72.480526][ T1484] ? __x64_sys_openat+0x13a/0x170 [ 72.480547][ T1484] do_recvmmsg+0x328/0x790 [ 72.480565][ T1484] ? __sys_recvmmsg+0x2a0/0x2a0 [ 72.480582][ T1484] ? __cfi_vfs_write+0x10/0x10 [ 72.480597][ T1484] ? fput+0x1a4/0x230 [ 72.480613][ T1484] __x64_sys_recvmmsg+0x199/0x250 [ 72.480633][ T1484] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 72.480650][ T1484] ? __kasan_check_read+0x15/0x20 [ 72.480664][ T1484] x64_sys_call+0x292c/0x2ee0 [ 72.480676][ T1484] do_syscall_64+0x57/0xf0 [ 72.480688][ T1484] ? clear_bhb_loop+0x50/0xa0 [ 72.480703][ T1484] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.480718][ T1484] RIP: 0033:0x7ffaacb9e159 [ 72.480730][ T1484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.480741][ T1484] RSP: 002b:00007ffaad9d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.480756][ T1484] RAX: ffffffffffffffda RBX: 00007ffaace25fa0 RCX: 00007ffaacb9e159 [ 72.480770][ T1484] RDX: 0000000000000001 RSI: 0000200000005280 RDI: 0000000000000003 [ 72.480779][ T1484] RBP: 00007ffaad9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 72.480787][ T1484] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 72.480795][ T1484] R13: 00007ffaace26038 R14: 00007ffaace25fa0 R15: 00007fff37a746f8 [ 72.480806][ T1484] [ 72.720182][ T852] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 72.885470][ T852] usb 1-1: Using ep0 maxpacket: 32 [ 72.891965][ T852] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.900684][ T852] usb 1-1: config 0 has no interface number 0 [ 72.911832][ T852] usb 1-1: config 0 interface 184 has no altsetting 0 [ 72.924999][ T852] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 72.934138][ T852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.942320][ T852] usb 1-1: Product: syz [ 72.946580][ T852] usb 1-1: Manufacturer: syz [ 72.951224][ T852] usb 1-1: SerialNumber: syz [ 72.957582][ T852] usb 1-1: config 0 descriptor?? [ 72.963303][ T852] smsc75xx v1.0.0 [ 72.976220][ T1502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1502 comm=syz.1.423 [ 72.979248][ T1501] wireguard: wg1: Could not create IPv4 socket [ 73.024987][ T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 73.102913][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 73.102934][ T36] audit: type=1400 audit(1789815645.650:297): avc: denied { listen } for pid=1509 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.184259][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 73.190285][ T1518] FAULT_INJECTION: forcing a failure. [ 73.190285][ T1518] name failslab, interval 1, probability 0, space 0, times 0 [ 73.203065][ T1518] CPU: 1 UID: 0 PID: 1518 Comm: syz.1.432 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 73.203096][ T1518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.203113][ T1518] Call Trace: [ 73.203120][ T1518] [ 73.203126][ T1518] __dump_stack+0x21/0x30 [ 73.203159][ T1518] dump_stack_lvl+0x140/0x1c0 [ 73.203185][ T1518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.203214][ T1518] ? kstrtouint_from_user+0x117/0x170 [ 73.203239][ T1518] dump_stack+0x19/0x20 [ 73.203267][ T1518] should_fail_ex+0x3c2/0x510 [ 73.203292][ T1518] ? kernfs_fop_write_iter+0x15e/0x510 [ 73.203322][ T1518] should_failslab+0xac/0x100 [ 73.203351][ T1518] __kmalloc_noprof+0x69/0x510 [ 73.203374][ T1518] ? kernfs_fop_write_iter+0x15e/0x510 [ 73.203404][ T1518] ? __kasan_check_write+0x18/0x20 [ 73.203426][ T1518] ? proc_fail_nth_write+0x184/0x220 [ 73.203458][ T1518] kernfs_fop_write_iter+0x15e/0x510 [ 73.203489][ T1518] vfs_write+0x75f/0xfd0 [ 73.203512][ T1518] ? __cfi_vfs_write+0x10/0x10 [ 73.203534][ T1518] ? __cfi_mutex_lock+0x10/0x10 [ 73.203560][ T1518] ksys_write+0x145/0x260 [ 73.203582][ T1518] ? xfd_validate_state+0x68/0x140 [ 73.203611][ T1518] ? __cfi_ksys_write+0x10/0x10 [ 73.203633][ T1518] ? __kasan_check_read+0x15/0x20 [ 73.203654][ T1518] __x64_sys_write+0x7f/0x90 [ 73.203677][ T1518] x64_sys_call+0x271c/0x2ee0 [ 73.203696][ T1518] do_syscall_64+0x57/0xf0 [ 73.203715][ T1518] ? clear_bhb_loop+0x50/0xa0 [ 73.203742][ T1518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.203766][ T1518] RIP: 0033:0x7fda5c19e159 [ 73.203784][ T1518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.203802][ T1518] RSP: 002b:00007fda5d130028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.203825][ T1518] RAX: ffffffffffffffda RBX: 00007fda5c425fa0 RCX: 00007fda5c19e159 [ 73.203841][ T1518] RDX: 000000000000001f RSI: 0000200000000080 RDI: 0000000000000005 [ 73.203855][ T1518] RBP: 00007fda5d130090 R08: 0000000000000000 R09: 0000000000000000 [ 73.203869][ T1518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.203882][ T1518] R13: 00007fda5c426038 R14: 00007fda5c425fa0 R15: 00007ffca3c87ad8 [ 73.203900][ T1518] [ 73.429921][ T852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 73.430639][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.441159][ T852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 73.450282][ T312] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 73.460817][ T852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 73.466712][ T312] usb 4-1: config 0 has no interface number 0 [ 73.477290][ T852] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 73.482973][ T312] usb 4-1: config 0 interface 148 has no altsetting 0 [ 73.499454][ T312] usb 4-1: New USB device found, idVendor=0408, idProduct=ea06, bcdDevice=3a.83 [ 73.508653][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.516901][ T312] usb 4-1: Product: syz [ 73.521245][ T312] usb 4-1: Manufacturer: syz [ 73.525884][ T312] usb 4-1: SerialNumber: syz [ 73.531188][ T312] usb 4-1: config 0 descriptor?? [ 73.594260][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 73.724250][ T45] usb 3-1: device descriptor read/64, error -71 [ 73.889814][ T312] usb 4-1: USB disconnect, device number 9 [ 73.974292][ T45] usb 3-1: device descriptor read/64, error -71 [ 74.214276][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 74.344298][ T45] usb 3-1: device descriptor read/64, error -71 [ 74.584309][ T45] usb 3-1: device descriptor read/64, error -71 [ 74.694279][ T312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 74.702076][ T45] usb usb3-port1: attempt power cycle [ 74.724287][ T769] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 74.854291][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 74.864257][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.872808][ T312] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 74.880679][ T312] usb 4-1: can't read configurations, error -71 [ 74.887976][ T769] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 74.896137][ T769] usb 2-1: config 0 has no interface number 0 [ 74.902332][ T769] usb 2-1: config 0 interface 41 has no altsetting 0 [ 74.910503][ T769] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 74.919607][ T769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.927687][ T769] usb 2-1: Product: syz [ 74.931865][ T769] usb 2-1: Manufacturer: syz [ 74.936469][ T769] usb 2-1: SerialNumber: syz [ 74.941715][ T769] usb 2-1: config 0 descriptor?? [ 75.044278][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 75.065318][ T45] usb 3-1: device descriptor read/8, error -71 [ 75.195291][ T45] usb 3-1: device descriptor read/8, error -71 [ 75.270780][ T852] usb 1-1: USB disconnect, device number 17 [ 75.437288][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 75.465234][ T45] usb 3-1: device descriptor read/8, error -71 [ 75.493352][ T36] audit: type=1400 audit(1789815648.040:298): avc: denied { write } for pid=10 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17935 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.595318][ T45] usb 3-1: device descriptor read/8, error -71 [ 75.704407][ T45] usb usb3-port1: unable to enumerate USB device [ 75.764256][ T852] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 75.924240][ T852] usb 1-1: Using ep0 maxpacket: 32 [ 75.930555][ T852] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 75.938959][ T852] usb 1-1: config 0 has no interface number 0 [ 75.945104][ T852] usb 1-1: config 0 interface 184 has no altsetting 0 [ 75.953253][ T852] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 75.962343][ T852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.970462][ T852] usb 1-1: Product: syz [ 75.974754][ T852] usb 1-1: Manufacturer: syz [ 75.979559][ T852] usb 1-1: SerialNumber: syz [ 75.985172][ T852] usb 1-1: config 0 descriptor?? [ 75.991067][ T852] smsc75xx v1.0.0 [ 76.193119][ T1559] FAULT_INJECTION: forcing a failure. [ 76.193119][ T1559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.206346][ T1559] CPU: 1 UID: 0 PID: 1559 Comm: syz.2.449 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 76.206382][ T1559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.206394][ T1559] Call Trace: [ 76.206402][ T1559] [ 76.206410][ T1559] __dump_stack+0x21/0x30 [ 76.206448][ T1559] dump_stack_lvl+0x140/0x1c0 [ 76.206476][ T1559] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.206514][ T1559] ? has_cap_mac_admin+0xd0/0xd0 [ 76.206534][ T1559] dump_stack+0x19/0x20 [ 76.206550][ T1559] should_fail_ex+0x3c2/0x510 [ 76.206566][ T1559] should_fail+0xf/0x20 [ 76.206579][ T1559] should_fail_usercopy+0x1e/0x30 [ 76.206601][ T1559] _copy_from_user+0x20/0xa0 [ 76.206630][ T1559] do_pagemap_cmd+0x13c/0xd10 [ 76.206659][ T1559] ? vfs_write+0xbcf/0xfd0 [ 76.206679][ T1559] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 76.206693][ T1559] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 76.206712][ T1559] ? __fget_files+0x2bc/0x330 [ 76.206727][ T1559] ? bpf_lsm_file_ioctl+0xd/0x20 [ 76.206749][ T1559] ? security_file_ioctl+0x3e/0x110 [ 76.206770][ T1559] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 76.206798][ T1559] __se_sys_ioctl+0x123/0x1b0 [ 76.206824][ T1559] __x64_sys_ioctl+0x7f/0xa0 [ 76.206848][ T1559] x64_sys_call+0x1878/0x2ee0 [ 76.206863][ T1559] do_syscall_64+0x57/0xf0 [ 76.206875][ T1559] ? clear_bhb_loop+0x50/0xa0 [ 76.206890][ T1559] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.206914][ T1559] RIP: 0033:0x7ffaacb9e159 [ 76.206932][ T1559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.206949][ T1559] RSP: 002b:00007ffaad9d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.206973][ T1559] RAX: ffffffffffffffda RBX: 00007ffaace25fa0 RCX: 00007ffaacb9e159 [ 76.206989][ T1559] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000003 [ 76.206998][ T1559] RBP: 00007ffaad9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 76.207009][ T1559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.207018][ T1559] R13: 00007ffaace26038 R14: 00007ffaace25fa0 R15: 00007fff37a746f8 [ 76.207029][ T1559] [ 76.444401][ T852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 76.473556][ T852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 76.483686][ T852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 76.494026][ T852] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 76.784287][ T852] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 76.914266][ T852] usb 4-1: device descriptor read/64, error -71 [ 77.164251][ T852] usb 4-1: device descriptor read/64, error -71 [ 77.404249][ T852] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 77.499005][ T769] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 77.512063][ T769] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 77.521603][ T769] usb 2-1: USB disconnect, device number 8 [ 77.534341][ T852] usb 4-1: device descriptor read/64, error -71 [ 77.774307][ T852] usb 4-1: device descriptor read/64, error -71 [ 77.884545][ T852] usb usb4-port1: attempt power cycle [ 77.944264][ T472] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 78.010060][ T1611] FAULT_INJECTION: forcing a failure. [ 78.010060][ T1611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.023503][ T1611] CPU: 0 UID: 0 PID: 1611 Comm: syz.2.472 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 78.023526][ T1611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.023534][ T1611] Call Trace: [ 78.023538][ T1611] [ 78.023544][ T1611] __dump_stack+0x21/0x30 [ 78.023565][ T1611] dump_stack_lvl+0x140/0x1c0 [ 78.023582][ T1611] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.023600][ T1611] ? check_stack_object+0x138/0x150 [ 78.023615][ T1611] dump_stack+0x19/0x20 [ 78.023630][ T1611] should_fail_ex+0x3c2/0x510 [ 78.023646][ T1611] should_fail+0xf/0x20 [ 78.023660][ T1611] should_fail_usercopy+0x1e/0x30 [ 78.023675][ T1611] _copy_to_user+0x24/0xa0 [ 78.023693][ T1611] simple_read_from_buffer+0xed/0x160 [ 78.023711][ T1611] proc_fail_nth_read+0x1aa/0x220 [ 78.023729][ T1611] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 78.023747][ T1611] ? bpf_lsm_file_permission+0xd/0x20 [ 78.023762][ T1611] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 78.023780][ T1611] vfs_read+0x288/0xc70 [ 78.023792][ T1611] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 78.023807][ T1611] ? __cfi_vfs_read+0x10/0x10 [ 78.023819][ T1611] ? __kasan_check_write+0x18/0x20 [ 78.023833][ T1611] ? mutex_lock+0x97/0x1d0 [ 78.023847][ T1611] ? __cfi_mutex_lock+0x10/0x10 [ 78.023866][ T1611] ksys_read+0x145/0x260 [ 78.023880][ T1611] ? __cfi_ksys_read+0x10/0x10 [ 78.023892][ T1611] ? __kasan_check_write+0x18/0x20 [ 78.023905][ T1611] ? fput+0x1a4/0x230 [ 78.023920][ T1611] ? __kasan_check_read+0x15/0x20 [ 78.023933][ T1611] __x64_sys_read+0x7f/0x90 [ 78.023946][ T1611] x64_sys_call+0x2638/0x2ee0 [ 78.023959][ T1611] do_syscall_64+0x57/0xf0 [ 78.023971][ T1611] ? clear_bhb_loop+0x50/0xa0 [ 78.023995][ T1611] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.024010][ T1611] RIP: 0033:0x7ffaacb5e98e [ 78.024022][ T1611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.024034][ T1611] RSP: 002b:00007ffaad9d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.024049][ T1611] RAX: ffffffffffffffda RBX: 00007ffaad9d36c0 RCX: 00007ffaacb5e98e [ 78.024059][ T1611] RDX: 000000000000000f RSI: 00007ffaad9d30a0 RDI: 0000000000000004 [ 78.024068][ T1611] RBP: 00007ffaad9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 