last executing test programs: 13.148748431s ago: executing program 0 (id=135): sched_setscheduler(0x0, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) mlock(&(0x7f00008a1000/0x3000)=nil, 0x3000) 13.148650081s ago: executing program 0 (id=136): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 12.306251067s ago: executing program 0 (id=140): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.266386884s ago: executing program 0 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) 11.236415734s ago: executing program 0 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)='5', 0x1}], 0x1) 11.164892404s ago: executing program 0 (id=154): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x22020400) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 11.148205754s ago: executing program 32 (id=154): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x22020400) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 4.785584057s ago: executing program 3 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x3f) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) prlimit64(0x0, 0x2, &(0x7f00000003c0)={0x7fb, 0xffff}, 0x0) brk(0xdc0000000000) 3.868826214s ago: executing program 3 (id=208): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x4004743c, 0x0) 3.828325604s ago: executing program 3 (id=210): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000005d80)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "ab73c0296ca768f0a7c4d57bfbd64bc737e9def2fdcc720357f55ffb09fe5daa788e69754df1ee70941d8921c2aaa2f4634d9fbaef04642b136e4cbe41d0762a4e814b8302531cc77a18ddad674649b6bb518f0dce047940550f7ad92e"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003200000002003"]}, 0x0) 3.139606879s ago: executing program 1 (id=218): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) unlink(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 3.088074909s ago: executing program 1 (id=219): add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x4, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x1, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1000001, 0x8, 0xd, 0x0, 0x412a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0xffffffff, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a8, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x7, 0x4, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x4, 0x1ff, 0x3fe, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x2, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x7, 0x9, 0x93, 0x7fffffff, 0x1000004, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x10, 0x491, 0x3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0xfffffff8, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd7d, 0x60a0, 0x7f, 0x9d26, 0x10000, 0xfffffeff, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x87, 0x28e3, 0x9, 0x81, 0x3, 0xa, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x5, 0xd8ce, 0xf, 0x100009, 0xc, 0x1, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x7, 0xdab, 0x6, 0x8, 0x14020, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x3}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x9080) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.93744629s ago: executing program 1 (id=220): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 2.880692501s ago: executing program 1 (id=221): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00210200000009"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) syz_pidfd_open(0x0, 0x0) 2.148522226s ago: executing program 3 (id=228): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2.111089606s ago: executing program 3 (id=230): r0 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x8, 0xc2, 0x4f, 0x40, 0x44, 0x80, 0x53, 0x5e, 0x44, 0x8, 0xfd, 0x100000000009}, {0xb, 0xa6f3, 0x4, 0x8, 0x9, 0x60, 0x24, 0x3, 0xa, 0x7f, 0x7, 0x8, 0xfffffffffffffffb}, {0x2, 0x1, 0xd, 0x10, 0x25, 0x9, 0x8, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x200000000008}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10678, 0x6, 0xf3bb, 0x11de, 0x7fffffff, 0xffffffffffff7fff, 0x4002004c4, 0x1000, 0xfffffffffffffffe, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x7], 0x80d7000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.007116846s ago: executing program 3 (id=232): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x1, 0x2c, 0xe4f, 0x5, 0x1f3, 0xfffd, 0x6, 0xfffffffe, 0x7, 0x0, 0x1000, 0x206}}, 0x0, 0x0, 0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_control_io(r0, 0x0, 0x0) 1.522404839s ago: executing program 4 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x5) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x13e00000) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x108) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2442, 0xf8) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x2000000000006) 1.46077157s ago: executing program 2 (id=239): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x4}, 0xa) 1.46063683s ago: executing program 2 (id=240): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x33, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 1.292345731s ago: executing program 1 (id=241): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) symlink(0x0, 0x0) readlink(0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 483.035217ms ago: executing program 4 (id=242): r0 = syz_open_dev$evdev(0x0, 0x1, 0x82002) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x82100, 0x2) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 404.725297ms ago: executing program 2 (id=243): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 404.555457ms ago: executing program 2 (id=244): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x100000, {0x2}, 0x0, 0x9}, {"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", "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"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 249.641488ms ago: executing program 4 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000007, 0x5, 0x4, 0xa1b, 0x800, 0x6, 0x9}, {0x40000001, 0x1, 0x7, 0x7, 0xffffffff, 0x7, 0xb}]}) 238.204178ms ago: executing program 2 (id=246): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x7ff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000004c0)) 156.760819ms ago: executing program 2 (id=247): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x200c04, &(0x7f0000000100)={[{@rlog_pages={'rlog_pages', 0x3d, 0xfffffffffffffff8}}]}) 116.161049ms ago: executing program 4 (id=248): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="06624db0927f9c24206c39a60982f7c0ca3f6ac1784a6d1e5db6542a200db6035ff1823424ae5e72", 0x28, 0x80, &(0x7f0000000500)={0x11, 0x18, r2, 0x1, 0x3, 0x6, @random="c719281766f0"}, 0x14) 102.472819ms ago: executing program 4 (id=249): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1, 0x1, 0x7) 83.505649ms ago: executing program 4 (id=250): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000058c0)=[{{&(0x7f0000006000)=@ethernet={0x306, @random="f58072ba8c05"}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x370}}], 0x1, 0x24008080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 21.285343][ T36] audit: type=1400 audit(1777927876.740:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.286411][ T286] cgroup: Unknown subsys name 'net' [ 21.308094][ T36] audit: type=1400 audit(1777927876.740:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.335477][ T36] audit: type=1400 audit(1777927876.770:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.335766][ T286] cgroup: Unknown subsys name 'devices' [ 21.541933][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.547777][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.640268][ T36] audit: type=1400 audit(1777927877.100:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.663521][ T36] audit: type=1400 audit(1777927877.100:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.688330][ T36] audit: type=1400 audit(1777927877.100:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.698613][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.720713][ T36] audit: type=1400 audit(1777927877.180:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.746146][ T36] audit: type=1400 audit(1777927877.180:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.773024][ T36] audit: type=1400 audit(1777927877.230:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.798780][ T36] audit: type=1400 audit(1777927877.230:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.799019][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.596001][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.603107][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.610231][ T296] bridge_slave_0: entered allmulticast mode [ 22.616431][ T296] bridge_slave_0: entered promiscuous mode [ 22.624176][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.631271][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.638312][ T296] bridge_slave_1: entered allmulticast mode [ 22.644615][ T296] bridge_slave_1: entered promiscuous mode [ 22.680883][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.687960][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.695092][ T295] bridge_slave_0: entered allmulticast mode [ 22.701607][ T295] bridge_slave_0: entered promiscuous mode [ 22.709558][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.716774][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.723978][ T295] bridge_slave_1: entered allmulticast mode [ 22.730170][ T295] bridge_slave_1: entered promiscuous mode [ 22.803476][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.810592][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.817642][ T294] bridge_slave_0: entered allmulticast mode [ 22.824192][ T294] bridge_slave_0: entered promiscuous mode [ 22.835079][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.842428][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.849608][ T294] bridge_slave_1: entered allmulticast mode [ 22.856012][ T294] bridge_slave_1: entered promiscuous mode [ 22.890207][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.897270][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.904414][ T293] bridge_slave_0: entered allmulticast mode [ 22.910819][ T293] bridge_slave_0: entered promiscuous mode [ 