last executing test programs: 1m47.551876777s ago: executing program 0 (id=94): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="703a732f5f202e2f66696c65303a30f598a24f5aa26e5fae28ebadb9ec", 0x1d) 1m47.533678757s ago: executing program 0 (id=95): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x7ffe) 1m46.047414764s ago: executing program 0 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x1}) 1m45.995294215s ago: executing program 0 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@rdmsr={0x66, 0x18, {0x400000b7}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m45.879210458s ago: executing program 0 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m45.861737889s ago: executing program 0 (id=143): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921080800012201000905810377fe"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m30.821294918s ago: executing program 32 (id=143): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921080800012201000905810377fe"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m29.995693359s ago: executing program 3 (id=432): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xa1ffffff, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) 1m29.92071116s ago: executing program 3 (id=434): mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x80106725, &(0x7f00000000c0)) 1m29.862482442s ago: executing program 3 (id=435): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) syz_usb_connect$uac2(0x0, 0x8a, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x18, 0xc5}, [@processing_unit={0xf, 0x24, 0x8, 0x6, 0x6, [0x0, 0x2, 0x2, 0x2, 0xfffffffffffffffe]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x2, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2275, &(0x7f0000000100)=0x3) 1m28.653071661s ago: executing program 3 (id=476): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) 1m27.804592753s ago: executing program 3 (id=495): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 1m27.781874443s ago: executing program 3 (id=496): r0 = syz_usb_connect$rtl8150(0x5, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 1m18.329973175s ago: executing program 2 (id=645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058, 0x0, 0x4}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1m18.208019058s ago: executing program 2 (id=647): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x282, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 1m18.165342599s ago: executing program 2 (id=649): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)='~Eu', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="003d37f6e2", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)="4feec8ce", 0x4}], 0x1}}], 0x3, 0x5081) 1m18.1292376s ago: executing program 2 (id=651): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m18.071592982s ago: executing program 2 (id=653): fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m17.929503445s ago: executing program 2 (id=654): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m17.845798637s ago: executing program 33 (id=654): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m12.751334042s ago: executing program 34 (id=496): r0 = syz_usb_connect$rtl8150(0x5, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 35.566066825s ago: executing program 4 (id=1543): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) close(r0) 35.497660547s ago: executing program 4 (id=1545): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3ed) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000001c0)='./file0\x00', r0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 35.497537538s ago: executing program 4 (id=1546): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x10b080) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 35.497445818s ago: executing program 4 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') 35.494680597s ago: executing program 4 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x80, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 35.36561358s ago: executing program 4 (id=1551): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setns(0xc9, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) 35.315282162s ago: executing program 35 (id=1551): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setns(0xc9, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) 18.586323643s ago: executing program 6 (id=2011): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) io_setup(0x7fff, &(0x7f0000000200)) 18.359290899s ago: executing program 6 (id=2014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 16.018928696s ago: executing program 6 (id=2060): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r0, 0x400, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 15.909666779s ago: executing program 6 (id=2063): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, 0x0) 15.591505177s ago: executing program 6 (id=2069): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) 15.576060867s ago: executing program 6 (id=2070): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5385, 0x18) 13.717077833s ago: executing program 5 (id=2096): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)=0x3928daf, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 13.679339743s ago: executing program 5 (id=2099): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x8000000c}) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000100"], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 13.620887595s ago: executing program 5 (id=2109): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xd5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x79f, 0xa1, 0x7, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.169092786s ago: executing program 7 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) userfaultfd(0x801) 12.860997293s ago: executing program 7 (id=2113): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xe, 0x101, 0x1, 0x5, 0xf34}) 12.814307044s ago: executing program 1 (id=2105): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0xfffffffe, {0x0, 0x2710}, {0x77359400}, {0xa000000}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x40000) 12.755400046s ago: executing program 1 (id=2106): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 12.755161686s ago: executing program 5 (id=2107): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write$FUSE_INIT(r0, 0x0, 0x0) 12.754742406s ago: executing program 7 (id=2116): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xd5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x79f, 0xa1, 0x7, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.566584281s ago: executing program 1 (id=2108): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)=0x3928daf, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 12.18987724s ago: executing program 7 (id=2110): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) unshare(0x22020600) r2 = eventfd(0x81) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, r0, 0x0, 0x0, 0x7ff, 0x0, 0x3, r2}]) 12.18971735s ago: executing program 1 (id=2111): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x8000000c}) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000100"], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 12.18904181s ago: executing program 5 (id=2120): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x5) 434.181769ms ago: executing program 36 (id=2070): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5385, 0x18) 393.57781ms ago: executing program 7 (id=2114): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 393.45394ms ago: executing program 1 (id=2115): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) 1.14644ms ago: executing program 5 (id=2123): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x0, @private1, 0xfffffe01}}}, 0x108) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 216.93µs ago: executing program 7 (id=2124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="470f01de420f09b9800000c00f3235000400000f30f3470f09f3ae0f01c4f3440faed266bad104b06fee66b852008ec067670f07", 0x34}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=2125): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.1.1051'. [ 75.734957][ T2660] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1051'. [ 75.983453][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.008178][ T2690] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc01 [ 76.031923][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 76.031958][ T36] audit: type=1400 audit(1788567350.100:547): avc: denied { create } for pid=2692 comm="syz.6.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.087794][ T31] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 76.098207][ T36] audit: type=1400 audit(1788567350.100:548): avc: denied { connect } for pid=2692 comm="syz.6.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.126667][ T31] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.146609][ T562] udevd[562]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.254452][ T36] audit: type=1400 audit(1788567350.320:549): avc: denied { sys_module } for pid=2707 comm="syz.1.1074" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.371322][ T2723] rust_binder: 2722:2723 error while translating object: EBADF [ 76.379152][ T2723] rust_binder: Failure in copy_transaction_data: EBADF [ 76.379183][ T2723] rust_binder: 2722:2723 transaction async to 2722:0 failed EBADF, code 0 size 88-24 [ 76.397281][ T31] rust_binder: 2722: undelivered TRANSACTION_ERROR: 29201 [ 76.779076][ T312] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 76.929174][ T66] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.937743][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.948204][ T312] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 76.957257][ T312] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 239, using maximum allowed: 30 [ 76.968181][ T312] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 76.981312][ T312] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.995818][ T312] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 77.010123][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.018204][ T312] usb 2-1: Product: syz [ 77.022477][ T312] usb 2-1: Manufacturer: syz [ 77.027122][ T312] usb 2-1: SerialNumber: syz [ 77.043710][ T2747] rust_binder: 2746:2747 error while translating object: EBADF [ 77.051414][ T2747] rust_binder: Failure in copy_transaction_data: EBADF [ 77.051434][ T2747] rust_binder: 2746:2747 transaction async to 2746:0 failed EBADF, code 0 size 88-24 [ 77.069352][ T31] rust_binder: 2746: undelivered TRANSACTION_ERROR: 29201 [ 77.089307][ T66] usb 7-1: Using ep0 maxpacket: 32 [ 77.095818][ T66] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 77.095978][ T2749] device-mapper: ioctl: Empty message received. [ 77.107213][ T66] usb 7-1: config 0 has no interface number 0 [ 77.118942][ T66] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 77.128381][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.136505][ T66] usb 7-1: Product: syz [ 77.140871][ T66] usb 7-1: Manufacturer: syz [ 77.145557][ T66] usb 7-1: SerialNumber: syz [ 77.154773][ T66] usb 7-1: config 0 descriptor?? [ 77.163875][ T66] smsc95xx v2.0.0 [ 77.292555][ T312] usb 2-1: 0:2 : does not exist [ 77.300632][ T312] usb 2-1: USB disconnect, device number 14 [ 77.319887][ T562] udevd[562]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.059032][ T567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.059059][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 78.166343][ T66] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 78.178209][ T66] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.187713][ T66] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 78.198911][ T66] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 78.217355][ T66] usb 7-1: USB disconnect, device number 4 [ 78.237221][ T2772] device-mapper: ioctl: Empty message received. [ 78.343561][ T36] audit: type=1400 audit(1788567352.410:550): avc: denied { watch watch_reads } for pid=2783 comm="syz.5.1107" path="/134/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.481667][ T2804] netlink: 'syz.4.1117': attribute type 4 has an invalid length. [ 78.769045][ T66] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 78.920147][ T66] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 78.930243][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 78.941814][ T66] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 78.953551][ T66] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 78.962896][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.970988][ T66] usb 2-1: Product: syz [ 78.975354][ T66] usb 2-1: Manufacturer: syz [ 78.980061][ T66] usb 2-1: SerialNumber: syz [ 78.988470][ T2811] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.997191][ T2811] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.006693][ T66] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 79.018443][ T66] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 79.029633][ T66] usbserial_generic 2-1:1.0: generic converter detected [ 79.039146][ T66] usb 2-1: generic converter now attached to ttyUSB0 [ 79.069031][ T312] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.207641][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 79.217151][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 79.226728][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 79.239360][ T66] usb 2-1: USB disconnect, device number 15 [ 79.250114][ T66] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 79.260425][ T312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.271724][ T66] usbserial_generic 2-1:1.0: device disconnected [ 79.283560][ T312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.293883][ T312] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.307090][ T312] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.316361][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.328057][ T312] usb 7-1: config 0 descriptor?? [ 79.738271][ T312] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 79.747473][ T312] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 79.971421][ T2864] netlink: 'syz.1.1143': attribute type 4 has an invalid length. [ 80.277515][ T2900] netlink: 'syz.5.1158': attribute