last executing test programs: 20.04957959s ago: executing program 2 (id=216): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000180)='o', 0x1) fadvise64(r0, 0x2, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 3) 19.904239226s ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1bf) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') pread64(r0, &(0x7f0000002180)=""/9, 0xfdc5, 0x4ac) ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 19.653119998s ago: executing program 2 (id=225): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0xffffffe4, 0x0, 0x2, 0x0, 0x2}) 19.576586422s ago: executing program 2 (id=227): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x181642, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x4) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_channels={0x1, 0x1, 0x0, 0xffffffff, 0x0, 0xffffdffc, 0x3, 0xfffffffc, 0x7}}) (async) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c) (async, rerun: 64) r5 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000140)={0xc, 0x0, 0xe, 0x2}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, 0x1e, 0xe03, 0x70bd2b, 0x0, {0xa}, [@typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x2c}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000440)=@srh={0x75, 0x0, 0x4, 0x0, 0x8d, 0x50, 0x7}, 0x8) (async) pwrite64(r0, &(0x7f0000000040)=';J', 0x2, 0x9) (async) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) getsockname$packet(r6, 0x0, &(0x7f00000001c0)) (async, rerun: 64) dup2(r1, r6) (async, rerun: 32) readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/98, 0x62}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2) (rerun: 32) 19.485096206s ago: executing program 2 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/version\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/1024, 0x400) unshare(0x56050380) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003380)={'team0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000003d00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xa3, @remote, 0x1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="76b62c799ec2336e6c33882e6265da31c8240705a9198cbf73a0a093aa4999a3241585601293b1bd63b57070ef5437ca5503069961014e5cf6c6e647a34880928cc9835b98b0de9d038dacc1e827e36e185e251b33df49ea086ba3a6a866799945848ec50fb1d68e4a7c49dd7e1b06364f918cc5e9eb67dd63cc252babba94e61e9ff5a394a04c6e070f7af7fa59", 0x8e}, {&(0x7f0000001480)="773aaa25daee50ffd477c0ea8cffa30bc289fa79db882d3c3e91f87fba9221238772092e7e0af56f39d994c6026ca7f33fa064c6cfba120011f33af9afbe8c7a52b04dfdf9892bbc3d3377c60fb4ac5dccf90856738e5aaee1e6330598cf20b77ced9d7ca019ce4bc74e32fb04dc46cf2ea604075f42dd452b46a165bdc12516762891cbd9ff453af7c8123b19aa5321077e6dfff4521d473f8bb6c31d2438c3b4fd7ff08b88cc4ccafc2a1dcaaae75aebbf9f986fad2407cbf346c808d65989f6658e3da0f9742965f9275c86c07707bd6dbb6c10b9765552979880455a4059847a430bde25a668ee931011186ed351", 0xf0}, {&(0x7f0000001580)="1fa1f43b53f7ca78ecddd8e0d63093ae159f74f32a883b61479a279888ca46c9d434fd34b8732e61f28f7562b023fc38fb6e664498f485d8b1f531522eb361499c2aea00b045e380f717635b14dab1ac13a580903fd092c519ee49a268e999078bdcf3e122ef7c8fa57589083256fee505e7a6c71815f8faefa7c9e5ad47cc04b68ffcdecf2a684706aa6c5273f9a0f9ae33923f22ac5d4438b0a73265bec9504bbcf64b810cc6cbd5044b533d542ce7cdac1572f5cb6315198913b8e236c5cb31b1438c1a19", 0xc6}], 0x4, &(0x7f00000016c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}}, {{&(0x7f0000001700)={0xa, 0x4e24, 0x855, @private0, 0x1}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001740)="d4f8d02d17f6b4200dc45a06f5afe48cd6bd9c885bd95f", 0x17}, {&(0x7f0000001780)="e2c4d658e884c86efdea023a3f6dc16d6f64a9598b2b5ef33d7881d74923882b0840f7ade579a91e1f059f5c1ad7c86c29bae63fe80ce9d1fcb1c0e1d103f4b72c81e4bb794a340408", 0x49}], 0x2, &(0x7f0000003e40)=ANY=[@ANYBLOB="d80000000000004029000000360000001d1700000000000001020000c910fe88007ea0d9ca7c5a1d4bbe97db23c137ffa700000000000000000000000001c20400007fff0001000001000730000000030a0a0100c35b00000000000009000000000000000700000000000000af360000000000000100000000000000c910200100000000000000000000000000010956f3f73c2185150cc74ad5e8b389b5838cda8ab0a81f375c825a5b06c354dbfe69aee8a9ca35d0d3426c4b808f54684b8543d0f29f38fa60b5aa25338cf44ba1ac7ebbf1aec438463bdd51b7485d70c4cf75368ada48c620efe2705a901a00001400000000000000290000003e000000040000000000000088000000000000002900000039000000ce0eee0500000000fe8000000000000000000000000000bbfe8800000000000000000000000001010000000000000000000000000000000100000000000000000000ffff0a01010000000000000000000000000000000000000000000000000000000000000000000000ffffac1414bb140000000000000029000000080000000700000000000000280000000000000029000000360000002201000000000000c204000000050107000000000000000014000000000000002900000043000000"], 0x1d0}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0xadd5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001c00)="03606d69f3deaee666e4fba2f79107cab8c8f44de727d2add78b83be6de6d4f8a0cf69ed256dc135b2fc29b647adce673a43c0710b49f88563e2db01453c99a40b1e1c97a43eb60aa2064429026393e3ff1e1c616900231fd84dd6ee1178ce571202d48ad1692a50b9bdb05230af226598d8f30ee93c64", 0x77}, {&(0x7f0000001c80)="8fda5c26ed566c8d8992f7d49c3854243c9ad3c08ac72ebc014a6e20990be3d0b7c53272bf35e2f91f90855ceca302dd97f7281c1985995de0d9d63b3e9705fcb77ad30de5d6aecb13393bdabd101871d78b", 0x52}, {&(0x7f0000001d00)="3f1fc17c3d4a5a90ac6a3c78d6b506a1026123ed59b18798d33fffd6572dfe2760d5b88b4a07e9144396850410cadb77162d3eba16872339d61559fea43b2f862c24e9d9168813e34e4281bbc30e214ced09a1d4de1ee3d9938fa88e77759967b8b31a199ef22dbb8e0c228b6443442ec971b8890cd21ed298402b6ffa9d3476b447a0ddfe11d1316ca4526d60ce1bf85e9f5097ddef7ee328cae6c58a70da643b7763fd574c56d542f978edfac48310b479f63ebc762fcfb46b21a883d19948726c7855d467e08726eed8b016248468aa", 0xd1}, {&(0x7f0000001e00)="5ca575e3eee7e13966aedb3df505b63c8bdb06eb410c4e63dac81abb517ffa138afe09c733e3a7a83635c5bcaa0ff506f18af2221b81dd404dc2673c625a", 0x3e}, {&(0x7f0000001e40)="636071fd4e17e6d8dc08b2d555bff706b93a6feb2b437c24665e3cd7f7cd387fbf9aeeca38168d7aa990d4d3261507866eef8a175114ffa8ecdf3f84918d3b63791d873b85361bd8e5bba38b4e8c95beed96497ae7818caadb001737bf35b305c7338a01255b7ff777b017e158294b6fcd275ce2725c3b9640d2ab7914b40ad1ddc0b798509ff4", 0x87}], 0x5}}, {{&(0x7f0000001f80)={0xa, 0x4e22, 0xf5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="92eaac359f1e07bb4b29f0624c6a531f308b411e5d96746eb23cb4c877b58f47bb55a1f5fcc4c063a716ad04f41080afd56fca55fee4c8a445d2d0a0b74a2d41a8ad18a78b66d8f9ce897c46a45b93cb09ed2b94d64c8f47b4c240a9d24350faad740851845e0afa58ba48e33444cc1cef5f8132c7a2e43f98d7f0b55ff4b3c9322dfa7e0f5863402292e345a6314cd7a5bed33003", 0x95}, {&(0x7f0000003080)="edf590ed711461b5ac43f03a3487ea033bc5045abe1ad73246116c3aa284080b46b9289a74f3412d745a43c62c6c7e", 0x2f}, {&(0x7f00000030c0)="d4a4838d03bf477fdd4b344ad81f274e37ebd02fb1fd06", 0x17}, {&(0x7f0000003100)="a796ef022198b9436a0731dd0ef37414481f8de2d2fea8c6c19cd348afba78fb19ad79c7e1571c2ceaa5e21b0586eb909835eb601eca2cf47190bbb0b2882dc39fc2416da691d3fd3f947c98cafddf80bb169013a08e1476fb332f55883522754403c0c0600ebf45df90627bf12935b6a62fe18e3adee2a6f613a807df7dadc2c2679b8c5ad4907d872f31804912b65996980adad23d196103a9322bd83d3f1a21c00b8b3a3521d56f334aa51c15a759b5365e15e0fe35edf66cd917d19609510e74aa408ae0d1380073570095d81be60fe76cf06ce6c1", 0xd7}, {&(0x7f0000003200)="e545ac12d9fb29757fc0dfbd717220af4c55d91ce75cdbb9445b30b2545398612f743206b29a5a11573c5dfadd6126ef627fcf318878cc7ee20401161402e9f3481856391cb4c9fdf547f5b5", 0x4c}, {&(0x7f0000003280)="c8eead4de1fcade7ae1b76a7b9c3babe3943ad0c87d04e1bbf1d12b75c0eb988158ac51dad4dc2958f7a9975ede104076bf05ef1e3cc5e536eeebe08e68a4ea8d024a19d9ffad1782885d693058fc0b5f726f4669d5ed5d4ad", 0x59}], 0x7, &(0x7f0000005680)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r2}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3fa2153c}}, @dstopts={{0xd8, 0x29, 0x37, {0x16, 0x17, '\x00', [@ra={0x5, 0x2, 0x180}, @generic={0xa, 0xb5, "3935a99d4522a7954f067818d2ff104fb696aa1a8f2e6a7d9641276e5fb5b80d2acd2b89d296f1426ccfcd2a9dc76f34b82347f96da74a51fb180661dabf70a31c9036d9462d1d72c7ac2870b89b55bfa00cc2ffe9569b6db5dc44d5ca7355d0d7180beabbd7c7c3c329b012d3c0e264fb6ad43b83739b57e7519d77af68845cb69b2a6adb45fd0aea2848b3242ebdc6640416abeb4428e21e93fc8445f78a843f50008bc94d7e063a034a16e6d47d82f42db4cb58"}, @enc_lim]}}}], 0x130}}, {{&(0x7f0000003480)={0xa, 0x4e21, 0x2, @local, 0xc}, 0x1c, &(0x7f0000003b00)=[{&(0x7f00000034c0)="05fd2adf9e9ebb5e03cb8aa47b506d05759d29a0451ae1c4aab4caf65bdf69d4a42e45a09e0db51798d072d067d4787f82d39bf7b43ff967ed13f8fb85e439d5320536b631b2414432eee84e7587a50ec3bf6cbdffb7811ec90571d31dc0258e29c274be38d1083b011e50a8459bf5620891a8291a651d028e7c5d4748c2f88b2dead30598f4de4561ee48dee93a139006ea85f55885919b322e304b0b3948ff5165f7157de150c0bdb1ad4ceb7c19d45c159a147ef2ef662db032796697122c7b522ef60bc00e09f7e41fb2bfcdfbe561c1e43bcc9aa57cdf9b0bdc9cafaf41eab4", 0xe2}, {&(0x7f00000035c0)="ae6b9c4005f53d41a2dae03dbd18d641bfaac65f1d4fb4698218661c89eb6262a11c6a0a82033ceef1911660b2bfed473a2a1633934811d3acd1b7172bf6c0394ff4b302c416ce9f8e0b4212e3496761aa98ef4dbaa5e104b17a94942a2d512d1255da662301ef685ffb0a6b3b57442adcf2cc250326e8c2cd883ae7dea67ba46ba7ed058a1d84200205d2a102be9d33b792e8f97390705892f0cf7ff0ed84e25ec04db5e2cff5a877362a91e0842d17ef303c3f3f506ecd4bb9e2c28f6352733b8992b246301a3e", 0xc8}, {&(0x7f00000036c0)="396d19c01273294676f1030715d92967b558c382c29a68971ff16bf1b3a9441fb34ba049b528d2c565069ea7c749921893ae8379ca47341a69c0a013478d0da024b613bf30b76c7483cb549d0e66437780388e90fec6953ecceede05ab8f777f047b5fbf104dced5954bb1158621ca2437fcbc19251d89f225cf9b7c284a99a6a21edd15173502e53345d28953f796a5e4a4214851c7fbf6f92393c57f79", 0x9e}, {&(0x7f0000003780)="505dedde5e3ff537abfe4a799f410007961bf5e3e53af697afa7a23930d2fdd8107feb96853051a2cf8079648ad7a901e6a35cabe8cf2bb96b43f745d01173a21ae7a2c4dcc6ae61adde55dae24d6830c796b5e05834632b278ec5f6725a7ca12e4c6209f5595398231a4eda64e27b60ad2b52921baf2a64c69a48a30b3c31f85e82dde8e09cf6137d38b3b3ac3471098650383e946d34b4aee487e2dbda990319a4dbff5be266489a0cab4d8f8d5e051bcc90a081772a2531183f19283a9f8c1b4c0d83ee2dc3eefe68", 0xca}, {&(0x7f0000003880)="bbf2d132716a7f1e56c6b9b5fe70e282072be61c3789b3ca99688e31ab382bd78b835b0ee1a6c383d243eb2982142b2dd8d363fd7b6208fc8d5a1349d8fc4798dfc257b5b3c08efbc84a773be8ec3c0ab6a2b3c78463300dfc6d89e0c17a4f0ae7e928cfd0b83a8a393315b89e1f076fccea8d4b4e050744d71ce55e4d47a9bf65a69dd06b15b51ab62cd2629c46b4d5ecb8a4870cc091d3255966510f50937ead415b47aaf0ceb1e35eddb5a83a51e037837e1e4b5e0a2503a89df537f2", 0xbe}, {&(0x7f0000003940)="bb21e6e2643ca92d52d9e373e12be9d7c6518db467286fd1ad73051cb2d29cbd9d28666b181688ee95ad79b44aff9e2ec6cc1fdcde04c9c8ed1b28392d19438ff0f84f9d0fa7eb854db459ef1ceee1dd6f3e717c279252e4bccc585dc6ba759b9ada699602d0e8e503292f44f2c63977af3a6ecd125d30f7560e3fc7917b6ea4580cf18e7a299e3a5949f24e838cbe17e33db775c30d5dd05e9629506f0d072fee9e6fe0aa81b900213d255ce9c4e8b0890706e4e8ee3c706c78e842f1179d15b18fae93a0cc023bd0407823cdc04f8d2ff7fabd4a73f510edd8", 0xda}, {&(0x7f0000003a40)="e6f6d6f44fc07defa6ccc9bc090df44980657b8651db", 0x16}, {&(0x7f0000003a80)="ff02852e5e2f0cc5298a396a227bf747d950bc14e1ec7cc3ed077dd60889a74102578e00b8384dc37852078de84395c05cd2fcd401cb12252d185fcc74c8740d70db86b9c7c78fafe11a8e73f7716ffab4f42cb4b671dc395574884f7a2d86ef44e299caed0da3c82353e7f68eaababb0087996ab0df", 0x76}], 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"], 0x170}}], 0x5, 0x24048080) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000005580)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x13}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x5, @loopback, 0x40}, 0x1c, &(0x7f0000005640)=[{&(0x7f0000001840)="37f99b7ea566fdc47778f9b34d2c04f156aa390b81aa3c1cab0180be96d49143a2c61759f48477ef36ad3f2feae5c9588a9f0b8c9034d1e407fa9eb3e5e3f9a481b80b8a4ea132a2be46422dd2c30c58bf4fd9b8da962877fd186b6ec841f91fd0bb29b69e55e4ba71730e676b397790e79ff8d9206b87ab9774b58b92b1dfa7778db83fb72efc8983fd", 0x8a}, {&(0x7f0000001ac0)="3eaf97d5b42ee3a47ea9dd943e3ddd17f4dac073dd8eabb4da99e798d501acba12a1c45c8584cf4de6ce07a69b923eeefbe8e89f4facc17f577358dba4b0ec321ec5f05f0c808a885c964a1b63c6912ec9f1e667bbffae00b6b9dc11fb15ee63535bb5cfa7689e08f8f2d3b9d87e87b6ad12cec4db25aefe1d7236014d6450989d294ce62a862a9128871528f6c5dbbc80d10777313ed5d085ea793ce47f7382ee3f467e1f181dce3be1e92c4d1076cfb5ac04d70951ad31819fe0d91e35014f1369f85fe5ed4a2583d6fecb0767c4586cbc0bd3260d0d383031e4fd6e70", 0xde}, {&(0x7f0000005540)="a4e06e2ae6", 0x5}], 0x3, &(0x7f0000001940)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}, {{&(0x7f00000019c0)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x2d7f}, 0x1c, &(0x7f0000005200)=[{&(0x7f0000001a00)="9858ecdf876e0490eb96491f07ad7d044d92b5cf5f8aa0c2b0fceab82b628dc335377ecb88bb8199295d7759b5caae79d38ee033809db5193d462feaf5bcd76a4ded909b000c597853de49d9669afdbe50502ccda0ae6a4bac21de2466950ef230f3bf888d1760d681739d9910893f57e277412a97b2a7feeedd85460af1add7b3f54ee2c60a4f23aa948af6ae3d355a57d2cc74590dc7b789d4817c835f55dcb987f1dc854089cf86813a12b1ae", 0xae}, {&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000005040)="a2cc6a41824474d2aaac003a85c9f650996908de95db5ffabff6145bdca5ce993d9569f654f7271ce1f2a1c6f21afded58b8394742318cb63a55d4b252c7c8c6654a1eaa309944cb36f84eb2360848f2d7cb4caa", 0x54}, {&(0x7f00000050c0)="a7b49b567aa6a0759aa14af7511365a96c0d", 0x12}, {&(0x7f0000005100)="accf5f280384ad85114c3cb3ba580a2a12caa989cfd56f00d3ad6bc249d1600fc2c47f288dc7c5c2ddeadffd00db82774d5643795a6552153bcb659aec6574", 0x3f}, {&(0x7f0000005140)="82f47fa37e063c4f2475f54db8f6c2a2733ed1ca07c9e9ff21ab928eeed1fbb63e398c422b5d5a1e85f9bbceb64deddcbe98d7899f52d548a86274931b7c1945ffa2eca64e7bd33b335856e7353f8fbab388a5dda3dedd7fd161efcf818a149be78b0fdac81c20a4cc1917707b17b378f43b1f734c263bf1884cebfff81775eb7ad336fb57f2cc3ccb", 0x89}], 0x6, &(0x7f0000005280)=[@hoplimit={{0x14, 0x29, 0x34, 0xa77}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x21, 0xb, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x10000}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0xdd2, [0x2, 0x74, 0xbf, 0xb, 0x80000001, 0x8]}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x2, 0xf, 0x0, [@mcast1, @rand_addr=' \x01\x00', @local, @dev={0xfe, 0x80, '\x00', 0x3a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dstopts={{0x80, 0x29, 0x37, {0x32, 0xc, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xda, 0x100, [0x10001, 0x2, 0x1, 0x1, 0x6, 0x8000000000000000]}}, @ra={0x5, 0x2, 0xd}, @calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0x5, [0x5]}}, @pad1, @jumbo={0xc2, 0x4, 0xff}, @pad1, @jumbo={0xc2, 0x4, 0x81}]}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x3c, 0xf, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x3, [0xffffffffee53a0bf]}}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x1, [0x7, 0x0, 0x6, 0x2, 0x3, 0x5, 0x1000]}}, @hao={0xc9, 0x10, @loopback}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5e, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xe79}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0xee, 