78.024076][ T1611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.024084][ T1611] R13: 00007ffaace26038 R14: 00007ffaace25fa0 R15: 00007fff37a746f8 [ 78.024095][ T1611] [ 78.294290][ T472] usb 2-1: Using ep0 maxpacket: 8 [ 78.302424][ T472] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 78.311745][ T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.320215][ T472] usb 2-1: Product: syz [ 78.324437][ T472] usb 2-1: Manufacturer: syz [ 78.329052][ T472] usb 2-1: SerialNumber: syz [ 78.334238][ T852] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 78.355323][ T852] usb 4-1: device descriptor read/8, error -71 [ 78.380198][ T1616] FAULT_INJECTION: forcing a failure. [ 78.380198][ T1616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.393588][ T1616] CPU: 1 UID: 0 PID: 1616 Comm: syz.2.474 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 78.393626][ T1616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.393640][ T1616] Call Trace: [ 78.393650][ T1616] [ 78.393660][ T1616] __dump_stack+0x21/0x30 [ 78.393697][ T1616] dump_stack_lvl+0x140/0x1c0 [ 78.393727][ T1616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.393747][ T1616] ? check_stack_object+0x10f/0x150 [ 78.393762][ T1616] dump_stack+0x19/0x20 [ 78.393778][ T1616] should_fail_ex+0x3c2/0x510 [ 78.393800][ T1616] should_fail+0xf/0x20 [ 78.393824][ T1616] should_fail_usercopy+0x1e/0x30 [ 78.393850][ T1616] _copy_from_user+0x20/0xa0 [ 78.393880][ T1616] __se_sys_landlock_create_ruleset+0x308/0x4b0 [ 78.393897][ T1616] ? __x64_sys_landlock_create_ruleset+0xa0/0xa0 [ 78.393913][ T1616] ? __se_sys_chdir+0xaf/0x280 [ 78.393928][ T1616] ? __kasan_check_write+0x18/0x20 [ 78.393943][ T1616] ? fpregs_restore_userregs+0x11c/0x260 [ 78.393970][ T1616] __x64_sys_landlock_create_ruleset+0x7f/0xa0 [ 78.393997][ T1616] x64_sys_call+0x2848/0x2ee0 [ 78.394016][ T1616] do_syscall_64+0x57/0xf0 [ 78.394035][ T1616] ? clear_bhb_loop+0x50/0xa0 [ 78.394051][ T1616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.394066][ T1616] RIP: 0033:0x7ffaacb9e159 [ 78.394079][ T1616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.394092][ T1616] RSP: 002b:00007ffaad9d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 78.394118][ T1616] RAX: ffffffffffffffda RBX: 00007ffaace25fa0 RCX: 00007ffaacb9e159 [ 78.394141][ T1616] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000080 [ 78.394155][ T1616] RBP: 00007ffaacc3506b R08: 0000000000000000 R09: 0000000000000000 [ 78.394170][ T1616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.394185][ T1616] R13: 00007ffaace26038 R14: 00007ffaace25fa0 R15: 00007fff37a746f8 [ 78.394204][ T1616] [ 78.468815][ T65] usb 1-1: USB disconnect, device number 18 [ 78.603806][ T472] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 78.612610][ T852] usb 4-1: device descriptor read/8, error -71 [ 78.618939][ T472] usb 2-1: clock source 0 is not valid, cannot use [ 78.626149][ T472] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 78.633195][ T472] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 78.644629][ T472] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.659751][ T472] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 78.682622][ T1626] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 78.685159][ T472] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 78.693893][ T36] audit: type=1400 audit(1789815651.240:299): avc: denied { read append } for pid=1625 comm="syz.0.478" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.702478][ T472] usb 2-1: USB disconnect, device number 9 [ 78.732863][ T36] audit: type=1400 audit(1789815651.240:300): avc: denied { open } for pid=1625 comm="syz.0.478" path="/dev/usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.760961][ T36] audit: type=1400 audit(1789815651.280:301): avc: denied { ioctl } for pid=1625 comm="syz.0.478" path="/dev/usbmon2" dev="devtmpfs" ino=97 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.766940][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.786179][ T36] audit: type=1400 audit(1789815651.280:302): avc: denied { setopt } for pid=1625 comm="syz.0.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.874263][ T852] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 78.896882][ T852] usb 4-1: device descriptor read/8, error -71 [ 79.035681][ T852] usb 4-1: device descriptor read/8, error -71 [ 79.144420][ T852] usb usb4-port1: unable to enumerate USB device [ 79.194449][ T312] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 79.354245][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 79.360699][ T312] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 79.369207][ T312] usb 3-1: config 0 has no interface number 0 [ 79.375532][ T312] usb 3-1: config 0 interface 184 has no altsetting 0 [ 79.383735][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.392936][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.400990][ T312] usb 3-1: Product: syz [ 79.405195][ T312] usb 3-1: Manufacturer: syz [ 79.409836][ T312] usb 3-1: SerialNumber: syz [ 79.415450][ T312] usb 3-1: config 0 descriptor?? [ 79.421304][ T312] smsc75xx v1.0.0 [ 79.823030][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 79.834356][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 79.844112][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 79.854422][ T312] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 79.934281][ T852] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 80.054293][ T65] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 80.065135][ T852] usb 1-1: device descriptor read/64, error -71 [ 80.214297][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 80.220518][ T65] usb 4-1: config 0 has no interfaces? [ 80.226075][ T65] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.235166][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.243684][ T65] usb 4-1: config 0 descriptor?? [ 80.314285][ T852] usb 1-1: device descriptor read/64, error -71 [ 80.452161][ T1678] FAULT_INJECTION: forcing a failure. [ 80.452161][ T1678] name failslab, interval 1, probability 0, space 0, times 0 [ 80.464979][ T1678] CPU: 1 UID: 0 PID: 1678 Comm: syz.3.502 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 80.465020][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.465030][ T1678] Call Trace: [ 80.465035][ T1678] [ 80.465042][ T1678] __dump_stack+0x21/0x30 [ 80.465066][ T1678] dump_stack_lvl+0x140/0x1c0 [ 80.465085][ T1678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.465106][ T1678] dump_stack+0x19/0x20 [ 80.465124][ T1678] should_fail_ex+0x3c2/0x510 [ 80.465143][ T1678] ? sk_prot_alloc+0x104/0x3a0 [ 80.465161][ T1678] should_failslab+0xac/0x100 [ 80.465180][ T1678] __kmalloc_noprof+0x69/0x510 [ 80.465196][ T1678] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 80.465213][ T1678] ? sk_prot_alloc+0x104/0x3a0 [ 80.465231][ T1678] sk_prot_alloc+0x104/0x3a0 [ 80.465249][ T1678] sk_alloc+0x40/0x590 [ 80.465266][ T1678] ? __cfi_genl_release+0x10/0x10 [ 80.465282][ T1678] netlink_create+0x3d0/0x630 [ 80.465301][ T1678] ? __cfi_genl_bind+0x10/0x10 [ 80.465315][ T1678] ? __cfi_genl_unbind+0x10/0x10 [ 80.465330][ T1678] __sock_create+0x3a2/0x810 [ 80.465346][ T1678] __sys_socket+0xe1/0x1c0 [ 80.465362][ T1678] __x64_sys_socket+0x7e/0x90 [ 80.465379][ T1678] x64_sys_call+0x2608/0x2ee0 [ 80.465393][ T1678] do_syscall_64+0x57/0xf0 [ 80.465411][ T1678] ? clear_bhb_loop+0x50/0xa0 [ 80.465430][ T1678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.465447][ T1678] RIP: 0033:0x7f30e2f9f9c7 [ 80.465461][ T1678] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.465475][ T1678] RSP: 002b:00007f30e3f24f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 80.465496][ T1678] RAX: ffffffffffffffda RBX: 00007f30e3225fa0 RCX: 00007f30e2f9f9c7 [ 80.465514][ T1678] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 80.465531][ T1678] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 80.465546][ T1678] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 80.465562][ T1678] R13: 00007f30e3226038 R14: 00007f30e3225fa0 R15: 00007fffbca81698 [ 80.465579][ T1678] [ 80.470820][ T65] usb 4-1: USB disconnect, device number 16 [ 80.744310][ T852] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 80.874293][ T852] usb 1-1: device descriptor read/64, error -71 [ 81.114261][ T852] usb 1-1: device descriptor read/64, error -71 [ 81.224418][ T852] usb usb1-port1: attempt power cycle [ 81.564309][ T852] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 81.585333][ T852] usb 1-1: device descriptor read/8, error -71 [ 81.715319][ T852] usb 1-1: device descriptor read/8, error -71 [ 81.954265][ T852] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 81.965747][ T312] usb 3-1: USB disconnect, device number 16 [ 81.976441][ T852] usb 1-1: device descriptor read/8, error -71 [ 82.105288][ T852] usb 1-1: device descriptor read/8, error -71 [ 82.214686][ T852] usb usb1-port1: unable to enumerate USB device [ 82.724927][ T36] audit: type=1400 audit(1789815655.270:303): avc: denied { write } for pid=1691 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.786595][ T1702] FAULT_INJECTION: forcing a failure. [ 82.786595][ T1702] name fail_futex, interval 1, probability 0, space 0, times 0 [ 82.800085][ T1702] CPU: 0 UID: 0 PID: 1702 Comm: syz.1.511 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 82.800125][ T1702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.800139][ T1702] Call Trace: [ 82.800145][ T1702] [ 82.800153][ T1702] __dump_stack+0x21/0x30 [ 82.800188][ T1702] dump_stack_lvl+0x140/0x1c0 [ 82.800215][ T1702] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.800241][ T1702] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 82.800263][ T1702] dump_stack+0x19/0x20 [ 82.800288][ T1702] should_fail_ex+0x3c2/0x510 [ 82.800312][ T1702] should_fail+0xf/0x20 [ 82.800332][ T1702] get_futex_key+0x178/0x940 [ 82.800357][ T1702] ? __cfi_get_futex_key+0x10/0x10 [ 82.800380][ T1702] ? import_iovec+0x80/0xb0 [ 82.800399][ T1702] futex_wake+0x150/0x950 [ 82.800416][ T1702] ? __cfi_futex_wake+0x10/0x10 [ 82.800452][ T1702] do_futex+0x37d/0x510 [ 82.800482][ T1702] ? __cfi_do_futex+0x10/0x10 [ 82.800513][ T1702] __se_sys_futex+0x13c/0x320 [ 82.800542][ T1702] ? __x64_sys_futex+0x110/0x110 [ 82.800570][ T1702] __x64_sys_futex+0xe9/0x110 [ 82.800597][ T1702] x64_sys_call+0x227f/0x2ee0 [ 82.800616][ T1702] do_syscall_64+0x57/0xf0 [ 82.800636][ T1702] ? clear_bhb_loop+0x50/0xa0 [ 82.800661][ T1702] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.800686][ T1702] RIP: 0033:0x7fda5c19e159 [ 82.800704][ T1702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.800721][ T1702] RSP: 002b:00007fda5d1300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.800743][ T1702] RAX: ffffffffffffffda RBX: 00007fda5c425fa8 RCX: 00007fda5c19e159 [ 82.800757][ T1702] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda5c425fac [ 82.800769][ T1702] RBP: 00007fda5c425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 82.800783][ T1702] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000000 [ 82.800796][ T1702] R13: 00007fda5c426038 R14: 00007ffca3c879f0 R15: 00007ffca3c87ad8 [ 82.800811][ T1702] [ 83.264244][ T742] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 83.289245][ T1719] syzkaller1: entered promiscuous mode [ 83.294806][ T1719] syzkaller1: entered allmulticast mode [ 83.414539][ T742] usb 2-1: device descriptor read/64, error -71 [ 83.608201][ T1743] FAULT_INJECTION: forcing a failure. [ 83.608201][ T1743] name failslab, interval 1, probability 0, space 0, times 0 [ 83.620927][ T1743] CPU: 0 UID: 0 PID: 1743 Comm: syz.3.530 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 83.620981][ T1743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.620997][ T1743] Call Trace: [ 83.621005][ T1743] [ 83.621015][ T1743] __dump_stack+0x21/0x30 [ 83.621055][ T1743] dump_stack_lvl+0x140/0x1c0 [ 83.621089][ T1743] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.621123][ T1743] dump_stack+0x19/0x20 [ 83.621156][ T1743] should_fail_ex+0x3c2/0x510 [ 83.621187][ T1743] should_failslab+0xac/0x100 [ 83.621219][ T1743] kmem_cache_alloc_noprof+0x42/0x410 [ 83.621245][ T1743] ? security_file_alloc+0x49/0x220 [ 83.621270][ T1743] ? kasan_save_alloc_info+0x3a/0x50 [ 83.621295][ T1743] security_file_alloc+0x49/0x220 [ 83.621319][ T1743] init_file+0x9e/0x210 [ 83.621349][ T1743] alloc_empty_file+0xd9/0x270 [ 83.621381][ T1743] path_openat+0xf4/0x35a0 [ 83.621415][ T1743] ? stack_depot_save_flags+0x38/0x800 [ 83.621445][ T1743] ? schedule+0xc5/0x240 [ 83.621471][ T1743] ? kasan_save_track+0x4f/0x80 [ 83.621499][ T1743] ? kasan_save_track+0x3e/0x80 [ 83.621530][ T1743] ? kasan_save_alloc_info+0x3a/0x50 [ 83.621554][ T1743] ? __kasan_slab_alloc+0x73/0x90 [ 83.621584][ T1743] ? getname+0x1b/0x30 [ 83.621611][ T1743] ? do_sys_openat2+0xda/0x1d0 [ 83.621645][ T1743] ? __x64_sys_openat+0x13a/0x170 [ 83.621679][ T1743] ? x64_sys_call+0xe69/0x2ee0 [ 83.621703][ T1743] ? do_syscall_64+0x57/0xf0 [ 83.621730][ T1743] ? do_filp_open+0x440/0x440 [ 83.621765][ T1743] do_filp_open+0x1f2/0x440 [ 83.621798][ T1743] ? __cfi_do_filp_open+0x10/0x10 [ 83.621833][ T1743] ? alloc_fd+0x4c1/0x570 [ 83.621863][ T1743] do_sys_openat2+0x134/0x1d0 [ 83.621897][ T1743] ? fput+0x1a4/0x230 [ 83.621929][ T1743] ? do_sys_open+0x100/0x100 [ 83.621978][ T1743] ? __cfi_ksys_write+0x10/0x10 [ 83.622011][ T1743] __x64_sys_openat+0x13a/0x170 [ 83.622051][ T1743] x64_sys_call+0xe69/0x2ee0 [ 83.622075][ T1743] do_syscall_64+0x57/0xf0 [ 83.622099][ T1743] ? clear_bhb_loop+0x50/0xa0 [ 83.622131][ T1743] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.622162][ T1743] RIP: 0033:0x7f30e2f5e98e [ 83.622183][ T1743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.622206][ T1743] RSP: 002b:00007f30e3f25ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.622235][ T1743] RAX: ffffffffffffffda RBX: 00007f30e3f266c0 RCX: 00007f30e2f5e98e [ 83.622254][ T1743] RDX: 0000000000000002 RSI: 00007f30e3f25f90 RDI: ffffffffffffff9c [ 83.622273][ T1743] RBP: 00007f30e303506b R08: 0000000000000000 