last executing test programs: 44.056229493s ago: executing program 1 (id=96): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000001140), 0x40000140) 43.213292982s ago: executing program 1 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800290200000000ffdbdf2502000000080000000400000008001e00", @ANYRES64=r0, @ANYBLOB="0800048004"], 0x2c}, 0x1, 0x0, 0x0, 0x41800}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x2, 0x6) (async) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) (async) splice(r5, 0x0, r8, 0x0, 0xf, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x34044010}, 0x4000000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x30, 0x12, @dev={0xfe, 0x80, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0xfffffffc, 0x4c51}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000840)={'syztnl1\x00', 0x0}) (async) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x483, 0x0, 0x1fffffffff7fffd}]}) 40.12420114s ago: executing program 1 (id=110): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000015c0)={0xb, 0x0, [{0x6e89, 0x0, 0x1}, {0x3, 0x0, 0x807f}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0xb0}, {0x80, 0x0, 0x6}, {0xa, 0x0, 0x3d}, {0x40, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x3}, {0x40, 0x0, 0x10f4}]}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0xac, 0x4, 0x6, 0x1, 0x40000009, 0xfffffff7}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x28, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}], 0x1}, 0x14008010) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "b2e81acbcb478d4a", "29eb4a4b00", "8dde9901", "a2f544b19f9c295a"}, 0xffffffffffffff1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) get_robust_list(0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x10080) syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xba, &(0x7f00000005c0)=ANY=[@ANYBLOB="ba03263b629562970000000000000000afb0be2cceb69cb5bfae10997fa0df18aded7a3c0a30e2f3c75c10480df43f84c20d46203b760000f6b0dffac1e95ccaa54f73e838de08ef2af2471e3e23587d355f5b4c74f99cdeb1513f3d28a5968168d349f631c985798acf6ce100db89ef796044ba9facc07b5c1bcefd1b1b45e52a941b3909a96a7cdd6c3cdfb1262d8ccbf41f12c6627341a67f07998344b2861e73ad6117b68c2a22e13d1864170ee0cfe6ce570300703bcd30"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3001}}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) getpriority(0x0, 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f38814dfe66b9800000c00f326635008000000f3065640f09b87f008ed06766c7442400000000006766c7442402001800006766c744240600000000670f011c24dc21df240f38028f6b006766c74424008102e5fd6766c7442402972b45756766c744240600000000670f011424641d095d", 0x73}], 0x1, 0x30, &(0x7f0000000140)=[@cr0={0x0, 0x80040008}, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x300}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) 37.010347129s ago: executing program 1 (id=122): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0', 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a12003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) 37.007370319s ago: executing program 1 (id=123): r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$peekuser(0x3, r0, 0x5) 36.94704976s ago: executing program 1 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80086603, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) openat$incfs(r1, &(0x7f0000000280)='.log\x00', 0x201, 0x130) 36.814511274s ago: executing program 32 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80086603, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) openat$incfs(r1, &(0x7f0000000280)='.log\x00', 0x201, 0x130) 7.678607149s ago: executing program 4 (id=348): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x100800) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x0, @loopback}}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, 0x0) lremovexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00') 7.577622721s ago: executing program 4 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x824403d2e3bc09e9}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r2, &(0x7f0000000280)=""/145, 0x91, 0x40010002, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, 0x0}) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x40, "", [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x41, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x24}}}}}]}}]}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24048095}, 0x4000) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000800)={0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x0}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0xffffff7f, 0x9}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008c44}, 0x20008001) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r8) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) (async, rerun: 32) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r12, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@rdmsr={0x66, 0x18, {0x4000009e}}], 0x18}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000500)={0x24, &(0x7f00000003c0)={0x0, 0x31, 0x6d, {0x6d, 0x21, "cf39fcf46a06cfdd48a9e93a51d7a49d84e10ad814ab597305a06d903a06f3cf2dd427f2297d438e7c7ed2bff737a0bdc894f57d3092294cc55794c18d1aef9c4517992d5db41afd847f38f521a25294a1ecc96715f55b440580611e9e612b2a4d6140d4776c9fa8848133"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000480)={0x0, 0x22, 0x21, {[@global=@item_4={0x3, 0x1, 0xf, "75633011"}, @global=@item_4={0x3, 0x1, 0x2, "fbff51e5"}, @global=@item_4={0x3, 0x1, 0xa, "172354ec"}, @global=@item_4={0x3, 0x1, 0x3, "190e0221"}, @local=@item_012={0x2, 0x2, 0x7, "9bae"}, @main=@item_012={0x2, 0x0, 0x9, "932a"}, @main=@item_4={0x3, 0x0, 0xa, "74a54f6b"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb07, 0xd, 0x1, {0x22, 0x268}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0x6, 0x8e, "aa5e513914ccecb93ab115a8b3e284b93b880c51ff560cfb05dede1288be3af4d8ac463b49c91d0f44656df1579ae41271aed020d045521ff5a5918251124d5bf72b1f9a94e99e3b4a347e04cab48f5387db96080047744bda627b25f25aac3ee289091d19c78591cc24b8454d2ae994f9b80cdf31a648b79342e4c0eb21b92963a6267f2e5a9cde462c5aaa91b5"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x78}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x1, 0xd6, "0c4327b6e3d904b24a01c15d1f8f9c65c2a80c729e43a098ae1aae3a90da8636534af630331764b42fe3c0f1c8e3619f04b5087d61414ed38ee54b79fc12feecd7b9a6701f55b4cc994649fd64c81be79c76f74a03ae346226e99210c99244ea64a37851dc4a1fbb9701a8949f20d42fd52485607fb84477802737e491933128f03ad45380aec22f466588fc179797a1a5013d58f67c598dd2f36c623676bb2173917fba29b9a02524165cd4ec8136055738b3f8b993871e3c644626d973d304b084bd8eab7351a930ae9cb10618aad46485528de27d"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x9}}) 5.010922199s ago: executing program 0 (id=365): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000880)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x63, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)="714530848a1c9f4d9203526573b4fffafc7a1d874a233872e14f7847b76f7d0f0ee09d5d81361f486a9f6bb9dd354ec3fa48a01732be795ec27fe5d123de0dc01cc0cf"}, {&(0x7f0000000640)="73b96f8140c53a18f5265a49708787a61caa9438297cef58db20cac9ca58a643cd1a6fcd10f92ae223837155f11f9f24a11f72880c39f05cba2ca32fa64488352c708a7411d7cce8b06ddfbae30cad80ded3ff2effac48df1bf61ed42c82e714100b4fd574ad9e576850a2f610451d02ed142590b379d1f29ea46fc996fb85c4c88d7249f1145d0889a462d3f75b4c7f5e0026e4f27d2d609269f67b2b0600db787361f2"}, {&(0x7f0000000700)="41716a11f2e5188b3810ba02d2a75b3201a83fcc9ad3e3f9177917f4b0722611b18ce5f827c8fcf235966772e26ad381b87b6c162e2e35fc392743df211328e42caef50641644207471576d93eb97429c2c53c1fda12ee90614abb11ce2bec511ca177d098cc78fdef9e92b4fce7247d5a781af6149cff4f816c7385cbff7d0ac013ca82ff54e00a7ef071ff052123fa012c16ecfb7f0caca16bd6ca7e244a5e4e610ae5acb8e73b0a584811e4fff344bcf960a3eec9f2cfc0be7cdf19783b6977b0d85b38e9fb"}], 0x60}, 0x8c0) recvmmsg(r4, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r5, 0x0, r3, 0x0, 0x25a5, 0x0) r7 = dup(r2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x1000) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) recvfrom(r7, &(0x7f0000000140)=""/192, 0xc0, 0x2102, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000419000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000580)="260f22db66b8fdffffff0f23d00f21f86635300000070f23f8ba4000b89fd4ef0fc71b0f3acc53057466b80500000066b92da900000f01d90f080fae0d0f49eef723", 0x42}], 0x1, 0x11, 0x0, 0x0) r10 = socket(0x29, 0x4, 0x1) recvmsg(r10, &(0x7f0000000440)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/54, 0x36}], 0x1}, 0x2101) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4.50438204s ago: executing program 4 (id=366): syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000279a2db51dd04058000400000080109024900010100c0320904000003020a000015241200"], 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xc6000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2000, 0x0) r2 = getpgrp(0xffffffffffffffff) write$FUSE_LK(r0, &(0x7f00000020c0)={0x28, 0xffffffffffffffda, r1, {{0x904, 0x2, 0x1, r2}}}, 0x28) 4.145414218s ago: executing program 0 (id=371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xfffd) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x300000e, 0x12, r3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x62000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0800}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.084261179s ago: executing program 2 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1ba) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x54) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20100, 0x44) openat(r0, &(0x7f00000002c0)='./bus\x00', 