type 4 has an invalid length. [ 81.587236][ T2935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.596751][ T2935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.809517][ T66] usb 7-1: USB disconnect, device number 5 [ 82.569027][ T66] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.720274][ T66] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.730536][ T66] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.739850][ T66] usb 7-1: too many endpoints for config 1 interface 1 altsetting 0: 239, using maximum allowed: 30 [ 82.750951][ T66] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 82.764318][ T66] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.778739][ T66] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 82.787859][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.795900][ T66] usb 7-1: Product: syz [ 82.800124][ T66] usb 7-1: Manufacturer: syz [ 82.804735][ T66] usb 7-1: SerialNumber: syz [ 83.031676][ T66] usb 7-1: 0:2 : does not exist [ 83.038805][ T66] usb 7-1: USB disconnect, device number 6 [ 83.048755][ T562] udevd[562]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.591164][ T36] audit: type=1400 audit(1788567357.660:551): avc: denied { setopt } for pid=3008 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.632977][ T36] audit: type=1400 audit(1788567357.700:552): avc: denied { cmd } for pid=3010 comm="syz.1.1215" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 83.874122][ T3026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.882838][ T3026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.929171][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 84.079063][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 84.085321][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 84.093457][ T9] usb 2-1: config 0 has no interface number 0 [ 84.101095][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.110205][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.118212][ T9] usb 2-1: Product: syz [ 84.122410][ T9] usb 2-1: Manufacturer: syz [ 84.127023][ T9] usb 2-1: SerialNumber: syz [ 84.132426][ T9] usb 2-1: config 0 descriptor?? [ 84.138382][ T9] smsc95xx v2.0.0 [ 85.151587][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 85.162525][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.171864][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 85.182833][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 85.192134][ T9] usb 2-1: USB disconnect, device number 16 [ 85.790289][ T36] audit: type=1400 audit(1788567359.860:553): avc: denied { write } for pid=3080 comm="syz.6.1244" name="idVendor" dev="configfs" ino=22416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 85.844065][ T36] audit: type=1400 audit(1788567359.860:554): avc: denied { open } for pid=3080 comm="syz.6.1244" path="/121/config/usb_gadget/g1/idVendor" dev="configfs" ino=22416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 85.853960][ T312] rust_binder: 3085: undelivered death notification, 0000000000000000 [ 85.909228][ T3093] zero sized request [ 85.957807][ T36] audit: type=1400 audit(1788567360.020:555): avc: denied { map } for pid=3098 comm="syz.1.1253" path="/324/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 86.139750][ T3120] input: syz0 as /devices/virtual/input/input16 [ 86.177571][ T3124] FAULT_INJECTION: forcing a failure. [ 86.177571][ T3124] name failslab, interval 1, probability 0, space 0, times 0 [ 86.190530][ T3124] CPU: 0 UID: 0 PID: 3124 Comm: syz.5.1265 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 86.190567][ T3124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.190582][ T3124] Call Trace: [ 86.190589][ T3124] [ 86.190598][ T3124] __dump_stack+0x21/0x30 [ 86.190639][ T3124] dump_stack_lvl+0x140/0x1c0 [ 86.190673][ T3124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.190705][ T3124] ? __kasan_kmalloc+0x96/0xb0 [ 86.190735][ T3124] ? __kmalloc_cache_noprof+0x23c/0x470 [ 86.190766][ T3124] dump_stack+0x19/0x20 [ 86.190798][ T3124] should_fail_ex+0x3c2/0x510 [ 86.190827][ T3124] should_failslab+0xac/0x100 [ 86.190857][ T3124] __kmalloc_cache_noprof+0x41/0x470 [ 86.190883][ T3124] ? __se_sys_fsopen+0x14d/0x390 [ 86.190920][ T3124] __se_sys_fsopen+0x14d/0x390 [ 86.190955][ T3124] __x64_sys_fsopen+0x5f/0x80 [ 86.190990][ T3124] x64_sys_call+0x2d40/0x2ee0 [ 86.191020][ T3124] do_syscall_64+0x57/0xf0 [ 86.191046][ T3124] ? clear_bhb_loop+0x50/0xa0 [ 86.191067][ T3124] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.191085][ T3124] RIP: 0033:0x7fde0859e159 [ 86.191100][ T3124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.191115][ T3124] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 86.191133][ T3124] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 86.191147][ T3124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 86.191157][ T3124] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 86.191168][ T3124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.191179][ T3124] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 86.191194][ T3124] [ 86.349192][ T665] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 86.529238][ T665] usb 2-1: Using ep0 maxpacket: 16 [ 86.541178][ T665] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 86.579578][ T665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.590073][ T665] usb 2-1: Product: syz [ 86.594307][ T665] usb 2-1: Manufacturer: syz [ 86.598937][ T665] usb 2-1: SerialNumber: syz [ 86.651349][ T9] rust_binder: 3151: undelivered death notification, 0000000000000000 [ 86.683156][ T3156] zero sized request [ 86.711849][ T3160] FAULT_INJECTION: forcing a failure. [ 86.711849][ T3160] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.725328][ T3160] CPU: 0 UID: 0 PID: 3160 Comm: syz.4.1280 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 86.725368][ T3160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.725383][ T3160] Call Trace: [ 86.725391][ T3160] [ 86.725401][ T3160] __dump_stack+0x21/0x30 [ 86.725442][ T3160] dump_stack_lvl+0x140/0x1c0 [ 86.725477][ T3160] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.725511][ T3160] ? probe_sched_switch+0x67/0x90 [ 86.725547][ T3160] dump_stack+0x19/0x20 [ 86.725578][ T3160] should_fail_ex+0x3c2/0x510 [ 86.725607][ T3160] should_fail_alloc_page+0xec/0x110 [ 86.725638][ T3160] __alloc_pages_noprof+0x1c0/0x7e0 [ 86.725676][ T3160] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 86.725725][ T3160] __folio_alloc_noprof+0x14/0x80 [ 86.725760][ T3160] folio_prealloc+0x46/0x220 [ 86.725792][ T3160] do_pte_missing+0x16af/0x4440 [ 86.725825][ T3160] ? schedule+0xc5/0x240 [ 86.725850][ T3160] ? __futex_wait+0x330/0x3d0 [ 86.725874][ T3160] ? pte_marker_clear+0x1b0/0x1b0 [ 86.725905][ T3160] ? __cfi_futex_wake_mark+0x10/0x10 [ 86.725930][ T3160] ? __kasan_check_read+0x15/0x20 [ 86.725953][ T3160] ? futex_wake+0x627/0x950 [ 86.725974][ T3160] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 86.725999][ T3160] handle_mm_fault+0x1189/0x1ba0 [ 86.726031][ T3160] ? __cfi_handle_mm_fault+0x10/0x10 [ 86.726059][ T3160] ? lock_vma_under_rcu+0x4cf/0x590 [ 86.726093][ T3160] ? __se_sys_futex+0x13c/0x320 [ 86.726127][ T3160] do_user_addr_fault+0x951/0x1230 [ 86.726165][ T3160] ? fpregs_restore_userregs+0x11c/0x260 [ 86.726198][ T3160] exc_page_fault+0x58/0xc0 [ 86.726228][ T3160] asm_exc_page_fault+0x2b/0x30 [ 86.726254][ T3160] RIP: 0033:0x7fbd22e659e6 [ 86.726275][ T3160] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 11 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 86.726297][ T3160] RSP: 002b:00007fbd23e9cf60 EFLAGS: 00010206 [ 86.726319][ T3160] RAX: 0000000000000000 RBX: 00007fbd23225fa0 RCX: 0000000000000000 [ 86.726336][ T3160] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007fbd23035ae1 [ 86.726356][ T3160] RBP: 00007fbd23035024 R08: 00007fbd22e52850 R09: 0000000000000000 [ 86.726373][ T3160] R10: 0000000000000000 R11: 0000200000000000 R12: 0000000000000036 [ 86.726389][ T3160] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffe71213898 [ 86.726409][ T3160] [ 86.726423][ T3160] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 87.099040][ T312] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 87.250234][ T312] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 87.260152][ T312] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 87.271272][ T312] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 87.283837][ T312] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 87.293031][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.301177][ T312] usb 7-1: Product: syz [ 87.305359][ T312] usb 7-1: Manufacturer: syz [ 87.310018][ T312] usb 7-1: SerialNumber: syz [ 87.315798][ T3145] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 87.323125][ T3145] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 87.331070][ T312] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 87.343060][ T312] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 87.353831][ T312] usbserial_generic 7-1:1.0: generic converter detected [ 87.362141][ T312] usb 7-1: generic converter now attached to ttyUSB0 [ 87.539948][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 87.549430][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 87.559033][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 87.569313][ T312] usb 7-1: USB disconnect, device number 7 [ 87.577456][ T312] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 87.586270][ T312] usbserial_generic 7-1:1.0: device disconnected [ 87.625756][ T665] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 87.636794][ T665] usb 2-1: USB disconnect, device number 17 [ 88.141048][ T3168] input: syz0 as /devices/virtual/input/input17 [ 88.399045][ T665] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 88.550294][ T665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.561250][ T665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.571054][ T665] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.583965][ T665] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.593044][ T665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.602003][ T665] usb 2-1: config 0 descriptor?? [ 89.013109][ T665] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 89.022378][ T665] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.731497][ T9] rust_binder: 3188: undelivered death notification, 0000000000000000 [ 89.768570][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.802319][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.857677][ T3204] FAULT_INJECTION: forcing a failure. [ 89.857677][ T3204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 89.871107][ T3204] CPU: 1 UID: 0 PID: 3204 Comm: syz.6.1303 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 89.871152][ T3204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.871169][ T3204] Call Trace: [ 89.871178][ T3204] [ 89.871187][ T3204] __dump_stack+0x21/0x30 [ 89.871230][ T3204] dump_stack_lvl+0x140/0x1c0 [ 89.871265][ T3204] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.871301][ T3204] ? probe_sched_switch+0x67/0x90 [ 89.871335][ T3204] dump_stack+0x19/0x20 [ 89.871368][ T3204] should_fail_ex+0x3c2/0x510 [ 89.871398][ T3204] should_fail_alloc_page+0xec/0x110 [ 89.871428][ T3204] __alloc_pages_noprof+0x1c0/0x7e0 [ 89.871474][ T3204] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 89.871515][ T3204] __folio_alloc_noprof+0x14/0x80 [ 89.871552][ T3204] folio_prealloc+0x46/0x220 [ 89.871584][ T3204] do_pte_missing+0x16af/0x4440 [ 89.871616][ T3204] ? schedule+0xc5/0x240 [ 89.871640][ T3204] ? __futex_wait+0x330/0x3d0 [ 89.871665][ T3204] ? pte_marker_clear+0x1b0/0x1b0 [ 89.871698][ T3204] ? __cfi_futex_wake_mark+0x10/0x10 [ 89.871720][ T3204] ? __kasan_check_read+0x15/0x20 [ 89.871744][ T3204] ? futex_wake+0x627/0x950 [ 89.871765][ T3204] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 89.871790][ T3204] handle_mm_fault+0x1189/0x1ba0 [ 89.871824][ T3204] ? __cfi_handle_mm_fault+0x10/0x10 [ 89.871852][ T3204] ? lock_vma_under_rcu+0x4cf/0x590 [ 89.871885][ T3204] ? __se_sys_futex+0x13c/0x320 [ 89.871921][ T3204] do_user_addr_fault+0x951/0x1230 [ 89.871960][ T3204] ? fpregs_restore_userregs+0x11c/0x260 [ 89.871993][ T3204] exc_page_fault+0x58/0xc0 [ 89.872022][ T3204] asm_exc_page_fault+0x2b/0x30 [ 89.872049][ T3204] RIP: 0033:0x7fabc36659e6 [ 89.872069][ T3204] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 11 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 89.872092][ T3204] RSP: 002b:00007fabc4733f60 EFLAGS: 00010206 [ 89.872115][ T3204] RAX: 0000000000000000 RBX: 00007fabc3a25fa0 RCX: 0000000000000000 [ 89.872131][ T3204] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007fabc3835ae1 [ 89.872149][ T3204] RBP: 00007fabc3835024 R08: 00007fabc3652850 R09: 0000000000000000 [ 89.872165][ T3204] R10: 0000000000000000 R11: 0000200000000000 R12: 0000000000000036 [ 89.872181][ T3204] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffe95a91668 [ 89.872200][ T3204] [ 89.872231][ T3204] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 90.329090][ T36] audit: type=1400 audit(1788567364.390:556): avc: denied { append } for pid=3217 comm="syz.4.1318" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.359197][ T312] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 90.377090][ T3223] FAULT_INJECTION: forcing a failure. [ 90.377090][ T3223] name failslab, interval 1, probability 0, space 0, times 0 [ 90.390152][ T3223] CPU: 1 UID: 0 PID: 3223 Comm: syz.4.1311 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 90.390190][ T3223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.390208][ T3223] Call Trace: [ 90.390216][ T3223] [ 90.390226][ T3223] __dump_stack+0x21/0x30 [ 90.390271][ T3223] dump_stack_lvl+0x140/0x1c0 [ 90.390308][ T3223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.390344][ T3223] ? mas_store_prealloc+0xc69/0x1250 [ 90.390375][ T3223] ? __cfi_perf_event_mmap+0x10/0x10 [ 90.390410][ T3223] dump_stack+0x19/0x20 [ 90.390442][ T3223] should_fail_ex+0x3c2/0x510 [ 90.390485][ T3223] should_failslab+0xac/0x100 [ 90.390517][ T3223] kmem_cache_alloc_noprof+0x42/0x410 [ 90.390544][ T3223] ? vm_area_dup+0x3f/0x560 [ 90.390575][ T3223] vm_area_dup+0x3f/0x560 [ 90.390601][ T3223] ? __split_vma+0x1b8/0xc10 [ 90.390629][ T3223] __split_vma+0x1ce/0xc10 [ 90.390658][ T3223] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 90.390688][ T3223] ? mas_find+0x415/0x620 [ 90.390716][ T3223] vms_gather_munmap_vmas+0x446/0xd90 [ 90.390748][ T3223] do_vmi_align_munmap+0x251/0x5f0 [ 90.390780][ T3223] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 90.390813][ T3223] do_vmi_munmap+0x245/0x2e0 [ 90.390842][ T3223] __vm_munmap+0x25b/0x3d0 [ 90.390870][ T3223] ? vm_munmap+0x40/0x40 [ 90.390895][ T3223] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 90.390920][ T3223] ? __kasan_check_write+0x18/0x20 [ 90.390945][ T3223] ? do_user_addr_fault+0xbf5/0x1230 [ 90.390985][ T3223] ? blocking_notifier_call_chain+0x7c/0x90 [ 90.391012][ T3223] __se_sys_munmap+0xb4/0x390 [ 90.391040][ T3223] __x64_sys_munmap+0x5f/0x80 [ 90.391069][ T3223] x64_sys_call+0x9c6/0x2ee0 [ 90.391092][ T3223] do_syscall_64+0x57/0xf0 [ 90.391128][ T3223] ? clear_bhb_loop+0x50/0xa0 [ 90.391157][ T3223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.391184][ T3223] RIP: 0033:0x7fbd22f9df87 [ 90.391204][ T3223] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.391226][ T3223] RSP: 002b:00007fbd23e9dd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 90.391252][ T3223] RAX: ffffffffffffffda RBX: 00007fbd1c000000 RCX: 00007fbd22f9df87 [ 90.391270][ T3223] RDX: 0000000000000000 RSI: 0000000002800000 RDI: 00007fbd19800000 [ 90.391288][ T3223] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 90.391305][ T3223] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 90.391320][ T3223] R13: 0000000000001000 R14: 00007fbd20000000 R15: 0000000002800000 [ 90.391340][ T3223] [ 90.631517][ T312] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.671566][ T312] usb 7-1: config 0 has no interfaces? [ 90.678006][ T312] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.694326][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.704088][ T312] usb 7-1: config 0 descriptor?? [ 90.831891][ T3234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.843800][ T3234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.882790][ T3240] capability: warning: `syz.1.1320' uses 32-bit capabilities (legacy support in use) [ 90.938065][ T91] usb 7-1: USB disconnect, device number 8 [ 91.139525][ T66] usb 2-1: USB disconnect, device number 18 [ 91.747069][ T3304] FAULT_INJECTION: forcing a failure. [ 91.747069][ T3304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.760523][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz.1.1349 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 91.760560][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.760576][ T3304] Call Trace: [ 91.760585][ T3304] [ 91.760594][ T3304] __dump_stack+0x21/0x30 [ 91.760635][ T3304] dump_stack_lvl+0x140/0x1c0 [ 91.760669][ T3304] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.760704][ T3304] ? probe_sched_switch+0x67/0x90 [ 91.760738][ T3304] dump_stack+0x19/0x20 [ 91.760769][ T3304] should_fail_ex+0x3c2/0x510 [ 91.760797][ T3304] should_fail_alloc_page+0xec/0x110 [ 91.760829][ T3304] __alloc_pages_noprof+0x1c0/0x7e0 [ 91.760874][ T3304] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 91.760916][ T3304] __folio_alloc_noprof+0x14/0x80 [ 91.760952][ T3304] folio_prealloc+0x46/0x220 [ 91.760984][ T3304] do_pte_missing+0x16af/0x4440 [ 91.761016][ T3304] ? schedule+0xc5/0x240 [ 91.761041][ T3304] ? __futex_wait+0x330/0x3d0 [ 91.761065][ T3304] ? pte_marker_clear+0x1b0/0x1b0 [ 91.761098][ T3304] ? __cfi_futex_wake_mark+0x10/0x10 [ 91.761121][ T3304] ? __kasan_check_read+0x15/0x20 [ 91.761145][ T3304] ? futex_wake+0x627/0x950 [ 91.761167][ T3304] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 91.761192][ T3304] handle_mm_fault+0x1189/0x1ba0 [ 91.761225][ T3304] ? __cfi_handle_mm_fault+0x10/0x10 [ 91.761253][ T3304] ? lock_vma_under_rcu+0x4cf/0x590 [ 91.761287][ T3304] ? __se_sys_futex+0x13c/0x320 [ 91.761321][ T3304] do_user_addr_fault+0x951/0x1230 [ 91.761359][ T3304] ? fpregs_restore_userregs+0x11c/0x260 [ 91.761393][ T3304] exc_page_fault+0x58/0xc0 [ 91.761422][ T3304] asm_exc_page_fault+0x2b/0x30 [ 91.761448][ T3304] RIP: 0033:0x7f448b0659e6 [ 91.761468][ T3304] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 11 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 91.761490][ T3304] RSP: 002b:00007f448c0ecf60 EFLAGS: 00010206 [ 91.761512][ T3304] RAX: 0000000000000000 RBX: 00007f448b425fa0 RCX: 0000000000000000 [ 91.761530][ T3304] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007f448b235ae1 [ 91.761548][ T3304] RBP: 00007f448b235024 R08: 00007f448b052850 R09: 0000000000000000 [ 91.761564][ T3304] R10: 0000000000000000 R11: 0000200000000000 R12: 0000000000000036 [ 91.761580][ T3304] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffec46488a8 [ 91.761601][ T3304] [ 91.761613][ T3304] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 92.058657][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.067440][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.239062][ T935] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 92.390328][ T935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.400861][ T935] usb 2-1: config 0 has no interfaces? [ 92.406533][ T935] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.415662][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.424920][ T935] usb 2-1: config 0 descriptor?? [ 92.643160][ T9] usb 2-1: USB disconnect, device number 19 [ 92.846166][ T3339] input: syz0 as /devices/virtual/input/input18 [ 92.882665][ T3343] FAULT_INJECTION: forcing a failure. [ 92.882665][ T3343] name failslab, interval 1, probability 0, space 0, times 0 [ 92.895447][ T3343] CPU: 0 UID: 0 PID: 3343 Comm: syz.5.1368 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 92.895495][ T3343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.895506][ T3343] Call Trace: [ 92.895511][ T3343] [ 92.895518][ T3343] __dump_stack+0x21/0x30 [ 92.895548][ T3343] dump_stack_lvl+0x140/0x1c0 [ 92.895572][ T3343] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.895596][ T3343] ? vfs_write+0xbcf/0xfd0 [ 92.895615][ T3343] dump_stack+0x19/0x20 [ 92.895638][ T3343] should_fail_ex+0x3c2/0x510 [ 92.895658][ T3343] should_failslab+0xac/0x100 [ 92.895680][ T3343] __kmalloc_cache_noprof+0x41/0x470 [ 92.895698][ T3343] ? __se_sys_timerfd_create+0x1c6/0x590 [ 92.895727][ T3343] __se_sys_timerfd_create+0x1c6/0x590 [ 92.895758][ T3343] ? xfd_validate_state+0x68/0x140 [ 92.895786][ T3343] ? __x64_sys_timerfd_create+0x80/0x80 [ 92.895832][ T3343] ? __kasan_check_write+0x18/0x20 [ 92.895851][ T3343] __x64_sys_timerfd_create+0x5f/0x80 [ 92.895877][ T3343] x64_sys_call+0x2e54/0x2ee0 [ 92.895893][ T3343] do_syscall_64+0x57/0xf0 [ 92.895918][ T3343] ? clear_bhb_loop+0x50/0xa0 [ 92.895938][ T3343] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.895959][ T3343] RIP: 0033:0x7fde0859e159 [ 92.895973][ T3343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.895988][ T3343] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 92.896006][ T3343] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 92.896019][ T3343] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000007 [ 92.896029][ T3343] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 92.896040][ T3343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.896051][ T3343] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 92.896065][ T3343] [ 93.312743][ T3349] rust_binder: Failure in copy_transaction_data: EINVAL [ 93.312774][ T3349] rust_binder: 3346:3349 transaction async to 3346:0 failed EINVAL, code 0 size 0-24 [ 93.339668][ T66] rust_binder: 3346: undelivered TRANSACTION_COMPLETE [ 93.346506][ T66] rust_binder: 3346: undelivered TRANSACTION_ERROR: 29201 [ 93.509845][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1386'. [ 93.524173][ T3361] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1386'. [ 93.738211][ T3389] FAULT_INJECTION: forcing a failure. [ 93.738211][ T3389] name failslab, interval 1, probability 0, space 0, times 0 [ 93.753904][ T3389] CPU: 1 UID: 0 PID: 3389 Comm: syz.5.1391 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 93.753939][ T3389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.753953][ T3389] Call Trace: [ 93.753960][ T3389] [ 93.753968][ T3389] __dump_stack+0x21/0x30 [ 93.754004][ T3389] dump_stack_lvl+0x140/0x1c0 [ 93.754033][ T3389] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.754064][ T3389] dump_stack+0x19/0x20 [ 93.754093][ T3389] should_fail_ex+0x3c2/0x510 [ 93.754120][ T3389] should_failslab+0xac/0x100 [ 93.754148][ T3389] __kmalloc_cache_noprof+0x41/0x470 [ 93.754171][ T3389] ? alloc_fdtable+0xd2/0x4f0 [ 93.754195][ T3389] ? _raw_spin_lock+0x92/0x120 [ 93.754227][ T3389] alloc_fdtable+0xd2/0x4f0 [ 93.754250][ T3389] dup_fd+0x6af/0x9c0 [ 93.754274][ T3389] __close_range+0x1ca/0x4e0 [ 93.754302][ T3389] ? __cfi___close_range+0x10/0x10 [ 93.754326][ T3389] ? __kasan_check_write+0x18/0x20 [ 93.754348][ T3389] ? fpregs_restore_userregs+0x11c/0x260 [ 93.754375][ T3389] __x64_sys_close_range+0x7e/0x90 [ 93.754395][ T3389] x64_sys_call+0x1686/0x2ee0 [ 93.754414][ T3389] do_syscall_64+0x57/0xf0 [ 93.754444][ T3389] ? clear_bhb_loop+0x50/0xa0 [ 93.754469][ T3389] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.754491][ T3389] RIP: 0033:0x7fde0859e159 [ 93.754508][ T3389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.754527][ T3389] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 93.754549][ T3389] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 93.754565][ T3389] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 93.754580][ T3389] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 93.754594][ T3389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.754607][ T3389] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 93.754625][ T3389] [ 93.909159][ T66] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 93.979153][ T91] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.073659][ T3403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.085178][ T3403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.130264][ T91] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.141524][ T91] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.142851][ T66] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.153111][ T91] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.175541][ T91] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.179086][ T66] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.185234][ T91] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.206175][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.213051][ T66] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 94.219327][ T91] usb 7-1: config 0 descriptor?? [ 94.222945][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.236109][ T66] usb 2-1: config 0 descriptor?? [ 94.644756][ T66] kye 0003:0458:501A.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 94.660590][ T91] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 94.669143][ T66] kye 0003:0458:501A.000E: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 94.686415][ T91] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 94.690576][ T66] kye 0003:0458:501A.000E: tablet-enabling feature report not found [ 94.732236][ T66] kye 0003:0458:501A.000E: tablet enabling failed [ 94.837297][ T3427] FAULT_INJECTION: forcing a failure. [ 94.837297][ T3427] name failslab, interval 1, probability 0, space 0, times 0 [ 94.850197][ T3427] CPU: 0 UID: 0 PID: 3427 Comm: syz.4.1408 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 94.850238][ T3427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.850255][ T3427] Call Trace: [ 94.850264][ T3427] [ 94.850274][ T3427] __dump_stack+0x21/0x30 [ 94.850316][ T3427] dump_stack_lvl+0x140/0x1c0 [ 94.850350][ T3427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.850384][ T3427] ? vfs_write+0xbcf/0xfd0 [ 94.850412][ T3427] dump_stack+0x19/0x20 [ 94.850445][ T3427] should_fail_ex+0x3c2/0x510 [ 94.850475][ T3427] should_failslab+0xac/0x100 [ 94.850507][ T3427] __kmalloc_cache_noprof+0x41/0x470 [ 94.850535][ T3427] ? __se_sys_timerfd_create+0x1c6/0x590 [ 94.850575][ T3427] __se_sys_timerfd_create+0x1c6/0x590 [ 94.850613][ T3427] ? xfd_validate_state+0x68/0x140 [ 94.850658][ T3427] ? __x64_sys_timerfd_create+0x80/0x80 [ 94.850697][ T3427] ? __kasan_check_write+0x18/0x20 [ 94.850722][ T3427] __x64_sys_timerfd_create+0x5f/0x80 [ 94.850758][ T3427] x64_sys_call+0x2e54/0x2ee0 [ 94.850779][ T3427] do_syscall_64+0x57/0xf0 [ 94.850813][ T3427] ? clear_bhb_loop+0x50/0xa0 [ 94.850841][ T3427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.850866][ T3427] RIP: 0033:0x7fbd22f9e159 [ 94.850887][ T3427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.850907][ T3427] RSP: 002b:00007fbd23e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 94.850931][ T3427] RAX: ffffffffffffffda RBX: 00007fbd23225fa0 RCX: 00007fbd22f9e159 [ 94.850951][ T3427] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000007 [ 94.850966][ T3427] RBP: 00007fbd23035024 R08: 0000000000000000 R09: 0000000000000000 [ 94.850981][ T3427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.850996][ T3427] R13: 00007fbd23226038 R14: 00007fbd23225fa0 R15: 00007ffe71213898 [ 94.851015][ T3427] [ 94.920895][ T91] usb 7-1: USB disconnect, device number 9 [ 94.928507][ T66] usb 2-1: USB disconnect, device number 20 [ 95.475709][ T3436] input: syz0 as /devices/virtual/input/input19 [ 95.497644][ T562] udevd[562]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 95.540105][ T3442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1414'. [ 95.559296][ T3442] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1414'. [ 95.724805][ T3466] FAULT_INJECTION: forcing a failure. [ 95.724805][ T3466] name failslab, interval 1, probability 0, space 0, times 0 [ 95.752693][ T3466] CPU: 1 UID: 0 PID: 3466 Comm: syz.1.1435 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 95.752734][ T3466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.752751][ T3466] Call Trace: [ 95.752759][ T3466] [ 95.752769][ T3466] __dump_stack+0x21/0x30 [ 95.752812][ T3466] dump_stack_lvl+0x140/0x1c0 [ 95.752847][ T3466] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.752883][ T3466] ? futex_wait+0x2b8/0x7c0 [ 95.752907][ T3466] ? __cfi_futex_wait+0x10/0x10 [ 95.752931][ T3466] dump_stack+0x19/0x20 [ 95.752963][ T3466] should_fail_ex+0x3c2/0x510 [ 95.752993][ T3466] should_failslab+0xac/0x100 [ 95.753024][ T3466] kmem_cache_alloc_noprof+0x42/0x410 [ 95.753051][ T3466] ? dup_fd+0x63/0x9c0 [ 95.753078][ T3466] dup_fd+0x63/0x9c0 [ 95.753105][ T3466] __close_range+0x1ca/0x4e0 [ 95.753147][ T3466] ? __cfi___close_range+0x10/0x10 [ 95.753178][ T3466] ? __kasan_check_write+0x18/0x20 [ 95.753205][ T3466] ? fpregs_restore_userregs+0x11c/0x260 [ 95.753238][ T3466] __x64_sys_close_range+0x7e/0x90 [ 95.753263][ T3466] x64_sys_call+0x1686/0x2ee0 [ 95.753286][ T3466] do_syscall_64+0x57/0xf0 [ 95.753321][ T3466] ? clear_bhb_loop+0x50/0xa0 [ 95.753350][ T3466] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.753375][ T3466] RIP: 0033:0x7f448b19e159 [ 95.753395][ T3466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.753416][ T3466] RSP: 002b:00007f448c0ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 95.753442][ T3466] RAX: ffffffffffffffda RBX: 00007f448b425fa0 RCX: 00007f448b19e159 [ 95.753462][ T3466] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 95.753480][ T3466] RBP: 00007f448b235024 R08: 0000000000000000 R09: 0000000000000000 [ 95.753496][ T3466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.753512][ T3466] R13: 00007f448b426038 R14: 00007f448b425fa0 R15: 00007ffec46488a8 [ 95.753534][ T3466] [ 96.019300][ T3484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 96.028292][ T3484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1431'. [ 96.038394][ T36] audit: type=1400 audit(1788567370.100:557): avc: denied { mounton } for pid=3481 comm="syz.5.1434" path="/242/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 96.089953][ T3486] __vm_enough_memory: pid: 3486, comm: syz.4.1436, bytes: 11728003633152 not enough memory for the allocation [ 96.129070][ T36] audit: type=1400 audit(1788567370.190:558): avc: denied { getopt } for pid=3493 comm="syz.1.