R09: 0000000000000000 [ 83.622291][ T1743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.622309][ T1743] R13: 00007f30e3226038 R14: 00007f30e3225fa0 R15: 00007fffbca81698 [ 83.622332][ T1743] [ 83.664240][ T742] usb 2-1: device descriptor read/64, error -71 [ 83.804233][ T65] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 83.874998][ T312] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 83.936334][ T1749] FAULT_INJECTION: forcing a failure. [ 83.936334][ T1749] name failslab, interval 1, probability 0, space 0, times 0 [ 83.949659][ T1749] CPU: 1 UID: 0 PID: 1749 Comm: syz.3.533 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 83.949692][ T1749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.949705][ T1749] Call Trace: [ 83.949713][ T1749] [ 83.949721][ T1749] __dump_stack+0x21/0x30 [ 83.949756][ T1749] dump_stack_lvl+0x140/0x1c0 [ 83.949777][ T1749] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.949795][ T1749] ? stack_trace_save+0xaa/0x100 [ 83.949810][ T1749] dump_stack+0x19/0x20 [ 83.949826][ T1749] should_fail_ex+0x3c2/0x510 [ 83.949842][ T1749] should_failslab+0xac/0x100 [ 83.949857][ T1749] __kmalloc_cache_noprof+0x41/0x470 [ 83.949871][ T1749] ? proc_self_get_link+0x119/0x290 [ 83.949906][ T1749] proc_self_get_link+0x119/0x290 [ 83.949923][ T1749] ? security_inode_follow_link+0x7e/0x180 [ 83.949942][ T1749] ? __cfi_proc_self_get_link+0x10/0x10 [ 83.949960][ T1749] pick_link+0x6d4/0xe80 [ 83.949974][ T1749] step_into+0xc33/0xf10 [ 83.949987][ T1749] ? read_word_at_a_time+0x1a/0x40 [ 83.950004][ T1749] ? set_root+0x420/0x420 [ 83.950017][ T1749] ? inode_permission+0xf3/0x4c0 [ 83.950033][ T1749] link_path_walk+0x746/0xeb0 [ 83.950048][ T1749] path_openat+0x298/0x35a0 [ 83.950065][ T1749] ? schedule+0xc5/0x240 [ 83.950079][ T1749] ? kasan_save_alloc_info+0x3a/0x50 [ 83.950091][ T1749] ? __kasan_slab_alloc+0x73/0x90 [ 83.950106][ T1749] ? getname+0x1b/0x30 [ 83.950119][ T1749] ? x64_sys_call+0xe69/0x2ee0 [ 83.950131][ T1749] ? do_syscall_64+0x57/0xf0 [ 83.950144][ T1749] ? do_filp_open+0x440/0x440 [ 83.950161][ T1749] do_filp_open+0x1f2/0x440 [ 83.950177][ T1749] ? __cfi_do_filp_open+0x10/0x10 [ 83.950195][ T1749] ? alloc_fd+0x4c1/0x570 [ 83.950210][ T1749] do_sys_openat2+0x134/0x1d0 [ 83.950228][ T1749] ? do_sys_open+0x100/0x100 [ 83.950245][ T1749] ? __cfi_ksys_write+0x10/0x10 [ 83.950259][ T1749] __x64_sys_openat+0x13a/0x170 [ 83.950277][ T1749] x64_sys_call+0xe69/0x2ee0 [ 83.950288][ T1749] do_syscall_64+0x57/0xf0 [ 83.950300][ T1749] ? clear_bhb_loop+0x50/0xa0 [ 83.950317][ T1749] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.950334][ T1749] RIP: 0033:0x7f30e2f5e98e [ 83.950346][ T1749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.950357][ T1749] RSP: 002b:00007f30e3f25ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.950373][ T1749] RAX: ffffffffffffffda RBX: 00007f30e3f266c0 RCX: 00007f30e2f5e98e [ 83.950383][ T1749] RDX: 0000000000000002 RSI: 00007f30e3f25f90 RDI: ffffffffffffff9c [ 83.950395][ T1749] RBP: 00007f30e303506b R08: 0000000000000000 R09: 0000000000000000 [ 83.950403][ T1749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.950412][ T1749] R13: 00007f30e3226038 R14: 00007f30e3225fa0 R15: 00007fffbca81698 [ 83.950422][ T1749] [ 84.034230][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 84.104318][ T742] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 84.123076][ T65] usb 1-1: config 0 has no interfaces? [ 84.155342][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.174294][ T65] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.189680][ T312] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 84.192995][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.211031][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.227798][ T65] usb 1-1: config 0 descriptor?? [ 84.250165][ T1757] ./dev/sda1: Can't lookup blockdev [ 84.308926][ T312] usb 3-1: config 0 descriptor?? [ 84.314009][ T742] usb 2-1: device descriptor read/64, error -71 [ 84.496834][ T65] usb 1-1: USB disconnect, device number 23 [ 84.554290][ T742] usb 2-1: device descriptor read/64, error -71 [ 84.664393][ T742] usb usb2-port1: attempt power cycle [ 84.726172][ T312] wacom 0003:056A:0318.0002: ignoring exceeding usage max [ 84.930185][ T1735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'. [ 84.940189][ T36] audit: type=1400 audit(1789815657.490:304): avc: denied { load_policy } for pid=1734 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.941801][ T1735] SELinux: failed to load policy [ 84.969005][ T312] usb 3-1: USB disconnect, device number 17 [ 85.012652][ T36] audit: type=1400 audit(1789815657.560:305): avc: denied { setopt } for pid=1765 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.032209][ T742] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 85.032288][ T36] audit: type=1400 audit(1789815657.570:306): avc: denied { getopt } for pid=1765 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.065322][ T742] usb 2-1: device descriptor read/8, error -71 [ 85.195362][ T742] usb 2-1: device descriptor read/8, error -71 [ 85.257661][ T36] audit: type=1400 audit(1789815657.810:307): avc: denied { search } for pid=1778 comm="syz.0.545" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.434344][ T742] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 85.455453][ T742] usb 2-1: device descriptor read/8, error -71 [ 85.482438][ T1781] ./dev/sda1: Can't lookup blockdev [ 85.487742][ T65] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 85.585331][ T742] usb 2-1: device descriptor read/8, error -71 [ 85.644236][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 85.650633][ T65] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.659147][ T65] usb 4-1: config 0 has no interface number 0 [ 85.665463][ T65] usb 4-1: config 0 interface 184 has no altsetting 0 [ 85.673919][ T65] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.683463][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.691578][ T65] usb 4-1: Product: syz [ 85.695925][ T65] usb 4-1: Manufacturer: syz [ 85.700622][ T65] usb 4-1: SerialNumber: syz [ 85.705610][ T742] usb usb2-port1: unable to enumerate USB device [ 85.706791][ T65] usb 4-1: config 0 descriptor?? [ 85.718404][ T65] smsc75xx v1.0.0 [ 86.110559][ T1790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.550'. [ 86.119937][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 86.131949][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 86.142078][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 86.164664][ T65] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 86.174022][ T1792] FAULT_INJECTION: forcing a failure. [ 86.174022][ T1792] name failslab, interval 1, probability 0, space 0, times 0 [ 86.194379][ T1792] CPU: 1 UID: 0 PID: 1792 Comm: syz.0.551 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 86.194445][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.194460][ T1792] Call Trace: [ 86.194468][ T1792] [ 86.194476][ T1792] __dump_stack+0x21/0x30 [ 86.194513][ T1792] dump_stack_lvl+0x140/0x1c0 [ 86.194545][ T1792] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.194578][ T1792] dump_stack+0x19/0x20 [ 86.194608][ T1792] should_fail_ex+0x3c2/0x510 [ 86.194639][ T1792] should_failslab+0xac/0x100 [ 86.194667][ T1792] kmem_cache_alloc_noprof+0x42/0x410 [ 86.194692][ T1792] ? __anon_vma_prepare+0xa5/0x590 [ 86.194716][ T1792] __anon_vma_prepare+0xa5/0x590 [ 86.194739][ T1792] do_wp_page+0x2321/0x2e80 [ 86.194766][ T1792] ? __cfi___futex_wait+0x10/0x10 [ 86.194788][ T1792] ? folio_put+0x90/0x90 [ 86.194813][ T1792] ? __cfi__raw_spin_lock+0x10/0x10 [ 86.194835][ T1792] ? futex_wake+0x627/0x950 [ 86.194855][ T1792] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 86.194878][ T1792] handle_mm_fault+0x1017/0x1ba0 [ 86.194907][ T1792] ? __cfi_handle_mm_fault+0x10/0x10 [ 86.194932][ T1792] ? lock_vma_under_rcu+0x4cf/0x590 [ 86.194961][ T1792] ? __se_sys_futex+0x13c/0x320 [ 86.194991][ T1792] do_user_addr_fault+0x951/0x1230 [ 86.195012][ T1792] ? fpregs_restore_userregs+0x11c/0x260 [ 86.195040][ T1792] exc_page_fault+0x58/0xc0 [ 86.195067][ T1792] asm_exc_page_fault+0x2b/0x30 [ 86.195094][ T1792] RIP: 0033:0x7f3222c52c47 [ 86.195113][ T1792] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 [ 86.195133][ T1792] RSP: 002b:00007f32217e2fd0 EFLAGS: 00010246 [ 86.195154][ T1792] RAX: 00007f3222c52c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 86.195171][ T1792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.195185][ T1792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.195199][ T1792] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 86.195212][ T1792] R13: 00007f3223026038 R14: 00007f3223025fa0 R15: 00007ffdd4ea1f08 [ 86.195232][ T1792] [ 86.195245][ T1792] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.476063][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.484410][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.492516][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.500732][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.509005][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.517152][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.525285][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.533984][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.542566][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.550763][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.558871][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.567020][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.575226][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.583327][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.591557][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.599950][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.608065][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.616276][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.624841][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.632927][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.634235][ T742] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 86.641053][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.656980][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.665453][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.673649][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.681819][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.689960][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.700420][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.708817][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.714222][ T312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 86.717069][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.732864][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.741206][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.749330][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.757464][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.766296][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.774540][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.782749][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.791087][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.799982][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.808199][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.814250][ T742] usb 2-1: Using ep0 maxpacket: 8 [ 86.816791][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.823277][ T742] usb 2-1: config 0 has no interfaces? [ 86.830675][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.836601][ T742] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 86.844371][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.853918][ T742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.861951][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.874400][ T742] usb 2-1: config 0 descriptor?? [ 86.880496][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.896344][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.897312][ T312] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 86.904793][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.914507][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.922268][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.930631][ T312] usb 3-1: Product: syz [ 86.939148][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.943577][ T312] usb 3-1: Manufacturer: syz [ 86.951726][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.956635][ T312] usb 3-1: SerialNumber: syz [ 86.964980][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.977737][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.985987][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 86.994314][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.003315][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.011915][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.020165][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.028527][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.037499][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.045752][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.054164][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.062586][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.070951][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.079841][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.088075][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.096321][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.104898][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.113024][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.121273][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.129690][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.137858][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.146683][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.148116][ T1788] syz.1.549: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 