0x0, [@mcast2, @local]}}}], 0x2a0}}], 0x3, 0x20002040) syz_clone3(&(0x7f0000000080)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 19.365905031s ago: executing program 2 (id=229): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 4.819303346s ago: executing program 1 (id=331): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000005d40), 0x2, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000008dc0)={0xd, 0x7, 0x1, {{}, 0x6}}, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x1, 0x405, 0x2) 4.549693629s ago: executing program 1 (id=332): r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd0500560008005600000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001f2e4"], 0xfdef) 4.377924316s ago: executing program 1 (id=333): gettid() mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) timer_create(0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.29080994s ago: executing program 32 (id=229): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 4.08326733s ago: executing program 1 (id=338): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.676273186s ago: executing program 1 (id=346): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='o', 0x1) fadvise64(r0, 0x2, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.449443276s ago: executing program 1 (id=348): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xb6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r2, 0x0, 0x0, 0x40000120, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x60, 0x24, 0x80, {0x80, 0x0, "ae834dfcc7aaf221f3d409a383130ae71eae7a7a9c87bba34e63e2fcc9d8aae9e95c95e4ae7c7f6953df8a66b0b88244b477d8b9f1b1436b7418ed602e19bca80f7b52c5c035b565d32a9e9ee900ee3aedbfe64459cbb7d6d896e18bac4a7b514a66a4767cdb984187d38bd064622732d63d1958583e28bc6e1274c4179d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.735686799s ago: executing program 3 (id=359): syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x8, 0x105600) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80903, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f00000003c0)=0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f00004ad000/0x4000)=nil, 0x4000, 0x9) getsockopt$WPAN_WANTACK(r8, 0x0, 0x0, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/cpu_dma_latency\x00', 0x2, 0x113) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r9, 0x0) 1.588905836s ago: executing program 3 (id=363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0xfffffe3a) 1.588401826s ago: executing program 4 (id=364): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1) (async, rerun: 64) pread64(r1, &(0x7f0000001440)=""/4096, 0x1f, 0x9) (rerun: 64) write$binfmt_format(r1, &(0x7f0000000080)='0\x00', 0x2) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, r0}) ptrace(0x10, r2) ptrace$setsig(0x4203, r0, 0x4, &(0x7f0000000480)={0x2c, 0x6, 0x5}) 933.428886ms ago: executing program 0 (id=365): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r3, 0x623, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 888.142568ms ago: executing program 0 (id=366): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x1c, 0x22, 0x0, 0x1, 0x8, 0xac, 0x1, 0x15}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 850.34171ms ago: executing program 0 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251bfdff0008009a"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 737.319735ms ago: executing program 0 (id=368): iopl(0x3) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001200)={0xa1805600, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = socket(0x10, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x4, 0x5, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x3c, 0x4, 0x0, @private=0xa010100, @multicast2}}}}) r3 = socket$unix(0x1, 0x1, 0x0) iopl(0xa) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0xf56, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x5}) 736.884546ms ago: executing program 0 (id=369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) timerfd_settime(r1, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r1, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x3ffffe, 0x2, 0x1000000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000fd0000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x20000010) 736.713255ms ago: executing program 4 (id=370): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000780)={0x0, "0011223344556604080000bbccddeeff00112233445566774a0aaabbccddeeff00112233445566778899eabbccddeeff001122334455667788bcaabbccddeeff", 0x48}, 0x48, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000fdff000000200100000c000280080002006c6f00001800038004"], 0x38}}, 0x0) 718.637906ms ago: executing program 0 (id=371): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x80, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') (async) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x8, 0x0, 0x5, 0x0, 0x6, 0xf, 0xff, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5, 0x2b, 0x2, 0x4, 0xff, '\x00', 0x81, 0xef}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x8, 0x0, 0x5, 0x0, 0x6, 0xf, 0xff, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5, 0x2b, 0x2, 0x4, 0xff, '\x00', 0x81, 0xef}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x0, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xdddd0000, 0x1000, 0x1d, 0x0, 0x7, 0xc4, 0x5, 0x41, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xd, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0xff, 0x9}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x9, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x7, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x48, 0x9, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0xfe}, {0x200000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000000, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close(r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 685.991618ms ago: executing program 4 (id=372): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001a00e7eff67a0000000000000aa1", 0x12, 0x8, 0x0, 0x0) 619.96682ms ago: executing program 4 (id=373): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r2 = gettid() r3 = getpid() r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x2, 0x1, 0x40, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x5, 0x0, &(0x7f0000000000)="44f7473cf7"}) rt_tgsigqueueinfo(r3, r2, 0x7, &(0x7f0000000000)={0x200c, 0x3, 0x4}) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r7, &(0x7f0000000740)=""/377, 0x179) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) accept4$tipc(r7, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x80000) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x3, 0x3, {0xa, 0x4e21, 0x4, @mcast2, 0x51a}}}, 0x32) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@ax25={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="30fcffffffffffff0d010000060000007935485159c190b008d1e738c0b2d4de361278e29d2cfe19fa627f01a632abaef747d7f572c9f1bcaddcc387e004000000000000009358fc977a8797178109521566724d2231a30773a91c545c43e1b9fbcdfceda24f7cb050f617bbef6424a2058130d65d4f055488cc42fb4a3df6df2c5047bd7b9e92fa9c3a44c67f9c34214a74db6026475e98ce4d1580000000000000000000008800000000ffffff30a5aa16e94db4c0c6f85fcdff51f662c30000000000000000000000000019000d0100000700000095f857d1e580289bc0b2d25dd3e484c3160dff20a90f0e7bd2021b381a840804960c745b7f7ab250a1fa000000000000598e77b558bfeba387c19c5e2e601807782c6caae431357643ded2c56326f7eb24e3b86fb23153eb2ee78830165c1b31741439e11d7e0186900187216c0efd3b619779b58fa5c730d93c07ccac1d353eccd9dbd3d3bb3400b48acc5875db963e0247bf00a5c0521061ba026bd7eaf36586dfce11a29db2337e15205e6558a2fde46666e803ccd14465b29756bbb8d8b052d8612319ac4cd8a25ad6"]}}, {{&(0x7f00000003c0)=@in={0x2, 0x4e20, @local}, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="040f9a7fc37742452f1af5c0b69514542bd3c6578598f2374674f74178bc7e3b28f904299e778e83bab2810571b9a7b532b79cf4db582e7717829bb512019ba30e79f86da3170fc30c3a9cae5dcf4d1b0eacabdf16ca8123ed9d69f5c13b600c7e043a9c307604ced839c6d71b4f728a9bc65c0ba768d482e9bf58d01ebd9662d3cf5c9b69b8558dcff7"}], 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/984]}}], 0x4000000000002da, 0x44000080) 619.606911ms ago: executing program 4 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r0, 0x0, 0x5, 0x3) 544.565314ms ago: executing program 4 (id=375): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000033c0), 0x2602, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000440)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 210.80035ms ago: executing program 3 (id=376): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000480)={0x10001, 0x3, 0x41000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r3, 0x623, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 96.502665ms ago: executing program 3 (id=377): iopl(0x3) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001200)={0xa1805600, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = socket(0x10, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x4, 0x5, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x3c, 0x4, 0x0, @private=0xa010100, @multicast2}}}}) r3 = socket$unix(0x1, 0x1, 0x0) iopl(0xa) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0xf56, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x5}) 474.129µs ago: executing program 3 (id=378): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='cpu'}]}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r0, 0x85) 0s ago: executing program 3 (id=379): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000010c0), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/152, 0x98}], 0x1}, 0x83}, {{&(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/107, 0x6b}, {&(0x7f0000002480)=""/228, 0xe4}, {&(0x7f0000002580)=""/198, 0xc6}, {&(0x7f0000002680)=""/120, 0x78}], 0x5}, 0x5}, {{&(0x7f0000002780)=@hci, 0x80, &(0x7f0000002840)=[{&(0x7f0000002800)=""/45, 0x2d}], 0x1, &(0x7f0000002880)=""/121, 0x79}, 0xbe}], 0x3, 0x10002, &(0x7f00000029c0)={0x0, 0x989680}) futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) recvfrom$unix(r2, &(0x7f00000004c0)=""/243, 0xf3, 0x40000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) userfaultfd(0x80001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="608100101000010000000000feffffffac1414aa00000000000000000000000000000000000000000000ffffee0001020000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000a00000084000000000000001c00170000000000ffffffff000000000000000000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080001040000"], 0x160}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 29.610258][ T36] audit: type=1400 audit(1789770882.800:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.613552][ T287] cgroup: Unknown subsys name 'net' [ 29.632948][ T36] audit: type=1400 audit(1789770882.800:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.660316][ T36] audit: type=1400 audit(1789770882.830:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.660723][ T287] cgroup: Unknown subsys name 'devices' [ 29.787744][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.793460][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.889203][ T36] audit: type=1400 audit(1789770883.080:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.912407][ T36] audit: type=1400 audit(1789770883.080:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.937329][ T36] audit: type=1400 audit(1789770883.080:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.961270][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.970175][ T36] audit: type=1400 audit(1789770883.160:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.995684][ T36] audit: type=1400 audit(1789770883.160:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.055141][ T36] audit: type=1400 audit(1789770883.240:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.080731][ T36] audit: type=1400 audit(1789770883.240:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.081470][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.407666][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.414753][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.421935][ T297] bridge_slave_0: entered allmulticast mode [ 31.428313][ T297] bridge_slave_0: entered promiscuous mode [ 31.446008][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.453066][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.460200][ T297] bridge_slave_1: entered allmulticast mode [ 31.466440][ T297] bridge_slave_1: entered promiscuous mode [ 31.480182][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.487285][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.494368][ T295] bridge_slave_0: entered allmulticast mode [ 31.500816][ T295] bridge_slave_0: entered promiscuous mode [ 31.509975][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.517074][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.524189][ T295] bridge_slave_1: entered allmulticast mode [ 31.530573][ T295] bridge_slave_1: entered promiscuous mode [ 31.589085][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.596181][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.603764][ T294] bridge_slave_0: entered allmulticast mode [ 31.610213][ T294] bridge_slave_0: entered promiscuous mode [ 31.622787][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.629963][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.637114][ T294] bridge_slave_1: entered allmulticast mode [ 31.643329][ T294] bridge_slave_1: entered promiscuous mode [ 31.677022][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.684113][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.691494][ T296] bridge_slave_0: entered allmulticast mode [ 31.697823][ T296] bridge_slave_0: entered promiscuous mode [ 31.724311][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.731404][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.738536][ T296] bridge_slave_1: entered allmulticast mode [ 31.744783][ T296] bridge_slave_1: entered promiscuous mode [ 