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.149384][ T3486] __vm_enough_memory: pid: 3486, comm: syz.4.1436, bytes: 11728003633152 not enough memory for the allocation [ 96.217056][ T3503] FAULT_INJECTION: forcing a failure. [ 96.217056][ T3503] name failslab, interval 1, probability 0, space 0, times 0 [ 96.240228][ T3503] CPU: 1 UID: 0 PID: 3503 Comm: syz.6.1445 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 96.240268][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.240284][ T3503] Call Trace: [ 96.240293][ T3503] [ 96.240301][ T3503] __dump_stack+0x21/0x30 [ 96.240342][ T3503] dump_stack_lvl+0x140/0x1c0 [ 96.240376][ T3503] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.240409][ T3503] ? vfs_write+0xbcf/0xfd0 [ 96.240436][ T3503] dump_stack+0x19/0x20 [ 96.240469][ T3503] should_fail_ex+0x3c2/0x510 [ 96.240499][ T3503] ? __se_sys_memfd_create+0x2cb/0x8f0 [ 96.240527][ T3503] should_failslab+0xac/0x100 [ 96.240558][ T3503] __kmalloc_noprof+0x69/0x510 [ 96.240585][ T3503] ? __se_sys_futex+0x13c/0x320 [ 96.240618][ T3503] ? __se_sys_memfd_create+0x2cb/0x8f0 [ 96.240645][ T3503] ? strnlen_user+0xaa/0x180 [ 96.240674][ T3503] __se_sys_memfd_create+0x2cb/0x8f0 [ 96.240702][ T3503] ? __x64_sys_memfd_create+0x80/0x80 [ 96.240729][ T3503] ? __kasan_check_write+0x18/0x20 [ 96.240756][ T3503] __x64_sys_memfd_create+0x5f/0x80 [ 96.240783][ T3503] x64_sys_call+0x29f8/0x2ee0 [ 96.240806][ T3503] do_syscall_64+0x57/0xf0 [ 96.240844][ T3503] ? clear_bhb_loop+0x50/0xa0 [ 96.240873][ T3503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.240901][ T3503] RIP: 0033:0x7fabc379e159 [ 96.240922][ T3503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.240945][ T3503] RSP: 002b:00007fabc4736028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 96.240973][ T3503] RAX: ffffffffffffffda RBX: 00007fabc3a25fa0 RCX: 00007fabc379e159 [ 96.240993][ T3503] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 96.241010][ T3503] RBP: 00007fabc3835024 R08: 0000000000000000 R09: 0000000000000000 [ 96.241027][ T3503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.241042][ T3503] R13: 00007fabc3a26038 R14: 00007fabc3a25fa0 R15: 00007ffe95a91668 [ 96.241064][ T3503] [ 96.461463][ T3513] netlink: 'syz.1.1450': attribute type 12 has an invalid length. [ 96.616054][ T3532] netlink: 'syz.5.1459': attribute type 11 has an invalid length. [ 96.768148][ T36] audit: type=1400 audit(1788567370.830:559): avc: denied { read } for pid=3556 comm="syz.1.1471" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 96.792719][ T36] audit: type=1400 audit(1788567370.830:560): avc: denied { open } for pid=3556 comm="syz.1.1471" path="/373/proc/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 96.944246][ T3575] program syz.5.1479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.032646][ T3587] mmap: syz.1.1484 (3587): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 97.045488][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1485'. [ 97.108995][ T36] audit: type=1400 audit(1788567371.170:561): avc: denied { load_policy } for pid=3595 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.129548][ T3596] SELinux: policydb table sizes (768,9) do not match mine (8,9) [ 97.137964][ T3596] SELinux: failed to load policy [ 97.174722][ T3604] rust_binder: 3602:3604 error while translating object: EINVAL [ 97.183081][ T3604] rust_binder: Failure in copy_transaction_data: EINVAL [ 97.183117][ T3604] rust_binder: 3602:3604 transaction call to 3602:0 failed EINVAL, code 0 size 80-24 [ 97.200989][ T935] rust_binder: 3602: undelivered TRANSACTION_ERROR: 29201 [ 97.490079][ T3634] program syz.6.1505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.530747][ T312] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 97.692010][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.705571][ T312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.717049][ T312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 97.728276][ T312] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.750932][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.770082][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.778279][ T312] usb 2-1: Product: syz [ 97.782782][ T312] usb 2-1: Manufacturer: syz [ 97.787421][ T312] usb 2-1: SerialNumber: syz [ 97.794888][ T3615] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.606586][ T312] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 98.629334][ T312] cdc_ncm 2-1:1.0: bind() failure [ 98.635504][ T312] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 98.642580][ T312] cdc_ncm 2-1:1.1: bind() failure [ 98.649510][ T312] usb 2-1: USB disconnect, device number 21 [ 99.146000][ T312] smpboot: CPU 1 is now offline [ 99.165647][ T3667] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 99.353240][ T3693] bridge0: entered allmulticast mode [ 99.369463][ T3693] bridge0: left allmulticast mode [ 99.635161][ T53] bridge_slave_1: left allmulticast mode [ 99.649414][ T53] bridge_slave_1: left promiscuous mode [ 99.655153][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.669531][ T53] bridge_slave_0: left allmulticast mode [ 99.675243][ T53] bridge_slave_0: left promiscuous mode [ 99.692818][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.844552][ T53] veth1_macvtap: left promiscuous mode [ 99.850180][ T53] veth0_vlan: left promiscuous mode [ 99.868072][ T3729] Invalid argument reading file caps for ./file0 [ 99.901572][ T66] smpboot: CPU 1 is now offline [ 99.912629][ T3731] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 99.993099][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.000323][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.007515][ T3725] bridge_slave_0: entered allmulticast mode [ 100.014386][ T3725] bridge_slave_0: entered promiscuous mode [ 100.023827][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.035936][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.043438][ T3725] bridge_slave_1: entered allmulticast mode [ 100.050078][ T3725] bridge_slave_1: entered promiscuous mode [ 100.067499][ T36] audit: type=1400 audit(1788567374.130:562): avc: denied { mount } for pid=3743 comm="syz.5.1560" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 100.145303][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.152524][ T3725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.159885][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.167004][ T3725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.209462][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.217339][ T36] audit: type=1400 audit(1788567374.280:563): avc: denied { read append } for pid=3753 comm="syz.1.1565" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.242752][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.260640][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.267733][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.275869][ T36] audit: type=1400 audit(1788567374.280:564): avc: denied { open } for pid=3753 comm="syz.1.1565" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.312181][ T36] audit: type=1400 audit(1788567374.280:565): avc: denied { map } for pid=3753 comm="syz.1.1565" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.336685][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.343822][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.375766][ T3725] veth0_vlan: entered promiscuous mode [ 100.394329][ T3725] veth1_macvtap: entered promiscuous mode [ 100.497422][ T3775] Invalid argument reading file caps for ./file0 [ 100.716343][ T3795] FAULT_INJECTION: forcing a failure. [ 100.716343][ T3795] name failslab, interval 1, probability 0, space 0, times 0 [ 100.734199][ T3799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1586'. [ 100.743373][ T3795] CPU: 0 UID: 0 PID: 3795 Comm: syz.5.1584 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 100.743410][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.743425][ T3795] Call Trace: [ 100.743434][ T3795] [ 100.743443][ T3795] __dump_stack+0x21/0x30 [ 100.743482][ T3795] dump_stack_lvl+0x140/0x1c0 [ 100.743515][ T3795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.743551][ T3795] dump_stack+0x19/0x20 [ 100.743582][ T3795] should_fail_ex+0x3c2/0x510 [ 100.743611][ T3795] should_failslab+0xac/0x100 [ 100.743642][ T3795] kmem_cache_alloc_noprof+0x42/0x410 [ 100.743668][ T3795] ? security_file_alloc+0x49/0x220 [ 100.743690][ T3795] ? kasan_save_alloc_info+0x3a/0x50 [ 100.743723][ T3795] security_file_alloc+0x49/0x220 [ 100.743743][ T3795] init_file+0x9e/0x210 [ 100.743775][ T3795] alloc_empty_file+0xd9/0x270 [ 100.743809][ T3795] path_openat+0xf4/0x35a0 [ 100.743839][ T3795] ? stack_depot_save_flags+0x38/0x800 [ 100.743869][ T3795] ? kasan_save_track+0x4f/0x80 [ 100.743896][ T3795] ? kasan_save_track+0x3e/0x80 [ 100.743922][ T3795] ? kasan_save_alloc_info+0x3a/0x50 [ 100.743944][ T3795] ? __kasan_slab_alloc+0x73/0x90 [ 100.743973][ T3795] ? getname+0x1b/0x30 [ 100.743998][ T3795] ? do_sys_openat2+0xda/0x1d0 [ 100.744032][ T3795] ? __x64_sys_openat+0x13a/0x170 [ 100.744067][ T3795] ? x64_sys_call+0xe69/0x2ee0 [ 100.744090][ T3795] ? do_syscall_64+0x57/0xf0 [ 100.744131][ T3795] ? do_filp_open+0x440/0x440 [ 100.744166][ T3795] do_filp_open+0x1f2/0x440 [ 100.744199][ T3795] ? __cfi_do_filp_open+0x10/0x10 [ 100.744238][ T3795] ? alloc_fd+0x4c1/0x570 [ 100.744269][ T3795] do_sys_openat2+0x134/0x1d0 [ 100.744303][ T3795] ? fput+0x1a4/0x230 [ 100.744335][ T3795] ? do_sys_open+0x100/0x100 [ 100.744373][ T3795] __x64_sys_openat+0x13a/0x170 [ 100.744407][ T3795] x64_sys_call+0xe69/0x2ee0 [ 100.744429][ T3795] do_syscall_64+0x57/0xf0 [ 100.744463][ T3795] ? clear_bhb_loop+0x50/0xa0 [ 100.744489][ T3795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.744516][ T3795] RIP: 0033:0x7fde0859e159 [ 100.744537][ T3795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.744559][ T3795] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.744586][ T3795] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 100.744604][ T3795] RDX: 0000000000004000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 100.744621][ T3795] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 100.744637][ T3795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.744652][ T3795] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 100.744674][ T3795] [ 101.020046][ T3799] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1586'. [ 101.029087][ T3799] netlink: 'syz.1.1586': attribute type 6 has an invalid length. [ 101.036946][ T3799] netlink: 'syz.1.1586': attribute type 5 has an invalid length. [ 101.044811][ T3799] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1586'. [ 101.101280][ T3809] FAULT_INJECTION: forcing a failure. [ 101.101280][ T3809] name failslab, interval 1, probability 0, space 0, times 0 [ 101.126168][ T3809] CPU: 1 UID: 0 PID: 3809 Comm: syz.7.1591 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 101.126211][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.126228][ T3809] Call Trace: [ 101.126237][ T3809] [ 101.126247][ T3809] __dump_stack+0x21/0x30 [ 101.126292][ T3809] dump_stack_lvl+0x140/0x1c0 [ 101.126328][ T3809] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.126363][ T3809] ? futex_wait+0x2b8/0x7c0 [ 101.126398][ T3809] ? __cfi_futex_wait+0x10/0x10 [ 101.126422][ T3809] dump_stack+0x19/0x20 [ 101.126457][ T3809] should_fail_ex+0x3c2/0x510 [ 101.126489][ T3809] should_failslab+0xac/0x100 [ 101.126522][ T3809] kmem_cache_alloc_noprof+0x42/0x410 [ 101.126549][ T3809] ? do_futex+0x32a/0x510 [ 101.126582][ T3809] ? getname_flags+0xcc/0x6b0 [ 101.126611][ T3809] getname_flags+0xcc/0x6b0 [ 101.126640][ T3809] getname+0x1b/0x30 [ 101.126667][ T3809] do_sys_openat2+0xda/0x1d0 [ 101.126704][ T3809] ? fput+0x1a4/0x230 [ 101.126736][ T3809] ? do_sys_open+0x100/0x100 [ 101.126774][ T3809] __x64_sys_openat+0x13a/0x170 [ 101.126812][ T3809] x64_sys_call+0xe69/0x2ee0 [ 101.126834][ T3809] do_syscall_64+0x57/0xf0 [ 101.126870][ T3809] ? clear_bhb_loop+0x50/0xa0 [ 101.126900][ T3809] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.126929][ T3809] RIP: 0033:0x7ff34d15e98e [ 101.126950][ T3809] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.126972][ T3809] RSP: 002b:00007ff34df84ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.127000][ T3809] RAX: ffffffffffffffda RBX: 00007ff34df856c0 RCX: 00007ff34d15e98e [ 101.127020][ T3809] RDX: 0000000000000002 RSI: 00007ff34df84f90 RDI: ffffffffffffff9c [ 101.127039][ T3809] RBP: 00007ff34d235024 R08: 0000000000000000 R09: 0000000000000000 [ 101.127056][ T3809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.127072][ T3809] R13: 00007ff34d426038 R14: 00007ff34d425fa0 R15: 00007ffe26a85fe8 [ 101.127094][ T3809] [ 101.394618][ T3823] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1598'. [ 101.439419][ T3827] netlink: 'syz.6.1600': attribute type 1 has an invalid length. [ 101.520349][ T36] audit: type=1400 audit(1788567375.590:566): avc: denied { connect } for pid=3836 comm="syz.1.