87.154964][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.155003][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.155029][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.155055][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.169676][ T1788] ,cpuset= [ 87.177184][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.177219][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.186407][ T1788] syz1 [ 87.193784][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.202721][ T1788] ,mems_allowed=0 [ 87.205341][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.214112][ T1788] [ 87.222365][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.226012][ T1788] CPU: 1 UID: 0 PID: 1788 Comm: syz.1.549 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 87.226051][ T1788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.226064][ T1788] Call Trace: [ 87.226071][ T1788] [ 87.226080][ T1788] __dump_stack+0x21/0x30 [ 87.226112][ T1788] dump_stack_lvl+0x140/0x1c0 [ 87.226139][ T1788] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.226169][ T1788] dump_stack+0x19/0x20 [ 87.226195][ T1788] warn_alloc+0x1e7/0x2c0 [ 87.226224][ T1788] ? __cfi_warn_alloc+0x10/0x10 [ 87.226252][ T1788] ? __kmalloc_node_noprof+0x252/0x500 [ 87.226275][ T1788] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 87.226307][ T1788] __vmalloc_node_range_noprof+0x100b/0x1300 [ 87.226342][ T1788] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 87.226384][ T1788] ? kasan_save_alloc_info+0x3a/0x50 [ 87.226403][ T1788] ? __kasan_slab_alloc+0x73/0x90 [ 87.226429][ T1788] ? arch_dup_task_struct+0x5b/0xe0 [ 87.226459][ T1788] ? __asan_memcpy+0x5a/0x80 [ 87.226480][ T1788] dup_task_struct+0x5d6/0xd80 [ 87.226506][ T1788] ? copy_process+0x57c/0x3350 [ 87.226531][ T1788] ? _raw_spin_lock_irq+0x93/0x120 [ 87.226551][ T1788] ? copy_process+0x3350/0x3350 [ 87.226575][ T1788] ? __kasan_check_write+0x18/0x20 [ 87.226597][ T1788] copy_process+0x57c/0x3350 [ 87.226621][ T1788] ? __cfi_futex_wake_mark+0x10/0x10 [ 87.226642][ T1788] ? futex_wake+0x627/0x950 [ 87.226662][ T1788] ? __cfi_copy_process+0x10/0x10 [ 87.226686][ T1788] ? selinux_socket_setsockopt+0x324/0x3d0 [ 87.226717][ T1788] kernel_clone+0x233/0x810 [ 87.226743][ T1788] ? __cfi_kernel_clone+0x10/0x10 [ 87.226768][ T1788] ? do_futex+0x32a/0x510 [ 87.226796][ T1788] __x64_sys_clone+0x1b7/0x230 [ 87.226823][ T1788] ? __cfi___x64_sys_clone+0x10/0x10 [ 87.226852][ T1788] ? __kasan_check_write+0x18/0x20 [ 87.226873][ T1788] ? fpregs_restore_userregs+0x11c/0x260 [ 87.226898][ T1788] ? switch_fpu_return+0x12/0x20 [ 87.226922][ T1788] x64_sys_call+0x2b3c/0x2ee0 [ 87.226942][ T1788] do_syscall_64+0x57/0xf0 [ 87.226962][ T1788] ? clear_bhb_loop+0x50/0xa0 [ 87.226987][ T1788] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.227010][ T1788] RIP: 0033:0x7fda5c19e159 [ 87.227029][ T1788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.227047][ T1788] RSP: 002b:00007fda5d12ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 87.227070][ T1788] RAX: ffffffffffffffda RBX: 00007fda5c425fa0 RCX: 00007fda5c19e159 [ 87.227088][ T1788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 87.227103][ T1788] RBP: 00007fda5c23506b R08: 0000000000000000 R09: 0000000000000000 [ 87.227117][ T1788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.227131][ T1788] R13: 00007fda5c426038 R14: 00007fda5c425fa0 R15: 00007ffca3c87ad8 [ 87.227149][ T1788] [ 87.227192][ T1788] Mem-Info: [ 87.233166][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.237298][ T1788] active_anon:6415 inactive_anon:10 isolated_anon:0 [ 87.237298][ T1788] active_file:5873 inactive_file:9563 isolated_file:0 [ 87.237298][ T1788] unevictable:0 dirty:356 writeback:0 [ 87.237298][ T1788] slab_reclaimable:5306 slab_unreclaimable:72853 [ 87.237298][ T1788] mapped:24809 shmem:167 pagetables:981 [ 87.237298][ T1788] sec_pagetables:0 bounce:0 [ 87.237298][ T1788] kernel_misc_reclaimable:0 [ 87.237298][ T1788] free:1508730 free_pcp:23172 free_cma:0 [ 87.247347][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.255340][ T742] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 87.267406][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.278069][ T1788] Node 0 active_anon:25660kB inactive_anon:40kB active_file:23492kB inactive_file:38252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99236kB dirty:1424kB writeback:0kB shmem:668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6584kB pagetables:3924kB sec_pagetables:0kB all_unreclaimable? no [ 87.280893][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.283890][ T1788] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:4696kB free_cma:0kB [ 87.288178][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.288208][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.288244][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.297139][ T1788] lowmem_reserve[]: [ 87.298951][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.302565][ T1788] 0 [ 87.307428][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.312894][ T312] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.318240][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.324290][ T1788] 3921 [ 87.330372][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.336669][ T1788] 3921 [ 87.348005][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.352261][ T312] usb 3-1: found format II with max.bitrate = 44931, frame size=8 [ 87.357149][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.361918][ T312] usb 3-1: found format II with max.bitrate = 44931, frame size=8 [ 87.366767][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.372028][ T1788] [ 87.376802][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.381806][ T1788] Normal free:3163716kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25660kB inactive_anon:40kB active_file:23492kB inactive_file:38252kB unevictable:0kB writepending:1424kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:1648kB local_pcp:1488kB free_cma:0kB [ 87.386543][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.391770][ T1788] lowmem_reserve[]: [ 87.396502][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.401455][ T312] usb 3-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 87.407558][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.411792][ T1788] 0 0 0 [ 87.416993][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.421302][ T1788] [ 87.426556][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.432793][ T742] usb 1-1: device descriptor read/64, error -71 [ 87.437050][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.454304][ T312] usb 3-1: USB disconnect, device number 18 [ 87.482839][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.505260][ T1788] DMA32: [ 87.510932][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.522157][ T1788] 3*4kB [ 87.527414][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.536714][ T1788] (M) [ 87.543610][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.548444][ T1788] 1*8kB [ 87.549616][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.558149][ T1788] (M) [ 87.603500][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.612189][ T1788] 4*16kB [ 87.619221][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.627842][ T1788] (M) [ 87.659818][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.668517][ T1788] 4*32kB [ 87.699917][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.710196][ T1788] (M) [ 87.717158][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.717191][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.725889][ T1788] 4*64kB [ 87.729810][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.738334][ T1788] (M) [ 87.740446][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.748707][ T1788] 5*128kB [ 87.755239][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.763683][ T1788] (M) [ 87.766307][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.774739][ T742] usb 1-1: device descriptor read/64, error -71 [ 87.777666][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.786853][ T1788] 5*256kB [ 87.794601][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.803163][ T1788] (M) [ 87.810916][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.819051][ T1788] 5*512kB [ 87.821476][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.829744][ T1788] (M) [ 87.863047][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.872710][ T1788] 4*1024kB [ 87.876506][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.885552][ T1788] (UM) [ 87.893238][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.902068][ T1788] 4*2048kB [ 87.904673][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.913114][ T1788] (M) [ 87.915417][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.923475][ T1788] 718*4096kB [ 87.929741][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.937877][ T1788] (M) [ 87.943836][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.952511][ T1788] = 2958164kB [ 87.955817][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.963714][ T1788] Normal: [ 87.966722][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.975229][ T1788] 367*4kB [ 87.980101][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.986445][ T1788] (UME) [ 87.989502][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 87.997714][ T1788] 91*8kB [ 88.000582][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.008673][ T1788] (UME) [ 88.012088][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.020131][ T1788] 160*16kB [ 88.023145][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.031621][ T1788] (UE) [ 88.034856][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.044276][ T742] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 88.046485][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.054726][ T1788] 123*32kB [ 88.063908][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.066797][ T1788] (UME) [ 88.075216][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.077761][ T1788] 267*64kB [ 88.086214][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.089172][ T1788] (UME) [ 88.097625][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.100685][ T1788] 109*128kB [ 88.109399][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.115666][ T1788] (UME) [ 88.124147][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.126972][ T1788] 59*256kB [ 88.135179][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.137831][ T1788] (UME) [ 88.146054][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.149129][ T1788] 42*512kB [ 88.157343][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.160007][ T1788] (UME) [ 88.168287][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.171584][ T1788] 20*1024kB [ 88.180248][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.182999][ T1788] (UME) [ 88.191439][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.194610][ T1788] 14*2048kB [ 88.202707][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.205389][ T1788] (UM) [ 88.213497][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.216804][ T1788] 740*4096kB [ 88.224957][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.227764][ T742] usb 1-1: device descriptor read/64, error -71 [ 88.235937][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.239275][ T1788] (UM) [ 88.247452][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.250647][ T1788] = 3156532kB [ 88.258946][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.262622][ T1788] 15608 total pagecache pages [ 88.278170][ T852] usb 4-1: USB disconnect, device number 17 [ 88.299200][ T1788] 8 pages in swap cache [ 88.308578][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.316509][ T36] audit: type=1400 audit(1789815660.870:308): avc: denied { create } for pid=1812 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.318859][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.329304][ T36] audit: type=1400 audit(1789815660.870:309): avc: denied { ioctl } for pid=1812 comm="syz.3.558" path="socket:[20568]" dev="sockfs" ino=20568 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.339262][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.351141][ T1788] Free swap = 124444kB [ 88.368432][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.371305][ T1788] Total swap = 124996kB [ 88.385427][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.397580][ T1788] 2097051 pages RAM [ 88.404156][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.406090][ T1788] 0 pages HighMem/MovableOnly [ 88.414465][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.418972][ T1788] 352241 pages reserved [ 88.426807][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.429670][ T1788] 0 pages cma reserved [ 88.437956][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.442874][ T1788] Memory allocations: [ 88.449176][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.451915][ T1788] 0 B 0 init/main.c:1477 func:do_initcalls [ 88.460452][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.463552][ T1788] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 88.471999][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.475074][ T1788] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 88.483922][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.486896][ T1788] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 88.496941][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.500223][ T1788] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 88.507839][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.509057][ T1788] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 88.517333][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.524237][ T1788] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 88.532100][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.535206][ T1788] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 88.543570][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.546976][ T742] usb 1-1: device descriptor read/64, error -71 [ 88.555510][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.560791][ T1788] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 88.568330][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.571616][ T1788] 0 B 0 init/initramfs.c:101 func:find_link [ 88.579567][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.624918][ T312] usb 2-1: USB disconnect, device number 14 [ 88.634330][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.674373][ T742] usb usb1-port1: attempt power cycle [ 88.680459][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.936269][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.944410][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.952521][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.960670][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.968780][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.976897][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.985121][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 88.993224][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 89.001588][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 89.010256][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: unknown main item tag 0x0 [ 89.019075][ T65] hid-generic 01FF:10000003:7FFFFFFF.