22.917348][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.924479][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.931598][ T293] bridge_slave_1: entered allmulticast mode [ 22.937764][ T293] bridge_slave_1: entered promiscuous mode [ 23.029425][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.036527][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.043846][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.050902][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.081116][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.088369][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.095740][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.102800][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.122902][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.130100][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.137391][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.144530][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.178973][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.186228][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.194114][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.202159][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.209382][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.244672][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.251851][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.260479][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.267620][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.275460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.282557][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.304155][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.311251][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.325083][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.332164][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.350757][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.357833][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.370520][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.377594][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.396724][ T296] veth0_vlan: entered promiscuous mode [ 23.424623][ T296] veth1_macvtap: entered promiscuous mode [ 23.433575][ T293] veth0_vlan: entered promiscuous mode [ 23.466680][ T295] veth0_vlan: entered promiscuous mode [ 23.483368][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.485651][ T293] veth1_macvtap: entered promiscuous mode [ 23.512148][ T295] veth1_macvtap: entered promiscuous mode [ 23.536694][ T294] veth0_vlan: entered promiscuous mode [ 23.590534][ T294] veth1_macvtap: entered promiscuous mode [ 23.623117][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.646088][ T326] netlink: 'syz.3.4': attribute type 5 has an invalid length. [ 23.655731][ T326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 23.716024][ T328] FAULT_INJECTION: forcing a failure. [ 23.716024][ T328] name failslab, interval 1, probability 0, space 0, times 1 [ 23.730838][ T328] CPU: 0 UID: 0 PID: 328 Comm: syz.2.7 Not tainted syzkaller #0 21e0851607c2bcce87f6d1c77002e5a32d0b18de [ 23.730874][ T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 23.730886][ T328] Call Trace: [ 23.730892][ T328] [ 23.730900][ T328] __dump_stack+0x21/0x30 [ 23.730932][ T328] dump_stack_lvl+0x140/0x1c0 [ 23.730958][ T328] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.730984][ T328] dump_stack+0x19/0x20 [ 23.731008][ T328] should_fail_ex+0x3d7/0x530 [ 23.731036][ T328] should_failslab+0xac/0x100 [ 23.731056][ T328] kmem_cache_alloc_node_noprof+0x45/0x420 [ 23.731085][ T328] ? dup_task_struct+0xc1/0xd80 [ 23.731109][ T328] ? kasan_save_alloc_info+0x40/0x50 [ 23.731133][ T328] ? __kasan_kmalloc+0x96/0xb0 [ 23.731152][ T328] ? __kmalloc_cache_noprof+0x23c/0x470 [ 23.731180][ T328] dup_task_struct+0xc1/0xd80 [ 23.731202][ T328] ? __kasan_check_write+0x18/0x20 [ 23.731228][ T328] ? _raw_spin_lock_irq+0x93/0x120 [ 23.731275][ T328] ? copy_process+0x32a0/0x32a0 [ 23.731295][ T328] ? __kasan_check_write+0x18/0x20 [ 23.731322][ T328] copy_process+0x55a/0x32a0 [ 23.731347][ T328] ? __cfi_copy_process+0x10/0x10 [ 23.731369][ T328] ? __kmalloc_cache_noprof+0x23c/0x470 [ 23.731397][ T328] ? __kasan_check_write+0x18/0x20 [ 23.731423][ T328] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 23.731446][ T328] vhost_task_create+0x1f7/0x400 [ 23.731466][ T328] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 23.731489][ T328] ? __cfi_vhost_task_create+0x10/0x10 [ 23.731506][ T328] ? __cfi_vhost_task_fn+0x10/0x10 [ 23.731522][ T328] ? __kasan_check_write+0x18/0x20 [ 23.731546][ T328] ? mutex_lock+0x97/0x1d0 [ 23.731570][ T328] ? __cfi_mutex_lock+0x10/0x10 [ 23.731595][ T328] ? kernel_text_address+0xa9/0xe0 [ 23.731620][ T328] kvm_mmu_post_init_vm+0x161/0x300 [ 23.731645][ T328] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 23.731671][ T328] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 23.731694][ T328] ? kstrtoull+0x13b/0x1e0 [ 23.731716][ T328] ? kstrtouint+0x78/0xf0 [ 23.731738][ T328] ? ioctl_has_perm+0x1bc/0x500 [ 23.731762][ T328] ? __asan_memcpy+0x5a/0x80 [ 23.731798][ T328] ? ioctl_has_perm+0x408/0x500 [ 23.731821][ T328] ? has_cap_mac_admin+0xd0/0xd0 [ 23.731845][ T328] ? __kasan_check_write+0x18/0x20 [ 23.731871][ T328] ? mutex_lock_killable+0x97/0x1d0 [ 23.731897][ T328] ? __cfi_mutex_lock_killable+0x10/0x10 [ 23.731925][ T328] ? proc_fail_nth_write+0x184/0x220 [ 23.731951][ T328] kvm_vcpu_ioctl+0xa48/0x1000 [ 23.731980][ T328] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 23.732009][ T328] ? __cfi_vfs_write+0x10/0x10 [ 23.732036][ T328] ? __kasan_check_write+0x18/0x20 [ 23.732062][ T328] ? mutex_unlock+0x90/0x240 [ 23.732089][ T328] ? __cfi_mutex_unlock+0x10/0x10 [ 23.732115][ T328] ? __fget_files+0x2c5/0x340 [ 23.732134][ T328] ? __fget_files+0x2c5/0x340 [ 23.732152][ T328] ? bpf_lsm_file_ioctl+0xd/0x20 [ 23.732173][ T328] ? security_file_ioctl+0x3e/0x110 [ 23.732197][ T328] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 23.732224][ T328] __se_sys_ioctl+0x132/0x1b0 [ 23.732244][ T328] __x64_sys_ioctl+0x7f/0xa0 [ 23.732263][ T328] x64_sys_call+0x1878/0x2ee0 [ 23.732291][ T328] do_syscall_64+0x57/0xf0 [ 23.732311][ T328] ? clear_bhb_loop+0x50/0xa0 [ 23.732335][ T328] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.732358][ T328] RIP: 0033:0x7f301df9cdd9 [ 23.732375][ T328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.732391][ T328] RSP: 002b:00007f301ee27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 23.732412][ T328] RAX: ffffffffffffffda RBX: 00007f301e215fa0 RCX: 00007f301df9cdd9 [ 23.732428][ T328] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 23.732440][ T328] RBP: 00007f301ee27090 R08: 0000000000000000 R09: 0000000000000000 [ 23.732453][ T328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 23.732466][ T328] R13: 00007f301e216038 R14: 00007f301e215fa0 R15: 00007ffc67eaace8 [ 23.732481][ T328] [ 23.979829][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.252712][ T342] tmpfs: Bad value for 'nr_blocks' [ 24.311948][ T31] usb 4-1: config index 0 descriptor too short (expected 41, got 36) [ 24.329871][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 24.349706][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 24.361321][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.374519][ T31] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 24.383823][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.396647][ T31] usb 4-1: config 0 descriptor?? [ 24.412704][ T332] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 24.569764][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.733360][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 24.740518][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 24.750960][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 24.763758][ T45] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 24.773408][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.786444][ T45] usb 2-1: Product: syz [ 24.790969][ T45] usb 2-1: Manufacturer: syz [ 24.795728][ T45] usb 2-1: SerialNumber: syz [ 24.843337][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.850693][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.857772][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.865097][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.875195][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.882375][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.889594][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.896919][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.904177][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.911584][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.918809][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.926466][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.933809][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.940964][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.948071][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.955744][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.963256][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.970885][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.977996][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 24.979685][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.985213][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.000166][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.008363][ T45] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 25.019883][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.029725][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.036839][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.051800][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.061847][ T45] usb 2-1: 2:1 : can't get High Capability descriptor [ 