0x1611c2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x25}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@xino_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1ba) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x54) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20100, 0x44) (async) openat(r0, &(0x7f00000002c0)='./bus\x00', 0x1611c2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x25}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@xino_on}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) 3.58597344s ago: executing program 2 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000014c0)={{'\x00', 0x3}, {0x140000000000}, 0x6a, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)="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", 0x15b, 0x0, &(0x7f0000000340)={0x2, 0x13e, {0x1, 0xc, 0x79, "3a73875292656b15b2cecd38f862ef98603adf8731e1b36f21f4c9977bccfd17b36cb5e5fb986295a0618ee7934002ac6a228fcf2180dd1d889fbb86fc4b026b6dae8aebba4a42f586028e7e0a4a5732e5ab1cbbbd2a01f53bf5b95fb842046476c47c7d4ab6161c43c5c5e8a6ce2de195944ce72bd2b334d2", 0xb8, "9c6c7527fac50aa48d0db2ed473826f02c0c6b247645e6f532e8c62293eedb184cf935d79dde3509d49ad687daa6bf2c1855aea3bb9a1d68bf953dcaffc1750155d58771ba5fd7965b89da6c3c39564e3c1b2af990273cbe52cfd70de2ecb41d4ab10535baa0887f411a2aae62efef018278f6b0b8c4e290a3dd8dc25ad266b65f0e10c9153dd813838c9dfe09746b45da5d885bc0ce285abae522363ea0eb1bd655eacf7c59a0aaf245aec7d8269c3c04b0d0a1af573cf1"}, 0x1000, "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"}, 0x114a}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) inotify_init() 3.58388564s ago: executing program 2 (id=376): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200690200009ab5b1425d88dddd2d0000000109022400010000102c0904000501030001000921ff7f490122180007aea20ce5e2a0a6d716e7fa6605bb2ee38925782d5d24030f14619766a53fa4024c7cadadb36e5abfd455d857fbde787070674a4daa514718ef23a014e46232c98a5a9e984263c2361f4a9add0b1f38ba74e2d25c0cced96c5ca0d97cf0bf4ecff3"], 0x0) r1 = epoll_create1(0x80000) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x2e80, &(0x7f00000000c0)={0x0, 0x784f, 0x2, 0x3, 0x3b3}, &(0x7f00000001c0), &(0x7f0000000240), 0x0) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='; 2', 0x3) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 2.336638398s ago: executing program 0 (id=381): unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x2, 0xffff, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x2000, 0x80, 0xa3c, 0x4}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0xb000000) 2.25899993s ago: executing program 0 (id=382): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) pipe2(0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5805040, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r5, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x541b, &(0x7f0000000100)={'veth1_to_hsr\x00', @link_local}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000040)={0x0, 0xc1, 0x4000, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.952321307s ago: executing program 0 (id=383): ioperm(0x4, 0x8, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7"], 0x24}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='\x00', 0x30d800, &(0x7f00000000c0)={@_ha_fsid={[0x7fffffff, 0x1]}, {0xf293, 0x8, 0x8, 0x9024}}, 0xce1, &(0x7f0000000100), &(0x7f0000000140)=0xb}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1.80874521s ago: executing program 0 (id=385): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x78, &(0x7f0000000480)=@string={0x78, 0x3, "3bacd99828327d88e6a75275591f2aab30433ed14f04dca89919595e17e245a9d9c3a26a7d2a9e3cf2e78db5ed938e7de7efea8ea93551befb176658cae8cb2cb0acc6d35fa4bf4be310f745c5247169cb2774fa110f73498b9f4cdd48dd0e58bc10c5bc3e63002b8196c1c934076e7effea9a0b3d2a"}}]}) (async) syz_usb_control_io(r4, 0x0, 0x0) (async, rerun: 64) r5 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x258442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) (rerun: 32) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) (async) sendto$inet(r9, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) (async) sendto$inet(r9, &(0x7f0000000900)="2e552f5d9fd8", 0x6, 0x8012, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async, rerun: 32) recvfrom$inet(r9, 0x0, 0x0, 0xc9100120, 0x0, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) socket$inet6(0xa, 0x3, 0xff) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="02031b0030001400060065131c1200080000fc020000000000000000000000000001ff020000000000000000000000000001ff000000"], 0x3a) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) 1.440350748s ago: executing program 4 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x200) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000480)={{0x9, 0x0, 0xfffffffc, 0x7, 0x100}, &(0x7f0000000240)=[{}, {}, {}]}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=""/108, 0x6c) 