31.818798][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.825880][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.833209][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.840264][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.861793][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.868868][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.876186][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.883231][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.918274][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.925341][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.932643][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.939705][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.955748][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.962829][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.970122][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.977172][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.011444][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.018943][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.026336][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.033559][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.041178][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.048738][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.056345][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.063522][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.076372][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.083423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.094582][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.101736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.124148][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.131236][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.140512][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.147592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.159231][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.166307][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.175333][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.182416][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.220541][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.227628][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.236622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.243673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.273998][ T297] veth0_vlan: entered promiscuous mode [ 32.281476][ T296] veth0_vlan: entered promiscuous mode [ 32.306988][ T297] veth1_macvtap: entered promiscuous mode [ 32.314974][ T295] veth0_vlan: entered promiscuous mode [ 32.332652][ T294] veth0_vlan: entered promiscuous mode [ 32.346977][ T296] veth1_macvtap: entered promiscuous mode [ 32.374138][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.392608][ T294] veth1_macvtap: entered promiscuous mode [ 32.400900][ T295] veth1_macvtap: entered promiscuous mode [ 32.514034][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.725545][ T316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.875532][ T316] usb 2-1: Using ep0 maxpacket: 8 [ 32.886905][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.905222][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.918661][ T316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.932235][ T316] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 32.941901][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.952136][ T316] usb 2-1: config 0 descriptor?? [ 32.965442][ T45] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 33.129789][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.141317][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.152376][ T45] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 33.161673][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.180160][ T45] usb 1-1: config 0 descriptor?? [ 33.377140][ T316] usbhid 2-1:0.0: can't add hid device: -71 [ 33.383160][ T316] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.406406][ T316] usb 2-1: USB disconnect, device number 2 [ 33.611386][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.628740][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.644455][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.671246][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.940095][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.973466][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.053964][ T433] IPv6: Can't replace route, no match found [ 34.068280][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 34.080313][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 34.091644][ T45] usb 1-1: USB disconnect, device number 2 [ 34.355454][ T312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.535469][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 34.544257][ T312] usb 2-1: config 1 interface 0 altsetting 163 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 34.555897][ T312] usb 2-1: config 1 interface 0 altsetting 163 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.570423][ T312] usb 2-1: config 1 interface 0 has no altsetting 0 [ 34.579673][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 34.588891][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.598963][ T312] usb 2-1: Product: syz [ 34.608503][ T312] usb 2-1: Manufacturer:  [ 34.612964][ T312] usb 2-1: SerialNumber: syz [ 34.636922][ T316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.698932][ T36] kauditd_printk_skb: 195 callbacks suppressed [ 34.698951][ T36] audit: type=1400 audit(1700000002.810:269): avc: denied { ioctl } for pid=477 comm="syz.0.30" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.806458][ T316] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 34.816510][ T316] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 34.826396][ T316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.837411][ T316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 34.847473][ T316] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 34.856762][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.866275][ T460] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.873553][ T460] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.890859][ T316] pl2303 3-1:1.0: pl2303 converter detected [ 34.904162][ T483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 34.917019][ T316] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 35.033396][ T36] audit: type=1400 audit(1700000003.140:270): avc: denied { write } for pid=438 comm="syz.1.24" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.034744][ T439] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.070306][ T312] usbhid 2-1:1.0: can't add hid device: -71 [ 35.076323][ T312] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 35.085206][ T312] usb 2-1: USB disconnect, device number 3 [ 35.145398][ T45] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 35.154887][ T485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.25'. [ 35.171517][ T36] audit: type=1400 audit(1700000003.280:271): avc: denied { create } for pid=459 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.190967][ T460] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 35.190989][ T36] audit: type=1400 audit(1700000003.280:272): avc: denied { ioctl } for pid=459 comm="syz.2.25" path="socket:[3948]" dev="sockfs" ino=3948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.200169][ T460] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 35.230865][ T460] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 35.238047][ T460] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 35.245942][ T460] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 35.286362][ T316] usb 3-1: USB disconnect, device number 2 [ 35.293650][ T316] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 35.301998][ T316] pl2303 3-1:1.0: device disconnected [ 35.307764][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.318875][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.328817][ T45] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 35.337970][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.346804][ T45] usb 4-1: config 0 descriptor?? [ 35.486894][ T36] audit: type=1400 audit(1700000003.600:273): avc: denied { read } for pid=489 comm="syz.0.34" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.508779][ T36] audit: type=1400 audit(1700000003.600:274): avc: denied { open } for pid=489 comm="syz.0.34" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.532011][ T36] audit: type=1400 audit(1700000003.600:275): avc: denied { read append } for pid=489 comm="syz.0.34" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.555404][ T36] audit: type=1400 audit(1700000003.600:276): avc: denied { read append open } for pid=489 comm="syz.0.34" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.582510][ T36] audit: type=1400 audit(1700000003.600:277): avc: denied { ioctl } for pid=489 comm="syz.0.34" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.609199][ T36] audit: type=1400 audit(1700000003.640:278): avc: denied { ioctl } for pid=489 comm="syz.0.34" path="socket:[4897]" dev="sockfs" ino=4897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.612575][ T492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.663335][ T494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 35.706561][ T500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 35.736479][ T503] netlink: 'syz.0.39': attribute type 27 has an invalid length. [ 35.757427][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.764688][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.781541][ T45] hid-generic 0003:0C70:F0B6.0001: unknown main item tag 0x0 [ 35.789136][ T45] hid-generic 0003:0C70:F0B6.0001: item fetching failed at offset 5/7 [ 35.798042][ T45] hid-generic 0003:0C70:F0B6.0001: probe with driver hid-generic failed with error -22 [ 35.945416][ T316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.990986][ T45] usb 4-1: USB disconnect, device number 2 [ 36.096805][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.115088][ T316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.130218][ T316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.149938][ T316] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 36.162369][ T531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'. [ 36.170105][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.194160][ T316] usb 2-1: Product: syz [ 36.198420][ T316] usb 2-1: Manufacturer: syz [ 36.203113][ T316] usb 2-1: SerialNumber: syz [ 36.419645][ T316] usb 2-1: selecting invalid altsetting 1 [ 36.426860][ T316] usb 2-1: unit 3 not found! [ 36.435437][ T316] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.446685][ T316] usb 2-1: USB disconnect, device number 4 [ 36.462122][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.515410][ T45] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 36.677210][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.685995][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 36.696916][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 36.709581][ T45] usb 3-1: string descriptor 0 read error: -22 [ 36.721820][ T45] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 36.730999][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.747389][ T45] usb 3-1: low speed audio streaming not supported [ 36.753015][ T586] FAULT_INJECTION: forcing a failure. [ 36.753015][ T586] name failslab, interval 1, probability 0, space 0, times 0 [ 36.765299][ T45] usb 3-1: low speed audio streaming not supported [ 36.773754][ T586] CPU: 0 UID: 0 PID: 586 Comm: syz.3.54 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 36.773786][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.773808][ T586] Call Trace: [ 36.773815][ T586] [ 36.773824][ T586] __dump_stack+0x21/0x30 [ 36.773869][ T586] dump_stack_lvl+0x140/0x1c0 [ 36.773900][ T586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.773932][ T586] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 36.773954][ T586] ? kvfree_call_rcu+0x40e/0x730 [ 36.773981][ T586] dump_stack+0x19/0x20 [ 36.774011][ T586] should_fail_ex+0x3c2/0x510 [ 36.774039][ T586] should_failslab+0xac/0x100 [ 36.774068][ T586] __kmalloc_cache_noprof+0x41/0x470 [ 36.774093][ T586] ? __dev_set_rx_mode+0x1de/0x280 [ 36.774127][ T586] ? igmp6_group_dropped+0x3b7/0xc10 [ 36.774160][ T586] ? _raw_spin_unlock_bh+0x54/0x60 [ 36.774183][ T586] igmp6_group_dropped+0x3b7/0xc10 [ 36.774216][ T586] ? netlink_broadcast_filtered+0x114e/0x11d0 [ 36.774258][ T586] ? __ipv6_dev_mc_inc+0xa30/0xa30 [ 36.774290][ T586] ? mutex_lock+0x97/0x1d0 [ 36.774317][ T586] ? __kasan_check_read+0x15/0x20 [ 36.774341][ T586] __ipv6_dev_mc_dec+0x29f/0x4c0 [ 36.774374][ T586] __ipv6_ifa_notify+0x7b1/0xee0 [ 36.774397][ T586] ? snmp6_fill_stats+0x9b0/0x9b0 [ 36.774419][ T586] ? __kasan_check_write+0x18/0x20 [ 36.774441][ T586] ? work_grab_pending+0x301/0x830 [ 36.774469][ T586] ? __asan_memcpy+0x5a/0x80 [ 36.774493][ T586] ? avc_has_perm_noaudit+0x289/0x360 [ 36.774523][ T586] ? mod_delayed_work_on+0x140/0x140 [ 36.774554][ T586] ? __kasan_check_write+0x18/0x20 [ 36.774578][ T586] ipv6_del_addr+0x6bf/0x8d0 [ 36.774611][ T586] inet6_addr_del+0x5ad/0x760 [ 36.774644][ T586] addrconf_del_ifaddr+0x124/0x190 [ 36.774676][ T586] ? __cfi_addrconf_del_ifaddr+0x10/0x10 [ 36.774709][ T586] ? ioctl_has_perm+0x39a/0x500 [ 36.774733][ T586] inet6_ioctl+0x118/0x2d0 [ 36.774753][ T586] ? __cfi_inet6_ioctl+0x10/0x10 [ 36.774774][ T586] ? proc_fail_nth_write+0x184/0x220 [ 36.774808][ T586] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 36.774844][ T586] sock_do_ioctl+0x115/0x330 [ 36.774868][ T586] ? sock_show_fdinfo+0xd0/0xd0 [ 36.774890][ T586] ? __cfi_vfs_write+0x10/0x10 [ 36.774916][ T586] ? __kasan_check_write+0x18/0x20 [ 36.774939][ T586] ? mutex_unlock+0x90/0x240 [ 36.774964][ T586] sock_ioctl+0x568/0x7e0 [ 36.774985][ T586] ? __cfi_sock_ioctl+0x10/0x10 [ 36.775006][ T586] ? __fget_files+0x2bc/0x330 [ 36.775034][ T586] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.775063][ T586] ? security_file_ioctl+0x3e/0x110 [ 36.775086][ T586] ? __cfi_sock_ioctl+0x10/0x10 [ 36.775107][ T586] __se_sys_ioctl+0x123/0x1b0 [ 36.775150][ T586] __x64_sys_ioctl+0x7f/0xa0 [ 36.775178][ T586] x64_sys_call+0x1878/0x2ee0 [ 36.775199][ T586] do_syscall_64+0x57/0xf0 [ 36.775220][ T586] ? clear_bhb_loop+0x50/0xa0 [ 36.775257][ T586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.775285][ T586] RIP: 0033:0x7ff37df9e159 [ 36.775312][ T586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.775331][ T586] RSP: 002b:00007ff37ee4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.775367][ T586] RAX: ffffffffffffffda RBX: 00007ff37e225fa0 RCX: 00007ff37df9e159 [ 36.775384][ T586] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 36.775398][ T586] RBP: 00007ff37ee4a090 R08: 0000000000000000 R09: 0000000000000000 [ 36.775412][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.775426][ T586] R13: 00007ff37e226038 R14: 00007ff37e225fa0 R15: 00007fff6c78d258 [ 36.775444][ T586] [ 37.143493][ T549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.172328][ T549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.199292][ T10] usb 3-1: USB disconnect, device number 3 [ 37.292164][ T596] IPv6: Can't replace route, no match found [ 37.451188][ T604] capability: warning: `syz.1.61' uses 32-bit capabilities (legacy support in use) [ 37.467389][ T604] SELinux: failed to load policy [ 37.498289][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 37.575776][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.662983][ T614] kvm: kvm [613]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 37.745892][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 37.775514][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.792015][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.803687][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.817241][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 