25.069276][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.080109][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.087157][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.094218][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.101724][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.111720][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.118790][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.125985][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.133519][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.139675][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.140640][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.154211][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.161305][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.168360][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.176231][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.183691][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.191053][ T31] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 25.198638][ T31] elecom 0003:056E:010D.0001: hidraw0: USB HID v1.01 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 25.265063][ T31] usb 2-1: USB disconnect, device number 2 [ 25.272146][ T368] FAULT_INJECTION: forcing a failure. [ 25.272146][ T368] name failslab, interval 1, probability 0, space 0, times 0 [ 25.288712][ T368] CPU: 0 UID: 0 PID: 368 Comm: syz.2.19 Not tainted syzkaller #0 21e0851607c2bcce87f6d1c77002e5a32d0b18de [ 25.288743][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 25.288755][ T368] Call Trace: [ 25.288762][ T368] [ 25.288770][ T368] __dump_stack+0x21/0x30 [ 25.288801][ T368] dump_stack_lvl+0x140/0x1c0 [ 25.288827][ T368] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.288862][ T368] ? __kasan_check_write+0x18/0x20 [ 25.288890][ T368] ? copy_mm+0x2f7/0x1d70 [ 25.288913][ T368] dump_stack+0x19/0x20 [ 25.288935][ T368] should_fail_ex+0x3d7/0x530 [ 25.288962][ T368] should_failslab+0xac/0x100 [ 25.288991][ T368] kmem_cache_alloc_noprof+0x42/0x410 [ 25.289019][ T368] ? alloc_pid+0xa5/0xba0 [ 25.289039][ T368] ? __asan_memcpy+0x5a/0x80 [ 25.289066][ T368] alloc_pid+0xa5/0xba0 [ 25.289086][ T368] copy_process+0x1409/0x32a0 [ 25.289110][ T368] ? __cfi_copy_process+0x10/0x10 [ 25.289131][ T368] ? __kmalloc_cache_noprof+0x23c/0x470 [ 25.289159][ T368] ? __kasan_check_write+0x18/0x20 [ 25.289186][ T368] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 25.289208][ T368] vhost_task_create+0x1f7/0x400 [ 25.289227][ T368] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 25.289249][ T368] ? __cfi_vhost_task_create+0x10/0x10 [ 25.289269][ T368] ? __cfi_vhost_task_fn+0x10/0x10 [ 25.289288][ T368] ? __kasan_check_write+0x18/0x20 [ 25.289314][ T368] ? mutex_lock+0x97/0x1d0 [ 25.289342][ T368] ? __cfi_mutex_lock+0x10/0x10 [ 25.289368][ T368] ? kernel_text_address+0xa9/0xe0 [ 25.289393][ T368] kvm_mmu_post_init_vm+0x161/0x300 [ 25.289420][ T368] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 25.289447][ T368] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 25.289481][ T368] ? kstrtoull+0x13b/0x1e0 [ 25.289505][ T368] ? kstrtouint+0x78/0xf0 [ 25.289529][ T368] ? ioctl_has_perm+0x1bc/0x500 [ 25.289555][ T368] ? __asan_memcpy+0x5a/0x80 [ 25.289581][ T368] ? ioctl_has_perm+0x408/0x500 [ 25.289607][ T368] ? has_cap_mac_admin+0xd0/0xd0 [ 25.289637][ T368] ? __kasan_check_write+0x18/0x20 [ 25.289663][ T368] ? mutex_lock_killable+0x97/0x1d0 [ 25.289690][ T368] ? __cfi_mutex_lock_killable+0x10/0x10 [ 25.289718][ T368] ? proc_fail_nth_write+0x184/0x220 [ 25.289744][ T368] kvm_vcpu_ioctl+0xa48/0x1000 [ 25.289775][ T368] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.289804][ T368] ? __cfi_vfs_write+0x10/0x10 [ 25.289831][ T368] ? __kasan_check_write+0x18/0x20 [ 25.289858][ T368] ? mutex_unlock+0x90/0x240 [ 25.289884][ T368] ? __cfi_mutex_unlock+0x10/0x10 [ 25.289910][ T368] ? __fget_files+0x2c5/0x340 [ 25.289931][ T368] ? __fget_files+0x2c5/0x340 [ 25.289950][ T368] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.289972][ T368] ? security_file_ioctl+0x3e/0x110 [ 25.289996][ T368] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.290023][ T368] __se_sys_ioctl+0x132/0x1b0 [ 25.290044][ T368] __x64_sys_ioctl+0x7f/0xa0 [ 25.290063][ T368] x64_sys_call+0x1878/0x2ee0 [ 25.290090][ T368] do_syscall_64+0x57/0xf0 [ 25.290111][ T368] ? clear_bhb_loop+0x50/0xa0 [ 25.290136][ T368] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.290159][ T368] RIP: 0033:0x7f301df9cdd9 [ 25.290178][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.290195][ T368] RSP: 002b:00007f301ee27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.290218][ T368] RAX: ffffffffffffffda RBX: 00007f301e215fa0 RCX: 00007f301df9cdd9 [ 25.290234][ T368] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 25.290247][ T368] RBP: 00007f301ee27090 R08: 0000000000000000 R09: 0000000000000000 [ 25.290260][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.290272][ T368] R13: 00007f301e216038 R14: 00007f301e215fa0 R15: 00007ffc67eaace8 [ 25.290289][ T368] [ 25.729690][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.877710][ T386] usb 4-1: USB disconnect, device number 2 [ 25.969716][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 26.029743][ T45] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.069690][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.099708][ T10] usb 1-1: device descriptor read/64, error -71 [ 26.181278][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.189504][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 26.199644][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 26.208771][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.217001][ T45] usb 2-1: Product: syz [ 26.221610][ T45] usb 2-1: Manufacturer: syz [ 26.226282][ T45] usb 2-1: SerialNumber: syz [ 26.231024][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 26.240765][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.249379][ T31] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 26.258040][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 26.267970][ T31] usb 3-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.281418][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 26.290764][ T31] usb 3-1: string descriptor 0 read error: -22 [ 26.297249][ T31] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.40 [ 26.306847][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.339701][ T10] usb 1-1: device descriptor read/64, error -71 [ 26.438548][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.449614][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.449796][ T10] usb usb1-port1: attempt power cycle [ 26.462126][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.478248][ T45] usb 2-1: USB disconnect, device number 3 [ 26.512010][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.738685][ T31] saitek 0003:06A3:0621.0002: unknown main item tag 0x1 [ 26.750137][ T31] saitek 0003:06A3:0621.0002: report_id 0 is invalid [ 26.756861][ T31] saitek 0003:06A3:0621.0002: item 0 0 1 8 parsing failed [ 26.764619][ T31] saitek 0003:06A3:0621.0002: parse failed [ 26.770697][ T31] saitek 0003:06A3:0621.0002: probe with driver saitek failed with error -22 [ 26.809756][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 26.830927][ T10] usb 1-1: device descriptor read/8, error -71 [ 26.872362][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 26.872381][ T36] audit: type=1400 audit(1777927882.330:136): avc: denied { write } for pid=392 comm="syz.3.28" name="udplite" dev="proc" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.903013][ T393] netlink: 182 bytes leftover after parsing attributes in process `syz.3.28'. [ 26.912696][ T393] netlink: 'syz.3.28': attribute type 3 has an invalid length. [ 26.920847][ T393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 26.940482][ T31] usb 3-1: USB disconnect, device number 2 [ 26.962570][ T10] usb 1-1: device descriptor read/8, error -71 [ 26.972458][ T398] netlink: 'syz.3.30': attribute type 5 has an invalid length. [ 26.980331][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 27.009680][ T400] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 27.011937][ T36] audit: type=1400 audit(1777927882.460:137): avc: denied { write } for pid=399 comm="syz.1.31" name="cgroup.subtree_control" dev="cgroup2" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.026626][ T403] IPv6: NLM_F_CREATE should be specified when creating new route [ 27.043095][ T36] audit: type=1400 audit(1777927882.460:138): avc: denied { open } for pid=399 comm="syz.1.31" path="" dev="cgroup2" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.073752][ T36] audit: type=1400 audit(1777927882.470:139): avc: denied { relabelto } for pid=399 comm="syz.1.31" name="cgroup.subtree_control" dev="cgroup2" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 27.101762][ T36] audit: type=1400 audit(1777927882.470:140): avc: denied { associate } for pid=399 comm="syz.1.31" name="cgroup.subtree_control" dev="cgroup2" ino=174 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initrc_exec_t:s0" [ 27.229764][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 27.250947][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.309728][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.390932][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.459719][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 27.465905][ T45] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.479178][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 27.486744][ T45] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 27.488223][ T36] audit: type=1400 audit(1777927882.940:141): avc: denied { unlink } for pid=409 comm="syz.2.35" name="#1" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.496467][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.524801][ T10] usb usb1-port1: unable to enumerate USB device [ 27.529408][ T45] usb 4-1: config 0 descriptor?? [ 27.539041][ T36] audit: type=1400 audit(1777927882.940:142): avc: denied { mount } for pid=409 comm="syz.2.35" name="/" dev="overlay" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.720575][ T36] audit: type=1400 audit(1777927883.180:143): avc: denied { setopt } for pid=416 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.762220][ T422] 9p: Unknown uid 00000000004294967295 [ 27.809720][ T31] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.825321][ T36] audit: type=1400 audit(1777927883.280:144): avc: denied { read } for pid=425 comm="syz.0.41" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.846742][ T36] audit: type=1400 audit(1777927883.280:145): avc: denied { open } for pid=425 