1.440136298s ago: executing program 4 (id=387): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) close(r0) 1.435901138s ago: executing program 4 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="1c00000021000100000000000000000009001780024947bf279fe600"], 0x1c}], 0x1}, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x40242, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x44, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x30, 0x0, @gue={{0x2, 0x0, 0x3, 0xa8, 0x100, @val=0x11040000}, "219dba8d56f553cb46bf4501b5303feda2430071761d987bf13534619314acf9"}}}}}}}, 0x56) r6 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90"], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f00000001c0)={[], 0xfffffffffffffffe}, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010400000000204f0453b640000102030109022d"], 0xfffffffffffffffc) 569.737547ms ago: executing program 2 (id=389): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0xa8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0xa8}}, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) 548.162908ms ago: executing program 2 (id=390): unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x2, 0xffff, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x2000, 0x80, 0xa3c, 0x4}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x16000000) 439.93537ms ago: executing program 2 (id=393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)=@polexpire={0x314, 0x1b, 0x400, 0x70bd25, 0x25dfdbfc, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x3ff, 0x4e20, 0x0, 0x2, 0xa0, 0x0, 0x4, 0x0, r1}, {0x5, 0x9, 0x8000000000000, 0x3, 0x27, 0x52cd, 0x4, 0x8}, {0x3, 0x80, 0xe28, 0x200}, 0x7, 0x6e6bbb, 0x1, 0x0, 0x1, 0x3}, 0xbd}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0xbf, 0x3, {{'deflate\x00'}, 0x3b8, "4a995713f7e35cd00900b846dbc8a9b97118e590f5c44e9992beee6c296d2a6c39f687821ae479fc2df2875da1355bb17844a98de9b37c2c4ec709c806746e09dff8dd3ef186329dfeb9ecebe748db889330e1859c444bb27dc9a30e6ff689d29d5129c221c1fa8e0bd7cd5bfc01e23f391a3b5d543bec"}}, @sec_ctx={0xbd, 0x8, {0xb9, 0x8, 0x0, 0x3, 0xb1, "e44184b4c2e4d284a9068fa788caeb1de56c58dab8f86c8b800399fa95b78a66e50b9093d3b683f3345f2e39eeb40746f8d613d13f2a84cd40e2903f6f27c954e4a18cfc2a9abf6b8beab2058a29e3d5d3a813124a38462d3f19837a5df6c78d378472de8f9e79973fd5e9318be6c8018505e11a147848898bf257fcdd8db104188ae2907be1e4f636fe262ca142344dd380aafad93e2db789831af1ce2c7a72c445423a0801f7266071a085befbe4d81c"}}, @algo_aead={0xca, 0x12, {{'aegis128l\x00'}, 0x3f0, 0x80, "6b8ae1a9b81f605aa4c0f61522420b658f0dab462b810ec95faeab335b5113db512faa16ed876ba051a684dd98c9b84d8cdd07486523e932efbdfcb2629ff54fc3f9d80557d41610599f41b6e80068bda07f671b9ed3d3092322c5a5f22c81dd004d9e51db7764831e2cfe3f9a85ed1b56d6f004cb4122f9e6186a1270ab"}}]}, 0x314}, 0x1, 0x0, 0x0, 0x8000}, 0x801) (async) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000985810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4004d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x2dec, 0x801, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000002, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x4], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0x8, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xaa9, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0xf641, 0x2, 0xf38, 0x27, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffe, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0xc, 0xc8, 0x10000, 0xfffff000, 0xffff, 0x8, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) unshare(0x22020600) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x40) (async, rerun: 32) write(r8, &(0x7f0000000000)='7', 0x1) (async, rerun: 32) write$nbd(r8, &(0x7f0000000300)={0x67446698, 0x1, 0x2, 0x3, 0x1, "4ac08844eed373788a7377f56a9ddc3d6d81b0a106f5ebdb3c3e1b760694b5bd643f154a5dbc282139731ed70b246d0acd7c63e8079d236822f364dfc6408f88f43be12fdcfadc3d45fc8faff86705c585ba2a783cb6b2f7"}, 0x68) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x1}}], 0x1, 0x40000) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 439.73109ms ago: executing program 3 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket(0x1, 0x5, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x2000000, 0x10000}) 396.062271ms ago: executing program 3 (id=395): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000310000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x10}, 0x4c000) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x149) read$FUSE(r1, &(0x7f0000007400)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r2], 0x160}}, 0x20008000) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xb8) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r9, 0x4068aea3, &(0x7f0000000080)={0xd5, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 164.311096ms ago: executing program 3 (id=396): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) close(r0) 