37.828805][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.845487][ T9] usb 1-1: config 0 descriptor?? [ 38.094119][ T633] netlink: 'syz.2.71': attribute type 27 has an invalid length. [ 38.117198][ T633] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.124477][ T633] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.274008][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 38.280315][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.297554][ T9] usb 1-1: USB disconnect, device number 3 [ 38.799015][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.814315][ T668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 38.955417][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 38.961710][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.972647][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.982434][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.995306][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 39.004374][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.013238][ T45] usb 2-1: config 0 descriptor?? [ 39.085410][ T9] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 39.236547][ T672] netlink: 'syz.2.85': attribute type 4 has an invalid length. [ 39.236581][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.255270][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.265235][ T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 39.280294][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.292191][ T9] usb 1-1: config 0 descriptor?? [ 39.311120][ T676] netlink: 'syz.2.87': attribute type 3 has an invalid length. [ 39.318841][ T676] netlink: 'syz.2.87': attribute type 3 has an invalid length. [ 39.424578][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 39.432956][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 39.439032][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.467170][ T45] usb 2-1: USB disconnect, device number 5 [ 39.496916][ T688] FAULT_INJECTION: forcing a failure. [ 39.496916][ T688] name failslab, interval 1, probability 0, space 0, times 0 [ 39.509613][ T688] CPU: 1 UID: 0 PID: 688 Comm: syz.2.91 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 39.509645][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.509660][ T688] Call Trace: [ 39.509668][ T688] [ 39.509677][ T688] __dump_stack+0x21/0x30 [ 39.509713][ T688] dump_stack_lvl+0x140/0x1c0 [ 39.509742][ T688] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.509775][ T688] dump_stack+0x19/0x20 [ 39.509818][ T688] should_fail_ex+0x3c2/0x510 [ 39.509845][ T688] should_failslab+0xac/0x100 [ 39.509872][ T688] kmem_cache_alloc_node_noprof+0x45/0x420 [ 39.509898][ T688] ? dup_task_struct+0xc1/0xd80 [ 39.509918][ T688] ? kasan_save_alloc_info+0x3a/0x50 [ 39.509933][ T688] ? __kasan_kmalloc+0x96/0xb0 [ 39.509972][ T688] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.510002][ T688] dup_task_struct+0xc1/0xd80 [ 39.510034][ T688] ? __kasan_check_write+0x18/0x20 [ 39.510050][ T688] ? _raw_spin_lock_irq+0x93/0x120 [ 39.510065][ T688] ? copy_process+0x3350/0x3350 [ 39.510085][ T688] ? __kasan_check_write+0x18/0x20 [ 39.510121][ T688] copy_process+0x57c/0x3350 [ 39.510151][ T688] ? kasan_save_alloc_info+0x3a/0x50 [ 39.510171][ T688] ? __cfi_copy_process+0x10/0x10 [ 39.510198][ T688] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.510216][ T688] ? __kasan_check_write+0x18/0x20 [ 39.510231][ T688] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 39.510272][ T688] vhost_task_create+0x1f7/0x3f0 [ 39.510294][ T688] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 39.510321][ T688] ? __cfi_vhost_task_create+0x10/0x10 [ 39.510347][ T688] ? __cfi_vhost_task_fn+0x10/0x10 [ 39.510363][ T688] ? __kasan_check_write+0x18/0x20 [ 39.510378][ T688] ? mutex_lock+0x97/0x1d0 [ 39.510419][ T688] ? __cfi_mutex_lock+0x10/0x10 [ 39.510444][ T688] ? kernel_text_address+0xa9/0xe0 [ 39.510475][ T688] kvm_mmu_post_init_vm+0x161/0x300 [ 39.510507][ T688] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 39.510529][ T688] ? _parse_integer_limit+0x195/0x1e0 [ 39.510566][ T688] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 39.510597][ T688] ? kstrtoull+0x13b/0x1e0 [ 39.510620][ T688] ? kstrtouint+0x78/0xf0 [ 39.510646][ T688] ? ioctl_has_perm+0x1bc/0x500 [ 39.510663][ T688] ? __asan_memcpy+0x5a/0x80 [ 39.510679][ T688] ? ioctl_has_perm+0x408/0x500 [ 39.510711][ T688] ? has_cap_mac_admin+0xd0/0xd0 [ 39.510735][ T688] ? __kasan_check_write+0x18/0x20 [ 39.510756][ T688] ? mutex_lock_killable+0x97/0x1d0 [ 39.510788][ T688] ? __cfi_mutex_lock_killable+0x10/0x10 [ 39.510808][ T688] ? proc_fail_nth_write+0x184/0x220 [ 39.510833][ T688] kvm_vcpu_ioctl+0xa43/0x1000 [ 39.510866][ T688] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 39.510888][ T688] ? __cfi_vfs_write+0x10/0x10 [ 39.510911][ T688] ? __kasan_check_write+0x18/0x20 [ 39.510938][ T688] ? mutex_unlock+0x90/0x240 [ 39.510956][ T688] ? __cfi_mutex_unlock+0x10/0x10 [ 39.510976][ T688] ? __fget_files+0x2bc/0x330 [ 39.511019][ T688] ? bpf_lsm_file_ioctl+0xd/0x20 [ 39.511047][ T688] ? security_file_ioctl+0x3e/0x110 [ 39.511068][ T688] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 39.511092][ T688] __se_sys_ioctl+0x123/0x1b0 [ 39.511112][ T688] __x64_sys_ioctl+0x7f/0xa0 [ 39.511131][ T688] x64_sys_call+0x1878/0x2ee0 [ 39.511160][ T688] do_syscall_64+0x57/0xf0 [ 39.511181][ T688] ? clear_bhb_loop+0x50/0xa0 [ 39.511208][ T688] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.511239][ T688] RIP: 0033:0x7f504c59e159 [ 39.511252][ T688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.511264][ T688] RSP: 002b:00007f504d49b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.511281][ T688] RAX: ffffffffffffffda RBX: 00007f504c825fa0 RCX: 00007f504c59e159 [ 39.511309][ T688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 39.511324][ T688] RBP: 00007f504d49b090 R08: 0000000000000000 R09: 0000000000000000 [ 39.511337][ T688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.511350][ T688] R13: 00007f504c826038 R14: 00007f504c825fa0 R15: 00007ffe2e4eeff8 [ 39.511368][ T688] [ 39.724860][ T670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.931059][ T670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.941565][ T670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.950871][ T670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.995398][ T696] IPv6: Can't replace route, no match found [ 40.078641][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 40.078659][ T36] audit: type=1400 audit(1700000008.190:315): avc: denied { create } for pid=699 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.117707][ T36] audit: type=1400 audit(1700000008.230:316): avc: denied { mounton } for pid=710 comm="syz.2.101" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 40.118361][ T711] syz.2.101: attempt to access beyond end of device [ 40.118361][ T711] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 40.154261][ T711] EXT4-fs (loop2): unable to read superblock [ 40.229091][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 40.235089][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 40.243906][ T9] usb 1-1: USB disconnect, device number 4 [ 40.325503][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.395414][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.475438][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 40.481626][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.492597][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.502386][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.515312][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 40.524410][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.533146][ T10] usb 4-1: config 0 descriptor?? [ 40.566626][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.576786][ T45] usb 3-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 40.585886][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.595884][ T45] ums-sddr55 3-1:1.0: USB Mass Storage device detected [ 40.796335][ T9] usb 3-1: USB disconnect, device number 4 [ 40.876887][ T36] audit: type=1400 audit(1700000008.990:317): avc: denied { read } for pid=719 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.942483][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 40.948550][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 40.959813][ T10] usb 4-1: USB disconnect, device number 3 [ 41.079771][ T730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.105535][ T730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.114436][ T730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.124314][ T730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.305405][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.478196][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.499284][ T45] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 41.515376][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.525383][ T45] usb 1-1: Product: syz [ 41.529666][ T45] usb 1-1: Manufacturer: syz [ 41.544464][ T45] usb 1-1: SerialNumber: syz [ 41.551383][ T45] usb 1-1: config 0 descriptor?? [ 41.558168][ T45] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 41.635402][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.715398][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.757496][ T712] usb 1-1: USB disconnect, device number 5 [ 41.815383][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 41.826339][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.838937][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.855464][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.868334][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 41.875482][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 41.882112][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.887416][ T65] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 41.895668][ T10] usb 3-1: config 0 descriptor?? [ 41.905373][ T65] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 41.912790][ T65] usb 4-1: config 0 has no interface number 0 [ 41.920552][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 41.929852][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.938010][ T65] usb 4-1: Product: syz [ 41.942251][ T65] usb 4-1: Manufacturer: syz [ 41.946940][ T65] usb 4-1: SerialNumber: syz [ 41.957226][ T65] usb 4-1: config 0 descriptor?? [ 41.963325][ T65] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 41.969771][ T65] usb 4-1: No valid video chain found. [ 42.165843][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.174434][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.186635][ T65] usb 4-1: USB disconnect, device number 4 [ 42.327868][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 42.333879][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 42.356391][ T10] usb 3-1: USB disconnect, device number 5 [ 42.507715][ T36] audit: type=1326 audit(1700000002.160:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.0.115" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103af9e159 code=0x0 [ 42.723319][ T774] 9pnet_fd: Insufficient options for proto=fd [ 42.757037][ T36] audit: type=1400 audit(1700000002.410:319): avc: denied { mounton } for pid=775 comm="syz.3.117" path="/40/mnt" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 42.793182][ T36] audit: type=1400 audit(1700000002.430:320): avc: denied { mounton } for pid=775 comm="syz.3.117" path="/40/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 42.854775][ T782] netlink: 'syz.2.119': attribute type 3 has an invalid length. [ 42.872644][ T782] netlink: 'syz.2.119': attribute type 3 has an invalid length. [ 43.075412][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.083256][ T790] netlink: 'syz.1.122': attribute type 27 has an invalid length. [ 43.109452][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.116746][ T790] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.245398][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 43.255994][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.267686][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.277600][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.291011][ T312] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 43.300156][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.312942][ T312] usb 4-1: config 0 descriptor?? [ 43.355708][ T798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 43.375530][ T36] audit: type=1400 audit(1700000003.020:321): avc: denied { setattr } for pid=799 comm="syz.0.126" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 43.468536][ T36] audit: type=1400 audit(1700000003.120:322): avc: denied { mounton } for pid=804 comm="syz.0.128" path="/24/file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.511352][ T36] audit: type=1400 audit(1700000003.150:323): avc: denied { write } for pid=806 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.556012][ T36] audit: type=1400 audit(1700000003.200:324): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 43.606066][ T813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 43.726102][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 43.742926][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.765470][ T312] usb 4-1: USB disconnect, device number 5 [ 43.829625][ T822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.135'. [ 44.564518][ T873] netlink: 'syz.2.147': attribute type 19 has an invalid length. [ 44.576750][ T873] incfs: Error accessing: ./file0. [ 44.582067][ T873] incfs: mount failed -20 [ 44.705391][ T712] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 44.866542][ T712] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.876706][ T712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 44.885890][ T712] usb 4-1: config 1 has no interface number 0 [ 44.885977][ T312] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 44.892018][ T712] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.910694][ T712] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 44.926172][ T712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.945390][ T712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.953421][ T712] usb 4-1: Product: syz [ 44.957877][ T712] usb 4-1: Manufacturer: syz [ 44.962521][ T712] usb 4-1: SerialNumber: syz [ 45.035420][ T65] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.058135][ T312] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 45.067493][ T312] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 45.076416][ T312] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 45.085545][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.094553][ T312] usb 3-1: config 0 descriptor?? [ 45.101445][ T312] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 45.108543][ T312] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 