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.765699][ T36] audit: type=1400 audit(1788567375.830:567): avc: denied { setopt } for pid=3868 comm="syz.6.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.771710][ T3870] sock: sock_set_timeout: `syz.5.1618' (pid 3870) tries to set negative timeout [ 101.859688][ T3874] device-mapper: ioctl: populate_table: no targets specified [ 102.139128][ T3908] FAULT_INJECTION: forcing a failure. [ 102.139128][ T3908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.168448][ T3909] kvm: kvm [3907]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x1001 [ 102.179323][ T3908] CPU: 0 UID: 0 PID: 3908 Comm: syz.5.1636 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 102.179365][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.179382][ T3908] Call Trace: [ 102.179389][ T3908] [ 102.179399][ T3908] __dump_stack+0x21/0x30 [ 102.179440][ T3908] dump_stack_lvl+0x140/0x1c0 [ 102.179476][ T3908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.179511][ T3908] ? check_stack_object+0x138/0x150 [ 102.179539][ T3908] dump_stack+0x19/0x20 [ 102.179572][ T3908] should_fail_ex+0x3c2/0x510 [ 102.179602][ T3908] should_fail+0xf/0x20 [ 102.179629][ T3908] should_fail_usercopy+0x1e/0x30 [ 102.179672][ T3908] set_fd_set+0x2d/0x90 [ 102.179705][ T3908] core_sys_select+0x5eb/0x7f0 [ 102.179742][ T3908] ? __cfi_core_sys_select+0x10/0x10 [ 102.179781][ T3908] ? __cfi_set_user_sigmask+0x10/0x10 [ 102.179816][ T3908] ? mutex_unlock+0x90/0x240 [ 102.179845][ T3908] __se_sys_pselect6+0x268/0x320 [ 102.179881][ T3908] ? __x64_sys_pselect6+0x110/0x110 [ 102.179916][ T3908] ? __kasan_check_write+0x18/0x20 [ 102.179943][ T3908] __x64_sys_pselect6+0xe9/0x110 [ 102.179979][ T3908] x64_sys_call+0x2980/0x2ee0 [ 102.180002][ T3908] do_syscall_64+0x57/0xf0 [ 102.180038][ T3908] ? clear_bhb_loop+0x50/0xa0 [ 102.180067][ T3908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.180094][ T3908] RIP: 0033:0x7fde0859e159 [ 102.180116][ T3908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.180137][ T3908] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 102.180167][ T3908] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 102.180186][ T3908] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 102.180204][ T3908] RBP: 00007fde08635024 R08: 0000200000000280 R09: 0000000000000000 [ 102.180221][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.180236][ T3908] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 102.180258][ T3908] [ 102.949044][ T66] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 103.057712][ T3970] tipc: Started in network mode [ 103.069084][ T3970] tipc: Node identity 7f000001, cluster identity 4711 [ 103.076206][ T3970] tipc: Enabled bearer , priority 10 [ 103.110026][ T66] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.137841][ T66] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.166476][ T66] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.178626][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 103.205807][ T66] usb 7-1: SerialNumber: syz [ 103.425990][ T66] usb 7-1: 0:2 : does not exist [ 103.439966][ T66] usb 7-1: USB disconnect, device number 10 [ 103.470400][ T562] udevd[562]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.512250][ T4026] FAULT_INJECTION: forcing a failure. [ 103.512250][ T4026] name failslab, interval 1, probability 0, space 0, times 0 [ 103.533873][ T4026] CPU: 1 UID: 0 PID: 4026 Comm: syz.7.1690 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 103.533910][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.533926][ T4026] Call Trace: [ 103.533934][ T4026] [ 103.533944][ T4026] __dump_stack+0x21/0x30 [ 103.533984][ T4026] dump_stack_lvl+0x140/0x1c0 [ 103.534018][ T4026] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.534059][ T4026] ? __cfi_do_futex+0x10/0x10 [ 103.534082][ T4026] ? mutex_unlock+0x90/0x240 [ 103.534102][ T4026] dump_stack+0x19/0x20 [ 103.534124][ T4026] should_fail_ex+0x3c2/0x510 [ 103.534145][ T4026] should_failslab+0xac/0x100 [ 103.534168][ T4026] kmem_cache_alloc_noprof+0x42/0x410 [ 103.534186][ T4026] ? new_userfaultfd+0x96/0x410 [ 103.534206][ T4026] new_userfaultfd+0x96/0x410 [ 103.534225][ T4026] __x64_sys_userfaultfd+0x89/0xb0 [ 103.534244][ T4026] x64_sys_call+0x2950/0x2ee0 [ 103.534260][ T4026] do_syscall_64+0x57/0xf0 [ 103.534295][ T4026] ? clear_bhb_loop+0x50/0xa0 [ 103.534316][ T4026] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.534342][ T4026] RIP: 0033:0x7ff34d19e159 [ 103.534358][ T4026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.534373][ T4026] RSP: 002b:00007ff34df85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 103.534424][ T4026] RAX: ffffffffffffffda RBX: 00007ff34d425fa0 RCX: 00007ff34d19e159 [ 103.534445][ T4026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 103.534468][ T4026] RBP: 00007ff34d235024 R08: 0000000000000000 R09: 0000000000000000 [ 103.534491][ T4026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.534509][ T4026] R13: 00007ff34d426038 R14: 00007ff34d425fa0 R15: 00007ffe26a85fe8 [ 103.534536][ T4026] [ 103.802867][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 104.091181][ T4067] rust_binder: 4066:4067 error while translating object: ENOENT [ 104.102230][ T4067] rust_binder: Failure in copy_transaction_data: ENOENT [ 104.102263][ T4067] rust_binder: 4066:4067 transaction call to 4066:0 failed ENOENT, code 0 size 72-24 [ 104.139309][ T935] tipc: Node number set to 2130706433 [ 104.158217][ T9] rust_binder: 4066: undelivered TRANSACTION_ERROR: 29201 [ 104.182121][ T36] audit: type=1400 audit(1788567378.250:568): avc: denied { write } for pid=4072 comm="syz.1.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.277123][ T36] audit: type=1400 audit(1788567378.340:569): avc: denied { map } for pid=4086 comm="syz.6.1719" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.295186][ T4088] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.376732][ T36] audit: type=1400 audit(1788567378.440:570): avc: denied { unmount } for pid=3725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.414007][ T36] audit: type=1400 audit(1788567378.470:571): avc: denied { read } for pid=4101 comm="syz.5.1726" path="socket:[29301]" dev="sockfs" ino=29301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.538000][ T4119] rust_binder: Write failure EFAULT in pid:927 [ 104.699083][ T91] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 104.860441][ T91] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.871425][ T91] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.881234][ T91] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.894202][ T91] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.903303][ T91] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.911988][ T91] usb 8-1: config 0 descriptor?? [ 105.118622][ T4130] input: syz1 as /devices/virtual/input/input20 [ 105.128031][ T36] audit: type=1400 audit(1788567379.190:572): avc: denied { append } for pid=4129 comm="syz.1.1739" name="event3" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.169659][ T36] audit: type=1400 audit(1788567379.240:573): avc: denied { execmod } for pid=4131 comm="syz.1.1740" path="/436/cpuacct.usage_sys" dev="tmpfs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.326141][ T36] audit: type=1400 audit(1788567379.390:574): avc: denied { lock } for pid=4143 comm="syz.1.1746" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.352234][ T91] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 105.370385][ T91] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 105.495658][ T4160] pim6reg1: entered promiscuous mode [ 105.505272][ T4160] pim6reg1: entered allmulticast mode [ 105.619627][ T91] usb 8-1: USB disconnect, device number 2 [ 105.709055][ T66] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 105.838679][ T4191] FAULT_INJECTION: forcing a failure. [ 105.838679][ T4191] name failslab, interval 1, probability 0, space 0, times 0 [ 105.851726][ T4191] CPU: 0 UID: 0 PID: 4191 Comm: syz.5.1767 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 105.851758][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.851769][ T4191] Call Trace: [ 105.851775][ T4191] [ 105.851781][ T4191] __dump_stack+0x21/0x30 [ 105.851811][ T4191] dump_stack_lvl+0x140/0x1c0 [ 105.851835][ T4191] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.851861][ T4191] dump_stack+0x19/0x20 [ 105.851884][ T4191] should_fail_ex+0x3c2/0x510 [ 105.851904][ T4191] should_failslab+0xac/0x100 [ 105.851926][ T4191] __kmalloc_cache_noprof+0x41/0x470 [ 105.851945][ T4191] ? do_inotify_init+0xc2/0x550 [ 105.851966][ T4191] ? fsnotify_alloc_group+0x1ac/0x3a0 [ 105.851984][ T4191] do_inotify_init+0xc2/0x550 [ 105.852004][ T4191] __ia32_sys_inotify_init+0x14/0x20 [ 105.852025][ T4191] x64_sys_call+0x2c08/0x2ee0 [ 105.852040][ T4191] do_syscall_64+0x57/0xf0 [ 105.852065][ T4191] ? clear_bhb_loop+0x50/0xa0 [ 105.852085][ T4191] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.852104][ T4191] RIP: 0033:0x7fde0859e159 [ 105.852118][ T4191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.852133][ T4191] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 105.852151][ T4191] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 105.852164][ T4191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.852174][ T4191] RBP: 00007fde08825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 105.852185][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.852195][ T4191] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 105.852210][ T4191] [ 106.037236][ T66] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.048797][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 106.060103][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.071297][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.084346][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.093484][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.102288][ T66] usb 2-1: config 0 descriptor?? [ 106.107610][ T4157] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 106.222512][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.231431][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.389046][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 106.519408][ T66] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 106.528237][ T66] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 106.539156][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 106.548312][ T66] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 106.569962][ T9] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.582568][ T9] usb 8-1: config 179 has no interface number 0 [ 106.589068][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 106.600336][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 106.611770][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.624117][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 106.636344][ T9] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.650398][ T9] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 106.677406][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.693739][ T4197] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 106.790369][ T9] usb 2-1: USB disconnect, device number 22 [ 106.806736][ T4216] FAULT_INJECTION: forcing a failure. [ 106.806736][ T4216] name failslab, interval 1, probability 0, space 0, times 0 [ 106.819851][ T4216] CPU: 0 UID: 0 PID: 4216 Comm: syz.5.1777 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 106.819876][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.819888][ T4216] Call Trace: [ 106.819893][ T4216] [ 106.819899][ T4216] __dump_stack+0x21/0x30 [ 106.819928][ T4216] dump_stack_lvl+0x140/0x1c0 [ 106.819952][ T4216] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.819978][ T4216] dump_stack+0x19/0x20 [ 106.820001][ T4216] should_fail_ex+0x3c2/0x510 [ 106.820022][ T4216] should_failslab+0xac/0x100 [ 106.820044][ T4216] kmem_cache_alloc_noprof+0x42/0x410 [ 106.820062][ T4216] ? security_inode_alloc+0x51/0x230 [ 106.820084][ T4216] ? __cfi_make_kgid+0x10/0x10 [ 106.820105][ T4216] security_inode_alloc+0x51/0x230 [ 106.820127][ T4216] inode_init_always_gfp+0x756/0x9e0 [ 106.820149][ T4216] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 106.820171][ T4216] alloc_inode+0xc5/0x270 [ 106.820193][ T4216] ? __cfi__raw_spin_lock+0x10/0x10 [ 106.820219][ T4216] new_inode+0x25/0x1e0 [ 106.820241][ T4216] shmem_get_inode+0x352/0xc10 [ 106.820264][ T4216] shmem_mknod+0x63/0x200 [ 106.820288][ T4216] shmem_mkdir+0x3b/0x80 [ 106.820313][ T4216] vfs_mkdir+0x58e/0x810 [ 106.820340][ T4216] do_mkdirat+0x240/0x530 [ 106.820364][ T4216] ? __cfi_do_mkdirat+0x10/0x10 [ 106.820387][ T4216] ? __kasan_check_write+0x18/0x20 [ 106.820404][ T4216] ? getname_flags+0x203/0x6b0 [ 106.820422][ T4216] ? __kasan_check_write+0x18/0x20 [ 106.820439][ T4216] __x64_sys_mkdirat+0x8b/0xa0 [ 106.820464][ T4216] x64_sys_call+0x2ba8/0x2ee0 [ 106.820479][ T4216] do_syscall_64+0x57/0xf0 [ 106.820503][ T4216] ? clear_bhb_loop+0x50/0xa0 [ 106.820523][ T4216] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.820541][ T4216] RIP: 0033:0x7fde0859e159 [ 106.820555][ T4216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.820569][ T4216] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 106.820587][ T4216] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 106.820600][ T4216] RDX: 00000000000001ed RSI: 0000200000000000 RDI: ffffffffffffff9c [ 106.820612][ T4216] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 106.820622][ T4216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.820633][ T4216] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 106.820647][ T4216] [ 107.072873][ T66] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input22 [ 107.101798][ T36] audit: type=1400 audit(1788567381.170:575): avc: denied { watch watch_reads } for pid=4217 comm="syz.5.1778" path="/348/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 107.127555][ T36] audit: type=1400 audit(1788567381.170:576): avc: denied { append } for pid=4217 comm="syz.5.1778" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.174948][ T4222] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.174967][ T4222] rust_binder: Read failure Err(EFAULT) in pid:744 [ 107.282872][ T36] audit: type=1400 audit(1788567381.350:577): avc: denied { setattr } for pid=4233 comm="syz.6.1786" name="/" dev="configfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.328767][ T91] usb 8-1: USB disconnect, device number 3 [ 107.328773][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.328957][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 107.853346][ T4269] raw_sendmsg: syz.7.1803 forgot to set AF_INET. Fix it! [ 107.899040][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 108.050142][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.071333][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.091380][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 108.101800][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.149242][ T9] usb 2-1: config 0 descriptor?? [ 108.249294][ T4298] input: syz1 as /devices/virtual/input/input23 [ 108.307691][ T4302] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1818'. [ 108.344947][ T4308] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.355255][ T36] audit: type=1400 audit(1788567382.410:578): avc: denied { mounton } for pid=4307 comm="syz.7.1821" path="/60/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 108.486809][ T4325] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1828'. [ 108.577632][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 108.594595][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 108.606940][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 108.616556][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 108.624227][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 108.632811][ T9] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 108.649015][ T604] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 108.809012][ T604] usb 7-1: Using ep0 maxpacket: 8 [ 108.819564][ T604] usb 7-1: unable to get BOS descriptor or descriptor too short [ 108.829435][ T604] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 108.837226][ T604] usb 7-1: can't read configurations, error -71 [ 109.044133][ T36] audit: type=1400 audit(1788567383.110:579): avc: denied { nosuid_transition } for pid=4357 comm="syz.7.1843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 109.077523][ T36] audit: type=1400 audit(1788567383.110:580): avc: denied { transition } for pid=4357 comm="syz.7.1843" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 109.107255][ T36] audit: type=1400 audit(1788567383.110:581): avc: denied { entrypoint } for pid=4357 comm="syz.7.1843" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1094 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.136948][ T36] audit: type=1400 audit(1788567383.110:582): avc: denied { share } for pid=4357 comm="syz.7.1843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 109.156847][ T36] audit: type=1400 audit(1788567383.110:583): avc: denied { noatsecure } for pid=4357 comm="syz.7.1843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 109.188375][ T9] playstation 0003:054C:0DF2.0012: Failed to retrieve feature with reportID 5: -71 [ 109.221356][ T9] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense calibration info: -71 [ 109.239073][ T9] playstation 0003:054C:0DF2.0012: Failed to get calibration data from DualSense [ 109.254299][ T9] playstation 0003:054C:0DF2.0012: Failed to create dualsense. [ 109.263728][ T9] playstation 0003:054C:0DF2.0012: probe with driver playstation failed with error -71 [ 109.273906][ T4367] sd 0:0:1:0: PR command failed: 1026 [ 109.286140][ T4367] sd 0:0:1:0: Sense Key : 0x5 [current] [ 109.295028][ T9] usb 2-1: USB disconnect, device number 23 [ 109.299221][ T4367] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 109.400763][ T4376] kvm: apic: phys broadcast and lowest prio [ 109.487591][ T36] audit: type=1400 audit(1788567383.550:584): avc: denied { search } for pid=4385 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.589792][ T4396] pim6reg1: entered promiscuous mode [ 109.600953][ T4396] pim6reg1: entered allmulticast mode syzkaller syzkaller login: [ 109.645979][ T4402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.657489][ T4402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.954590][ T604] rust_binder: 4429: undelivered TRANSACTION_COMPLETE [ 109.979031][ T604] rust_binder: 4429: undelivered transaction 53, process died [ 111.153899][ T4480] input: syz1 as /devices/virtual/input/input24 [ 111.199348][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.249140][ T665] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 111.400139][ T665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.411230][ T665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.421190][ T665] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.434180][ T665] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.443269][ T665] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.451984][ T665] usb 8-1: config 0 descriptor?? [ 111.509052][ T66] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 111.659191][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 111.665732][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.676854][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.686704][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.700649][ T66] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.709943][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.719168][ T66] usb 2-1: config 0 descriptor?? [ 111.820154][ T4493] WARNING! power/level is deprecated; use power/control instead [ 111.861846][ T665] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 111.870908][ T665] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 111.880248][ T665] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 112.119786][ T604] usb 8-1: USB disconnect, device number 4 [ 112.127492][ T66] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 112.135532][ T66] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 112.150444][ T66] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 112.159688][ T66] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 112.171515][ T66] microsoft 0003:045E:07DA.0014: no inputs found [ 112.177953][ T66] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 112.333230][ T604] usb 2-1: USB disconnect, device number 24 [ 113.259000][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 113.259000][ T567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.486223][ T4543] rust_binder: Failure in copy_transaction_data: EFAULT [ 113.486249][ T4543] rust_binder: 4542:4543 transaction call to 4542:0 failed EFAULT, code 0 size 768-0 [ 113.509913][ T91] rust_binder: 4542: undelivered TRANSACTION_ERROR: 29201 [ 113.669066][ T66] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 113.704154][ T4514] binfmt_misc: register: failed to install interpreter file ./file0 [ 113.820259][ T66] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.831399][ T66] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.843203][ T66] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.852535][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.860673][ T66] usb 7-1: Product: syz [ 113.865058][ T66] usb 7-1: Manufacturer: syz [ 113.869859][ T66] usb 7-1: SerialNumber: syz [ 113.880280][ T66] cdc_mbim 7-1:1.0: skipping garbage [ 113.934958][ T4566] kvm: user requested TSC rate below hardware speed [ 113.994393][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.025775][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 114.025800][ T36] audit: type=1400 audit(1788567388.090:589): avc: denied { mount } for pid=4571 comm="syz.1.1939" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.081490][ T4537] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 114.225875][ T4582] can0: slcan on ttyS3. [ 114.290237][ T4582] can0 (unregistered): slcan off ttyS3. [ 114.446831][ T36] audit: type=1400 audit(1788567388.510:590): avc: denied { map } for pid=4607 comm="syz.1.1946" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 114.570109][ T36] audit: type=1400 audit(1788567388.640:591): avc: denied { mount } for pid=4620 comm="syz.1.1949" name="/" dev="incremental-fs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.594813][ T36] audit: type=1400 audit(1788567388.660:592): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.699465][ T4537] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 114.712807][ T66] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 114.723185][ T66] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 114.757806][ T36] audit: type=1400 audit(1788567388.820:593): avc: denied { lock } for pid=4632 comm="syz.1.1955" path="socket:[33005]" dev="sockfs" ino=33005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 114.904725][ T4640] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 114.923824][ T66] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 114.943866][ T66] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 114.967890][ T66] wwan wwan0: port wwan0mbim0 attached [ 114.981923][ T66] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 3a:5d:b8:a9:5b:14 [ 115.010425][ T66] usb 7-1: USB disconnect, device number 13 [ 115.039289][ T66] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 115.110708][ T66] wwan wwan0: port wwan0mbim0 disconnected [ 115.671942][ T4702] SELinux: ebitmap: map size 66 does not match my size 64 (high bit was 64) [ 115.702174][ T4702] SELinux: failed to load policy [ 115.965896][ T66] kernel read not supported for file /1083/make-it-fail (pid: 66 comm: kworker/0:2) [ 116.047411][ T4726] 9pnet_fd: p9_fd_create_tcp (4726): problem connecting socket to 127.0.0.1 [ 116.059005][ T567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.059021][ T1409] Bluetooth: hci0: command 0x1003 tx timeout [ 116.134183][ T4736] FAULT_INJECTION: forcing a failure. [ 116.134183][ T4736] name failslab, interval 1, probability 0, space 0, times 0 [ 116.147422][ T4736] CPU: 0 UID: 0 PID: 4736 Comm: syz.6.2005 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 116.147459][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.147475][ T4736] Call Trace: [ 116.147483][ T4736] [ 116.147492][ T4736] __dump_stack+0x21/0x30 [ 116.147534][ T4736] dump_stack_lvl+0x140/0x1c0 [ 116.147567][ T4736] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.147600][ T4736] ? avc_has_perm_noaudit+0x289/0x360 [ 116.147632][ T4736] dump_stack+0x19/0x20 [ 116.147664][ T4736] should_fail_ex+0x3c2/0x510 [ 116.147692][ T4736] should_failslab+0xac/0x100 [ 116.147721][ T4736] __kmalloc_node_noprof+0x69/0x500 [ 116.147747][ T4736] ? __cfi_do_futex+0x10/0x10 [ 116.147780][ T4736] ? __kvmalloc_node_noprof+0x128/0x300 [ 116.147805][ T4736] __kvmalloc_node_noprof+0x128/0x300 [ 116.147829][ T4736] ? __cfi_mutex_unlock+0x10/0x10 [ 116.147857][ T4736] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 116.147879][ T4736] ? security_capable+0x44/0x130 [ 116.147908][ T4736] __se_sys_setgroups+0x10b/0x540 [ 116.147933][ T4736] ? __kasan_check_write+0x18/0x20 [ 116.147960][ T4736] ? fpregs_restore_userregs+0x11c/0x260 [ 116.147994][ T4736] __x64_sys_setgroups+0x5f/0x80 [ 116.148020][ T4736] x64_sys_call+0x2644/0x2ee0 [ 116.148043][ T4736] do_syscall_64+0x57/0xf0 [ 116.148081][ T4736] ? clear_bhb_loop+0x50/0xa0 [ 116.148120][ T4736] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.148150][ T4736] RIP: 0033:0x7fabc379e159 [ 116.148171][ T4736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.148195][ T4736] RSP: 002b:00007fabc4736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 116.148223][ T4736] RAX: ffffffffffffffda RBX: 00007fabc3a25fa0 RCX: 00007fabc379e159 [ 116.148245][ T4736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.148261][ T4736] RBP: 00007fabc3835024 R08: 0000000000000000 R09: 0000000000000000 [ 116.148279][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.148295][ T4736] R13: 00007fabc3a26038 R14: 00007fabc3a25fa0 R15: 00007ffe95a91668 [ 116.148318][ T4736] [ 116.484898][ T4748] FAULT_INJECTION: forcing a failure. [ 116.484898][ T4748] name failslab, interval 1, probability 0, space 0, times 0 [ 116.497769][ T604] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 116.505887][ T4748] CPU: 0 UID: 0 PID: 4748 Comm: syz.6.2011 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 116.505933][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.505951][ T4748] Call Trace: [ 116.505959][ T4748] [ 116.505969][ T4748] __dump_stack+0x21/0x30 [ 116.506011][ T4748] dump_stack_lvl+0x140/0x1c0 [ 116.506047][ T4748] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.506083][ T4748] ? do_futex+0x32a/0x510 [ 116.506118][ T4748] dump_stack+0x19/0x20 [ 116.506151][ T4748] should_fail_ex+0x3c2/0x510 [ 116.506182][ T4748] should_failslab+0xac/0x100 [ 116.506214][ T4748] kmem_cache_alloc_noprof+0x42/0x410 [ 116.506241][ T4748] ? ioctx_alloc+0x122/0x840 [ 116.506274][ T4748] ioctx_alloc+0x122/0x840 [ 116.506305][ T4748] __se_sys_io_setup+0x6f/0x230 [ 116.506335][ T4748] __x64_sys_io_setup+0x5f/0x80 [ 116.506365][ T4748] x64_sys_call+0x26a4/0x2ee0 [ 116.506387][ T4748] do_syscall_64+0x57/0xf0 [ 116.506424][ T4748] ? clear_bhb_loop+0x50/0xa0 [ 116.506453][ T4748] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.506480][ T4748] RIP: 0033:0x7fabc379e159 [ 116.506502][ T4748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.506523][ T4748] RSP: 002b:00007fabc4736028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 116.506551][ T4748] RAX: ffffffffffffffda RBX: 00007fabc3a25fa0 RCX: 00007fabc379e159 [ 116.506571][ T4748] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000007fff [ 116.506620][ T4748] RBP: 00007fabc3835024 R08: 0000000000000000 R09: 0000000000000000 [ 116.506637][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.506653][ T4748] R13: 00007fabc3a26038 R14: 00007fabc3a25fa0 