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.035270][ T742] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 89.038851][ T1819] fido_id[1819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.065833][ T742] usb 1-1: device descriptor read/8, error -71 [ 89.172755][ T36] audit: type=1400 audit(1789815661.720:310): avc: denied { cmd } for pid=1820 comm="iou-wrk-1821" path="socket:[20129]" dev="sockfs" ino=20129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.215237][ T742] usb 1-1: device descriptor read/8, error -71 [ 89.454263][ T742] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 89.476161][ T742] usb 1-1: device descriptor read/8, error -71 [ 89.617065][ T742] usb 1-1: device descriptor read/8, error -71 [ 89.631628][ T36] audit: type=1400 audit(1789815662.180:311): avc: denied { remount } for pid=1845 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.716209][ T1849] ./dev/sda1: Can't lookup blockdev [ 89.724354][ T742] usb usb1-port1: unable to enumerate USB device [ 89.811619][ T1851] ./dev/sda1: Can't lookup blockdev [ 89.829605][ T1853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 90.211225][ T1871] ======================================================= [ 90.211225][ T1871] WARNING: The mand mount option has been deprecated and [ 90.211225][ T1871] and is ignored by this kernel. Remove the mand [ 90.211225][ T1871] option from the mount to silence this warning. [ 90.211225][ T1871] ======================================================= [ 90.254278][ T1873] ./dev/sda1: Can't lookup blockdev [ 90.275353][ T1871] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 90.295929][ T36] audit: type=1400 audit(1789815662.850:312): avc: denied { unmount } for pid=1870 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.534253][ T742] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 90.695409][ T742] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 90.703814][ T742] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.704234][ T65] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 90.714506][ T742] usb 4-1: config 0 has no interface number 0 [ 90.744091][ T742] usb 4-1: config 0 interface 98 has no altsetting 0 [ 90.752180][ T36] audit: type=1400 audit(1789815663.300:313): avc: denied { ioctl } for pid=1878 comm="syz.2.581" path="socket:[20258]" dev="sockfs" ino=20258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.777587][ T36] audit: type=1400 audit(1789815663.300:314): avc: denied { setopt } for pid=1878 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.800228][ T742] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 90.810072][ T742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.818477][ T742] usb 4-1: Product: syz [ 90.822816][ T742] usb 4-1: Manufacturer: syz [ 90.827752][ T742] usb 4-1: SerialNumber: syz [ 90.833723][ T742] usb 4-1: config 0 descriptor?? [ 90.874241][ T65] usb 2-1: device descriptor read/64, error -71 [ 91.114283][ T65] usb 2-1: device descriptor read/64, error -71 [ 91.240527][ T742] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 91.250897][ T742] asix 4-1:0.98: probe with driver asix failed with error -71 [ 91.259879][ T742] usb 4-1: USB disconnect, device number 18 [ 91.354278][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 91.484257][ T65] usb 2-1: device descriptor read/64, error -71 [ 91.672288][ T1902] ./dev/sda1: Can't lookup blockdev [ 91.724253][ T65] usb 2-1: device descriptor read/64, error -71 [ 91.834369][ T65] usb usb2-port1: attempt power cycle [ 91.861358][ T396] bridge_slave_1: left allmulticast mode [ 91.886135][ T396] bridge_slave_1: left promiscuous mode [ 91.891835][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.914725][ T396] bridge_slave_0: left allmulticast mode [ 91.920668][ T396] bridge_slave_0: left promiscuous mode [ 91.944309][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.061044][ T396] veth1_macvtap: left promiscuous mode [ 92.076509][ T396] veth0_vlan: left promiscuous mode [ 92.082600][ T36] audit: type=1400 audit(1789815664.630:315): avc: denied { mounton } for pid=1915 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.174349][ T65] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 92.205275][ T65] usb 2-1: device descriptor read/8, error -71 [ 92.245312][ T1921] ./dev/sda1: Can't lookup blockdev [ 92.277598][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.292730][ T1915] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.307957][ T1915] bridge_slave_0: entered allmulticast mode [ 92.315930][ T1915] bridge_slave_0: entered promiscuous mode [ 92.322852][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.331917][ T1915] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.339574][ T1915] bridge_slave_1: entered allmulticast mode [ 92.346645][ T65] usb 2-1: device descriptor read/8, error -71 [ 92.353465][ T1915] bridge_slave_1: entered promiscuous mode [ 92.423207][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.430604][ T1915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.438322][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.445535][ T1915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.493297][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.504125][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.532093][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.539605][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.548495][ T1927] netlink: 96 bytes leftover after parsing attributes in process `syz.2.599'. [ 92.561789][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.569177][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.584294][ T65] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 92.616117][ T65] usb 2-1: device descriptor read/8, error -71 [ 92.629437][ T1915] veth0_vlan: entered promiscuous mode [ 92.644407][ T1915] veth1_macvtap: entered promiscuous mode [ 92.704223][ T36] audit: type=1400 audit(1789815665.250:316): avc: denied { mount } for pid=1915 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.706255][ T1932] Mass Storage Function, version: 2009/09/11 [ 92.729282][ T36] audit: type=1400 audit(1789815665.250:317): avc: denied { ioctl } for pid=1931 comm="syz.2.601" path="socket:[21770]" dev="sockfs" ino=21770 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.733410][ T1932] LUN: removable file: (no medium) [ 92.759733][ T36] audit: type=1400 audit(1789815665.250:318): avc: denied { mounton } for pid=1915 comm="syz-executor" path="/root/syzkaller.XLda7I/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.793026][ T36] audit: type=1400 audit(1789815665.260:319): avc: denied { mount } for pid=1931 comm="syz.2.601" name="/" dev="configfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 92.816724][ T36] audit: type=1400 audit(1789815665.260:320): avc: denied { search } for pid=1931 comm="syz.2.601" name="/" dev="configfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.846565][ T65] usb 2-1: device descriptor read/8, error -71 [ 92.863354][ T36] audit: type=1400 audit(1789815665.260:321): avc: denied { write } for pid=1931 comm="syz.2.601" name="usb_gadget" dev="configfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.889646][ T1938] netlink: 104 bytes leftover after parsing attributes in process `syz.4.594'. [ 92.954341][ T65] usb usb2-port1: unable to enumerate USB device [ 93.017719][ T1950] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 94.402597][ T1989] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 94.834267][ T312] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 94.984498][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 94.990790][ T312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.001098][ T312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.012073][ T312] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.021429][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.029449][ T312] usb 2-1: Product: syz [ 95.033810][ T312] usb 2-1: Manufacturer: syz [ 95.038447][ T312] usb 2-1: SerialNumber: syz [ 95.043804][ T312] usb 2-1: config 0 descriptor?? [ 95.074277][ T852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.224487][ T852] usb 5-1: Using ep0 maxpacket: 8 [ 95.230626][ T852] usb 5-1: config 0 has no interfaces? [ 95.236289][ T852] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 95.245412][ T852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.254802][ T852] usb 5-1: config 0 descriptor?? [ 95.463481][ T2013] FAULT_INJECTION: forcing a failure. [ 95.463481][ T2013] name failslab, interval 1, probability 0, space 0, times 0 [ 95.476322][ T2013] CPU: 0 UID: 0 PID: 2013 Comm: syz.4.628 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 95.476361][ T2013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.476375][ T2013] Call Trace: [ 95.476385][ T2013] [ 95.476396][ T2013] __dump_stack+0x21/0x30 [ 95.476433][ T2013] dump_stack_lvl+0x140/0x1c0 [ 95.476451][ T2013] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.476470][ T2013] dump_stack+0x19/0x20 [ 95.476487][ T2013] should_fail_ex+0x3c2/0x510 [ 95.476503][ T2013] should_failslab+0xac/0x100 [ 95.476525][ T2013] kmem_cache_alloc_noprof+0x42/0x410 [ 95.476540][ T2013] ? copy_sighand+0x115/0x2c0 [ 95.476556][ T2013] ? copy_signal+0x5d/0x6a0 [ 95.476571][ T2013] ? __asan_memcpy+0x5a/0x80 [ 95.476585][ T2013] copy_signal+0x5d/0x6a0 [ 95.476601][ T2013] copy_process+0x1278/0x3350 [ 95.476620][ T2013] ? __cfi_copy_process+0x10/0x10 [ 95.476637][ T2013] ? selinux_socket_setsockopt+0x324/0x3d0 [ 95.476664][ T2013] kernel_clone+0x233/0x810 [ 95.476681][ T2013] ? __cfi_kernel_clone+0x10/0x10 [ 95.476696][ T2013] ? do_futex+0x32a/0x510 [ 95.476714][ T2013] __x64_sys_clone+0x1b7/0x230 [ 95.476731][ T2013] ? __cfi___x64_sys_clone+0x10/0x10 [ 95.476748][ T2013] ? __kasan_check_write+0x18/0x20 [ 95.476762][ T2013] ? fpregs_restore_userregs+0x11c/0x260 [ 95.476792][ T2013] ? switch_fpu_return+0x12/0x20 [ 95.476808][ T2013] x64_sys_call+0x2b3c/0x2ee0 [ 95.476821][ T2013] do_syscall_64+0x57/0xf0 [ 95.476834][ T2013] ? clear_bhb_loop+0x50/0xa0 [ 95.476850][ T2013] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.476865][ T2013] RIP: 0033:0x7f5693d9e159 [ 95.476878][ T2013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.476891][ T2013] RSP: 002b:00007f5694c67fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 95.476907][ T2013] RAX: ffffffffffffffda RBX: 00007f5694025fa0 RCX: 00007f5693d9e159 [ 95.476918][ T2013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 95.476928][ T2013] RBP: 00007f5693e3506b R08: 0000000000000000 R09: 0000000000000000 [ 95.476937][ T2013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 95.476946][ T2013] R13: 00007f5694026038 R14: 00007f5694025fa0 R15: 00007ffdd2624aa8 [ 95.476959][ T2013] [ 95.477885][ T312] usb 5-1: USB disconnect, device number 2 [ 95.843297][ T2037] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 95.844299][ T2039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.867157][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 95.867177][ T36] audit: type=1400 audit(1789815668.420:328): avc: denied { mounton } for pid=2038 comm="syz.2.637" path="/194/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 95.926285][ T852] hid-generic 0003:057E:0330.0004: item fetching failed at offset 3/4 [ 95.934900][ T852] hid-generic 0003:057E:0330.0004: probe with driver hid-generic failed with error -22 [ 96.067493][ T2056] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 96.187387][ T2067] FAULT_INJECTION: forcing a failure. [ 96.187387][ T2067] name failslab, interval 1, probability 0, space 0, times 0 [ 96.200057][ T2067] CPU: 1 UID: 0 PID: 2067 Comm: syz.2.649 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 96.200092][ T2067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.200107][ T2067] Call Trace: [ 96.200114][ T2067] [ 96.200124][ T2067] __dump_stack+0x21/0x30 [ 96.200149][ T2067] dump_stack_lvl+0x140/0x1c0 [ 96.200167][ T2067] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.200189][ T2067] dump_stack+0x19/0x20 [ 96.200207][ T2067] should_fail_ex+0x3c2/0x510 [ 96.200224][ T2067] should_failslab+0xac/0x100 [ 96.200250][ T2067] kmem_cache_alloc_noprof+0x42/0x410 [ 96.200264][ T2067] ? __anon_vma_prepare+0xa5/0x590 [ 96.200278][ T2067] __anon_vma_prepare+0xa5/0x590 [ 96.200292][ T2067] do_wp_page+0x2321/0x2e80 [ 96.200307][ T2067] ? __cfi___futex_wait+0x10/0x10 [ 96.200321][ T2067] ? folio_put+0x90/0x90 [ 96.200335][ T2067] ? __cfi__raw_spin_lock+0x10/0x10 [ 96.200348][ T2067] ? futex_wake+0x666/0x950 [ 96.200361][ T2067] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 96.200376][ T2067] handle_mm_fault+0x1017/0x1ba0 [ 96.200394][ T2067] ? __cfi_handle_mm_fault+0x10/0x10 [ 96.200408][ T2067] ? lock_vma_under_rcu+0x4cf/0x590 [ 96.200425][ T2067] ? __se_sys_futex+0x13c/0x320 [ 96.200443][ T2067] do_user_addr_fault+0x951/0x1230 [ 96.200455][ T2067] ? __cfi_ksys_write+0x10/0x10 [ 96.200470][ T2067] ? fpregs_restore_userregs+0x11c/0x260 [ 96.200486][ T2067] exc_page_fault+0x58/0xc0 [ 96.200503][ T2067] asm_exc_page_fault+0x2b/0x30 [ 96.200519][ T2067] RIP: 0033:0x7ffaaca52c47 [ 96.200531][ T2067] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 [ 96.200544][ T2067] RSP: 002b:00007ffaad9d2fd0 EFLAGS: 00010246 [ 96.200558][ T2067] RAX: 00007ffaaca52c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 96.200568][ T2067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.200577][ T2067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.200585][ T2067] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 96.200593][ T2067] R13: 00007ffaace26038 R14: 00007ffaace25fa0 R15: 00007fff37a746f8 [ 96.200605][ T2067] [ 96.201076][ T2067] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 96.235570][ T36] audit: type=1400 audit(1789815668.780:329): avc: denied { mounton } for pid=2068 comm="syz.4.650" path="/14/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.240248][ T2069] ./dev/sda1: Can't lookup blockdev [ 96.584279][ T852] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 96.704275][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.734303][ T852] usb 1-1: Using ep0 maxpacket: 16 [ 96.740674][ T852] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 96.749027][ T852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.759337][ T852] usb 1-1: config 0 has no interface number 0 [ 96.765555][ T852] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 96.775582][ T852] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.786231][ T852] usb 1-1: config 0 interface 98 has no altsetting 0 [ 96.794501][ T852] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 96.803673][ T852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.811715][ T852] usb 1-1: Product: syz [ 96.816030][ T852] usb 1-1: Manufacturer: syz [ 96.820642][ T852] usb 1-1: SerialNumber: syz [ 96.826092][ T852] usb 1-1: config 0 descriptor?? [ 96.831516][ T2065] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.838891][ T2065] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.864271][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 96.870628][ T65] usb 5-1: config 0 has no interfaces? [ 96.876279][ T65] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 96.885670][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.894311][ T65] usb 5-1: config 0 descriptor?? [ 97.047707][ T2065] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.055688][ T2065] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.102440][ T2073] FAULT_INJECTION: forcing a failure. [ 97.102440][ T2073] name failslab, interval 1, probability 0, space 0, times 0 [ 97.116003][ T2073] CPU: 1 UID: 0 PID: 2073 Comm: syz.4.651 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 97.116040][ T2073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.116064][ T2073] Call Trace: [ 97.116073][ T2073] [ 97.116083][ T2073] __dump_stack+0x21/0x30 [ 97.116119][ T2073] dump_stack_lvl+0x140/0x1c0 [ 97.116149][ T2073] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.116171][ T2073] dump_stack+0x19/0x20 [ 97.116188][ T2073] should_fail_ex+0x3c2/0x510 [ 97.116205][ T2073] should_failslab+0xac/0x100 [ 97.116228][ T2073] kmem_cache_alloc_noprof+0x42/0x410 [ 97.116252][ T2073] ? copy_sighand+0x115/0x2c0 [ 97.116278][ T2073] ? copy_signal+0x5d/0x6a0 [ 97.116302][ T2073] ? __asan_memcpy+0x5a/0x80 [ 97.116317][ T2073] copy_signal+0x5d/0x6a0 [ 97.116332][ T2073] copy_process+0x1278/0x3350 [ 97.116349][ T2073] ? __cfi_copy_process+0x10/0x10 [ 97.116366][ T2073] ? selinux_socket_setsockopt+0x324/0x3d0 [ 97.116395][ T2073] kernel_clone+0x233/0x810 [ 97.116424][ T2073] ? __cfi_kernel_clone+0x10/0x10 [ 97.116450][ T2073] ? do_futex+0x32a/0x510 [ 97.116469][ T2073] __x64_sys_clone+0x1b7/0x230 [ 97.116486][ T2073] ? __cfi___x64_sys_clone+0x10/0x10 [ 97.116511][ T2073] ? __kasan_check_write+0x18/0x20 [ 97.116532][ T2073] ? fpregs_restore_userregs+0x11c/0x260 [ 97.116560][ T2073] ? switch_fpu_return+0x12/0x20 [ 97.116587][ T2073] x64_sys_call+0x2b3c/0x2ee0 [ 97.116605][ T2073] do_syscall_64+0x57/0xf0 [ 97.116618][ T2073] ? clear_bhb_loop+0x50/0xa0 [ 97.116634][ T2073] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.116650][ T2073] RIP: 0033:0x7f5693d9e159 [ 97.116664][ T2073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.116683][ T2073] RSP: 002b:00007f5694c67fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 97.116709][ T2073] RAX: ffffffffffffffda RBX: 00007f5694025fa0 RCX: 00007f5693d9e159 [ 97.116727][ T2073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 97.116757][ T2073] RBP: 00007f5693e3506b R08: 0000000000000000 R09: 0000000000000000 [ 97.116767][ T2073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.116775][ T2073] R13: 00007f5694026038 R14: 00007f5694025fa0 R15: 00007ffdd2624aa8 [ 97.116791][ T2073] [ 97.118227][ T65] usb 5-1: USB disconnect, device number 3 [ 97.263605][ T2065] netlink: 'syz.0.648': attribute type 4 has an invalid length. [ 97.368106][ T2065] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.648'. [ 97.535502][ T852] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.546515][ T852] asix 1-1:0.98: probe with driver asix failed with error -71 [ 97.556180][ T852] usb 1-1: USB disconnect, device number 28 [ 97.592201][ T312] usb 2-1: USB disconnect, device number 19 [ 97.650407][ T2081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 97.687294][ T2084] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 97.723873][ T2089] FAULT_INJECTION: forcing a failure. [ 97.723873][ T2089] name failslab, interval 1, probability 0, space 0, times 0 [ 97.736829][ T2089] CPU: 0 UID: 0 PID: 2089 Comm: syz.4.657 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 97.736869][ T2089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.736883][ T2089] Call Trace: [ 97.736892][ T2089] [ 97.736902][ T2089] __dump_stack+0x21/0x30 [ 97.736937][ T2089] dump_stack_lvl+0x140/0x1c0 [ 97.736966][ T2089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.736998][ T2089] dump_stack+0x19/0x20 [ 97.737027][ T2089] should_fail_ex+0x3c2/0x510 [ 97.737053][ T2089] should_failslab+0xac/0x100 [ 97.737078][ T2089] __kmalloc_node_noprof+0x69/0x500 [ 97.737102][ T2089] ? crypto_create_tfm_node+0xa0/0x4d0 [ 97.737126][ T2089] crypto_create_tfm_node+0xa0/0x4d0 [ 97.737148][ T2089] ? __kasan_check_write+0x18/0x20 [ 97.737170][ T2089] crypto_init_akcipher_ops_sig+0x5f/0xe0 [ 97.737202][ T2089] crypto_sig_init_tfm+0x70/0x90 [ 97.737225][ T2089] crypto_create_tfm_node+0x19c/0x4d0 [ 97.737247][ T2089] crypto_alloc_tfm_node+0x166/0x350 [ 97.737269][ T2089] crypto_alloc_sig+0x34/0x40 [ 97.737290][ T2089] public_key_verify_signature+0x273/0xa40 [ 97.737323][ T2089] ? __cfi_public_key_verify_signature+0x10/0x10 [ 97.737355][ T2089] ? asymmetric_key_generate_id+0x127/0x220 [ 97.737383][ T2089] x509_check_for_self_signed+0x367/0x470 [ 97.737405][ T2089] x509_cert_parse+0x649/0xbd0 [ 97.737435][ T2089] x509_key_preparse+0x6a/0x880 [ 97.737455][ T2089] ? __cfi_down_read+0x10/0x10 [ 97.737482][ T2089] asymmetric_key_preparse+0xb6/0x100 [ 97.737510][ T2089] __key_create_or_update+0x430/0xa90 [ 97.737529][ T2089] ? security_key_permission+0x3d/0x100 [ 97.737551][ T2089] ? key_create_or_update+0x70/0x70 [ 97.737570][ T2089] ? __kasan_kmalloc+0x96/0xb0 [ 97.737597][ T2089] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 97.737626][ T2089] key_create_or_update+0x47/0x70 [ 97.737645][ T2089] __se_sys_add_key+0x355/0x4b0 [ 97.737669][ T2089] ? __x64_sys_add_key+0xf0/0xf0 [ 97.737692][ T2089] __x64_sys_add_key+0xc3/0xf0 [ 97.737715][ T2089] x64_sys_call+0x195f/0x2ee0 [ 97.737735][ T2089] do_syscall_64+0x57/0xf0 [ 97.737754][ T2089] ? clear_bhb_loop+0x50/0xa0 [ 97.737786][ T2089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.737811][ T2089] RIP: 0033:0x7f5693d9e159 [ 97.737829][ T2089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.737848][ T2089] RSP: 002b:00007f5694c68028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 97.737874][ T2089] RAX: ffffffffffffffda RBX: 00007f5694025fa0 RCX: 00007f5693d9e159 [ 97.737891][ T2089] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 97.737907][ T2089] RBP: 00007f5694c68090 R08: ffffffffffffffff R09: 0000000000000000 [ 97.737923][ T2089] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002 [ 97.737939][ T2089] R13: 00007f5694026038 R14: 00007f5694025fa0 R15: 00007ffdd2624aa8 [ 97.737957][ T2089] [ 98.216480][ T36] audit: type=1400 audit(1789815670.770:330): avc: denied { audit_write } for pid=2103 comm="syz.1.664" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.237794][ T36] audit: type=1107 audit(1789815670.770:331): pid=2103 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 98.304295][ T65] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 98.364312][ T312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 98.454322][ T852] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 98.463127][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.474296][ T65] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 98.483487][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.514234][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 98.520608][ T312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.530807][ T312] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.541312][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 98.550510][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.558547][ T312] usb 3-1: Product: syz [ 98.562719][ T312] usb 3-1: Manufacturer: syz [ 98.567464][ T312] usb 3-1: SerialNumber: syz [ 98.572842][ T312] usb 3-1: config 0 descriptor?? [ 98.614292][ T852] usb 2-1: device descriptor read/64, error -71 [ 98.854303][ T852] usb 2-1: device descriptor read/64, error -71 [ 98.906911][ T2093] netlink: 316 bytes leftover after parsing attributes in process `syz.0.659'. [ 98.916296][ T2093] netlink: 316 bytes leftover after parsing attributes in process `syz.0.659'. [ 98.927301][ T65] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 98.937330][ T65] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 98.949474][ T65] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0005/input/input16 [ 99.094265][ T852] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 99.127962][ T2093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.136792][ T2093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.224301][ T852] usb 2-1: device descriptor read/64, error -71 [ 99.455284][ T65] usb 1-1: USB disconnect, device number 29 [ 99.464338][ T852] usb 2-1: device descriptor read/64, error -71 [ 99.592364][ T852] usb usb2-port1: attempt power cycle [ 99.649129][ T2120] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 99.934255][ T852] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 99.955475][ T852] usb 2-1: device descriptor read/8, error -71 [ 100.017173][ T2125] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 100.095695][ T852] usb 2-1: device descriptor read/8, error -71 [ 100.334262][ T852] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 100.355396][ T852] usb 2-1: device descriptor read/8, error -71 [ 100.485389][ T852] usb 2-1: device descriptor read/8, error -71 [ 100.594488][ T852] usb usb2-port1: unable to enumerate USB device [ 100.656795][ T2136] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 100.758791][ T2143] ./dev/sda1: Can't lookup blockdev [ 101.006247][ T2163] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 101.145683][ T472] usb 3-1: USB disconnect, device number 19 [ 101.181920][ T852] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.344272][ T852] usb 5-1: Using ep0 maxpacket: 8 [ 101.350712][ T852] usb 5-1: config 0 has no interfaces? [ 101.356540][ T852] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.365791][ T852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.374962][ T852] usb 5-1: config 0 descriptor?? [ 101.504288][ T472] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 101.586453][ T312] usb 5-1: USB disconnect, device number 4 [ 101.614286][ T65] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 101.664260][ T472] usb 3-1: Using ep0 maxpacket: 8 [ 101.670655][ T472] usb 3-1: config 0 has no interfaces? [ 101.676269][ T472] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.685814][ T472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.694971][ T472] usb 3-1: config 0 descriptor?? [ 101.750008][ T2173] ./dev/sda1: Can't lookup blockdev [ 101.784380][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 101.790717][ T65] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.799538][ T65] usb 2-1: config 0 has no interface number 0 [ 101.806038][ T65] usb 2-1: config 0 interface 184 has no altsetting 0 [ 101.814448][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.823524][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.831897][ T65] usb 2-1: Product: syz [ 101.836295][ T65] usb 2-1: Manufacturer: syz [ 101.840917][ T65] usb 2-1: SerialNumber: syz [ 101.846980][ T65] usb 2-1: config 0 descriptor?? [ 101.855440][ T65] smsc75xx v1.0.0 [ 101.912193][ T2168] FAULT_INJECTION: forcing a failure. [ 101.912193][ T2168] name failslab, interval 1, probability 0, space 0, times 0 [ 101.927387][ T2168] CPU: 1 UID: 0 PID: 2168 Comm: syz.2.689 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 101.927423][ T2168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.927437][ T2168] Call Trace: [ 101.927445][ T2168] [ 101.927455][ T2168] __dump_stack+0x21/0x30 [ 101.927491][ T2168] dump_stack_lvl+0x140/0x1c0 [ 101.927523][ T2168] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.927557][ T2168] dump_stack+0x19/0x20 [ 101.927586][ T2168] should_fail_ex+0x3c2/0x510 [ 101.927613][ T2168] should_failslab+0xac/0x100 [ 101.927640][ T2168] kmem_cache_alloc_noprof+0x42/0x410 [ 101.927663][ T2168] ? copy_sighand+0x115/0x2c0 [ 101.927689][ T2168] ? copy_signal+0x5d/0x6a0 [ 101.927715][ T2168] ? __asan_memcpy+0x5a/0x80 [ 101.927737][ T2168] copy_signal+0x5d/0x6a0 [ 101.927761][ T2168] copy_process+0x1278/0x3350 [ 101.927791][ T2168] ? __cfi_copy_process+0x10/0x10 [ 101.927818][ T2168] ? selinux_socket_setsockopt+0x324/0x3d0 [ 101.927849][ T2168] kernel_clone+0x233/0x810 [ 101.927874][ T2168] ? __cfi_kernel_clone+0x10/0x10 [ 101.927902][ T2168] ? do_futex+0x32a/0x510 [ 101.927930][ T2168] __x64_sys_clone+0x1b7/0x230 [ 101.927956][ T2168] ? __cfi___x64_sys_clone+0x10/0x10 [ 101.927983][ T2168] ? __kasan_check_write+0x18/0x20 [ 101.928006][ T2168] ? fpregs_restore_userregs+0x11c/0x260 [ 101.928033][ T2168] ? switch_fpu_return+0x12/0x20 [ 101.928058][ T2168] x64_sys_call+0x2b3c/0x2ee0 [ 101.928079][ T2168] do_syscall_64+0x57/0xf0 [ 101.928110][ T2168] ? clear_bhb_loop+0x50/0xa0 [ 101.928139][ T2168] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.928166][ T2168] RIP: 0033:0x7ffaacb9e159 [ 101.928186][ T2168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.928205][ T2168] RSP: 002b:00007ffaad9d2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 101.928231][ T2168] RAX: ffffffffffffffda RBX: 00007ffaace25fa0 RCX: 00007ffaacb9e159 [ 101.928248][ T2168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 101.928262][ T2168] RBP: 00007ffaacc3506b R08: 0000000000000000 R09: 0000000000000000 [ 101.928278][ T2168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.928292][ T2168] R13: 00007ffaace26038 R14: 00007ffaace25fa0 R15: 00007fff37a746f8 [ 101.928313][ T2168] [ 101.932493][ T312] usb 3-1: USB disconnect, device number 20 [ 102.287878][ T2187] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 102.567991][ T2193] ./dev/sda1: Can't lookup blockdev [ 102.664265][ T312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.824226][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 102.833483][ T312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.843760][ T312] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.862102][ T312] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 102.865058][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 102.873109][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.891533][ T312] usb 5-1: Product: syz [ 102.896192][ T312] usb 5-1: Manufacturer: syz [ 102.897738][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 102.901093][ T312] usb 5-1: SerialNumber: syz [ 102.919527][ T312] usb 5-1: config 0 descriptor?? [ 103.111661][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 103.123002][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 103.133255][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 103.143723][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 103.153519][ T65] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 103.169294][ T65] usb 2-1: USB disconnect, device number 24 [ 103.654559][ T2214] ./dev/sda1: Can't lookup blockdev [ 104.504821][ T2224] netlink: 'syz.2.712': attribute type 27 has an invalid length. [ 104.870031][ T2238] ./dev/sda1: Can't lookup blockdev [ 105.066345][ T2243] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 105.205357][ T36] audit: type=1400 audit(1789815677.760:332): avc: denied { write } for pid=2253 comm="syz.1.724" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.256259][ T36] audit: type=1400 audit(1789815677.770:333): avc: denied { ioctl } for pid=2253 comm="syz.1.724" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.285083][ T36] audit: type=1400 audit(1789815677.800:334): avc: denied { ioctl } for pid=2253 comm="syz.1.724" path="socket:[24432]" dev="sockfs" ino=24432 ioctlcmd=0x7702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.438331][ T65] usb 5-1: USB disconnect, device number 5 [ 105.588730][ T2269] ./dev/sda1: Can't lookup blockdev [ 105.750171][ T2272] FAULT_INJECTION: forcing a failure. [ 105.750171][ T2272] name failslab, interval 1, probability 0, space 0, times 0 [ 105.763315][ T2272] CPU: 1 UID: 0 PID: 2272 Comm: syz.1.729 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 105.763354][ T2272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.763369][ T2272] Call Trace: [ 105.763377][ T2272] [ 105.763386][ T2272] __dump_stack+0x21/0x30 [ 105.763422][ T2272] dump_stack_lvl+0x140/0x1c0 [ 105.763451][ T2272] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.763481][ T2272] ? kasan_save_track+0x4f/0x80 [ 105.763506][ T2272] ? kasan_save_alloc_info+0x3a/0x50 [ 105.763526][ T2272] ? __kasan_slab_alloc+0x73/0x90 [ 105.763553][ T2272] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 105.763589][ T2272] dump_stack+0x19/0x20 [ 105.763616][ T2272] should_fail_ex+0x3c2/0x510 [ 105.763643][ T2272] should_failslab+0xac/0x100 [ 105.763670][ T2272] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 105.763694][ T2272] ? shmem_alloc_inode+0x3b/0xd0 [ 105.763723][ T2272] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 105.763748][ T2272] shmem_alloc_inode+0x3b/0xd0 [ 105.763774][ T2272] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 105.763801][ T2272] alloc_inode+0x7a/0x270 [ 105.763845][ T2272] new_inode+0x25/0x1e0 [ 105.763873][ T2272] shmem_get_inode+0x352/0xc10 [ 105.763900][ T2272] __shmem_file_setup+0x173/0x2c0 [ 105.763926][ T2272] shmem_zero_setup+0x90/0x130 [ 105.763950][ T2272] mmap_region+0x1659/0x1d10 [ 105.763975][ T2272] ? __kernel_text_address+0x11/0x40 [ 105.764004][ T2272] ? __cfi_mmap_region+0x10/0x10 [ 105.764029][ T2272] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 105.764056][ T2272] ? __kasan_check_read+0x15/0x20 [ 105.764079][ T2272] ? __get_unmapped_area+0x406/0x470 [ 105.764101][ T2272] do_mmap+0xb61/0x13b0 [ 105.764124][ T2272] ? __cfi_do_mmap+0x10/0x10 [ 105.764145][ T2272] ? down_write_killable+0xee/0x2d0 [ 105.764178][ T2272] ? __cfi_down_write_killable+0x10/0x10 [ 105.764207][ T2272] vm_mmap_pgoff+0x367/0x4b0 [ 105.764228][ T2272] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 105.764248][ T2272] ? ksys_write+0x1f3/0x260 [ 105.764274][ T2272] ksys_mmap_pgoff+0xfa/0x1e0 [ 105.764295][ T2272] __x64_sys_mmap+0x121/0x140 [ 105.764317][ T2272] x64_sys_call+0x13bf/0x2ee0 [ 105.764337][ T2272] do_syscall_64+0x57/0xf0 [ 105.764357][ T2272] ? clear_bhb_loop+0x50/0xa0 [ 105.764383][ T2272] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.764408][ T2272] RIP: 0033:0x7fda5c19e159 [ 105.764428][ T2272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.764449][ T2272] RSP: 002b:00007fda5d130028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.764474][ T2272] RAX: ffffffffffffffda RBX: 00007fda5c425fa0 RCX: 00007fda5c19e159 [ 105.764491][ T2272] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 105.764508][ T2272] RBP: 00007fda5d130090 R08: ffffffffffffffff R09: 0000000000000000 [ 105.764524][ T2272] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000001 [ 105.764538][ T2272] R13: 00007fda5c426038 R14: 00007fda5c425fa0 R15: 00007ffca3c87ad8 [ 105.764559][ T2272] [ 106.348855][ T2289] ./dev/sda1: Can't lookup blockdev [ 106.505146][ T65] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 106.664303][ T472] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.674389][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 106.680770][ T65] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.689224][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.699792][ T65] usb 2-1: config 0 has no interface number 0 [ 106.706086][ T65] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 106.716211][ T65] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.729513][ T65] usb 2-1: config 0 interface 184 has no altsetting 0 [ 106.738342][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.747707][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.755917][ T65] usb 2-1: Product: syz [ 106.760420][ T65] usb 2-1: Manufacturer: syz [ 106.765197][ T65] usb 2-1: SerialNumber: syz [ 106.774322][ T65] usb 2-1: config 0 descriptor?? [ 106.782176][ T65] smsc75xx v1.0.0 [ 106.786104][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 106.796754][ T65] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 106.824260][ T472] usb 5-1: Using ep0 maxpacket: 32 [ 106.830870][ T472] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.839378][ T472] usb 5-1: config 0 has no interface number 0 [ 106.845859][ T472] usb 5-1: config 0 interface 184 has no altsetting 0 [ 106.854787][ T472] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.864126][ T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.872201][ T472] usb 5-1: Product: syz [ 106.876855][ T472] usb 5-1: Manufacturer: syz [ 106.881545][ T472] usb 5-1: SerialNumber: syz [ 106.894493][ T472] usb 5-1: config 0 descriptor?? [ 106.902429][ T472] smsc75xx v1.0.0 [ 107.354229][ T312] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 107.505786][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.513511][ T312] usb 3-1: can't read configurations, error -61 [ 107.644326][ T312] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 107.808413][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.816213][ T312] usb 3-1: can't read configurations, error -61 [ 107.822755][ T312] usb usb3-port1: attempt power cycle [ 107.924914][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.935786][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.145824][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 108.156712][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 108.166981][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 108.174690][ T312] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 108.177397][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 108.194930][ T472] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 108.206737][ T472] usb 5-1: USB disconnect, device number 6 [ 108.216561][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.234224][ T312] usb 3-1: can't read configurations, error -61 [ 108.364249][ T312] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 108.394140][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.401824][ T312] usb 3-1: can't read configurations, error -61 [ 108.408601][ T312] usb usb3-port1: unable to enumerate USB device [ 109.236860][ T45] usb 2-1: USB disconnect, device number 25 [ 109.266143][ T2310] capability: warning: `syz.1.745' uses 32-bit capabilities (legacy support in use) [ 109.380570][ T36] audit: type=1400 audit(1789815681.930:335): avc: denied { connect } for pid=2312 comm="syz.1.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.387385][ T2313] FAULT_INJECTION: forcing a failure. [ 109.387385][ T2313] name failslab, interval 1, probability 0, space 0, times 0 [ 109.413179][ T2313] CPU: 0 UID: 0 PID: 2313 Comm: syz.1.746 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 109.413221][ T2313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.413236][ T2313] Call Trace: [ 109.413245][ T2313] [ 109.413256][ T2313] __dump_stack+0x21/0x30 [ 109.413295][ T2313] dump_stack_lvl+0x140/0x1c0 [ 109.413326][ T2313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.413359][ T2313] ? __kasan_kmalloc+0x96/0xb0 [ 109.413402][ T2313] dump_stack+0x19/0x20 [ 109.413432][ T2313] should_fail_ex+0x3c2/0x510 [ 109.413463][ T2313] should_failslab+0xac/0x100 [ 109.413493][ T2313] __kmalloc_node_noprof+0x69/0x500 [ 109.413519][ T2313] ? __kvmalloc_node_noprof+0x128/0x300 [ 109.413541][ T2313] __kvmalloc_node_noprof+0x128/0x300 [ 109.413563][ T2313] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 109.413585][ T2313] ? __kasan_check_write+0x18/0x20 [ 109.413608][ T2313] ? _raw_spin_lock+0x92/0x120 [ 109.413630][ T2313] ? __cfi__raw_spin_lock+0x10/0x10 [ 109.413650][ T2313] simple_xattr_alloc+0x67/0x140 [ 109.413676][ T2313] shmem_initxattrs+0x24f/0x530 [ 109.413707][ T2313] ? security_inode_init_security+0x11c/0x600 [ 109.413739][ T2313] security_inode_init_security+0x434/0x600 [ 109.413767][ T2313] ? __cfi_shmem_initxattrs+0x10/0x10 [ 109.413798][ T2313] ? __cfi_security_inode_init_security+0x10/0x10 [ 109.413826][ T2313] ? shmem_get_inode+0x812/0xc10 [ 109.413855][ T2313] shmem_symlink+0xe4/0x4e0 [ 109.413881][ T2313] ? selinux_inode_symlink+0x26/0x30 [ 109.413909][ T2313] vfs_symlink+0x3f4/0x620 [ 109.413927][ T2313] do_symlinkat+0x1ba/0x400 [ 109.413946][ T2313] ? __cfi_do_symlinkat+0x10/0x10 [ 109.413965][ T2313] ? __kasan_check_write+0x18/0x20 [ 109.413986][ T2313] ? getname_flags+0x203/0x6b0 [ 109.414011][ T2313] ? __kasan_check_write+0x18/0x20 [ 109.414036][ T2313] __x64_sys_symlinkat+0x99/0xb0 [ 109.414057][ T2313] x64_sys_call+0x1f79/0x2ee0 [ 109.414083][ T2313] do_syscall_64+0x57/0xf0 [ 109.414106][ T2313] ? clear_bhb_loop+0x50/0xa0 [ 109.414134][ T2313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.414160][ T2313] RIP: 0033:0x7fda5c19e159 [ 109.414179][ T2313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.414198][ T2313] RSP: 002b:00007fda5d130028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 109.414223][ T2313] RAX: ffffffffffffffda RBX: 00007fda5c425fa0 RCX: 00007fda5c19e159 [ 109.414241][ T2313] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 0000200000000080 [ 109.414257][ T2313] RBP: 00007fda5c23506b R08: 0000000000000000 R09: 0000000000000000 [ 109.414272][ T2313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.414286][ T2313] R13: 00007fda5c426038 R14: 00007fda5c425fa0 R15: 00007ffca3c87ad8 [ 109.414307][ T2313] [ 109.424240][ T36] audit: type=1400 audit(1789815681.940:336): avc: denied { read } for pid=2312 comm="syz.1.746" path="socket:[25623]" dev="sockfs" ino=25623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.744221][ T36] audit: type=1400 audit(1789815682.290:337): avc: denied { write } for pid=2316 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.980203][ T36] audit: type=1400 audit(1789815682.530:338): avc: denied { setcurrent } for pid=2327 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.044358][ T2329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2329 comm=syz.1.753 [ 110.064239][ T472] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.078924][ T36] audit: type=1400 audit(1789815682.630:339): avc: denied { sqpoll } for pid=2327 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.214220][ T472] usb 5-1: Using ep0 