161.266196ms ago: executing program 3 (id=397): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xba, 0xffff0001, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x8, 0x8000}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="5483c2f163bf13f7cbf6a3142321924fc2f05a254f478fff3f0f638eac631aff032cb2a37ffb2464137a38cc0396a507a8373369ef90fdce944cc60826f7daf7a669bc0c0e13f7e148af1eae2a26d83a768d1b1b85d5783802e3", 0x5a}, {&(0x7f0000000180)="2f86d7634d82b167c6079ec098b83ca32c4cd98aec0ce70d4a4604d74a84480644248ed0e269c8bf0ad551cc062bf045ae97b3bd44c18876a0e75433a48543a616a6816c74f97217351e9fced850ce3903", 0x51}, {&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="a13382d8ceb30fdcc6", 0x9}, {&(0x7f0000000340)="7f2d727562304394dd095f05bb8c44dbc748946d790289f9bc582bd599053b3bbdeb80c5c42cf3afc6ca9f258a55347ae713aa35a9a6bc9acb4027c215f28d9915dda0751736ecb2792350e607776c5a9c29e28d5ad3a4d1893e9334e0dfde86f68046a911d6ead0c61ffdcd7b918ac324435f87", 0x74}, {&(0x7f00000003c0)="4f73485eab51fb264fac36c902c8d890775c7e54ce1371eede1421558229905b0d894bc3e3785493bc2d9775607464635a7cb098586c6e31fe8fdc45c039deb9ad1b053935152f72427b9a158d7b7d4966eac1a5fa425482d636d22996be9252eeb215eec2b739be42ae33f14a2963d579c89466db30d9aa5f3e1ecb7296ad265eb350e949d8db00a4935854f15624e5e99ed651cf747f74b0a0cc07fd616f1851df230e375040d54a1fecd66450e2cb480491aaf8dcc5f680e9549f3e0986b5694fae1fd3ca0f99da908d9517a9a319d3d0e9dff69b66c0c69d9f7a9c8c0be285a85bc1bcf34908bdc527012977", 0xee}, {&(0x7f00000004c0)="05cc4e6501ca624add3ea0d820d892b205eee8f8e1c1ae27f9dd64d3fe224bd458893aeed69fb1a672bfed5cf177f503228fd2c94515a835c3fa1e8dddccae076b90c3d30ed5b33cb7d342317ca644c0b3378f3d4e75fad51fee2de4cd57126ce14e867a1c222b33196e8a78765a89a061f8a8cf50b44ff736417245221580938f72b02a4cdf78585dba2493bc20217119550a31f80b47f4553c674f06f4819c", 0xa0}], 0x7, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @remote, @broadcast}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x7, 0xea, [@multicast1]}, @lsrr={0x83, 0x7, 0xa1, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x3, [{0x5, 0x8, "7da514734e15"}]}, @generic={0x82, 0x12, "bc1614804c4fe06338c78313340493de"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x79b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0xd0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)="72d76ae270525106d2e61eb6c6bb413f9263198bc39cd57d2309de5255287fdf9ba6efd21a99f71f7b9d22b1ae779f2a09d7d09bfca02ec0a29da1d1de6be4a0b06d", 0x42}, {&(0x7f00000008c0)="239de0a3fe44d080e2c2091d5673fb2411f7384f444560d045b9abaea660360ed5e1033360fc3374443f9e711c59dd57f5df6e4117de03e07b0484c206c3ab11ed5a30161bbed8af3a25a2587b0cfa0c764ce5217fe39d3fb1be1f8244bcdbbde55ef6496f69a3297ead61bcee75d59c0debba7dd7069d78df83e7f0cc23d0babcb1928d8cfff476e7b5a129d666feb0c1107664d2cae82f6824496f356b60ceffec7b21a3039464c66e", 0xaa}, {&(0x7f0000000980)="e95dd59d2c9a1a7cf9c8a9e6cd7d0032fc7c5273338e90ff0fef2ed17627e8e596573f62c94609f575f17f0cd0e974565e3818a06983858e99", 0x39}], 0x3, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x24ed}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a80)="dba449207d278005f6ec9fd19611005497e540472777cbdeb6f58b1c2532030c6085c9caf502744db607656d4f8792c758c12d5eea600adabf35b90de9f7057e236bcba82b6eb241a05d46358245432a0a6060f2d7dd15938c711e2c1eb54dc6086958eb9ff65e16087c091d908a9dced4d306e5f05048976ea9c6fcfdf65347ecba0705e82d7a136bc59aa49090e11de57bdb7d91b036f3da2b66799f491a748e01dcfa0057531ad4a57ccf0373366d97edc3dbb1b4f298210e3cf8fc09123bd50f8bcc2eefa5a57f", 0xc9}, {&(0x7f0000000b80)="34aeef6bf8cb5cd340f3b52f67eacc", 0xf}, {&(0x7f0000000bc0)="2ed4fbe6b2792207bacb8c5e46d95159ddd950f7850cfeb646c0dfdabdbed526b918a73a0fc3869fc6e2c4e6fec23c01e73eac4cf79a27500d9fbbbda7e11028", 0x40}], 0x3, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x9, [@empty, @remote, @loopback, @private=0xa010100]}]}}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d00)="ce6cf711203f083fa09cb6252f71572b26225bf35db7d7d8cd5baefc163e3aeed3575b4a7cc049bb02a6f7ab2cc8e5533267269b4e25cb81c0fd17f3fda76235fe4838ec1bffc047e80cee18f2f22762b22f19911add2499218ed7504ce63af04ac7bcbefe242931c062ab4334fbaf952e8bf93599edbfe0edd5350b8fcb3c5fbb7ba599f644f5b05e", 0x89}, {&(0x7f0000000dc0)="a88c6c49a4c57f189753f00a2e759a35cae59ef443abbe5ff025b4ef8993c6362694b1a61832408989c18b3bd558b694faae4252179ed6d2f2b775ea24e67e96ebaec0e0304583913bc978ca857fd351f7fcea9849d81a4c57711d3d18135225e3115efcc99f7648ee61", 0x6a}, {&(0x7f0000000e40)="822360e21e5a9c4b10ead4f7982fae836340c497ef0c9009d463e3b1f1d61a3ff4349c657699cef705d9517e79dc09dbd9bb34c6e1343d63210d63afe910d04ec9ffb8d88ab2465e0c275c545c0ec3863e2182bea6d2d0e740e996325081068a12164e78e5c9057846bc8baf47fbd9e6e89640a83886304f61cf39c71bb4b3ce8e377f4919ecffdec6faa3fc96eab63334c2f01394b46a", 