comm="syz.0.41" path="net:[4026532304]" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.970533][ T45] waltop 0003:172F:0037.0003: unknown main item tag 0x2 [ 27.977705][ T45] waltop 0003:172F:0037.0003: unknown main item tag 0x0 [ 27.984953][ T45] waltop 0003:172F:0037.0003: unexpected long global item [ 27.992596][ T45] waltop 0003:172F:0037.0003: probe with driver waltop failed with error -22 [ 28.001907][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 167, changing to 4 [ 28.015192][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 28.028106][ T31] usb 3-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 28.037745][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.045963][ T31] usb 3-1: Product: syz [ 28.050335][ T31] usb 3-1: Manufacturer: syz [ 28.054965][ T31] usb 3-1: SerialNumber: syz [ 28.174315][ T45] usb 4-1: USB disconnect, device number 3 [ 28.449755][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.589800][ T10] usb 1-1: device descriptor read/64, error -71 [ 28.799676][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.829699][ T10] usb 1-1: device descriptor read/64, error -71 [ 28.953318][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 28.963312][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 28.975140][ T45] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 28.984445][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.992714][ T45] usb 2-1: Product: syz [ 28.996984][ T45] usb 2-1: Manufacturer: syz [ 29.001920][ T45] usb 2-1: SerialNumber: syz [ 29.007473][ T45] usb 2-1: config 0 descriptor?? [ 29.013049][ T441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.020542][ T441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.069758][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.210181][ T10] usb 1-1: device descriptor read/64, error -71 [ 29.229928][ T441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.237156][ T441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.419682][ T387] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.449783][ T10] usb 1-1: device descriptor read/64, error -71 [ 29.559844][ T10] usb usb1-port1: attempt power cycle [ 29.579666][ T387] usb 4-1: Using ep0 maxpacket: 16 [ 29.585830][ T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.597116][ T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.606913][ T387] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.619752][ T387] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.628797][ T387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.637634][ T387] usb 4-1: config 0 descriptor?? [ 29.645428][ T45] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 29.891128][ T45] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 29.899703][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 29.901115][ T45] usb 2-1: USB disconnect, device number 4 [ 29.921261][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.050898][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.289737][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 30.310836][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.435557][ T477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 30.449841][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.465810][ T479] IPv6: NLM_F_CREATE should be specified when creating new route [ 30.489098][ T481] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.61'. [ 30.499811][ T482] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.61'. [ 30.562821][ T10] usb usb1-port1: unable to enumerate USB device [ 30.564864][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.582485][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 30.591676][ T31] usb 3-1: unit 158 not found! [ 30.610431][ T31] usb 3-1: USB disconnect, device number 3 [ 30.879714][ T45] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 31.009729][ T45] usb 2-1: device descriptor read/64, error -71 [ 31.129675][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.249700][ T45] usb 2-1: device descriptor read/64, error -71 [ 31.279702][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 31.286355][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 31.295511][ T31] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 31.305239][ T31] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 31.315053][ T31] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 31.324866][ T31] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 31.334919][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 31.341885][ T31] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 31.351078][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.372017][ T31] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 31.499719][ T45] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 31.500392][ T507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'. [ 31.572743][ T31] scsi host1: usb-storage 3-1:1.0 [ 31.639716][ T45] usb 2-1: device descriptor read/64, error -71 [ 31.774265][ T31] usb 3-1: USB disconnect, device number 4 [ 31.779693][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 31.879725][ T45] usb 2-1: device descriptor read/64, error -71 [ 31.932606][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 31.941874][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.950026][ T10] usb 1-1: Product: syz [ 31.954506][ T10] usb 1-1: Manufacturer: syz [ 31.959126][ T10] usb 1-1: SerialNumber: syz [ 31.967184][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 31.973511][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 31.989825][ T45] usb usb2-port1: attempt power cycle [ 32.134934][ T387] usbhid 4-1:0.0: can't add hid device: -71 [ 32.141234][ T387] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.150426][ T387] usb 4-1: USB disconnect, device number 4 [ 32.156450][ T514] FAULT_INJECTION: forcing a failure. [ 32.156450][ T514] name failslab, interval 1, probability 0, space 0, times 0 [ 32.169248][ T514] CPU: 0 UID: 0 PID: 514 Comm: syz.3.72 Not tainted syzkaller #0 21e0851607c2bcce87f6d1c77002e5a32d0b18de [ 32.169279][ T514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 32.169287][ T514] Call Trace: [ 32.169297][ T514] [ 32.169303][ T514] __dump_stack+0x21/0x30 [ 32.169324][ T514] dump_stack_lvl+0x140/0x1c0 [ 32.169342][ T514] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.169357][ T514] ? __kmalloc_noprof+0x261/0x500 [ 32.169374][ T514] ? direct_splice_actor+0x279/0x4b0 [ 32.169387][ T514] ? splice_direct_to_actor+0x4fa/0xbe0 [ 32.169400][ T514] ? do_splice_direct+0x196/0x290 [ 32.169412][ T514] ? __x64_sys_sendfile64+0x19d/0x200 [ 32.169425][ T514] dump_stack+0x19/0x20 [ 32.169439][ T514] should_fail_ex+0x3d7/0x530 [ 32.169454][ T514] should_failslab+0xac/0x100 [ 32.169467][ T514] __kmalloc_node_noprof+0x6c/0x4f0 [ 32.169483][ T514] ? __kvmalloc_node_noprof+0x128/0x300 [ 32.169499][ T514] __kvmalloc_node_noprof+0x128/0x300 [ 32.169513][ T514] ? __kasan_check_write+0x18/0x20 [ 32.169530][ T514] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 32.169546][ T514] file_tty_write+0x2c4/0xa60 [ 32.169560][ T514] ? __asan_memset+0x39/0x50 [ 32.169576][ T514] tty_write+0x40/0x50 [ 32.169596][ T514] iter_file_splice_write+0x9ab/0x1200 [ 32.169611][ T514] ? __cfi_iter_file_splice_write+0x10/0x10 [ 32.169624][ T514] ? __kmalloc_noprof+0x261/0x500 [ 32.169644][ T514] ? __cfi_iter_file_splice_write+0x10/0x10 [ 32.169656][ T514] direct_splice_actor+0x279/0x4b0 [ 32.169669][ T514] splice_direct_to_actor+0x4fa/0xbe0 [ 32.169683][ T514] ? __cfi_direct_splice_actor+0x10/0x10 [ 32.169699][ T514] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 32.169712][ T514] do_splice_direct+0x196/0x290 [ 32.169725][ T514] ? __cfi_do_splice_direct+0x10/0x10 [ 32.169737][ T514] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 32.169751][ T514] ? security_file_permission+0x38/0xf0 [ 32.169766][ T514] ? rw_verify_area+0xac/0x230 [ 32.169782][ T514] do_sendfile+0x5ef/0xf70 [ 32.169795][ T514] ? vfs_writev+0xe50/0xe50 [ 32.169807][ T514] ? __kasan_check_write+0x18/0x20 [ 32.169823][ T514] ? ksys_write+0x1f3/0x260 [ 32.169848][ T514] __x64_sys_sendfile64+0x19d/0x200 [ 32.169861][ T514] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 32.169873][ T514] ? __kasan_check_read+0x15/0x20 [ 32.169889][ T514] x64_sys_call+0xa26/0x2ee0 [ 32.169905][ T514] do_syscall_64+0x57/0xf0 [ 32.169919][ T514] ? clear_bhb_loop+0x50/0xa0 [ 32.169934][ T514] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.169948][ T514] RIP: 0033:0x7f65b179cdd9 [ 32.169961][ T514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.169971][ T514] RSP: 002b:00007f65b268a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 32.169986][ T514] RAX: ffffffffffffffda RBX: 00007f65b1a15fa0 RCX: 00007f65b179cdd9 [ 32.169996][ T514] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 32.170003][ T514] RBP: 00007f65b268a090 R08: 0000000000000000 R09: 0000000000000000 [ 32.170011][ T514] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 32.170019][ T514] R13: 00007f65b1a16038 R14: 00007f65b1a15fa0 R15: 00007ffe0626b328 [ 32.170030][ T514] [ 32.181925][ T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.306989][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 32.307006][ T36] audit: type=1400 audit(1777927887.760:176): avc: denied { create } for pid=517 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.322786][ T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.346209][ T36] audit: type=1400 audit(1777927887.770:177): avc: denied { ioctl } for pid=517 comm="syz.2.74" path="socket:[5631]" dev="sockfs" ino=5631 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.369689][ T45] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 32.378765][ T36] audit: type=1400 audit(1777927887.770:178): avc: denied { create } for pid=517 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.400769][ T45] usb 2-1: device descriptor read/8, error -71 [ 32.402120][ T36] audit: type=1400 audit(1777927887.770:179): avc: denied { connect } for pid=517 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.540818][ T45] usb 2-1: device descriptor read/8, error -71 [ 32.541947][ T36] audit: type=1400 audit(1777927887.770:180): avc: denied { read write } for pid=517 comm="syz.2.74" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.566454][ T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.573753][ T36] audit: type=1400 audit(1777927887.770:181): avc: denied { open } for pid=517 comm="syz.2.74" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.595025][ T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.599335][ T36] audit: type=1400 audit(1777927887.770:182): avc: denied { ioctl } for pid=517 comm="syz.2.74" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.619298][ T387] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 32.719888][ T386] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.733117][ T36] audit: type=1400 audit(1777927888.190:183): avc: denied { setopt } for pid=529 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.849739][ T45] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 32.869796][ T386] usb 3-1: Using ep0 maxpacket: 16 [ 32.876360][ T386] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 32.884720][ T386] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 32.893011][ T45] usb 2-1: device descriptor read/8, error -71 [ 32.899913][ T386] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.910058][ T386] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 32.918986][ T386] usb 3-1: config 0 has no interface number 0 [ 32.925114][ T386] usb 3-1: config 0 interface 104 has no altsetting 1 [ 32.933508][ T386] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 32.942782][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.951514][ T386] usb 3-1: Product: syz [ 32.955695][ T386] usb 3-1: Manufacturer: syz [ 32.960326][ T386] usb 3-1: SerialNumber: syz [ 32.965514][ T386] usb 3-1: config 0 descriptor?? [ 32.971430][ T386] asix 3-1:0.104: probe with driver asix failed with error -22 [ 32.989684][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.020972][ T45] usb 2-1: device descriptor read/8, error -71 [ 33.134622][ T45] usb usb2-port1: unable to enumerate USB device [ 33.141101][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 33.153005][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 33.161361][ T31] usb 4-1: config 0 has no interface number 0 [ 33.167483][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 33.171135][ T536] FAULT_INJECTION: forcing a failure. [ 33.171135][ T536] name failslab, interval 1, probability 0, space 0, times 0 [ 33.175813][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.188986][ T536] CPU: 0 UID: 0 PID: 536 Comm: syz.0.81 Not tainted syzkaller #0 21e0851607c2bcce87f6d1c77002e5a32d0b18de [ 33.189018][ T536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.189030][ T536] Call Trace: [ 33.189036][ T536] [ 33.189044][ T536] __dump_stack+0x21/0x30 [ 33.189073][ T536] dump_stack_lvl+0x140/0x1c0 [ 33.189096][ T536] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.189121][ T536] ? kfree+0x158/0x440 [ 33.189144][ T536] ? iter_file_splice_write+0xfc8/0x1200 [ 33.189166][ T536] dump_stack+0x19/0x20 [ 33.189188][ T536] should_fail_ex+0x3d7/0x530 [ 33.189212][ T536] ? copy_splice_read+0x18f/0xca0 [ 33.189231][ T536] should_failslab+0xac/0x100 [ 33.189250][ T536] __kmalloc_noprof+0x69/0x500 [ 33.189274][ T536] ? copy_splice_read+0x18f/0xca0 [ 33.189293][ T536] copy_splice_read+0x18f/0xca0 [ 33.189312][ T536] ? __cfi_copy_splice_read+0x10/0x10 [ 33.189331][ T536] ? __kmalloc_noprof+0x261/0x500 [ 33.189357][ T536] ? __cfi_iter_file_splice_write+0x10/0x10 [ 33.189376][ T536] ? direct_splice_actor+0x384/0x4b0 [ 33.189396][ T536] ? __cfi_copy_splice_read+0x10/0x10 [ 33.189415][ T536] splice_direct_to_actor+0x411/0xbe0 [ 33.189437][ T536] ? __cfi_direct_splice_actor+0x10/0x10 [ 33.189457][ T536] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 33.189478][ T536] do_splice_direct+0x196/0x290 [ 33.189498][ T536] ? __cfi_do_splice_direct+0x10/0x10 [ 33.189517][ T536] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 33.189539][ T536] ? security_file_permission+0x38/0xf0 [ 33.189571][ T536] ? rw_verify_area+0xac/0x230 [ 33.189596][ T536] do_sendfile+0x5ef/0xf70 [ 33.189621][ T536] ? vfs_writev+0xe50/0xe50 [ 33.189639][ T536] ? __kasan_check_write+0x18/0x20 [ 33.189665][ T536] ? ksys_write+0x1f3/0x260 [ 33.189690][ T536] __x64_sys_sendfile64+0x19d/0x200 [ 33.189709][ T536] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 33.189728][ T536] ? __kasan_check_read+0x15/0x20 [ 33.189753][ T536] x64_sys_call+0xa26/0x2ee0 [ 33.189778][ T536] do_syscall_64+0x57/0xf0 [ 33.189800][ T536] ? clear_bhb_loop+0x50/0xa0 [ 33.189824][ T536] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.189847][ T536] RIP: 0033:0x7fbbb3d9cdd9 [ 33.189864][ T536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.189880][ T536] RSP: 002b:00007fbbb4bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 33.189901][ T536] RAX: ffffffffffffffda RBX: 00007fbbb4015fa0 RCX: 00007fbbb3d9cdd9 [ 33.189916][ T536] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 33.189928][ T536] RBP: 00007fbbb4bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 33.189940][ T536] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 33.189952][ T536] R13: 00007fbbb4016038 R14: 00007fbbb4015fa0 R15: 00007ffff5e29298 [ 33.189968][ T536] [ 33.214561][ T526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.239672][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.245021][ T526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.249204][ T31] usb 4-1: Product: syz [ 33.513984][ T31] usb 4-1: Manufacturer: syz [ 33.518630][ T31] usb 4-1: SerialNumber: syz [ 33.524144][ T31] usb 4-1: config 0 descriptor?? [ 33.532636][ T31] smsc75xx v1.0.0 [ 33.682862][ T548] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.749696][ T386] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 33.766571][ T374] usb 3-1: USB disconnect, device number 5 [ 33.909741][ T386] usb 1-1: Using ep0 maxpacket: 16 [ 33.915904][ T386] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 33.928772][ T386] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 33.938563][ T386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.946847][ T386] usb 1-1: Product: syz [ 33.951253][ T386] usb 1-1: Manufacturer: syz [ 33.955885][ T386] usb 1-1: SerialNumber: syz [ 34.019712][ T387] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.147248][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 34.158299][ T387] usb 2-1: device descriptor read/64, error -71 [ 34.164811][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.175049][ T386] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.191039][ T386] usb 1-1: USB disconnect, device number 11 [ 34.205491][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.375360][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.386365][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 34.396419][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.399686][ T374] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.406740][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 34.423761][ T387] usb 2-1: device descriptor read/64, error -71 [ 34.430223][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 34.442159][ T31] usb 4-1: USB disconnect, device number 5 [ 34.559715][ T374] usb 3-1: Using ep0 maxpacket: 32 [ 34.566638][ T374] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.575405][ T374] usb 3-1: config index 0 descriptor too short (expected 28341, got 105) [ 34.584043][ T374] usb 3-1: config 155 has too many interfaces: 241, using maximum allowed: 32 [ 34.592980][ T374] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 34.603417][ T374] usb 3-1: config 155 has 1 interface, different from the descriptor's value: 241 [ 34.614191][ T374] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 34.623337][ T374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.631387][ T374] usb 3-1: Product: syz [ 34.635559][ T374] usb 3-1: Manufacturer: 倊 [ 34.640198][ T374] usb 3-1: SerialNumber: syz [ 34.679706][ T387] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 34.766316][ T36] audit: type=1400 audit(1777927890.220:184): avc: denied { ioctl } for pid=553 comm="syz.0.88" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5941 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.793425][ T36] audit: type=1400 audit(1777927890.220:185): avc: denied { setopt } for pid=553 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.819692][ T387] usb 2-1: device descriptor read/64, error -71 [ 34.851067][ T374] usb 3-1: Fast Track Pro config OK [ 34.857660][ T374] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 34.868713][ T374] snd-usb-audio 3-1:155.0: probe with driver snd-usb-audio failed with error -22 [ 34.880647][ T374] usb 3-1: USB disconnect, device number 6 [ 34.887649][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.062906][ T387] usb 2-1: device descriptor read/64, error -71 [ 35.169810][ T387] usb usb2-port1: attempt power cycle [ 35.179754][ T386] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.332429][ T386] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 35.341580][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.349570][ T386] usb 4-1: Product: syz [ 35.353823][ T386] usb 4-1: Manufacturer: syz [ 35.358432][ T386] usb 4-1: SerialNumber: syz [ 35.386106][ T563] FAULT_INJECTION: forcing a failure. [ 35.386106][ T563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 35.399815][ T563] CPU: 0 UID: 0 PID: 563 Comm: syz.0.92 Not tainted syzkaller #0 21e0851607c2bcce87f6d1c77002e5a32d0b18de [ 35.399851][ T563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.399862][ T563] Call Trace: [ 35.399869][ T563] [ 35.399876][ T563] __dump_stack+0x21/0x30 [ 35.399905][ T563] dump_stack_lvl+0x140/0x1c0 [ 35.399928][ T563] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.399953][ T563] ? kasan_save_track+0x4f/0x80 [ 35.399970][ T563] ? kasan_save_alloc_info+0x40/0x50 [ 35.399993][ T563] ? __kasan_kmalloc+0x96/0xb0 [ 35.400011][ T563] ? __kmalloc_noprof+0x261/0x500 [ 35.400036][ T563] ? splice_direct_to_actor+0x411/0xbe0 [ 35.400056][ T563] dump_stack+0x19/0x20 [ 35.400078][ T563] should_fail_ex+0x3d7/0x530 [ 35.400104][ T563] should_fail_alloc_page+0xec/0x110 [ 35.400123][ T563] __alloc_pages_noprof+0x1c0/0x7e0 [ 35.400146][ T563] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 35.400171][ T563] alloc_pages_bulk_noprof+0x3c3/0x870 [ 35.400192][ T563] ? __kasan_kmalloc+0x96/0xb0 [ 