45.116878][ T312] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 45.195416][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 45.201640][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.218274][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.228234][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.242358][ T65] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 45.251574][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.261820][ T65] usb 2-1: config 0 descriptor?? [ 45.323160][ T896] netlink: 'syz.0.157': attribute type 27 has an invalid length. [ 45.673113][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 45.680636][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.692258][ T65] usb 2-1: USB disconnect, device number 6 [ 45.772925][ T712] cdc_ncm 4-1:1.1: bind() failure [ 45.980750][ T712] usb 4-1: USB disconnect, device number 6 [ 46.290847][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 46.290866][ T36] audit: type=1400 audit(1700000003.410:335): avc: denied { ioctl } for pid=904 comm="syz.1.160" path="socket:[9570]" dev="sockfs" ino=9570 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.394447][ T36] audit: type=1400 audit(1700000003.510:336): avc: denied { write } for pid=908 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.512422][ T916] netlink: 'syz.3.163': attribute type 3 has an invalid length. [ 46.532367][ T916] netlink: 'syz.3.163': attribute type 3 has an invalid length. [ 46.648301][ T36] audit: type=1400 audit(1700000003.770:337): avc: denied { bind } for pid=922 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.667640][ T36] audit: type=1400 audit(1700000003.770:338): avc: denied { name_bind } for pid=922 comm="syz.1.166" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 46.689661][ T36] audit: type=1400 audit(1700000003.770:339): avc: denied { node_bind } for pid=922 comm="syz.1.166" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 46.769217][ T934] netlink: 4476 bytes leftover after parsing attributes in process `syz.0.170'. [ 46.812000][ T36] audit: type=1400 audit(1700000003.930:340): avc: denied { mount } for pid=937 comm="syz.0.171" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.836829][ T938] process 'syz.0.171' launched 'tracefs' with NULL argv: empty string added [ 46.858256][ T36] audit: type=1400 audit(1700000003.950:341): avc: denied { search } for pid=937 comm="syz.0.171" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 46.881467][ T36] audit: type=1400 audit(1700000003.950:342): avc: denied { read } for pid=937 comm="syz.0.171" name="buffer_size_kb" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 46.904486][ T36] audit: type=1400 audit(1700000003.950:343): avc: denied { open } for pid=937 comm="syz.0.171" path="/45/tracefs_dir/buffer_size_kb" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 46.930858][ T36] audit: type=1400 audit(1700000003.960:344): avc: denied { write } for pid=937 comm="syz.0.171" name="buffer_size_kb" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.464363][ T65] usb 3-1: USB disconnect, device number 6 [ 47.805406][ T312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.980935][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.008067][ T312] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 48.029751][ T312] usb 2-1: can't read configurations, error -71 [ 48.514595][ T997] overlayfs: failed to resolve './file2': -2 [ 48.635779][ T1001] sock: sock_timestamping_bind_phc: sock not bind to device [ 48.697322][ T1009] netlink: 'syz.0.199': attribute type 4 has an invalid length. [ 48.705245][ T1009] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.199'. [ 48.770007][ T1012] futex_wake_op: syz.2.201 tries to shift op by 144; fix this program [ 48.828496][ T1012] kvm: kvm [1011]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400006 [ 48.933017][ T1024] overlayfs: failed to resolve './file2': -2 [ 48.957059][ T1028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'. [ 49.115609][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.271162][ T1050] overlayfs: failed to resolve './file2': -2 [ 49.291694][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.309712][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 49.318594][ T10] usb 1-1: can't read configurations, error -71 [ 49.569354][ T1063] ./dev/sda1: Can't lookup blockdev [ 49.868734][ T1079] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 50.025417][ T65] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 50.196507][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.216391][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.236438][ T65] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 50.246023][ T1090] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 50.255620][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.274617][ T65] usb 4-1: config 0 descriptor?? [ 50.545414][ T312] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 50.699380][ T1073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.715660][ T1073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.725036][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.745767][ T1073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.754641][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.764755][ T1073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.775387][ T312] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 50.795065][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.815829][ T312] usb 2-1: config 0 descriptor?? [ 51.096072][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 51.112347][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 51.126533][ T65] usb 4-1: USB disconnect, device number 7 [ 51.229139][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 51.245440][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 51.256423][ T312] usb 2-1: USB disconnect, device number 9 [ 51.855422][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.015503][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 52.029119][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.055417][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.065199][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.079370][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 52.088817][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.098049][ T10] usb 4-1: config 0 descriptor?? [ 52.123218][ T1114] sock: sock_timestamping_bind_phc: sock not bind to device [ 52.226763][ T1119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 52.257226][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 52.257244][ T36] audit: type=1400 audit(1700000009.380:356): avc: denied { associate } for pid=1122 comm="syz.0.243" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.346398][ T1130] FAULT_INJECTION: forcing a failure. [ 52.346398][ T1130] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.380604][ T1130] CPU: 1 UID: 0 PID: 1130 Comm: syz.0.246 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 52.380660][ T1130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.380673][ T1130] Call Trace: [ 52.380679][ T1130] [ 52.380687][ T1130] __dump_stack+0x21/0x30 [ 52.380720][ T1130] dump_stack_lvl+0x140/0x1c0 [ 52.380748][ T1130] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.380781][ T1130] dump_stack+0x19/0x20 [ 52.380808][ T1130] should_fail_ex+0x3c2/0x510 [ 52.380833][ T1130] should_fail_alloc_page+0xec/0x110 [ 52.380860][ T1130] __alloc_pages_noprof+0x1c0/0x7e0 [ 52.380889][ T1130] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.380923][ T1130] ? _raw_spin_lock+0x92/0x120 [ 52.380942][ T1130] ? __cfi__raw_spin_lock+0x10/0x10 [ 52.380961][ T1130] __folio_alloc_noprof+0x14/0x80 [ 52.380990][ T1130] folio_prealloc+0x46/0x220 [ 52.381016][ T1130] do_pte_missing+0x560/0x4440 [ 52.381043][ T1130] ? mlock_folio+0x25d/0x330 [ 52.381072][ T1130] ? cgroup_rstat_updated+0x144/0x800 [ 52.381096][ T1130] ? pte_marker_clear+0x1b0/0x1b0 [ 52.381122][ T1130] ? lru_gen_update_size+0x566/0x620 [ 52.381153][ T1130] ? __mod_memcg_lruvec_state+0x186/0x460 [ 52.381183][ T1130] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 52.381203][ T1130] handle_mm_fault+0x1189/0x1ba0 [ 52.381226][ T1130] ? __kasan_check_write+0x18/0x20 [ 52.381250][ T1130] ? __cfi_handle_mm_fault+0x10/0x10 [ 52.381274][ T1130] ? follow_page_pte+0x4b2/0xba0 [ 52.381303][ T1130] ? gup_must_unshare+0x1e0/0x1e0 [ 52.381334][ T1130] ? vma_is_secretmem+0x11/0x50 [ 52.381362][ T1130] ? check_vma_flags+0x36d/0x3a0 [ 52.381390][ T1130] __get_user_pages+0x114b/0x22d0 [ 52.381421][ T1130] ? populate_vma_page_range+0x220/0x220 [ 52.381449][ T1130] ? down_read+0x7f/0xe0 [ 52.381474][ T1130] ? __cfi_down_read+0x10/0x10 [ 52.381501][ T1130] __mm_populate+0x300/0x440 [ 52.381528][ T1130] do_mlock+0x7f3/0xa10 [ 52.381556][ T1130] ? fput+0x1a4/0x230 [ 52.381583][ T1130] ? lru_gen_add_folio+0x880/0x880 [ 52.381613][ T1130] ? ksys_write+0x1f3/0x260 [ 52.381634][ T1130] ? __cfi_ksys_write+0x10/0x10 [ 52.381662][ T1130] ? __kasan_check_read+0x15/0x20 [ 52.381682][ T1130] __x64_sys_mlock+0x64/0x80 [ 52.381710][ T1130] x64_sys_call+0x670/0x2ee0 [ 52.381730][ T1130] do_syscall_64+0x57/0xf0 [ 52.381748][ T1130] ? clear_bhb_loop+0x50/0xa0 [ 52.381774][ T1130] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.381797][ T1130] RIP: 0033:0x7f103af9e159 [ 52.381813][ T1130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.381842][ T1130] RSP: 002b:00007f103bea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 52.381863][ T1130] RAX: ffffffffffffffda RBX: 00007f103b225fa0 RCX: 00007f103af9e159 [ 52.381878][ T1130] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 52.381891][ T1130] RBP: 00007f103bea3090 R08: 0000000000000000 R09: 0000000000000000 [ 52.381903][ T1130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.381931][ T1130] R13: 00007f103b226038 R14: 00007f103b225fa0 R15: 00007ffc2d8222b8 [ 52.381948][ T1130] [ 52.512921][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 52.887637][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.906708][ T10] usb 4-1: USB disconnect, device number 8 [ 52.924258][ T1134] ======================================================= [ 52.924258][ T1134] WARNING: The mand mount option has been deprecated and [ 52.924258][ T1134] and is ignored by this kernel. Remove the mand [ 52.924258][ T1134] option from the mount to silence this warning. [ 52.924258][ T1134] ======================================================= [ 52.975525][ T36] audit: type=1400 audit(1700000010.090:357): avc: denied { block_suspend } for pid=1133 comm="syz.0.247" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.040441][ T1137] netlink: 'syz.0.248': attribute type 3 has an invalid length. [ 53.065243][ T1137] netlink: 'syz.0.248': attribute type 3 has an invalid length. [ 53.352298][ T36] audit: type=1400 audit(1700000010.470:358): avc: denied { setattr } for pid=1154 comm="syz.0.256" path="socket:[12979]" dev="sockfs" ino=12979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.559157][ T36] audit: type=1400 audit(1700000010.680:359): avc: denied { create } for pid=1161 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 53.573478][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.645407][ T712] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 53.735386][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 53.743865][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.759329][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.779438][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.802633][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 53.822078][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.830711][ T712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.839178][ T712] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 226, using maximum allowed: 30 [ 53.850202][ T712] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 53.863650][ T10] usb 2-1: config 0 descriptor?? [ 53.877215][ T712] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 53.886589][ T712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.894716][ T712] usb 1-1: Product: syz [ 53.915385][ T712] usb 1-1: Manufacturer: syz [ 53.925379][ T712] usb 1-1: SerialNumber: syz [ 54.075831][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 54.082021][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 54.102329][ T10] usb 2-1: USB disconnect, device number 10 [ 54.145071][ T1157] Zero length message leads to an empty skb [ 54.167239][ T712] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.184398][ T712] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 54.215431][ T712] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 54.235847][ T712] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.257166][ T712] usb 1-1: USB disconnect, device number 8 [ 54.269941][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.777490][ T1178] FAULT_INJECTION: forcing a failure. [ 54.777490][ T1178] name failslab, interval 1, probability 0, space 0, times 0 [ 54.815423][ T1178] CPU: 1 UID: 0 PID: 1178 Comm: syz.3.265 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 54.815467][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.815485][ T1178] Call Trace: [ 54.815494][ T1178] [ 54.815503][ T1178] __dump_stack+0x21/0x30 [ 54.815543][ T1178] dump_stack_lvl+0x140/0x1c0 [ 54.815577][ T1178] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.815614][ T1178] dump_stack+0x19/0x20 [ 54.815648][ T1178] should_fail_ex+0x3c2/0x510 [ 54.815678][ T1178] should_failslab+0xac/0x100 [ 54.815709][ T1178] kmem_cache_alloc_node_noprof+0x45/0x420 [ 54.815738][ T1178] ? alloc_vmap_area+0x76a/0x26f0 [ 54.815774][ T1178] alloc_vmap_area+0x76a/0x26f0 [ 54.815813][ T1178] ? kasan_save_alloc_info+0x3a/0x50 [ 54.815836][ T1178] ? vm_map_ram+0xdd0/0xdd0 [ 54.815870][ T1178] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 54.815896][ T1178] ? __get_vm_area_node+0x150/0x390 [ 54.815932][ T1178] __get_vm_area_node+0x1f8/0x390 [ 54.815979][ T1178] __vmalloc_node_range_noprof+0x340/0x1300 [ 54.816018][ T1178] ? copy_process+0x57c/0x3350 [ 54.816055][ T1178] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 54.816095][ T1178] ? kasan_save_alloc_info+0x3a/0x50 [ 54.816118][ T1178] ? __kasan_slab_alloc+0x73/0x90 [ 54.816148][ T1178] ? arch_dup_task_struct+0x5b/0xe0 [ 54.816185][ T1178] ? __asan_memcpy+0x5a/0x80 [ 54.816210][ T1178] dup_task_struct+0x5d6/0xd80 [ 54.816240][ T1178] ? copy_process+0x57c/0x3350 [ 54.816269][ T1178] ? _raw_spin_lock_irq+0x93/0x120 [ 54.816293][ T1178] ? copy_process+0x3350/0x3350 [ 54.816324][ T1178] ? __kasan_check_write+0x18/0x20 [ 54.816350][ T1178] copy_process+0x57c/0x3350 [ 54.816385][ T1178] ? kasan_save_alloc_info+0x3a/0x50 [ 54.816408][ T1178] ? __cfi_copy_process+0x10/0x10 [ 54.816439][ T1178] ? __kmalloc_cache_noprof+0x23c/0x470 [ 54.816466][ T1178] ? __kasan_check_write+0x18/0x20 [ 