R15: 00007ffe95a91668 [ 116.506675][ T4748] [ 116.707098][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.770141][ T604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.780973][ T604] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.790715][ T604] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.799961][ T604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.808095][ T604] usb 2-1: SerialNumber: syz [ 117.016279][ T604] usb 2-1: 0:2 : does not exist [ 117.035238][ T604] usb 2-1: USB disconnect, device number 25 [ 117.107974][ T4754] syz.7.2013 (4754): drop_caches: 3 [ 117.176596][ T36] audit: type=1400 audit(1788567391.240:594): avc: denied { setattr } for pid=4769 comm="syz.5.2022" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 117.302290][ T4782] FAULT_INJECTION: forcing a failure. [ 117.302290][ T4782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.315985][ T4782] CPU: 0 UID: 0 PID: 4782 Comm: syz.5.2028 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 117.316026][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.316042][ T4782] Call Trace: [ 117.316051][ T4782] [ 117.316060][ T4782] __dump_stack+0x21/0x30 [ 117.316100][ T4782] dump_stack_lvl+0x140/0x1c0 [ 117.316133][ T4782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.316167][ T4782] ? futex_wait+0x2b8/0x7c0 [ 117.316190][ T4782] ? __cfi_futex_wait+0x10/0x10 [ 117.316213][ T4782] dump_stack+0x19/0x20 [ 117.316246][ T4782] should_fail_ex+0x3c2/0x510 [ 117.316277][ T4782] should_fail_alloc_page+0xec/0x110 [ 117.316311][ T4782] __alloc_pages_noprof+0x1c0/0x7e0 [ 117.316350][ T4782] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 117.316387][ T4782] ? mutex_unlock+0x90/0x240 [ 117.316416][ T4782] ? __se_sys_futex+0x13c/0x320 [ 117.316450][ T4782] get_free_pages_noprof+0x14/0x40 [ 117.316487][ T4782] __se_sys_mincore+0x13f/0xba0 [ 117.316521][ T4782] ? __kasan_check_write+0x18/0x20 [ 117.316544][ T4782] ? fpregs_restore_userregs+0x11c/0x260 [ 117.316578][ T4782] __x64_sys_mincore+0x7f/0xa0 [ 117.316625][ T4782] x64_sys_call+0x2b24/0x2ee0 [ 117.316648][ T4782] do_syscall_64+0x57/0xf0 [ 117.316685][ T4782] ? clear_bhb_loop+0x50/0xa0 [ 117.316715][ T4782] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.316743][ T4782] RIP: 0033:0x7fde0859e159 [ 117.316764][ T4782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.316786][ T4782] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 117.316816][ T4782] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 117.316836][ T4782] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 117.316854][ T4782] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 117.316871][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.316885][ T4782] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 117.316908][ T4782] [ 117.419132][ T1409] Bluetooth: hci1: command 0x1003 tx timeout [ 117.463931][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 117.500758][ T36] audit: type=1400 audit(1788567391.570:595): avc: denied { append } for pid=4785 comm="syz.7.2030" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 117.699030][ T36] audit: type=1400 audit(1788567391.570:596): avc: denied { open } for pid=4785 comm="syz.7.2030" path="/112/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 117.769068][ T36] audit: type=1400 audit(1788567391.640:597): avc: denied { read write } for pid=4785 comm="syz.7.2030" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 117.934129][ T4808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.934308][ T4808] rust_binder: Read failure Err(EAGAIN) in pid:878 [ 118.315555][ T4840] FAULT_INJECTION: forcing a failure. [ 118.315555][ T4840] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.334998][ T4840] CPU: 0 UID: 0 PID: 4840 Comm: syz.5.2053 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 118.335040][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.335067][ T4840] Call Trace: [ 118.335078][ T4840] [ 118.335089][ T4840] __dump_stack+0x21/0x30 [ 118.335145][ T4840] dump_stack_lvl+0x140/0x1c0 [ 118.335183][ T4840] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.335222][ T4840] ? gup_fast_fallback+0x671/0x740 [ 118.335262][ T4840] dump_stack+0x19/0x20 [ 118.335297][ T4840] should_fail_ex+0x3c2/0x510 [ 118.335330][ T4840] should_fail+0xf/0x20 [ 118.335358][ T4840] should_fail_futex+0x3c/0x50 [ 118.335393][ T4840] futex_lock_pi_atomic+0x11b/0xcb0 [ 118.335454][ T4840] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 118.335500][ T4840] ? __cfi_futex_setup_timer+0x10/0x10 [ 118.335535][ T4840] ? __cfi_get_futex_key+0x10/0x10 [ 118.335578][ T4840] futex_lock_pi+0x2a7/0xa70 [ 118.335617][ T4840] ? futex_unqueue+0x136/0x160 [ 118.335653][ T4840] ? __cfi_futex_lock_pi+0x10/0x10 [ 118.335694][ T4840] ? __cfi_futex_wake_mark+0x10/0x10 [ 118.335722][ T4840] ? __cfi_futex_wake_mark+0x10/0x10 [ 118.335749][ T4840] ? vfs_write+0xbcf/0xfd0 [ 118.335779][ T4840] do_futex+0x2fc/0x510 [ 118.335817][ T4840] ? __cfi_do_futex+0x10/0x10 [ 118.335851][ T4840] ? mutex_unlock+0x90/0x240 [ 118.335884][ T4840] __se_sys_futex+0x13c/0x320 [ 118.335920][ T4840] ? fput+0x1a4/0x230 [ 118.335955][ T4840] ? __x64_sys_futex+0x110/0x110 [ 118.335992][ T4840] ? __kasan_check_write+0x18/0x20 [ 118.336021][ T4840] __x64_sys_futex+0xe9/0x110 [ 118.336056][ T4840] x64_sys_call+0x227f/0x2ee0 [ 118.336081][ T4840] do_syscall_64+0x57/0xf0 [ 118.336120][ T4840] ? clear_bhb_loop+0x50/0xa0 [ 118.336151][ T4840] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.336180][ T4840] RIP: 0033:0x7fde0859e159 [ 118.336209][ T4840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.336232][ T4840] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.336270][ T4840] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 118.336290][ T4840] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200 [ 118.336308][ T4840] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000034fffffd [ 118.336327][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.336343][ T4840] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 118.336368][ T4840] [ 118.610406][ T4842] input: syz1 as /devices/virtual/input/input28 [ 118.620606][ T581] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 118.635641][ T581] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 118.647597][ T581] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 118.662769][ T581] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 118.699336][ T4844] FAULT_INJECTION: forcing a failure. [ 118.699336][ T4844] name failslab, interval 1, probability 0, space 0, times 0 [ 118.739154][ T581] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 118.766628][ T581] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 118.779091][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 118.785170][ T567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.789483][ T4844] CPU: 1 UID: 0 PID: 4844 Comm: syz.7.2054 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 118.789605][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.789647][ T4844] Call Trace: [ 118.789667][ T4844] [ 118.789690][ T4844] __dump_stack+0x21/0x30 [ 118.789793][ T4844] dump_stack_lvl+0x140/0x1c0 [ 118.789885][ T4844] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.789975][ T4844] dump_stack+0x19/0x20 [ 118.790057][ T4844] should_fail_ex+0x3c2/0x510 [ 118.790131][ T4844] should_failslab+0xac/0x100 [ 118.790214][ T4844] kmem_cache_alloc_noprof+0x42/0x410 [ 118.790288][ T4844] ? security_inode_alloc+0x51/0x230 [ 118.790363][ T4844] ? __cfi_make_kgid+0x10/0x10 [ 118.790445][ T4844] security_inode_alloc+0x51/0x230 [ 118.790521][ T4844] inode_init_always_gfp+0x756/0x9e0 [ 118.790597][ T4844] alloc_inode+0xc5/0x270 [ 118.790678][ T4844] new_inode_pseudo+0x19/0x40 [ 118.790758][ T4844] alloc_anon_inode+0x21/0x340 [ 118.790856][ T4844] aio_setup_ring+0xfa/0xc60 [ 118.790926][ T4844] ? pcpu_alloc_noprof+0xd93/0x1440 [ 118.791007][ T4844] ? free_ioctx_reqs+0x170/0x170 [ 118.791090][ T4844] ioctx_alloc+0x337/0x840 [ 118.791180][ T4844] __se_sys_io_setup+0x6f/0x230 [ 118.791248][ T4844] __x64_sys_io_setup+0x5f/0x80 [ 118.791284][ T4844] x64_sys_call+0x26a4/0x2ee0 [ 118.791329][ T4844] do_syscall_64+0x57/0xf0 [ 118.791458][ T4844] ? clear_bhb_loop+0x50/0xa0 [ 118.791535][ T4844] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.791599][ T4844] RIP: 0033:0x7ff34d19e159 [ 118.791652][ T4844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.791703][ T4844] RSP: 002b:00007ff34df85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 118.791806][ T4844] RAX: ffffffffffffffda RBX: 00007ff34d425fa0 RCX: 00007ff34d19e159 [ 118.791850][ T4844] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001 [ 118.791884][ T4844] RBP: 00007ff34d235024 R08: 0000000000000000 R09: 0000000000000000 [ 118.791928][ T4844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.791969][ T4844] R13: 00007ff34d426038 R14: 00007ff34d425fa0 R15: 00007ffe26a85fe8 [ 118.792023][ T4844] [ 119.070136][ T36] audit: type=1400 audit(1788567393.140:598): avc: denied { getopt } for pid=4853 comm="syz.1.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.204943][ T4871] FAULT_INJECTION: forcing a failure. [ 119.204943][ T4871] name failslab, interval 1, probability 0, space 0, times 0 [ 119.219291][ T4871] CPU: 0 UID: 0 PID: 4871 Comm: syz.5.2068 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 119.219330][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.219346][ T4871] Call Trace: [ 119.219353][ T4871] [ 119.219362][ T4871] __dump_stack+0x21/0x30 [ 119.219404][ T4871] dump_stack_lvl+0x140/0x1c0 [ 119.219442][ T4871] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.219483][ T4871] dump_stack+0x19/0x20 [ 119.219520][ T4871] should_fail_ex+0x3c2/0x510 [ 119.219554][ T4871] should_failslab+0xac/0x100 [ 119.219589][ T4871] kmem_cache_alloc_noprof+0x42/0x410 [ 119.219619][ T4871] ? alloc_empty_file+0xbf/0x270 [ 119.219656][ T4871] ? _raw_spin_unlock+0x45/0x60 [ 119.219698][ T4871] alloc_empty_file+0xbf/0x270 [ 119.219734][ T4871] ? _raw_spin_unlock+0x45/0x60 [ 119.219775][ T4871] alloc_file_pseudo+0x142/0x1f0 [ 119.219812][ T4871] ? security_inode_init_security_anon+0x3e/0x110 [ 119.219851][ T4871] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 119.219899][ T4871] ? anon_inode_make_secure_inode+0xf5/0x150 [ 119.219941][ T4871] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 119.219986][ T4871] __anon_inode_getfile+0x12e/0x200 [ 119.220024][ T4871] anon_inode_create_getfile+0x3f/0x50 [ 119.220060][ T4871] new_userfaultfd+0x1f6/0x410 [ 119.220092][ T4871] __x64_sys_userfaultfd+0x89/0xb0 [ 119.220122][ T4871] x64_sys_call+0x2950/0x2ee0 [ 119.220147][ T4871] do_syscall_64+0x57/0xf0 [ 119.220186][ T4871] ? clear_bhb_loop+0x50/0xa0 [ 119.220217][ T4871] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.220247][ T4871] RIP: 0033:0x7fde0859e159 [ 119.220268][ T4871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.220292][ T4871] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 119.220321][ T4871] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 119.220342][ T4871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 119.220359][ T4871] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 119.220377][ T4871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.220393][ T4871] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 119.220417][ T4871] [ 119.429078][ T935] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 119.648988][ T935] usb 8-1: Using ep0 maxpacket: 32 [ 119.660022][ T935] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.671144][ T935] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.693851][ T935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.727094][ T935] usb 8-1: config 0 descriptor?? [ 119.742427][ T935] hub 8-1:0.0: bad descriptor, ignoring hub [ 119.749545][ T562] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 119.779117][ T935] hub 8-1:0.0: probe with driver hub failed with error -5 [ 119.789182][ T562] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 119.829075][ T562] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 119.854707][ T562] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 119.879117][ T562] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 119.908982][ T562] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 120.027192][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 120.056019][ T4887] netlink: 'syz.5.2077': attribute type 7 has an invalid length. [ 120.078984][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 120.099057][ T4887] netlink: 'syz.5.2077': attribute type 5 has an invalid length. [ 120.106968][ T4887] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2077'. [ 120.119115][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 120.149018][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 120.179123][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 120.204372][ T4896] input: syz1 as /devices/virtual/input/input29 [ 120.209501][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 120.232833][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 120.278275][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 120.312228][ T4900] FAULT_INJECTION: forcing a failure. [ 120.312228][ T4900] name failslab, interval 1, probability 0, space 0, times 0 [ 120.359110][ T4900] CPU: 0 UID: 0 PID: 4900 Comm: syz.1.2081 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 120.359158][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.359176][ T4900] Call Trace: [ 120.359185][ T4900] [ 120.359195][ T4900] __dump_stack+0x21/0x30 [ 120.359241][ T4900] dump_stack_lvl+0x140/0x1c0 [ 120.359280][ T4900] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.359330][ T4900] dump_stack+0x19/0x20 [ 120.359367][ T4900] should_fail_ex+0x3c2/0x510 [ 120.359401][ T4900] should_failslab+0xac/0x100 [ 120.359437][ T4900] kmem_cache_alloc_noprof+0x42/0x410 [ 120.359466][ T4900] ? alloc_empty_file+0xbf/0x270 [ 120.359502][ T4900] ? _raw_spin_unlock+0x45/0x60 [ 120.359544][ T4900] alloc_empty_file+0xbf/0x270 [ 120.359579][ T4900] ? _raw_spin_unlock+0x45/0x60 [ 120.359619][ T4900] alloc_file_pseudo+0x142/0x1f0 [ 120.359656][ T4900] ? security_inode_init_security_anon+0x3e/0x110 [ 120.359697][ T4900] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 120.359734][ T4900] ? anon_inode_make_secure_inode+0xf5/0x150 [ 120.359775][ T4900] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 120.359817][ T4900] __anon_inode_getfile+0x12e/0x200 [ 120.359867][ T4900] anon_inode_create_getfile+0x3f/0x50 [ 120.359906][ T4900] new_userfaultfd+0x1f6/0x410 [ 120.359935][ T4900] __x64_sys_userfaultfd+0x89/0xb0 [ 120.359964][ T4900] x64_sys_call+0x2950/0x2ee0 [ 120.359989][ T4900] do_syscall_64+0x57/0xf0 [ 120.360026][ T4900] ? clear_bhb_loop+0x50/0xa0 [ 120.360056][ T4900] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.360085][ T4900] RIP: 0033:0x7f448b19e159 [ 120.360106][ T4900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.360129][ T4900] RSP: 002b:00007f448c0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 120.360158][ T4900] RAX: ffffffffffffffda RBX: 00007f448b425fa0 RCX: 00007f448b19e159 [ 120.360178][ T4900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 120.360194][ T4900] RBP: 00007f448b235024 R08: 0000000000000000 R09: 0000000000000000 [ 120.360211][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.360227][ T4900] R13: 00007f448b426038 R14: 00007f448b425fa0 R15: 00007ffec46488a8 [ 120.360250][ T4900] [ 120.595414][ T4902] FAULT_INJECTION: forcing a failure. [ 120.595414][ T4902] name failslab, interval 1, probability 0, space 0, times 0 [ 120.608261][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.5.2083 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 120.608307][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.608322][ T4902] Call Trace: [ 120.608330][ T4902] [ 120.608339][ T4902] __dump_stack+0x21/0x30 [ 120.608379][ T4902] dump_stack_lvl+0x140/0x1c0 [ 120.608413][ T4902] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.608449][ T4902] dump_stack+0x19/0x20 [ 120.608482][ T4902] should_fail_ex+0x3c2/0x510 [ 120.608512][ T4902] should_failslab+0xac/0x100 [ 120.608546][ T4902] kmem_cache_alloc_noprof+0x42/0x410 [ 120.608574][ T4902] ? security_inode_alloc+0x51/0x230 [ 120.608606][ T4902] ? __cfi_make_kgid+0x10/0x10 [ 120.608638][ T4902] security_inode_alloc+0x51/0x230 [ 120.608671][ T4902] inode_init_always_gfp+0x756/0x9e0 [ 120.608704][ T4902] alloc_inode+0xc5/0x270 [ 120.608737][ T4902] new_inode_pseudo+0x19/0x40 [ 120.608770][ T4902] alloc_anon_inode+0x21/0x340 [ 120.608807][ T4902] aio_setup_ring+0xfa/0xc60 [ 120.608841][ T4902] ? pcpu_alloc_noprof+0xd93/0x1440 [ 120.608873][ T4902] ? free_ioctx_reqs+0x170/0x170 [ 120.608907][ T4902] ioctx_alloc+0x337/0x840 [ 120.608944][ T4902] __se_sys_io_setup+0x6f/0x230 [ 120.608972][ T4902] __x64_sys_io_setup+0x5f/0x80 [ 120.609002][ T4902] x64_sys_call+0x26a4/0x2ee0 [ 120.609037][ T4902] do_syscall_64+0x57/0xf0 [ 120.609073][ T4902] ? clear_bhb_loop+0x50/0xa0 [ 120.609101][ T4902] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.609128][ T4902] RIP: 0033:0x7fde0859e159 [ 120.609148][ T4902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.609172][ T4902] RSP: 002b:00007fde093bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 120.609199][ T4902] RAX: ffffffffffffffda RBX: 00007fde08825fa0 RCX: 00007fde0859e159 [ 120.609218][ T4902] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001 [ 120.609235][ T4902] RBP: 00007fde08635024 R08: 0000000000000000 R09: 0000000000000000 [ 120.609251][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.609266][ T4902] R13: 00007fde08826038 R14: 00007fde08825fa0 R15: 00007ffd6bee74f8 [ 120.609297][ T4902] [ 121.289362][ T4918] netlink: 'syz.7.2091': attribute type 7 has an invalid length. [ 121.297245][ T4918] netlink: 'syz.7.2091': attribute type 5 has an invalid length. [ 121.319116][ T4918] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2091'. [ 121.461740][ T4937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.472567][ T4938] FAULT_INJECTION: forcing a failure. [ 121.472567][ T4938] name failslab, interval 1, probability 0, space 0, times 0 [ 121.485534][ T4937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.508607][ T4938] CPU: 0 UID: 0 PID: 4938 Comm: syz.1.2101 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 121.508641][ T4938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.508654][ T4938] Call Trace: [ 121.508660][ T4938] [ 121.508668][ T4938] __dump_stack+0x21/0x30 [ 121.508703][ T4938] dump_stack_lvl+0x140/0x1c0 [ 121.508732][ T4938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.508782][ T4938] dump_stack+0x19/0x20 [ 121.508809][ T4938] should_fail_ex+0x3c2/0x510 [ 121.508834][ T4938] should_failslab+0xac/0x100 [ 121.508873][ T4938] kmem_cache_alloc_noprof+0x42/0x410 [ 121.508895][ T4938] ? security_inode_alloc+0x51/0x230 [ 121.508921][ T4938] ? __cfi_make_kgid+0x10/0x10 [ 121.508946][ T4938] security_inode_alloc+0x51/0x230 [ 121.508976][ T4938] inode_init_always_gfp+0x756/0x9e0 [ 121.509005][ T4938] alloc_inode+0xc5/0x270 [ 121.509031][ T4938] new_inode_pseudo+0x19/0x40 [ 121.509059][ T4938] alloc_anon_inode+0x21/0x340 [ 121.509091][ T4938] aio_setup_ring+0xfa/0xc60 [ 121.509118][ T4938] ? pcpu_alloc_noprof+0xd93/0x1440 [ 121.509163][ T4938] ? free_ioctx_reqs+0x170/0x170 [ 121.509194][ T4938] ioctx_alloc+0x337/0x840 [ 121.509229][ T4938] __se_sys_io_setup+0x6f/0x230 [ 121.509256][ T4938] __x64_sys_io_setup+0x5f/0x80 [ 121.509282][ T4938] x64_sys_call+0x26a4/0x2ee0 [ 121.509303][ T4938] do_syscall_64+0x57/0xf0 [ 121.509336][ T4938] ? clear_bhb_loop+0x50/0xa0 [ 121.509362][ T4938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.509385][ T4938] RIP: 0033:0x7f448b19e159 [ 121.509404][ T4938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.509424][ T4938] RSP: 002b:00007f448c0ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 121.509447][ T4938] RAX: ffffffffffffffda RBX: 00007f448b425fa0 RCX: 00007f448b19e159 [ 121.509465][ T4938] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001 [ 121.509480][ T4938] RBP: 00007f448b235024 R08: 0000000000000000 R09: 0000000000000000 [ 121.509494][ T4938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.509507][ T4938] R13: 00007f448b426038 R14: 00007f448b425fa0 R15: 00007ffec46488a8 [ 121.509526][ T4938] [ 121.902625][ T4940] FAULT_INJECTION: forcing a failure. [ 121.902625][ T4940] name failslab, interval 1, probability 0, space 0, times 0 [ 121.922162][ T4940] CPU: 1 UID: 0 PID: 4940 Comm: syz.7.2102 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 121.922205][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.922222][ T4940] Call Trace: [ 121.922232][ T4940] [ 121.922243][ T4940] __dump_stack+0x21/0x30 [ 121.922286][ T4940] dump_stack_lvl+0x140/0x1c0 [ 121.922321][ T4940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.922360][ T4940] dump_stack+0x19/0x20 [ 121.922393][ T4940] should_fail_ex+0x3c2/0x510 [ 121.922424][ T4940] should_failslab+0xac/0x100 [ 121.922458][ T4940] kmem_cache_alloc_noprof+0x42/0x410 [ 121.922485][ T4940] ? alloc_empty_file+0xbf/0x270 [ 121.922520][ T4940] ? _raw_spin_unlock+0x45/0x60 [ 121.922559][ T4940] alloc_empty_file+0xbf/0x270 [ 121.922592][ T4940] ? _raw_spin_unlock+0x45/0x60 [ 121.922630][ T4940] alloc_file_pseudo+0x142/0x1f0 [ 121.922671][ T4940] ? security_inode_init_security_anon+0x3e/0x110 [ 121.922716][ T4940] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 121.922751][ T4940] ? anon_inode_make_secure_inode+0xf5/0x150 [ 121.922790][ T4940] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 121.922830][ T4940] __anon_inode_getfile+0x12e/0x200 [ 121.922868][ T4940] anon_inode_create_getfile+0x3f/0x50 [ 121.922905][ T4940] new_userfaultfd+0x1f6/0x410 [ 121.922935][ T4940] __x64_sys_userfaultfd+0x89/0xb0 [ 121.922963][ T4940] x64_sys_call+0x2950/0x2ee0 [ 121.922988][ T4940] do_syscall_64+0x57/0xf0 [ 121.923024][ T4940] ? clear_bhb_loop+0x50/0xa0 [ 121.923054][ T4940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.923084][ T4940] RIP: 0033:0x7ff34d19e159 [ 121.923105][ T4940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.923128][ T4940] RSP: 002b:00007ff34df85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 121.923156][ T4940] RAX: ffffffffffffffda RBX: 00007ff34d425fa0 RCX: 00007ff34d19e159 [ 121.923177][ T4940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 121.923195][ T4940] RBP: 00007ff34d235024 R08: 0000000000000000 R09: 0000000000000000 [ 121.923213][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.923230][ T4940] R13: 00007ff34d426038 R14: 00007ff34d425fa0 R15: 00007ffe26a85fe8 [ 121.923253][ T4940] [ 122.311946][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.320515][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.419135][ T4954] netlink: 'syz.1.2106': attribute type 7 has an invalid length. [ 122.426970][ T4954] netlink: 'syz.1.2106': attribute type 5 has an invalid length. [ 122.449088][ T4954] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2106'. [ 125.963537][ T112] EXT4-fs warning: 5 callbacks suppressed [ 125.963559][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 126.018981][ T112] EXT4-fs error: 5 callbacks suppressed [ 126.019001][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 126.059213][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 126.088985][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 126.109167][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 126.139075][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 126.169078][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 126.198995][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 126.219373][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 126.248977][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 126.279072][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 126.309006][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 127.858981][ T13] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm kworker/u8:1: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 127.889094][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 261 with max blocks 1 with error 117 [ 127.918977][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 127.918977][ T13] [ 134.678402][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 134.716176][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 134.739058][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 134.768997][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 134.789380][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 134.828984][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 134.841184][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 134.856427][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 134.868418][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 134.887624][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 134.902630][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 134.917998][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 134.945658][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 134.963871][ T13] bridge_slave_1: left allmulticast mode [ 134.969041][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 134.979127][ T13] bridge_slave_1: left promiscuous mode [ 134.986587][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.989400][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 135.008747][ T13] bridge_slave_0: left allmulticast mode [ 135.014466][ T13] bridge_slave_0: left promiscuous mode [ 135.020414][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.028917][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 135.060723][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 135.089519][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 135.111511][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 135.128272][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 135.170795][ T13] tipc: Disabling bearer [ 135.181402][ T13] tipc: Left network mode [ 135.191758][ T13] veth1_macvtap: left promiscuous mode [ 135.213299][ T13] veth0_vlan: left promiscuous mode [ 146.110025][ T196] EXT4-fs warning: 8 callbacks suppressed [ 146.110047][ T196] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #121: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 146.131131][ T196] EXT4-fs error: 8 callbacks suppressed [ 146.131150][ T196] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #121: comm crond: checksumming directory block 0 [ 146.150457][ T196] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #116: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 146.165806][ T196] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #116: comm crond: checksumming directory block 0 SYZFAIL: repeatedly failed to execute the program proc=8 req=2112 state=1 status=11 (errno 9: Bad file descriptor) [ 155.134067][ T36] audit: type=1400 audit(1788567429.200:599): avc: denied { write } for pid=288 comm="syz-executor" path="pipe:[1699]" dev="pipefs" ino=1699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 155.178921][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 155.216318][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 155.249043][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 155.275739][ T604] usb 6-1: USB disconnect, device number 3 [ 155.279058][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 155.286561][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 155.309120][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 155.355711][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 155.359052][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 155.409061][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 155.411983][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 155.438975][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 155.459512][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 155.499138][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 155.501174][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 155.520036][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 155.550218][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 155.559060][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0 [ 155.566073][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 155.589335][ T935] usb 8-1: USB disconnect, device number 5 [ 155.591533][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 155.609540][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm init: checksumming directory block 0