35.400211][ T563] ? copy_splice_read+0x18f/0xca0 [ 35.400231][ T563] copy_splice_read+0x1c7/0xca0 [ 35.400251][ T563] ? __cfi_copy_splice_read+0x10/0x10 [ 35.400269][ T563] ? __kmalloc_noprof+0x261/0x500 [ 35.400295][ T563] ? __cfi_iter_file_splice_write+0x10/0x10 [ 35.400314][ T563] ? direct_splice_actor+0x384/0x4b0 [ 35.400334][ T563] ? __cfi_copy_splice_read+0x10/0x10 [ 35.400353][ T563] splice_direct_to_actor+0x411/0xbe0 [ 35.400375][ T563] ? __cfi_direct_splice_actor+0x10/0x10 [ 35.400395][ T563] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 35.400415][ T563] do_splice_direct+0x196/0x290 [ 35.400434][ T563] ? __cfi_do_splice_direct+0x10/0x10 [ 35.400453][ T563] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 35.400475][ T563] ? security_file_permission+0x38/0xf0 [ 35.400498][ T563] ? rw_verify_area+0xac/0x230 [ 35.400524][ T563] do_sendfile+0x5ef/0xf70 [ 35.400544][ T563] ? vfs_writev+0xe50/0xe50 [ 35.400561][ T563] ? __kasan_check_write+0x18/0x20 [ 35.400595][ T563] ? ksys_write+0x1f3/0x260 [ 35.400620][ T563] __x64_sys_sendfile64+0x19d/0x200 [ 35.400640][ T563] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 35.400659][ T563] ? __kasan_check_read+0x15/0x20 [ 35.400684][ T563] x64_sys_call+0xa26/0x2ee0 [ 35.400709][ T563] do_syscall_64+0x57/0xf0 [ 35.400729][ T563] ? clear_bhb_loop+0x50/0xa0 [ 35.400752][ T563] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.400776][ T563] RIP: 0033:0x7fbbb3d9cdd9 [ 35.400792][ T563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.400808][ T563] RSP: 002b:00007fbbb4bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 35.400829][ T563] RAX: ffffffffffffffda RBX: 00007fbbb4015fa0 RCX: 00007fbbb3d9cdd9 [ 35.400844][ T563] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 35.400856][ T563] RBP: 00007fbbb4bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 35.400867][ T563] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 35.400880][ T563] R13: 00007fbbb4016038 R14: 00007fbbb4015fa0 R15: 00007ffff5e29298 [ 35.400896][ T563] [ 35.599757][ T387] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 35.609401][ T561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.640815][ T387] usb 2-1: device descriptor read/8, error -71 [ 35.644565][ T561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.761632][ T386] usb 4-1: Can't get UAC3 power state for id 10 [ 35.770128][ T386] usb 4-1: BAAD HEADSET c_chmask mismatch [ 35.780905][ T387] usb 2-1: device descriptor read/8, error -71 [ 35.788226][ T386] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.798963][ T386] usb 4-1: USB disconnect, device number 6 [ 35.810955][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.838677][ T565] kvm: kvm [564]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 35.878560][ T567] overlay: Unknown parameter '/' [ 36.029723][ T387] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 36.061602][ T387] usb 2-1: device descriptor read/8, error -71 [ 36.190852][ T387] usb 2-1: device descriptor read/8, error -71 [ 36.249729][ T386] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 36.271739][ T590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 36.299769][ T387] usb usb2-port1: unable to enumerate USB device [ 36.399694][ T386] usb 1-1: Using ep0 maxpacket: 8 [ 36.406119][ T386] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 36.414636][ T386] usb 1-1: config 179 has no interface number 0 [ 36.420986][ T386] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 36.432202][ T386] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 36.443487][ T386] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 36.454669][ T386] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 36.466112][ T386] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 36.479385][ T386] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 36.488548][ T386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.497749][ T573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 36.710734][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 36.931641][ T604] kvm: emulating exchange as write [ 37.113969][ T408] usb 1-1: USB disconnect, device number 12 [ 37.114015][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 37.128409][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 37.378257][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 37.378277][ T36] audit: type=1400 audit(1777927892.830:214): avc: denied { bind } for pid=639 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.444418][ T36] audit: type=1400 audit(1777927892.900:215): avc: denied { read write } for pid=646 comm="syz.2.128" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.468454][ T36] audit: type=1400 audit(1777927892.910:216): avc: denied { open } for pid=646 comm="syz.2.128" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.494549][ T36] audit: type=1400 audit(1777927892.910:217): avc: denied { ioctl } for pid=646 comm="syz.2.128" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.520370][ T36] audit: type=1326 audit(1777927892.920:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.3.129" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b179cdd9 code=0x7ffc0000 [ 37.546420][ T36] audit: type=1326 audit(1777927892.920:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.3.129" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b179cdd9 code=0x7ffc0000 [ 37.572064][ T36] audit: type=1326 audit(1777927892.920:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.3.129" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f65b179cdd9 code=0x7ffc0000 [ 37.597378][ T36] audit: type=1326 audit(1777927892.920:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.3.129" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b179cdd9 code=0x7ffc0000 [ 37.622982][ T36] audit: type=1326 audit(1777927892.920:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.3.129" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b179cdd9 code=0x7ffc0000 [ 37.669483][ T36] audit: type=1400 audit(1777927893.120:223): avc: denied { bind } for pid=655 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.749735][ T408] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.899710][ T386] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.899712][ T408] usb 4-1: Using ep0 maxpacket: 16 [ 37.914648][ T408] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 37.922874][ T408] usb 4-1: config 0 has no interface number 0 [ 37.928982][ T408] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 37.939359][ T408] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 37.951831][ T408] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 37.961198][ T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.969495][ T408] usb 4-1: Product: syz [ 37.973990][ T408] usb 4-1: Manufacturer: syz [ 37.978643][ T408] usb 4-1: SerialNumber: syz [ 37.984709][ T408] usb 4-1: config 0 descriptor?? [ 37.992694][ T652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.000181][ T652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.050791][ T386] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 38.059206][ T386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.071618][ T386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.082389][ T386] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.096826][ T386] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.106303][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.118441][ T386] usb 3-1: config 0 descriptor?? [ 38.212094][ T652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.219420][ T652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.427563][ T408] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 38.438153][ T408] asix 4-1:0.34: probe with driver asix failed with error -61 [ 38.527190][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.536997][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.544702][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.552483][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.560333][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.567816][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.575592][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.583305][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.593533][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.601258][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.610630][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.618550][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.626832][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.634600][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.644243][ T386] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 38.662505][ T386] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 38.675540][ T386] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 38.800542][ T386] usb 3-1: USB disconnect, device number 7 [ 39.239952][ T686] rust_binder: 82: no such ref 2 [ 39.681699][ T310] bridge_slave_1: left allmulticast mode [ 39.687833][ T310] bridge_slave_1: left promiscuous mode [ 39.693766][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.703325][ T310] bridge_slave_0: left allmulticast mode [ 39.709022][ T310] bridge_slave_0: left promiscuous mode [ 39.715041][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.859962][ T712] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.867015][ T712] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.874130][ T712] bridge_slave_0: entered allmulticast mode [ 39.880611][ T712] bridge_slave_0: entered promiscuous mode [ 39.887010][ T712] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.894274][ T712] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.901574][ T712] bridge_slave_1: entered allmulticast mode [ 39.908009][ T712] bridge_slave_1: entered promiscuous mode [ 39.914838][ T310] veth1_macvtap: left promiscuous mode [ 39.920467][ T310] veth0_vlan: left promiscuous mode [ 39.997210][ T712] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.004347][ T712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.011661][ T712] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.018698][ T712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.038701][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.046041][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.057262][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.064366][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.074361][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.081475][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.105921][ T712] veth0_vlan: entered promiscuous mode [ 40.116205][ T712] veth1_macvtap: entered promiscuous mode [ 40.493739][ T10] usb 4-1: USB disconnect, device number 7 [ 40.529668][ T408] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 40.720970][ T408] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.749665][ T408] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.769678][ T408] usb 2-1: config 2 interface 0 has no altsetting 0 [ 40.779804][ T408] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 40.790158][ T408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.869739][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 41.040874][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 41.059680][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 41.073863][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 41.083166][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.205740][ T408] elo 0003:04E7:0009.0005: item fetching failed at offset 0/5 [ 41.216592][ T408] elo 0003:04E7:0009.0005: parse failed [ 41.229751][ T408] elo 0003:04E7:0009.0005: probe with driver elo failed with error -22 [ 41.303136][ T745] tipc: Started in network mode [ 41.308124][ T745] tipc: Node identity 9, cluster identity 4711 [ 41.314730][ T745] tipc: Node number set to 9 [ 41.406067][ T374] usb 2-1: USB disconnect, device number 13 [ 41.602331][ T408] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 41.761448][ T408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.773143][ T408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.783188][ T408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.796996][ T408] usb 5-1: New USB device found, idVendor=056a, idProduct=0601, bcdDevice= 0.00 [ 41.806673][ T408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.821180][ T408] usb 5-1: config 0 descriptor?? [ 42.239791][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 42.243562][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.254933][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.269763][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.276895][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.284052][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.291082][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.298561][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.305836][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.312868][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.320035][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.327335][ T408] wacom 0003:056A:0601.0006: unknown main item tag 0x0 [ 42.335520][ T408] wacom 0003:056A:0601.0006: Unknown device_type for 'HID 056a:0601'. Ignoring. [ 42.445472][ T408] usb 5-1: USB disconnect, device number 2 [ 42.456724][ T31] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.468045][ T31] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.471948][ T10] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 42.478339][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.492376][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 42.498208][ T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input6 [ 42.501780][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.524497][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.527209][ T10] usb 4-1: USB disconnect, device number 8 [ 42.537050][ T31] usb 2-1: config 0 descriptor?? [ 42.543292][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.569890][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.583064][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.595532][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.608458][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.620982][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.633322][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.645850][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.658278][ T758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=758 comm=syz.2.171 [ 42.951756][ T31] isku 0003:1E7D:3264.0007: unknown main item tag 0x0 [ 42.958846][ T31] isku 0003:1E7D:3264.0007: unknown main item tag 0x0 [ 42.965978][ T31] isku 0003:1E7D:3264.0007: unknown main item tag 0x0 [ 42.972831][ T31] isku 0003:1E7D:3264.0007: unknown main item tag 0x0 [ 42.980199][ T31] isku 0003:1E7D:3264.0007: unknown main item tag 0x0 [ 42.989335][ T31] isku 0003:1E7D:3264.0007: unknown main item tag 0x0 [ 42.996385][ T31] isku 0003:1E7D:3264.0007: item fetching failed at offset 9/40 [ 43.004936][ T31] isku 0003:1E7D:3264.0007: parse failed [ 43.010650][ T31] isku 0003:1E7D:3264.0007: probe with driver isku failed with error -22 [ 43.026563][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 43.026582][ T36] audit: type=1400 audit(1777927898.480:233): avc: denied { getopt } for pid=767 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.155978][ T10] usb 2-1: USB disconnect, device number 14 [ 43.369697][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 43.530953][ T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 43.539425][ T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 43.548100][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 43.557191][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.566880][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 43.578041][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.591082][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.600721][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.609658][ T31] usb 4-1: config 0 descriptor?? [ 43.614912][ T776] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.622208][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.779693][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 43.790472][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 43.798729][ T10] usb 3-1: config 0 has no interface number 0 [ 43.819717][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 43.829160][ T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 43.840068][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 43.861197][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 43.870463][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.878634][ T10] usb 3-1: Product: syz [ 43.882850][ T10] usb 3-1: Manufacturer: syz [ 43.887491][ T10] usb 3-1: SerialNumber: syz [ 43.897082][ T10] usb 3-1: config 0 descriptor?? [ 43.902550][ T778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 43.910051][ T778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.038515][ T36] audit: type=1400 audit(1777927899.490:234): avc: denied { read write } for pid=775 comm="syz.3.178" name="lp0" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 44.062500][ C1] usblp0: nonzero read bulk status received: -71 [ 44.073540][ T31] usb 4-1: USB disconnect, device number 9 [ 44.081303][ T36] audit: type=1400 audit(1777927899.520:235): avc: denied { open } for pid=775 comm="syz.3.178" path="/dev/usb/lp0" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 44.120902][ T778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.128285][ T778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.273397][ T775] usblp0: removed [ 44.339726][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 44.349938][ T10] asix 3-1:0.34: probe with driver asix failed with error -61 [ 44.612124][ T783] ======================================================= [ 44.612124][ T783] WARNING: The mand mount option has been deprecated and [ 44.612124][ T783] and is ignored by this kernel. Remove the mand [ 44.612124][ T783] option from the mount to silence this warning. [ 44.612124][ T783] ======================================================= [ 44.647911][ T36] audit: type=1400 audit(1777927900.100:236): avc: denied { mounton } for pid=782 comm="syz.1.181" path="/40/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 44.648124][ T783] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.849923][ T36] audit: type=1400 audit(1777927900.310:237): avc: denied { bind } for pid=800 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.869849][ T36] audit: type=1400 audit(1777927900.310:238): avc: denied { listen } for pid=800 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.889569][ T36] audit: type=1400 audit(1777927900.310:239): avc: denied { accept } for pid=800 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.909600][ T36] audit: type=1400 audit(1777927900.340:240): avc: denied { shutdown } for pid=800 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.929401][ T36] audit: type=1400 audit(1777927900.370:241): avc: denied { mounton } for pid=804 comm="syz.3.189" path="/46/file0" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 46.192602][ T36] audit: type=1400 audit(1777927901.650:242): avc: denied { execute } for pid=818 comm="syz.4.191" name="file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.444615][ T374] usb 3-1: USB disconnect, device number 8 [ 46.510002][ T832] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 46.582597][ T838] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.779767][ T848] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.202'. [ 46.991764][ T860] syz.3.208 (860) used obsolete PPPIOCDETACH ioctl [ 47.279731][ T408] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 47.309703][ T374] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 47.429677][ T408] usb 5-1: Using ep0 maxpacket: 32 [ 47.436110][ T408] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 47.444451][ T408] usb 5-1: config 2 has no interface number 0 [ 47.450820][ T408] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 47.460934][ T408] usb 5-1: config 2 interface 88 has no altsetting 0 [ 47.469242][ T408] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 47.478387][ T408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.488715][ T374] usb 4-1: Using ep0 maxpacket: 32 [ 47.493875][ T408] usb 5-1: Product: syz [ 47.498071][ T408] usb 5-1: Manufacturer: syz [ 47.502863][ T408] usb 5-1: SerialNumber: syz [ 47.509324][ T374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.517258][ T863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 47.537209][ T374] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 47.546368][ T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.555343][ T374] usb 4-1: Product: syz [ 47.559963][ T374] usb 4-1: Manufacturer: syz [ 47.564778][ T374] usb 4-1: SerialNumber: syz [ 47.704526][ T875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 47.727983][ T408] asix 5-1:2.88: probe with driver asix failed with error -71 [ 47.744921][ T408] usb 5-1: USB disconnect, device number 3 [ 47.829716][ T387] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.974060][ T374] usb 4-1: unit 0 not found! [ 47.979692][ T387] usb 3-1: Using ep0 maxpacket: 16 [ 47.986494][ T387] usb 3-1: unable to get BOS descriptor or descriptor too short [ 47.995097][ T387] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.005386][ T387] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 48.014486][ T387] usb 3-1: config 1 interface 1 has no altsetting 0 [ 48.022859][ T387] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 48.032243][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.040628][ T387] usb 3-1: Product: syz [ 48.044904][ T387] usb 3-1: Manufacturer: syz [ 48.049516][ T387] usb 3-1: SerialNumber: syz [ 48.184815][ T374] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.195260][ T374] usb 4-1: unit 0 not found! [ 48.201441][ T374] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 48.209699][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 48.212000][ T374] usb 4-1: unit 0 not found! [ 48.227268][ T374] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 48.237746][ T374] usb 4-1: USB disconnect, device number 10 [ 48.253914][ T879] udevd[879]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.272635][ T387] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 48.281279][ T387] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.360808][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 48.371851][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.382945][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.392901][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 48.408385][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 48.417526][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 48.425795][ T31] usb 2-1: Manufacturer: syz [ 48.441260][ T31] usb 2-1: config 0 descriptor?? [ 48.461639][ T897] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 48.683274][ T374] usb 3-1: USB disconnect, device number 9 [ 48.746136][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 48.746187][ T36] audit: type=1400 audit(1777927904.200:247): avc: denied { mounton } for pid=907 comm="syz.4.229" path="/proc/42/task" dev="proc" ino=10302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 48.852569][ T31] appleir 0003:05AC:8243.0008: item fetching failed at offset 0/1 [ 48.860708][ T31] appleir 0003:05AC:8243.0008: parse failed [ 48.866653][ T31] appleir 0003:05AC:8243.0008: probe with driver appleir failed with error -22 [ 49.063312][ T387] usb 2-1: USB disconnect, device number 15 [ 49.139765][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.290922][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.301998][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 49.313838][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.325781][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.332721][ T36] audit: type=1400 audit(1777927904.780:248): avc: denied { ioctl } for pid=927 comm="syz.4.237" path="socket:[9447]" dev="sockfs" ino=9447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.333891][ T31] usb 4-1: Product: syz [ 49.364754][ T31] usb 4-1: Manufacturer: syz [ 49.369671][ T31] usb 4-1: SerialNumber: syz [ 49.379399][ T31] cdc_mbim 4-1:1.0: skipping garbage [ 49.580525][ T916] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 49.849670][ T374] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 50.009654][ T374] usb 2-1: Using ep0 maxpacket: 16 [ 50.021466][ T374] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.039658][ T374] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.060422][ T374] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.079718][ T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.087854][ T374] usb 2-1: Product: syz [ 50.100247][ T374] usb 2-1: Manufacturer: syz [ 50.111153][ T374] usb 2-1: SerialNumber: syz [ 50.216206][ T916] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 50.227793][ T31] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 50.255694][ T31] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 50.270647][ T31] wwan wwan0: port wwan0mbim0 attached [ 50.291895][ T31] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, d2:22:05:b5:16:9b [ 50.338185][ T374] usb 2-1: 0:2 : does not exist [ 50.351210][ T36] audit: type=1400 audit(1777927905.810:249): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.385988][ T374] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 50.409960][ T36] audit: type=1400 audit(1777927905.840:250): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.462779][ T408] usb 4-1: USB disconnect, device number 11 [ 50.469178][ T408] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 50.482119][ T374] usb 2-1: USB disconnect, device number 16 [ 50.502181][ T36] audit: type=1400 audit(1777927905.840:251): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1857 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.504999][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.560245][ T408] wwan wwan0: port wwan0mbim0 disconnected [ 50.579931][ T36] audit: type=1400 audit(1777927905.840:252): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1857 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.619928][ T36] audit: type=1400 audit(1777927905.840:253): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1857 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.679804][ T36] audit: type=1400 audit(1777927905.920:254): avc: denied { read } for pid=944 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.710608][ T36] audit: type=1400 audit(1777927905.920:255): avc: denied { open } for pid=944 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.739819][ T36] audit: type=1400 audit(1777927905.920:256): avc: denied { getattr } for pid=944 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.897828][ T984] ------------[ cut here ]------------ [ 50.903397][ T984] WARNING: CPU: 0 PID: 984 at mm/page_alloc.c:5282 __alloc_pages_noprof+0x109/0x7e0 [ 50.912965][ T984] Modules linked in: [ 50.916902][ T984] CPU: 0 UID: 0 PID: 984 Comm: syz.2.247 Not tainted syzkaller #0 21e0851607c2bcce87f6d1c77002e5a32d0b18de [ 50.928962][ T984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 50.939274][ T984] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 50.945387][ T984] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 9a 6d 0b 06 00 0f 85 c2 00 00 00 c6 05 8d 6d 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 50.965113][ T984] RSP: 0018:ffffc90000f2f860 EFLAGS: 00010246 [ 50.971360][ T984] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 50.979396][ T984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000f2f918 [ 50.987881][ T984] RBP: ffffc90000f2f988 R08: ffffc90000f2f917 R09: 0000000000000000 [ 50.996010][ T984] R10: ffffc90000f2f900 R11: fffff520001e5f23 R12: ffffc90000f2f8a0 [ 51.004137][ T984] R13: dffffc0000000000 R14: 1ffff920001e5f10 R15: 0000000000000000 [ 51.012216][ T984] FS: 00007f301ede56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 51.021361][ T984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.028276][ T984] CR2: 000020000008c000 CR3: 000000011a690000 CR4: 00000000003526b0 [ 51.036495][ T984] Call Trace: [ 51.040084][ T984] [ 51.043041][ T984] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.049164][ T984] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 51.055144][ T984] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 51.060840][ T984] ___kmalloc_large_node+0x81/0x210 [ 51.066235][ T984] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 51.072058][ T984] __kmalloc_large_node_noprof+0x1e/0xd0 [ 51.077738][ T984] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 51.083527][ T984] __kmalloc_noprof+0x326/0x500 [ 51.088421][ T984] ? __cfi_lockref_get+0x10/0x10 [ 51.093434][ T984] incfs_realloc_mount_info+0xa7/0x4d0 [ 51.099019][ T984] ? incfs_add_sysfs_node+0x118/0x230 [ 51.104666][ T984] incfs_alloc_mount_info+0x478/0x5f0 [ 51.110150][ T984] incfs_mount_fs+0x3ca/0x970 [ 51.115150][ T984] ? __cfi_incfs_mount_fs+0x10/0x10 [ 51.120435][ T984] ? vfs_parse_fs_string+0x10f/0x180 [ 51.125762][ T984] ? selinux_capable+0x38/0x50 [ 51.130586][ T984] legacy_get_tree+0x106/0x1b0 [ 51.135381][ T984] ? __cfi_incfs_mount_fs+0x10/0x10 [ 51.140656][ T984] vfs_get_tree+0xa1/0x290 [ 51.145106][ T984] do_new_mount+0x251/0xb30 [ 51.149687][ T984] ? security_capable+0x44/0x130 [ 51.154681][ T984] path_mount+0x682/0x1010 [ 51.159240][ T984] __se_sys_mount+0x2bf/0x480 [ 51.163987][ T984] ? __x64_sys_mount+0xf0/0xf0 [ 51.168812][ T984] ? __kasan_check_write+0x18/0x20 [ 51.173995][ T984] ? fpregs_restore_userregs+0x11c/0x260 [ 51.179699][ T984] __x64_sys_mount+0xc3/0xf0 [ 51.184325][ T984] x64_sys_call+0x2021/0x2ee0 [ 51.189047][ T984] do_syscall_64+0x57/0xf0 [ 51.193531][ T984] ? clear_bhb_loop+0x50/0xa0 [ 51.198241][ T984] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.204236][ T984] RIP: 0033:0x7f301df9cdd9 [ 51.208679][ T984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.228352][ T984] RSP: 002b:00007f301ede5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.236919][ T984] RAX: ffffffffffffffda RBX: 00007f301e216180 RCX: 00007f301df9cdd9 [ 51.244969][ T984] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000200000000040 [ 51.253014][ T984] RBP: 00007f301e032d69 R08: 0000200000000100 R09: 0000000000000000 [ 51.261211][ T984] R10: 0000000000200c04 R11: 0000000000000246 R12: 0000000000000000 [ 51.269214][ T984] R13: 00007f301e216218 R14: 00007f301e216180 R15: 00007ffc67eaace8 [ 51.277260][ T984] [ 51.280331][ T984] ---[ end trace 0000000000000000 ]--- [ 51.309670][ T984] incfs: Error allocating mount info. -12 [ 51.315479][ T984] incfs: mount failed -12