54.816492][ T1178] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 54.816521][ T1178] vhost_task_create+0x1f7/0x3f0 [ 54.816547][ T1178] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 54.816578][ T1178] ? __cfi_vhost_task_create+0x10/0x10 [ 54.816605][ T1178] ? __cfi_vhost_task_fn+0x10/0x10 [ 54.816630][ T1178] ? __kasan_check_write+0x18/0x20 [ 54.816666][ T1178] ? mutex_lock+0x97/0x1d0 [ 54.816693][ T1178] ? __cfi_mutex_lock+0x10/0x10 [ 54.816721][ T1178] ? preempt_schedule_common+0x2d/0x60 [ 54.816747][ T1178] ? preempt_schedule+0xc5/0xe0 [ 54.816772][ T1178] kvm_mmu_post_init_vm+0x161/0x300 [ 54.816807][ T1178] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 54.816841][ T1178] ? try_to_wake_up+0x119e/0x1fd0 [ 54.816869][ T1178] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 54.816903][ T1178] ? __cfi_try_to_wake_up+0x10/0x10 [ 54.816930][ T1178] ? plist_del+0x3f0/0x410 [ 54.816952][ T1178] ? ioctl_has_perm+0x1bc/0x500 [ 54.816987][ T1178] ? __asan_memcpy+0x5a/0x80 [ 54.817012][ T1178] ? ioctl_has_perm+0x408/0x500 [ 54.817036][ T1178] ? has_cap_mac_admin+0xd0/0xd0 [ 54.817063][ T1178] ? __kasan_check_write+0x18/0x20 [ 54.817087][ T1178] ? mutex_lock_killable+0x97/0x1d0 [ 54.817116][ T1178] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.817145][ T1178] ? proc_fail_nth_write+0x184/0x220 [ 54.817183][ T1178] kvm_vcpu_ioctl+0xa43/0x1000 [ 54.817207][ T1178] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.817230][ T1178] ? do_futex+0x37d/0x510 [ 54.817263][ T1178] ? __cfi_do_futex+0x10/0x10 [ 54.817292][ T1178] ? mutex_unlock+0x90/0x240 [ 54.817322][ T1178] ? __fget_files+0x2bc/0x330 [ 54.817351][ T1178] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.817382][ T1178] ? security_file_ioctl+0x3e/0x110 [ 54.817405][ T1178] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.817427][ T1178] __se_sys_ioctl+0x123/0x1b0 [ 54.817457][ T1178] __x64_sys_ioctl+0x7f/0xa0 [ 54.817487][ T1178] x64_sys_call+0x1878/0x2ee0 [ 54.817509][ T1178] do_syscall_64+0x57/0xf0 [ 54.817530][ T1178] ? clear_bhb_loop+0x50/0xa0 [ 54.817560][ T1178] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.817588][ T1178] RIP: 0033:0x7ff37df9e159 [ 54.817607][ T1178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.817627][ T1178] RSP: 002b:00007ff37ee29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.817653][ T1178] RAX: ffffffffffffffda RBX: 00007ff37e226090 RCX: 00007ff37df9e159 [ 54.817670][ T1178] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 54.817683][ T1178] RBP: 00007ff37e03506b R08: 0000000000000000 R09: 0000000000000000 [ 54.817698][ T1178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.817712][ T1178] R13: 00007ff37e226128 R14: 00007ff37e226090 R15: 00007fff6c78d258 [ 54.817733][ T1178] [ 55.085515][ T712] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 55.607073][ T712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.619754][ T712] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 55.628787][ T712] usb 1-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.00 [ 55.637935][ T712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.649964][ T712] usb 1-1: config 0 descriptor?? [ 55.845415][ T65] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 55.985421][ T65] usb 4-1: device descriptor read/64, error -71 [ 56.235406][ T65] usb 4-1: device descriptor read/64, error -71 [ 56.485394][ T65] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 56.635396][ T65] usb 4-1: device descriptor read/64, error -71 [ 56.792484][ T1201] sock: sock_timestamping_bind_phc: sock not bind to device [ 56.875396][ T65] usb 4-1: device descriptor read/64, error -71 [ 56.928742][ T36] audit: type=1400 audit(1700000014.050:360): avc: denied { append } for pid=1207 comm="syz.1.274" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.957257][ T1208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.985528][ T65] usb usb4-port1: attempt power cycle [ 57.325433][ T65] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 57.346520][ T65] usb 4-1: device descriptor read/8, error -71 [ 57.476644][ T65] usb 4-1: device descriptor read/8, error -71 [ 57.745415][ T65] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 57.770968][ T392] usb 1-1: USB disconnect, device number 9 [ 57.781586][ T65] usb 4-1: device descriptor read/8, error -71 [ 57.823702][ T1222] syz.0.277 uses obsolete (PF_INET,SOCK_PACKET) [ 57.832515][ T36] audit: type=1400 audit(1700000014.950:361): avc: denied { connect } for pid=1221 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.926663][ T65] usb 4-1: device descriptor read/8, error -71 [ 58.036837][ T65] usb usb4-port1: unable to enumerate USB device [ 58.195415][ T392] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 58.386927][ T392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.395016][ T392] usb 1-1: not running at top speed; connect to a high speed hub [ 58.405988][ T392] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.417339][ T392] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 58.426766][ T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 58.434794][ T392] usb 1-1: Product: syz [ 58.439260][ T392] usb 1-1: Manufacturer: syz [ 58.449061][ T392] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 58.847292][ T392] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 58.875438][ T392] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 58.894763][ T392] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 58.916991][ T392] usb 1-1: USB disconnect, device number 10 [ 59.005458][ T312] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 59.166556][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.176913][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.186781][ T312] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 59.196832][ T312] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.211552][ T312] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 59.225375][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.233439][ T312] usb 4-1: Product: syz [ 59.237870][ T312] usb 4-1: Manufacturer: syz [ 59.242520][ T312] usb 4-1: SerialNumber: syz [ 59.256789][ T312] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 59.268260][ T312] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 59.279175][ T312] usbserial_generic 4-1:1.0: generic converter detected [ 59.288243][ T312] usb 4-1: generic converter now attached to ttyUSB0 [ 59.471478][ T312] usb 4-1: USB disconnect, device number 13 [ 59.485634][ T312] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 59.493761][ T312] usbserial_generic 4-1:1.0: device disconnected [ 60.062209][ T1233] sock: sock_timestamping_bind_phc: sock not bind to device [ 60.075411][ T1238] netlink: 96 bytes leftover after parsing attributes in process `syz.3.283'. [ 60.433917][ T1248] netlink: 'syz.1.286': attribute type 3 has an invalid length. [ 60.465514][ T1248] netlink: 'syz.1.286': attribute type 3 has an invalid length. [ 60.619038][ T36] audit: type=1400 audit(1700000017.740:362): avc: denied { getopt } for pid=1251 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.715561][ T36] audit: type=1400 audit(1700000017.840:363): avc: denied { write } for pid=1255 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.772525][ T36] audit: type=1400 audit(1700000017.890:364): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.835381][ T36] audit: type=1400 audit(1700000017.950:365): avc: denied { mount } for pid=1257 comm="syz.1.290" name="/" dev="configfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.877900][ T36] audit: type=1400 audit(1700000017.950:366): avc: denied { search } for pid=1257 comm="syz.1.290" name="/" dev="configfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.925525][ T36] audit: type=1400 audit(1700000017.950:367): avc: denied { search } for pid=1257 comm="syz.1.290" name="/" dev="configfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.978101][ T36] audit: type=1400 audit(1700000017.950:368): avc: denied { read } for pid=1257 comm="syz.1.290" name="/" dev="configfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.025381][ T36] audit: type=1400 audit(1700000017.950:369): avc: denied { open } for pid=1257 comm="syz.1.290" path="/" dev="configfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.080820][ T1266] sock: sock_timestamping_bind_phc: sock not bind to device [ 61.087108][ T36] audit: type=1326 audit(1700000017.980:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.0.291" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103af9e159 code=0x7ffc0000 [ 61.226700][ T1275] overlayfs: lower data-only dirs require metacopy support. [ 61.767987][ T1299] sock: sock_timestamping_bind_phc: sock not bind to device [ 62.120319][ T1324] syzkaller1: entered promiscuous mode [ 62.125962][ T1324] syzkaller1: entered allmulticast mode [ 62.173839][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 62.466655][ T1345] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 62.485399][ T1345] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 62.628148][ T1350] FAULT_INJECTION: forcing a failure. [ 62.628148][ T1350] name failslab, interval 1, probability 0, space 0, times 0 [ 62.645421][ T712] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 62.655362][ T65] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 62.685354][ T1350] CPU: 1 UID: 0 PID: 1350 Comm: syz.3.318 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 62.685388][ T1350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.685403][ T1350] Call Trace: [ 62.685410][ T1350] [ 62.685419][ T1350] __dump_stack+0x21/0x30 [ 62.685456][ T1350] dump_stack_lvl+0x140/0x1c0 [ 62.685488][ T1350] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.685518][ T1350] ? avc_has_perm+0x155/0x240 [ 62.685548][ T1350] ? __cfi_avc_has_perm+0x10/0x10 [ 62.685577][ T1350] dump_stack+0x19/0x20 [ 62.685607][ T1350] should_fail_ex+0x3c2/0x510 [ 62.685635][ T1350] should_failslab+0xac/0x100 [ 62.685664][ T1350] __kmalloc_cache_noprof+0x41/0x470 [ 62.685689][ T1350] ? vhost_task_create+0x12c/0x3f0 [ 62.685715][ T1350] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 62.685743][ T1350] vhost_task_create+0x12c/0x3f0 [ 62.685767][ T1350] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 62.685795][ T1350] ? __cfi_vhost_task_create+0x10/0x10 [ 62.685823][ T1350] ? __cfi_vhost_task_fn+0x10/0x10 [ 62.685846][ T1350] ? __kasan_check_write+0x18/0x20 [ 62.685869][ T1350] ? mutex_lock+0x97/0x1d0 [ 62.685896][ T1350] ? __cfi_mutex_lock+0x10/0x10 [ 62.685923][ T1350] ? kernel_text_address+0xa9/0xe0 [ 62.685956][ T1350] kvm_mmu_post_init_vm+0x161/0x300 [ 62.686000][ T1350] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 62.686032][ T1350] ? _parse_integer_limit+0x195/0x1e0 [ 62.686060][ T1350] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 62.686092][ T1350] ? kstrtoull+0x13b/0x1e0 [ 62.686117][ T1350] ? kstrtouint+0x78/0xf0 [ 62.686142][ T1350] ? ioctl_has_perm+0x1bc/0x500 [ 62.686167][ T1350] ? __asan_memcpy+0x5a/0x80 [ 62.686190][ T1350] ? ioctl_has_perm+0x408/0x500 [ 62.686215][ T1350] ? has_cap_mac_admin+0xd0/0xd0 [ 62.686239][ T1350] ? __kasan_check_write+0x18/0x20 [ 62.686263][ T1350] ? mutex_lock_killable+0x97/0x1d0 [ 62.686291][ T1350] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.686320][ T1350] ? proc_fail_nth_write+0x184/0x220 [ 62.686356][ T1350] kvm_vcpu_ioctl+0xa43/0x1000 [ 62.686380][ T1350] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 62.686403][ T1350] ? __cfi_vfs_write+0x10/0x10 [ 62.686428][ T1350] ? __kasan_check_write+0x18/0x20 [ 62.686451][ T1350] ? mutex_unlock+0x90/0x240 [ 62.686479][ T1350] ? __cfi_mutex_unlock+0x10/0x10 [ 62.686509][ T1350] ? __fget_files+0x2bc/0x330 [ 62.686537][ T1350] ? bpf_lsm_file_ioctl+0xd/0x20 [ 62.686567][ T1350] ? security_file_ioctl+0x3e/0x110 [ 62.686590][ T1350] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 62.686612][ T1350] __se_sys_ioctl+0x123/0x1b0 [ 62.686642][ T1350] __x64_sys_ioctl+0x7f/0xa0 [ 62.686670][ T1350] x64_sys_call+0x1878/0x2ee0 [ 62.686692][ T1350] do_syscall_64+0x57/0xf0 [ 62.686730][ T1350] ? clear_bhb_loop+0x50/0xa0 [ 62.686760][ T1350] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.686787][ T1350] RIP: 0033:0x7ff37df9e159 [ 62.686806][ T1350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.686826][ T1350] RSP: 002b:00007ff37ee29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.686868][ T1350] RAX: ffffffffffffffda RBX: 00007ff37e226090 RCX: 00007ff37df9e159 [ 62.686886][ T1350] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 62.686899][ T1350] RBP: 00007ff37ee29090 R08: 0000000000000000 R09: 0000000000000000 [ 62.686914][ T1350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.686927][ T1350] R13: 00007ff37e226128 R14: 00007ff37e226090 R15: 00007fff6c78d258 [ 62.686965][ T1350] [ 63.086126][ T712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 63.094197][ T712] usb 2-1: not running at top speed; connect to a high speed hub [ 63.102985][ T712] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 63.112587][ T712] usb 2-1: config 0 has no interface number 0 [ 63.125321][ T712] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 63.145549][ T712] usb 2-1: config 0 interface 88 has no altsetting 0 [ 63.166371][ T712] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 63.185315][ T712] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 63.197644][ T712] usb 2-1: Product: syz [ 63.201846][ T712] usb 2-1: Manufacturer: syz [ 63.220030][ T712] usb 2-1: SerialNumber: syz [ 63.242252][ T712] usb 2-1: config 0 descriptor?? [ 63.295458][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 63.295478][ T36] audit: type=1400 audit(1700000002.110:407): avc: denied { mounton } for pid=1351 comm="syz.3.319" path="/94/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 63.454710][ T712] usb 2-1: USB disconnect, device number 11 [ 63.461535][ T314] udevd[314]: setting mode of /dev/bus/usb/002/011 to 020664 failed: Read-only file system [ 63.484875][ T314] udevd[314]: setting owner of /dev/bus/usb/002/011 to uid=0, gid=0 failed: Read-only file system [ 63.485462][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 63.501874][ T65] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 63.515324][ T65] usb 1-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 63.528387][ T314] udevd[314]: symlink '../bus/usb/002/011' '/dev/char/189:138.tmp-c189:138' failed: Read-only file system [ 63.544820][ T65] usb 1-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 63.561239][ T314] udevd[314]: symlink '../bus/usb/002/011' '/dev/char/189:138.tmp-c189:138' failed: Read-only file system [ 63.574091][ T65] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 63.585302][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.593324][ T65] usb 1-1: Product: syz [ 63.615282][ T65] usb 1-1: Manufacturer: syz [ 63.619983][ T65] usb 1-1: SerialNumber: syz [ 63.631770][ T65] usb 1-1: Fast Track