maxpacket: 32 [ 110.225275][ T472] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 110.233571][ T472] usb 5-1: config 0 has no interface number 0 [ 110.253773][ T472] usb 5-1: config 0 interface 184 has no altsetting 0 [ 110.262222][ T472] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 110.274199][ T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.292374][ T472] usb 5-1: Product: syz [ 110.296630][ T472] usb 5-1: Manufacturer: syz [ 110.301328][ T472] usb 5-1: SerialNumber: syz [ 110.315087][ T472] usb 5-1: config 0 descriptor?? [ 110.331485][ T472] smsc75xx v1.0.0 [ 110.524232][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 110.674226][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 110.685207][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 110.693423][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.724227][ T45] usb 3-1: config 0 has no interface number 0 [ 110.730403][ T45] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 110.764220][ T45] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.794212][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 110.802587][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 110.812018][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.824279][ T45] usb 3-1: Product: syz [ 110.828660][ T45] usb 3-1: Manufacturer: syz [ 110.833628][ T45] usb 3-1: SerialNumber: syz [ 110.855021][ T45] usb 3-1: config 0 descriptor?? [ 110.874368][ T45] smsc75xx v1.0.0 [ 110.878414][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 110.894453][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 111.155655][ T2339] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.162959][ T2339] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.170550][ T2339] bridge_slave_0: entered allmulticast mode [ 111.177687][ T2339] bridge_slave_0: entered promiscuous mode [ 111.184771][ T2339] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.191871][ T2339] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.199474][ T2339] bridge_slave_1: entered allmulticast mode [ 111.206291][ T2339] bridge_slave_1: entered promiscuous mode [ 111.283218][ T2339] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.290351][ T2339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.297715][ T2339] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.304970][ T2339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.337741][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.345169][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 111.357286][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.357414][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.377014][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.384077][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.394518][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.401588][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.437211][ T2339] veth0_vlan: entered promiscuous mode [ 111.460720][ T2339] veth1_macvtap: entered promiscuous mode [ 111.567950][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 111.580557][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 111.590750][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 111.601285][ T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 111.610971][ T472] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 111.626725][ T472] usb 5-1: USB disconnect, device number 7 [ 111.774366][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.924242][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 111.931359][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.942011][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.952857][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.962321][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.971110][ T65] usb 6-1: Product: syz [ 111.975821][ T65] usb 6-1: Manufacturer: syz [ 111.980455][ T65] usb 6-1: SerialNumber: syz [ 112.206205][ T2345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.757'. [ 112.614253][ T45] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 112.765874][ T45] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 112.784414][ T45] usb 5-1: config 0 has no interface number 0 [ 112.793995][ T45] usb 5-1: config 0 interface 41 has no altsetting 0 [ 112.806052][ T45] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 112.815884][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.824695][ T45] usb 5-1: Product: syz [ 112.829209][ T45] usb 5-1: Manufacturer: syz [ 112.834028][ T45] usb 5-1: SerialNumber: syz [ 112.840339][ T45] usb 5-1: config 0 descriptor?? [ 112.990441][ T46] bridge_slave_1: left allmulticast mode [ 112.996835][ T46] bridge_slave_1: left promiscuous mode [ 113.002941][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.011391][ T46] bridge_slave_0: left allmulticast mode [ 113.023889][ T46] bridge_slave_0: left promiscuous mode [ 113.031986][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.142266][ T312] usb 3-1: USB disconnect, device number 25 [ 113.184467][ T46] veth1_macvtap: left promiscuous mode [ 113.190154][ T46] veth0_vlan: left promiscuous mode [ 113.526232][ T46] ------------[ cut here ]------------ [ 113.531803][ T46] WARNING: CPU: 1 PID: 46 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 113.541835][ T46] Modules linked in: [ 113.545834][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 113.557547][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.567675][ T46] Workqueue: netns cleanup_net [ 113.572710][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 113.579005][ T46] Code: e8 e1 86 d5 fc 4b 83 3c 3e 00 75 19 e8 55 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 47 a3 7c fc 49 83 c7 08 eb c9 e8 3c a3 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 113.599507][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 113.605651][ T46] RAX: ffffffff850ad734 RBX: ffff888130588000 RCX: ffff88810ba41300 [ 113.613669][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103fd4000 [ 113.621728][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 113.629946][ T46] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: dffffc0000000000 [ 113.638081][ T46] R13: dffffc0000000000 R14: ffff888103fd4000 R15: 0000000000000000 [ 113.646283][ T46] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 113.655524][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.662640][ T46] CR2: 00007ffaad958060 CR3: 000000012e626000 CR4: 00000000003526b0 [ 113.670881][ T46] Call Trace: [ 113.674233][ T46] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 113.677518][ T46] cleanup_net+0x6ba/0xc90 [ 113.682037][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 113.687091][ T46] ? kick_pool+0x3b7/0x540 [ 113.691860][ T46] process_scheduled_works+0x7f4/0x1060 [ 113.697565][ T46] worker_thread+0xc99/0x13f0 [ 113.702390][ T46] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 113.708221][ T46] ? __kasan_check_read+0x15/0x20 [ 113.713320][ T46] kthread+0x2c4/0x360 [ 113.717462][ T46] ? __cfi_worker_thread+0x10/0x10 [ 113.722646][ T46] ? __cfi_kthread+0x10/0x10 [ 113.727790][ T46] ret_from_fork+0x64/0xa0 [ 113.732299][ T46] ? __cfi_kthread+0x10/0x10 [ 113.736988][ T46] ret_from_fork_asm+0x1a/0x30 [ 113.742137][ T46] [ 113.745195][ T46] ---[ end trace 0000000000000000 ]--- [ 113.750072][ T36] audit: type=1400 audit(1789815686.220:340): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1769]" dev="pipefs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 113.764835][ T45] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 113.779537][ T46] ------------[ cut here ]------------ [ 113.789687][ T45] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 113.794958][ T46] WARNING: CPU: 0 PID: 46 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 113.805864][ T45] usb 5-1: USB disconnect, device number 8 [ 113.815910][ T46] Modules linked in: [ 113.826769][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 113.840293][ T46] Tainted: [W]=WARN [ 113.844135][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.854814][ T46] Workqueue: netns cleanup_net [ 113.859621][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 113.865884][ T46] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 f2 a2 7c fc 49 83 c7 08 eb c5 e8 e7 a2 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 a2 7c fc 5b 41 5c 41 5e 41 [ 113.885789][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 113.892094][ T46] RAX: ffffffff850ad789 RBX: ffff888103fd4800 RCX: ffff88810ba41300 [ 113.900119][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103fd4810 [ 113.908382][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 113.916533][ T46] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: dffffc0000000000 [ 113.924830][ T46] R13: dffffc0000000000 R14: ffff888103fd4000 R15: 0000000000000010 [ 113.932830][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 113.941797][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.948527][ T46] CR2: 00007ffd87906f9c CR3: 000000010c30a000 CR4: 00000000003526b0 [ 113.956621][ T46] Call Trace: [ 113.960063][ T46] [ 113.963019][ T46] cleanup_net+0x6ba/0xc90 [ 113.968065][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 113.973094][ T46] ? kick_pool+0x3b7/0x540 [ 113.977569][ T46] process_scheduled_works+0x7f4/0x1060 [ 113.983241][ T46] worker_thread+0xc99/0x13f0 [ 113.988054][ T46] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 113.993851][ T46] ? __kasan_check_read+0x15/0x20 [ 113.999062][ T46] kthread+0x2c4/0x360 [ 114.003344][ T46] ? __cfi_worker_thread+0x10/0x10 [ 114.008626][ T46] ? __cfi_kthread+0x10/0x10 [ 114.013651][ T46] ret_from_fork+0x64/0xa0 [ 114.018265][ T46] ? __cfi_kthread+0x10/0x10 [ 114.023162][ T46] ret_from_fork_asm+0x1a/0x30 [ 114.028012][ T46] [ 114.031955][ T46] ---[ end trace 0000000000000000 ]--- [ 114.116655][ T46] ------------[ cut here ]------------ [ 114.122177][ T46] WARNING: CPU: 1 PID: 46 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 114.131675][ T46] Modules linked in: [ 114.135630][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 114.148720][ T46] Tainted: [W]=WARN [ 114.152549][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.162933][ T46] Workqueue: netns cleanup_net [ 114.167850][ T46] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 114.173462][ T46] Code: 3c 20 00 74 08 48 89 df e8 ff 44 f0 fc 48 8b 3b e8 47 35 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 98 b7 00 cc e8 62 61 97 fc <0f> 0b e9 b0 fd ff ff e8 56 61 97 fc 0f 0b e9 18 fe ff ff e8 4a 61 [ 114.193424][ T46] RSP: 0018:ffffc900002ffb70 EFLAGS: 00010293 [ 114.199547][ T46] RAX: ffffffff84f0190e RBX: ffff888130588000 RCX: ffff88810ba41300 [ 114.207711][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810ba41300 [ 114.215913][ T46] RBP: ffffc900002ffb98 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 114.223919][ T46] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: 1ffffffff0fa8534 [ 114.232121][ T46] R13: dffffc0000000000 R14: ffff888130588c00 R15: dffffc0000000000 [ 114.240238][ T46] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 114.249358][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.256180][ T46] CR2: 00007ffaad958060 CR3: 000000010cb6e000 CR4: 00000000003526b0 [ 114.264233][ T46] Call Trace: [ 114.267530][ T46] [ 114.270482][ T46] xfrm_net_exit+0x31/0x80 [ 114.275073][ T46] cleanup_net+0x6ba/0xc90 [ 114.279531][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 114.284520][ T46] ? kick_pool+0x3b7/0x540 [ 114.288971][ T46] process_scheduled_works+0x7f4/0x1060 [ 114.294581][ T46] worker_thread+0xc99/0x13f0 [ 114.299459][ T46] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 114.305267][ T46] ? __kasan_check_read+0x15/0x20 [ 114.310686][ T46] kthread+0x2c4/0x360 [ 114.314907][ T46] ? __cfi_worker_thread+0x10/0x10 [ 114.320221][ T46] ? __cfi_kthread+0x10/0x10 [ 114.324942][ T46] ret_from_fork+0x64/0xa0 [ 114.329411][ T46] ? __cfi_kthread+0x10/0x10 [ 114.334027][ T46] ret_from_fork_asm+0x1a/0x30 [ 114.339144][ T46] [ 114.342297][ T46] ---[ end trace 0000000000000000 ]--- [ 114.427793][ T65] usb 6-1: 0:2 : does not exist [ 114.442898][ T65] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 114.452504][ T46] bridge_slave_1: left allmulticast mode [ 114.459623][ T46] bridge_slave_1: left promiscuous mode [ 114.466023][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.497542][ T65] usb 6-1: USB disconnect, device number 2 [ 114.504009][ T46] bridge_slave_0: left allmulticast mode [ 114.510252][ T46] bridge_slave_0: left promiscuous mode [ 114.516127][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.617381][ T46] veth1_macvtap: left promiscuous mode [ 114.622964][ T46] veth0_vlan: left promiscuous mode [ 114.907029][ T46] bridge_slave_1: left allmulticast mode [ 114.912802][ T46] bridge_slave_1: left promiscuous mode [ 114.918490][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.926220][ T46] bridge_slave_0: left allmulticast mode [ 114.932050][ T46] bridge_slave_0: left promiscuous mode [ 114.937806][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.945549][ T46] bridge_slave_1: left allmulticast mode [ 114.951278][ T46] bridge_slave_1: left promiscuous mode [ 114.956997][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.964746][ T46] bridge_slave_0: left allmulticast mode [ 114.970398][ T46] bridge_slave_0: left promiscuous mode [ 114.976306][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.984340][ T46] bridge_slave_1: left allmulticast mode [ 114.990173][ T46] bridge_slave_1: left promiscuous mode [ 114.995900][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.003368][ T46] bridge_slave_0: left allmulticast mode [ 115.009661][ T46] bridge_slave_0: left promiscuous mode [ 115.015425][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.239061][ T46] veth1_macvtap: left promiscuous mode [ 115.244620][ T46] veth0_vlan: left promiscuous mode [ 115.250100][ T46] veth1_macvtap: left promiscuous mode [ 115.256123][ T46] veth1_macvtap: left promiscuous mode [ 115.261967][ T46] veth0_vlan: left promiscuous mode