Pro config OK [ 64.235488][ T1369] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 64.254331][ T1369] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.428329][ T65] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 64.440410][ T65] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 64.442177][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 64.455907][ T65] usb 1-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 64.475869][ T65] usb 1-1: 0:2 : does not exist [ 64.480989][ T65] usb 1-1: unit 5 not found! [ 64.495584][ T65] usb 1-1: unit 6 not found! [ 64.525445][ T65] usb 1-1: USB disconnect, device number 11 [ 64.633640][ T1384] FAULT_INJECTION: forcing a failure. [ 64.633640][ T1384] name fail_futex, interval 1, probability 0, space 0, times 1 [ 64.655353][ T1384] CPU: 0 UID: 0 PID: 1384 Comm: syz.1.331 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 64.655391][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.655407][ T1384] Call Trace: [ 64.655415][ T1384] [ 64.655425][ T1384] __dump_stack+0x21/0x30 [ 64.655466][ T1384] dump_stack_lvl+0x140/0x1c0 [ 64.655499][ T1384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.655552][ T1384] dump_stack+0x19/0x20 [ 64.655585][ T1384] should_fail_ex+0x3c2/0x510 [ 64.655616][ T1384] should_fail+0xf/0x20 [ 64.655643][ T1384] get_futex_key+0x178/0x940 [ 64.655674][ T1384] ? __cfi___futex_wait+0x10/0x10 [ 64.655697][ T1384] ? __cfi_get_futex_key+0x10/0x10 [ 64.655724][ T1384] ? __cfi_futex_wake_mark+0x10/0x10 [ 64.655745][ T1384] futex_wake+0x150/0x950 [ 64.655767][ T1384] ? futex_wait+0x2b8/0x7c0 [ 64.655789][ T1384] ? __cfi_futex_wake+0x10/0x10 [ 64.655813][ T1384] ? vfs_write+0xbcf/0xfd0 [ 64.655839][ T1384] do_futex+0x37d/0x510 [ 64.655872][ T1384] ? avc_policy_seqno+0xd/0x30 [ 64.655903][ T1384] ? __cfi_do_futex+0x10/0x10 [ 64.655936][ T1384] __se_sys_futex+0x13c/0x320 [ 64.655968][ T1384] ? fput+0x1a4/0x230 [ 64.655999][ T1384] ? __x64_sys_futex+0x110/0x110 [ 64.656043][ T1384] ? bpf_lsm_file_permission+0xd/0x20 [ 64.656075][ T1384] __x64_sys_futex+0xe9/0x110 [ 64.656107][ T1384] x64_sys_call+0x227f/0x2ee0 [ 64.656128][ T1384] do_syscall_64+0x57/0xf0 [ 64.656149][ T1384] ? clear_bhb_loop+0x50/0xa0 [ 64.656179][ T1384] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.656207][ T1384] RIP: 0033:0x7fa85b79e159 [ 64.656227][ T1384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.656247][ T1384] RSP: 002b:00007fa85c7160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 64.656274][ T1384] RAX: ffffffffffffffda RBX: 00007fa85ba25fa8 RCX: 00007fa85b79e159 [ 64.656291][ T1384] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa85ba25fac [ 64.656308][ T1384] RBP: 00007fa85ba25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 64.656324][ T1384] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 64.656340][ T1384] R13: 00007fa85ba26038 R14: 00007ffe8f9964e0 R15: 00007ffe8f9965c8 [ 64.656359][ T1384] [ 65.116050][ T36] audit: type=1326 audit(1700000003.940:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.148593][ T36] audit: type=1326 audit(1700000003.940:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.199012][ T36] audit: type=1326 audit(1700000003.940:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.259879][ T36] audit: type=1326 audit(1700000003.940:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.315781][ T36] audit: type=1326 audit(1700000003.940:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.350761][ T36] audit: type=1326 audit(1700000003.950:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.382333][ T36] audit: type=1326 audit(1700000003.950:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.413416][ T1314] bridge_slave_1: left allmulticast mode [ 65.420802][ T1314] bridge_slave_1: left promiscuous mode [ 65.431369][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.438889][ T36] audit: type=1326 audit(1700000003.950:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.464056][ T36] audit: type=1326 audit(1700000003.950:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b79e159 code=0x7ffc0000 [ 65.489555][ T1314] bridge_slave_0: left allmulticast mode [ 65.495557][ T1314] bridge_slave_0: left promiscuous mode [ 65.501256][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.555183][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 65.598226][ T1409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 65.646017][ T1411] No source specified [ 65.705180][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 65.716513][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 65.746320][ T10] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 65.758992][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 65.785186][ T10] usb 4-1: config 4 has no interface number 0 [ 65.812691][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 65.825540][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.842767][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.850844][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.865151][ T10] usb 4-1: Product: syz [ 65.869439][ T1402] bridge_slave_0: entered allmulticast mode [ 65.875405][ T10] usb 4-1: Manufacturer: syz [ 65.885731][ T1402] bridge_slave_0: entered promiscuous mode [ 65.891632][ T10] usb 4-1: SerialNumber: syz [ 65.901989][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.919248][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.935230][ T1402] bridge_slave_1: entered allmulticast mode [ 65.942111][ T1402] bridge_slave_1: entered promiscuous mode [ 66.066214][ T1417] FAULT_INJECTION: forcing a failure. [ 66.066214][ T1417] name failslab, interval 1, probability 0, space 0, times 0 [ 66.095229][ T1417] CPU: 0 UID: 0 PID: 1417 Comm: syz.0.342 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 66.095265][ T1417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.095287][ T1417] Call Trace: [ 66.095299][ T1417] [ 66.095309][ T1417] __dump_stack+0x21/0x30 [ 66.095346][ T1417] dump_stack_lvl+0x140/0x1c0 [ 66.095378][ T1417] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.095412][ T1417] dump_stack+0x19/0x20 [ 66.095442][ T1417] should_fail_ex+0x3c2/0x510 [ 66.095471][ T1417] should_failslab+0xac/0x100 [ 66.095500][ T1417] kmem_cache_alloc_node_noprof+0x45/0x420 [ 66.095526][ T1417] ? dup_task_struct+0xc1/0xd80 [ 66.095555][ T1417] ? kasan_save_alloc_info+0x3a/0x50 [ 66.095576][ T1417] ? __kasan_kmalloc+0x96/0xb0 [ 66.095603][ T1417] ? __kmalloc_cache_noprof+0x23c/0x470 [ 66.095629][ T1417] dup_task_struct+0xc1/0xd80 [ 66.095657][ T1417] ? __kasan_check_write+0x18/0x20 [ 66.095681][ T1417] ? _raw_spin_lock_irq+0x93/0x120 [ 66.095703][ T1417] ? copy_process+0x3350/0x3350 [ 66.095732][ T1417] ? __kasan_check_write+0x18/0x20 [ 66.095756][ T1417] copy_process+0x57c/0x3350 [ 66.095787][ T1417] ? kasan_save_alloc_info+0x3a/0x50 [ 66.095809][ T1417] ? __cfi_copy_process+0x10/0x10 [ 66.095838][ T1417] ? __kmalloc_cache_noprof+0x23c/0x470 [ 66.095863][ T1417] ? __kasan_check_write+0x18/0x20 [ 66.095887][ T1417] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 66.095914][ T1417] vhost_task_create+0x1f7/0x3f0 [ 66.095939][ T1417] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 66.095968][ T1417] ? __cfi_vhost_task_create+0x10/0x10 [ 66.095994][ T1417] ? __cfi_vhost_task_fn+0x10/0x10 [ 66.096019][ T1417] ? __kasan_check_write+0x18/0x20 [ 66.096042][ T1417] ? mutex_lock+0x97/0x1d0 [ 66.096070][ T1417] ? __cfi_mutex_lock+0x10/0x10 [ 66.096096][ T1417] ? kernel_text_address+0xa9/0xe0 [ 66.096129][ T1417] kvm_mmu_post_init_vm+0x161/0x300 [ 66.096164][ T1417] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 66.096196][ T1417] ? _parse_integer_limit+0x195/0x1e0 [ 66.096224][ T1417] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 66.096256][ T1417] ? kstrtoull+0x13b/0x1e0 [ 66.096290][ T1417] ? kstrtouint+0x78/0xf0 [ 66.096315][ T1417] ? ioctl_has_perm+0x1bc/0x500 [ 66.096339][ T1417] ? __asan_memcpy+0x5a/0x80 [ 66.096363][ T1417] ? ioctl_has_perm+0x408/0x500 [ 66.096388][ T1417] ? has_cap_mac_admin+0xd0/0xd0 [ 66.096413][ T1417] ? __kasan_check_write+0x18/0x20 [ 66.096436][ T1417] ? mutex_lock_killable+0x97/0x1d0 [ 66.096465][ T1417] ? __cfi_mutex_lock_killable+0x10/0x10 [ 66.096493][ T1417] ? proc_fail_nth_write+0x184/0x220 [ 66.096528][ T1417] kvm_vcpu_ioctl+0xa43/0x1000 [ 66.096552][ T1417] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 66.096575][ T1417] ? __cfi_vfs_write+0x10/0x10 [ 66.096600][ T1417] ? __kasan_check_write+0x18/0x20 [ 66.096623][ T1417] ? mutex_unlock+0x90/0x240 [ 66.096648][ T1417] ? __cfi_mutex_unlock+0x10/0x10 [ 66.096676][ T1417] ? __fget_files+0x2bc/0x330 [ 66.096705][ T1417] ? bpf_lsm_file_ioctl+0xd/0x20 [ 66.096735][ T1417] ? security_file_ioctl+0x3e/0x110 [ 66.096758][ T1417] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 66.096779][ T1417] __se_sys_ioctl+0x123/0x1b0 [ 66.096809][ T1417] __x64_sys_ioctl+0x7f/0xa0 [ 66.096837][ T1417] x64_sys_call+0x1878/0x2ee0 [ 66.096858][ T1417] do_syscall_64+0x57/0xf0 [ 66.096879][ T1417] ? clear_bhb_loop+0x50/0xa0 [ 66.096908][ T1417] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.096936][ T1417] RIP: 0033:0x7f103af9e159 [ 66.096955][ T1417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.096974][ T1417] RSP: 002b:00007f103bea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.097000][ T1417] RAX: ffffffffffffffda RBX: 00007f103b225fa0 RCX: 00007f103af9e159 [ 66.097017][ T1417] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 66.097031][ T1417] RBP: 00007f103bea3090 R08: 0000000000000000 R09: 0000000000000000 [ 66.097046][ T1417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.097060][ T1417] R13: 00007f103b226038 R14: 00007f103b225fa0 R15: 00007ffc2d8222b8 [ 66.097080][ T1417] [ 66.111098][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.119688][ T1399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.126701][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.130543][ T1399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.160085][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.549668][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.587955][ T1402] veth0_vlan: entered promiscuous mode [ 66.630492][ T1402] veth1_macvtap: entered promiscuous mode [ 66.668566][ T10] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 66.675014][ T10] uvcvideo 4-1:4.147: Entity type for entity Output 251 was not initialized! [ 66.697910][ T10] usb 4-1: Failed to create links for entity 251 [ 66.713679][ T1423] overlayfs: missing 'lowerdir' [ 66.718694][ T10] usb 4-1: Failed to register entities (-22). [ 66.731980][ T10] usb 4-1: USB disconnect, device number 14 [ 66.998122][ T1436] No source specified [ 67.197998][ T1441] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.212048][ T1441] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.226599][ T1442] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.235171][ T1442] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.239383][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 67.296942][ T1447] overlayfs: missing 'lowerdir' [ 67.370551][ T1450] loop8: detected capacity change from 0 to 16384 [ 67.416862][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.435053][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.462657][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 67.477269][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.495767][ T10] usb 2-1: config 0 descriptor?? [ 67.556215][ T1453] loop8: detected capacity change from 16384 to 16383 [ 67.833187][ T1477] overlayfs: missing 'lowerdir' [ 67.964350][ T10] hid-generic 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 67.972112][ T10] hid-generic 0003:0C70:F0B6.0002: item fetching failed at offset 5/7 [ 67.980626][ T10] hid-generic 0003:0C70:F0B6.0002: probe with driver hid-generic failed with error -22 [ 68.095034][ T712] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 68.245057][ T712] usb 4-1: Using ep0 maxpacket: 8 [ 68.251741][ T712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.262766][ T712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.272620][ T712] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.285710][ T712] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 68.294804][ T712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.303615][ T712] usb 4-1: config 0 descriptor?? [ 68.560273][ T36] kauditd_printk_skb: 356 callbacks suppressed [ 68.560307][ T36] audit: type=1400 audit(1700000003.950:773): avc: denied { read } for pid=1494 comm="syz.0.366" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.597348][ T36] audit: type=1400 audit(1700000003.950:774): avc: denied { open } for pid=1494 comm="syz.0.366" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.607757][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 68.623862][ T36] audit: type=1400 audit(1700000003.950:775): avc: denied { ioctl } for pid=1494 comm="syz.0.366" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.701729][ T1502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 68.725486][ T712] usbhid 4-1:0.0: can't add hid device: -71 [ 68.731928][ T1504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.370'. [ 68.735163][ T712] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 68.765724][ T712] usb 4-1: USB disconnect, device number 15 [ 68.781086][ T36] audit: type=1400 audit(1700000001.070:776): avc: denied { create } for pid=1509 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.800620][ T36] audit: type=1400 audit(1700000001.080:777): avc: denied { set_context_mgr } for pid=1509 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.822472][ T36] audit: type=1400 audit(1700000001.080:778): avc: denied { map } for pid=1509 comm="syz.4.373" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.844574][ T1512] overlayfs: missing 'workdir' [ 68.851950][ T36] audit: type=1400 audit(1700000001.080:779): avc: denied { call } for pid=1509 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.871215][ T36] audit: type=1400 audit(1700000001.080:780): avc: denied { ioctl } for pid=1509 comm="syz.4.373" path="socket:[21828]" dev="sockfs" ino=21828 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.895999][ T36] audit: type=1400 audit(1700000001.080:781): avc: denied { write } for pid=1509 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.004971][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 69.144978][ T65] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 69.156537][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.165126][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.177586][ T10] usb 1-1: string descriptor 0 read error: -22 [ 69.183790][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 69.192861][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.306118][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.317572][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.327643][ T65] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 69.336869][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.345969][ T65] usb 5-1: config 0 descriptor?? [ 69.420269][ T36] audit: type=1400 audit(1700000001.710:782): avc: denied { connect } for pid=1525 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.607038][ T10] usb 1-1: 1:1: cannot get freq at ep 0x1 [ 69.753621][ T65] usbhid 5-1:0.0: can't add hid device: -71 [ 69.759709][ T65] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 69.768552][ T65] usb 5-1: USB disconnect, device number 2 [ 69.960818][ T1531] BUG: scheduling while atomic: syz.0.371/1531/0x00000002 [ 69.968033][ T1531] Modules linked in: [ 69.971946][ T1531] CPU: 0 UID: 0 PID: 1531 Comm: syz.0.371 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 69.971972][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.971985][ T1531] Call Trace: [ 69.971992][ T1531] [ 69.972006][ T1531] __dump_stack+0x21/0x30 [ 69.972038][ T1531] dump_stack_lvl+0x140/0x1c0 [ 69.972067][ T1531] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.972096][ T1531] dump_stack+0x19/0x20 [ 69.972123][ T1531] __schedule_bug+0x12b/0x200 [ 69.972145][ T1531] ? find_proxy_task+0x2460/0x2460 [ 69.972167][ T1531] ? update_load_avg+0x4f3/0x1980 [ 69.972192][ T1531] ? __kernel_text_address+0x11/0x40 [ 69.972221][ T1531] __schedule+0xb85/0x20b0 [ 69.972242][ T1531] ? kvm_sched_clock_read+0x15/0x30 [ 69.972268][ T1531] ? sched_clock_noinstr+0xd/0x30 [ 69.972292][ T1531] ? __kasan_check_read+0x15/0x20 [ 69.972314][ T1531] ? __sched_text_start+0x10/0x10 [ 69.972335][ T1531] ? __kasan_check_read+0x15/0x20 [ 69.972355][ T1531] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 69.972387][ T1531] ? __kasan_check_write+0x18/0x20 [ 69.972407][ T1531] ? _raw_spin_lock_irq+0x93/0x120 [ 69.972426][ T1531] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 69.972445][ T1531] schedule+0xc5/0x240 [ 69.972465][ T1531] schedule_preempt_disabled+0x14/0x30 [ 69.972487][ T1531] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 69.972520][ T1531] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 69.972548][ T1531] ? try_to_wake_up+0x111a/0x1fd0 [ 69.972571][ T1531] ? __kasan_check_write+0x18/0x20 [ 69.972592][ T1531] ? wake_q_add_safe+0x29/0x100 [ 69.972610][ T1531] ? __cfi_try_to_wake_up+0x10/0x10 [ 69.972632][ T1531] ? rwsem_mark_wake+0x507/0x770 [ 69.972663][ T1531] ? __kasan_check_write+0x18/0x20 [ 69.972683][ T1531] ? rwsem_read_trylock+0x275/0x5a0 [ 69.972714][ T1531] ? downgrade_write+0x470/0x470 [ 69.972745][ T1531] down_write+0x163/0x2b0 [ 69.972770][ T1531] ? __cfi_down_write+0x10/0x10 [ 69.972796][ T1531] ? __kasan_check_write+0x18/0x20 [ 69.972816][ T1531] ? _raw_spin_lock+0x92/0x120 [ 69.972835][ T1531] kernfs_remove_by_name_ns+0x8c/0x180 [ 69.972865][ T1531] sysfs_delete_link+0x10f/0x140 [ 69.972888][ T1531] device_remove_class_symlinks+0x171/0x1a0 [ 69.972909][ T1531] device_del+0x42a/0xcf0 [ 69.972928][ T1531] ? __cfi_device_del+0x10/0x10 [ 69.972946][ T1531] ? __kasan_check_write+0x18/0x20 [ 69.972967][ T1531] ? kobject_put+0x1cc/0x2a0 [ 69.972985][ T1531] device_destroy+0xb0/0x100 [ 69.973010][ T1531] ? __cfi_device_destroy+0x10/0x10 [ 69.973030][ T1531] ? __kasan_check_write+0x18/0x20 [ 69.973051][ T1531] android_device_destroy+0x118/0x180 [ 69.973082][ T1531] gadgets_drop+0x1d/0x30 [ 69.973102][ T1531] ? __cfi_gadgets_drop+0x10/0x10 [ 69.973123][ T1531] configfs_rmdir+0x8ba/0x9b0 [ 69.973152][ T1531] vfs_rmdir+0x3db/0x560 [ 69.973181][ T1531] do_rmdir+0x29a/0x590 [ 69.973209][ T1531] ? __cfi_do_rmdir+0x10/0x10 [ 69.973238][ T1531] ? __kasan_check_write+0x18/0x20 [ 69.973260][ T1531] __x64_sys_rmdir+0x4b/0x60 [ 69.973288][ T1531] x64_sys_call+0xaf7/0x2ee0 [ 69.973306][ T1531] do_syscall_64+0x57/0xf0 [ 69.973325][ T1531] ? clear_bhb_loop+0x50/0xa0 [ 69.973351][ T1531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.973374][ T1531] RIP: 0033:0x7f103af9e159 [ 69.973391][ T1531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.973408][ T1531] RSP: 002b:00007f103be61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 69.973428][ T1531] RAX: ffffffffffffffda RBX: 00007f103b226180 RCX: 00007f103af9e159 [ 69.973444][ T1531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 69.973457][ T1531] RBP: 00007f103b03506b R08: 0000000000000000 R09: 0000000000000000 [ 69.973471][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.973483][ T1531] R13: 00007f103b226218 R14: 00007f103b226180 R15: 00007ffc2d8222b8 [ 69.973502][ T1531] [ 69.974431][ T1531] ------------[ cut here ]------------ [ 69.995174][ T10] usb 2-1: USB disconnect, device number 12 [ 69.997789][ T1531] WARNING: CPU: 1 PID: 1531 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 70.382027][ T1531] Modules linked in: [ 70.385973][ T1531] CPU: 1 UID: 0 PID: 1531 Comm: syz.0.371 Tainted: G W syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 70.398952][ T1531] Tainted: [W]=WARN [ 70.402790][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.412910][ T1531] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 70.419119][ T1531] Code: 48 83 3d b4 fd db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 2e 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 70.438782][ T1531] RSP: 0018:ffffc9000b67f980 EFLAGS: 00010206 [ 70.444907][ T1531] RAX: 000000007fffffff RBX: ffff8881f530cb30 RCX: 000000000010cb30 [ 70.452903][ T1531] RDX: ffff8881f530cb30 RSI: 0000000000000001 RDI: 00000000c0fa6982 [ 70.460926][ T1531] RBP: ffffc9000b67f9e0 R08: 0000000094d6cbc2 R09: 00000000a82129f0 [ 70.468967][ T1531] R10: 000000000000000d R11: ffffffff8175a7a0 R12: 00000000c4410cb3 [ 70.477007][ T1531] R13: 0000000000000000 R14: ffffc9000b67f9f0 R15: 000000000000000d [ 70.485041][ T1531] FS: 00007f103be616c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 70.494008][ T1531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.500665][ T1531] CR2: 00007f103be61d58 CR3: 000000011c484000 CR4: 00000000003526b0 [ 70.508703][ T1531] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 70.516723][ T1531] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 70.524715][ T1531] Call Trace: [ 70.528026][ T1531] [ 70.530972][ T1531] ? do_syscall_64+0x57/0xf0 [ 70.535602][ T1531] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.541723][ T1531] kasan_save_track+0x4f/0x80 [ 70.546454][ T1531] ? kasan_save_track+0x3e/0x80 [ 70.551342][ T1531] ? kasan_save_free_info+0x44/0x50 [ 70.556585][ T1531] ? __kasan_slab_free+0x5f/0x80 [ 70.561550][ T1531] ? kfree+0x158/0x440 [ 70.565658][ T1531] ? gadget_info_attr_release+0xcb/0x130 [ 70.571328][ T1531] ? config_item_put+0x175/0x240 [ 70.576323][ T1531] ? configfs_rmdir+0x8e8/0x9b0 [ 70.581239][ T1531] ? vfs_rmdir+0x3db/0x560 [ 70.585704][ T1531] ? do_rmdir+0x29a/0x590 [ 70.590072][ T1531] ? __x64_sys_rmdir+0x4b/0x60 [ 70.594896][ T1531] ? x64_sys_call+0xaf7/0x2ee0 [ 70.599682][ T1531] ? do_syscall_64+0x57/0xf0 [ 70.604274][ T1531] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.610390][ T1531] kasan_save_free_info+0x44/0x50 [ 70.615490][ T1531] __kasan_slab_free+0x5f/0x80 [ 70.620279][ T1531] kfree+0x158/0x440 [ 70.624212][ T1531] ? gadget_info_attr_release+0xcb/0x130 [ 70.629901][ T1531] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 70.636056][ T1531] gadget_info_attr_release+0xcb/0x130 [ 70.641552][ T1531] config_item_put+0x175/0x240 [ 70.646354][ T1531] ? __cfi_gadgets_drop+0x10/0x10 [ 70.651401][ T1531] configfs_rmdir+0x8e8/0x9b0 [ 70.656137][ T1531] vfs_rmdir+0x3db/0x560 [ 70.660419][ T1531] do_rmdir+0x29a/0x590 [ 70.664590][ T1531] ? __cfi_do_rmdir+0x10/0x10 [ 70.669332][ T1531] ? __kasan_check_write+0x18/0x20 [ 70.674481][ T1531] __x64_sys_rmdir+0x4b/0x60 [ 70.679185][ T1531] x64_sys_call+0xaf7/0x2ee0 [ 70.683811][ T1531] do_syscall_64+0x57/0xf0 [ 70.688288][ T1531] ? clear_bhb_loop+0x50/0xa0 [ 70.693008][ T1531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.699024][ T1531] RIP: 0033:0x7f103af9e159 [ 70.703489][ T1531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.723133][ T1531] RSP: 002b:00007f103be61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 70.731593][ T1531] RAX: ffffffffffffffda RBX: 00007f103b226180 RCX: 00007f103af9e159 [ 70.739628][ T1531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 70.747657][ T1531] RBP: 00007f103b03506b R08: 0000000000000000 R09: 0000000000000000 [ 70.755687][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.763682][ T1531] R13: 00007f103b226218 R14: 00007f103b226180 R15: 00007ffc2d8222b8 [ 70.771734][ T1531] [ 70.774941][ T1531] ---[ end trace 0000000000000000 ]--- [ 70.780933][ T1531] BUG: scheduling while atomic: syz.0.371/1531/0x00000000 [ 70.788163][ T1531] Modules linked in: [ 70.792112][ T1531] CPU: 1 UID: 0 PID: 1531 Comm: syz.0.371 Tainted: G W syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 70.792157][ T1531] Tainted: [W]=WARN [ 70.792163][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.792173][ T1531] Call Trace: [ 70.792178][ T1531] [ 70.792184][ T1531] __dump_stack+0x21/0x30 [ 70.792211][ T1531] dump_stack_lvl+0x140/0x1c0 [ 70.792234][ T1531] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.792259][ T1531] dump_stack+0x19/0x20 [ 70.792280][ T1531] __schedule_bug+0x12b/0x200 [ 70.792298][ T1531] ? find_proxy_task+0x2460/0x2460 [ 70.792317][ T1531] ? unmap_page_range+0x39b7/0x48f0 [ 70.792334][ T1531] ? stack_depot_save_flags+0x266/0x800 [ 70.792356][ T1531] __schedule+0xb85/0x20b0 [ 70.792373][ T1531] ? plist_check_list+0x2a1/0x2c0 [ 70.792390][ T1531] ? __sched_text_start+0x10/0x10 [ 70.792406][ T1531] ? plist_add+0x4d4/0x570 [ 70.792421][ T1531] ? __futex_queue+0x19f/0x350 [ 70.792460][ T1531] ? __cfi___futex_queue+0x10/0x10 [ 70.792481][ T1531] schedule+0xc5/0x240 [ 70.792496][ T1531] futex_wait_queue+0xfc/0x240 [ 70.792511][ T1531] __futex_wait+0x15b/0x3d0 [ 70.792526][ T1531] ? __cfi___futex_wait+0x10/0x10 [ 70.792541][ T1531] ? __cfi_futex_wake_mark+0x10/0x10 [ 70.792555][ T1531] ? __kasan_check_read+0x15/0x20 [ 70.792571][ T1531] ? futex_wake+0x627/0x950 [ 70.792602][ T1531] futex_wait+0x128/0x7c0 [ 70.792617][ T1531] ? __cfi_futex_wait+0x10/0x10 [ 70.792634][ T1531] do_futex+0x32a/0x510 [ 70.792656][ T1531] ? __cfi_do_futex+0x10/0x10 [ 70.792677][ T1531] ? __kasan_slab_free+0x6a/0x80 [ 70.792696][ T1531] ? kmem_cache_free+0x1bd/0x4f0 [ 70.792714][ T1531] __se_sys_futex+0x13c/0x320 [ 70.792754][ T1531] ? putname+0x113/0x150 [ 70.792781][ T1531] ? __x64_sys_futex+0x110/0x110 [ 70.792815][ T1531] __x64_sys_futex+0xe9/0x110 [ 70.792838][ T1531] x64_sys_call+0x227f/0x2ee0 [ 70.792852][ T1531] do_syscall_64+0x57/0xf0 [ 70.792867][ T1531] ? clear_bhb_loop+0x50/0xa0 [ 70.792887][ T1531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.792906][ T1531] RIP: 0033:0x7f103af9e159 [ 70.792920][ T1531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.792933][ T1531] RSP: 002b:00007f103be610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 70.792952][ T1531] RAX: ffffffffffffffda RBX: 00007f103b226188 RCX: 00007f103af9e159 [ 70.792965][ T1531] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f103b226188 [ 70.792975][ T1531] RBP: 00007f103b226180 R08: 0000000000000000 R09: 0000000000000000 [ 70.792986][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.792995][ T1531] R13: 00007f103b226218 R14: 00007ffc2d8221d0 R15: 00007ffc2d8222b8 [ 70.793009][ T1531] [ 70.793078][ T0] Oops: general protection fault, probably for non-canonical address 0xdfff8481f6e50680: 0000 [#1] PREEMPT SMP KASAN PTI [ 71.079978][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 71.092650][ T0] Tainted: [W]=WARN [ 71.096455][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.106527][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 71.111813][ T0] Code: e8 17 58 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 5a 92 63 fb 48 89 c7 e8 d2 a0 b6 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 71.131410][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 71.137473][ T0] RAX: ffff88810c7e3900 RBX: ffffffff87415c90 RCX: ffffffff874156c0 [ 71.145437][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.153404][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 71.161371][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670 [ 71.169340][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 71.177306][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 71.186226][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.192807][ T0] CR2: 00007f103be61d58 CR3: 000000011c484000 CR4: 00000000003526b0 [ 71.200790][ T0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 71.208756][ T0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 71.216739][ T0] Call Trace: [ 71.220013][ T0] [ 71.222941][ T0] ? __kasan_check_read+0x15/0x20 [ 71.227965][ T0] ? ct_nmi_enter+0x9a/0xe0 [ 71.232470][ T0] ? ct_irq_enter+0xd/0x20 [ 71.236894][ T0] ? irqentry_enter+0x2c/0x40 [ 71.241568][ T0] ? sysvec_apic_timer_interrupt+0x13/0x90 [ 71.247372][ T0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 71.253527][ T0] ? ct_kernel_exit+0x7d/0xb0 [ 71.258206][ T0] ? pv_native_safe_halt+0x13/0x20 [ 71.263319][ T0] ? default_idle+0x17/0x30 [ 71.267827][ T0] ? arch_cpu_idle+0xd/0x20 [ 71.272354][ T0] ? default_idle_call+0x3e/0x80 [ 71.277296][ T0] ? do_idle+0x2fc/0x570 [ 71.281537][ T0] ? idle_inject_timer_fn+0x80/0x80 [ 71.286733][ T0] ? cpu_startup_entry+0x47/0x60 [ 71.291666][ T0] ? rest_init+0x10b/0x130 [ 71.296073][ T0] ? __cfi_x86_late_time_init+0x10/0x10 [ 71.301637][ T0] ? start_kernel+0x462/0x4bb [ 71.306488][ T0] ? x86_64_start_reservations+0x2e/0x30 [ 71.312122][ T0] ? x86_64_start_kernel+0x6a/0x7b [ 71.317246][ T0] ? common_startup_64+0x13b/0x157 [ 71.322363][ T0] [ 71.325374][ T0] Modules linked in: [ 71.329264][ T0] ---[ end trace 0000000000000000 ]--- [ 71.334712][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 71.340002][ T0] Code: e8 17 58 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 5a 92 63 fb 48 89 c7 e8 d2 a0 b6 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 71.359604][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 71.365666][ T0] RAX: ffff88810c7e3900 RBX: ffffffff87415c90 RCX: ffffffff874156c0 [ 71.373636][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.381632][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 71.389606][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670 [ 71.397574][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 71.405541][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 71.414471][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.421047][ T0] CR2: 00007f103be61d58 CR3: 000000011c484000 CR4: 00000000003526b0 [ 71.429019][ T0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 71.436986][ T0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 71.444953][ T0] Kernel panic - not syncing: Fatal exception [ 72.540707][ T0] Shutting down cpus with NMI [ 72.546026][ T0] Kernel Offset: disabled [ 72.550353][ T0] Rebooting in 86400 seconds..