0x97}, {&(0x7f0000000f00)="6a339bd486927c6ad245251d1d7f98a0aa7e11f23a24a2049b11c5e6f5485e8064dbc0282825f72bb3fa01456599b1544ec582be944d102dc520c6dc31f8bc1e321202ec23da90de49f2beefb39660ad6e5dfb88b8f8597ab903701ef2531565799231c3771bf16449abef0f14428a7e5006ad369258af2a5e70a6a5f9632ed5d0d2bad43196c20f8dbb32165c9ea990218b9302fe8f59d38f1e7a3ae350a137e57089769de2cfb8355286cba4ddfa2072e2b480692eb12c531a34a93f450ab8c5fdf20ba828a68cef11282fa13dde510ad53b8f21a2413745c0d010f027d4391a43861fc83595", 0xe7}], 0x4, &(0x7f0000001040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe6f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff9457}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xb0}}, {{&(0x7f0000001100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001140)="041c7e8804f1e98bd13a5fafa99774f192e7ee3b8562ab6a831cbd915c2697ad9d56147707b34aa830fa86d55f079479157844c14e06b62e928e459fa265629e1274569f47214c0ae1288bde5d9528478313081292e80cea0e44240cb2f9bc983900c88747a4f8171458fa3c7c1346a2213acbeb035d877e63abcb8c081384bc6aed8e578ec78eb134f49b47b182954454430fd44e5318eb52120f7274d0f4502fdeb05d2ca18e0b686b24df1db83976a1c203fcab55cf16d6de9dbb59", 0xbd}, {&(0x7f0000001200)="0126b8942090faa1f0c9ab8eb3208a7a950d5b3409e125805a7e12edfa76cb2b8e61b6a4d78b9fe8d5cde6676a46b1f39ca9ed53ecfa6dcfa8cf0d418d7201160a24d902827c91fd5e3c9b89077c05918c3de49a3cb8c078c35084799ba8763beb36e385263b96e02c742f5245c7006695088aaf4b8e46c713023fabf37d872c19c0f755b4882b59332da00a8697aec01f765016c87047443595228d24c32ed99cd1d88ad126361c18d464ebe9e4f179b66c13ca736b7e88f55e4ab92b30a9a74f9098c773bc56e1f81caf3caafb679a21e480c01a05e280167ea08a56c5c51fc3a54abc0be0abc816b082b5176d332325ffb16a32", 0xf5}, {&(0x7f0000001300)="1af62757f57a57e306c24d96feaae529e966fc17f63defa92de797410abd72ca5a261c325a58fe849b08ef0fb5720fd6acad99469639bbd5e4545ea8b07fb34575c5de0f960c849045a67f29e30e9dae", 0x50}, {&(0x7f0000001380)="dd527d9ad550246760214bb126e20cbc7eb06104af3dd837f471f31386b22698b3e6ba0f7b9c34feac9dd0f0e008ec0ba51cf87a132198737e910720c75b70c6ac34c3ca2056d4479a00c851274c84afebc0b754b2dd9efe5508b1fc187f9445cb2598b4c1c18a0d5ded7c90ba39d665c11180928ecfcae31b7ebe14af827c33aac1c0a9bf1f9451e6cd2aeae86f3ebc", 0x90}, {&(0x7f0000001440)="9a790f7783c8e1670fc4a9a1", 0xc}, {&(0x7f0000001480)="7f0d4833cbb7dca517cbba0d3abc34afd4056c23ed87f90f2a754ba81532a36a", 0x20}, {&(0x7f00000014c0)="1dd2ad51f4862848d4b4f2052b7bf95a97bb3e2509996fa7bef56dcdb4f09c52c7aadd3e62ce5e62e8bb200d178b8aeab495b28b493e8a1cb19aa5fcc7d083255348a32b7eb324748ca3a9ea7c5a739bfc08b888f11ceda2ef8e9a6f9f3bdb9abd980c40d696736d05c514922ab2e59edc53d9d5373db9c6", 0x78}], 0x7, &(0x7f00000015c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x30}}, {{&(0x7f0000001600)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001640)="c1383b0ec829bf69030ee0749bd4a0f7a4103399835cbd2e6928ab8811e7279759792ea9c48527b1c228272748edc37f17e9056ff9831e160f4942e94fcdb9f05f8e4b3828ac445acb2f80c04e59aa1a0b568802db34e48e7226a619a04dbbd937b8fb658db26baaf3ce5ed414e36c08b69a210d4a67216583f09d0092151a3e187b582aeb1985255f80c4937a0f5ff71267e81f0e9674126b71387b4aaeafea65ffe4e8818fa413d8f19a771eb389e8a0dfa1d664dc0eda89bb9f276b04a082934ac24563e647c90bc0f5c79dbf77a3aca8c2b3e66d1f1b9e0cabcce588caf33afc8954eb832e8c8cfeea83715f31bd", 0xf0}, {&(0x7f0000001740)="6e16adddb7274604d2b90b2af9ad90f716c8b7a8bb2066bf186d7586b927b6aa2e214fdbe501b7f59a841671d4f650ae038a6364aa3a0f45a4022509c00ad70b36c98be197786f5ceaf1694497c6b1e9cec020cfa3c6fb0af93d02aa58eeb596fd35402bd99f97541975101a352769430593956dbaf3333727ab2f1c86bc5236b9793c35e7de9d901f7dd303005a9d684bf833d66021d592a99a0c2492c2e05dbf39afc227825ca044a0c2432aafee0cffeac9a4afcfa0200c81b7d29d715f0e0f5ecd38ba457c5cd79497d15c95f2d3", 0xd0}], 0x2, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xbe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x48}}], 0x6, 0x13606de56c208f7d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0x9000}) dup2(r2, r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15.694669ms ago: executing program 3 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000002"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 0s ago: executing program 3 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x10080, &(0x7f0000000580)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffffffffffffffff}}]}) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8) kernel console output (not intermixed with test programs): ="syz.1.64" path="socket:[5088]" dev="sockfs" ino=5088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.747324][ T561] FAULT_INJECTION: forcing a failure. [ 33.747324][ T561] name failslab, interval 1, probability 0, space 0, times 0 [ 33.760127][ T561] CPU: 0 UID: 0 PID: 561 Comm: syz.1.66 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 33.760165][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.760180][ T561] Call Trace: [ 33.760187][ T561] [ 33.760201][ T561] __dump_stack+0x21/0x30 [ 33.760242][ T561] dump_stack_lvl+0x140/0x1c0 [ 33.760276][ T561] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.760313][ T561] dump_stack+0x19/0x20 [ 33.760355][ T561] should_fail_ex+0x3c2/0x510 [ 33.760383][ T561] should_failslab+0xac/0x100 [ 33.760415][ T561] kmem_cache_alloc_noprof+0x42/0x410 [ 33.760440][ T561] ? inet_bind2_bucket_create+0x41/0x610 [ 33.760480][ T561] inet_bind2_bucket_create+0x41/0x610 [ 33.760518][ T561] inet_csk_get_port+0xce4/0x15e0 [ 33.760550][ T561] inet_csk_listen_start+0x133/0x340 [ 33.760580][ T561] __inet_listen_sk+0x270/0x650 [ 33.760617][ T561] ? _raw_spin_unlock_bh+0x54/0x60 [ 33.760656][ T561] ? __cfi___inet_listen_sk+0x10/0x10 [ 33.760694][ T561] inet_listen+0xb0/0x120 [ 33.760730][ T561] __x64_sys_listen+0x1e8/0x270 [ 33.760760][ T561] x64_sys_call+0x2aac/0x2ee0 [ 33.760782][ T561] do_syscall_64+0x57/0xf0 [ 33.760817][ T561] ? clear_bhb_loop+0x50/0xa0 [ 33.760846][ T561] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.760873][ T561] RIP: 0033:0x7f611fd9e159 [ 33.760893][ T561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.760920][ T561] RSP: 002b:00007f6120ccd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 33.760945][ T561] RAX: ffffffffffffffda RBX: 00007f6120025fa0 RCX: 00007f611fd9e159 [ 33.760962][ T561] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000006 [ 33.760982][ T561] RBP: 00007f611fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 33.760996][ T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.761009][ T561] R13: 00007f6120026038 R14: 00007f6120025fa0 R15: 00007ffd6fa72898 [ 33.761029][ T561] [ 34.109490][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.259452][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 34.265905][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.277081][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.284727][ T418] usb 4-1: USB disconnect, device number 5 [ 34.288953][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 34.302079][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 34.309693][ T45] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 34.319792][ T45] usb 3-1: Product: syz [ 34.324206][ T45] usb 3-1: Manufacturer: syz [ 34.338746][ T45] hub 3-1:4.0: USB hub found [ 34.346673][ T36] audit: type=1400 audit(1788812749.380:258): avc: denied { accept } for pid=567 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 34.480896][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.489306][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 34.498725][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.509247][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.520511][ T31] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 34.529838][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.538011][ T31] usb 2-1: Product: syz [ 34.544148][ T31] usb 2-1: Manufacturer: syz [ 34.549002][ T45] hub 3-1:4.0: 5 ports detected [ 34.554513][ T31] usb 2-1: SerialNumber: syz [ 34.559519][ T45] hub 3-1:4.0: insufficient power available to use all downstream ports [ 34.790734][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 34.805194][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 34.822036][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 34.843024][ T31] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3) [ 34.854297][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 34.867439][ T31] usb 2-1: USB disconnect, device number 6 [ 34.885456][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.888617][ T577] kernel profiling enabled (shift: 9) [ 34.909123][ T66] usb 1-1: USB disconnect, device number 7 [ 34.930961][ T581] overlayfs: failed to resolve 'lower': -2 [ 35.150888][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.159544][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.183123][ T45] usb 3-1: USB disconnect, device number 5 [ 35.218500][ T609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.80'. [ 35.297526][ T618] syzkaller0: refused to change device tx_queue_len [ 35.413172][ T623] tipc: Started in network mode [ 35.418168][ T623] tipc: Node identity 4, cluster identity 4711 [ 35.424585][ T623] tipc: Node number set to 4 [ 35.459858][ T629] Bluetooth: hci0: sending frame failed (-49) [ 35.466114][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 35.529416][ T418] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 35.669450][ T418] usb 1-1: device descriptor read/64, error -71 [ 35.759442][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 35.779453][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.909596][ T418] usb 1-1: device descriptor read/64, error -71 [ 35.916991][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 35.925352][ T9] usb 2-1: config 0 has no interface number 0 [ 35.932771][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.943799][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.949545][ T66] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 35.953791][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 35.970165][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.983155][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.991272][ T10] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 36.000393][ T9] usb 2-1: Product: syz [ 36.004575][ T9] usb 2-1: Manufacturer: syz [ 36.009273][ T9] usb 2-1: SerialNumber: syz [ 36.013917][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.022834][ T10] usb 4-1: config 0 descriptor?? [ 36.028755][ T9] usb 2-1: config 0 descriptor?? [ 36.130632][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.140848][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.150139][ T418] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 36.153847][ T66] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.166795][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.174932][ T66] usb 3-1: Product: syz [ 36.179155][ T66] usb 3-1: Manufacturer: syz [ 36.183918][ T66] usb 3-1: SerialNumber: syz [ 36.230499][ T639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.239150][ T639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.289435][ T418] usb 1-1: device descriptor read/64, error -71 [ 36.391195][ T66] usb 3-1: 0:2 : does not exist [ 36.396656][ T66] usb 3-1: unit 9 not found! [ 36.403581][ T66] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 36.413667][ T66] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 36.423510][ T66] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 36.433327][ T66] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 36.443215][ T66] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 36.453104][ T66] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 36.463480][ T66] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 36.471459][ T10] smartjoyplus 0003:0925:0005.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.3-1/input0 [ 36.474948][ T66] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 36.493259][ T10] smartjoyplus 0003:0925:0005.0003: Force feedback for SmartJoy PLUS PS2/USB adapter [ 36.504855][ T66] usb 3-1: USB disconnect, device number 6 [ 36.520311][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.529546][ T418] usb 1-1: device descriptor read/64, error -71 [ 36.649543][ T418] usb usb1-port1: attempt power cycle [ 36.655637][ T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.664249][ T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.666047][ T10] usb 4-1: USB disconnect, device number 6 [ 36.741758][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.752242][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 36.765499][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 36.774962][ T9] usb 2-1: USB disconnect, device number 7 [ 36.943863][ T649] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 36.953055][ T649] netlink: 9 bytes leftover after parsing attributes in process `syz.2.92'. [ 36.965625][ T649] FAULT_INJECTION: forcing a failure. [ 36.965625][ T649] name failslab, interval 1, probability 0, space 0, times 0 [ 36.978496][ T649] CPU: 0 UID: 0 PID: 649 Comm: syz.2.92 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 36.978524][ T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.978534][ T649] Call Trace: [ 36.978539][ T649] [ 36.978546][ T649] __dump_stack+0x21/0x30 [ 36.978632][ T649] dump_stack_lvl+0x140/0x1c0 [ 36.978674][ T649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.978700][ T649] dump_stack+0x19/0x20 [ 36.978724][ T649] should_fail_ex+0x3c2/0x510 [ 36.978744][ T649] should_failslab+0xac/0x100 [ 36.978766][ T649] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 36.978785][ T649] ? shmem_alloc_inode+0x3b/0xd0 [ 36.978807][ T649] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 36.978836][ T649] shmem_alloc_inode+0x3b/0xd0 [ 36.978858][ T649] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 36.978880][ T649] alloc_inode+0x7d/0x270 [ 36.978901][ T649] ? _raw_spin_lock+0x92/0x120 [ 36.978928][ T649] new_inode+0x25/0x1e0 [ 36.978950][ T649] shmem_get_inode+0x352/0xc10 [ 36.978973][ T649] shmem_mknod+0x63/0x200 [ 36.978998][ T649] shmem_create+0x38/0x50 [ 36.979021][ T649] ? __cfi_shmem_create+0x10/0x10 [ 36.979045][ T649] path_openat+0x150b/0x35a0 [ 36.979074][ T649] ? do_filp_open+0x440/0x440 [ 36.979099][ T649] do_filp_open+0x1f2/0x440 [ 36.979122][ T649] ? __cfi_do_filp_open+0x10/0x10 [ 36.979148][ T649] ? alloc_fd+0x4c1/0x570 [ 36.979168][ T649] do_sys_openat2+0x134/0x1d0 [ 36.979193][ T649] ? fput+0x1a4/0x230 [ 36.979215][ T649] ? do_sys_open+0x100/0x100 [ 36.979241][ T649] ? __kasan_check_write+0x18/0x20 [ 36.979258][ T649] __x64_sys_open+0x120/0x150 [ 36.979283][ T649] x64_sys_call+0x131a/0x2ee0 [ 36.979298][ T649] do_syscall_64+0x57/0xf0 [ 36.979323][ T649] ? clear_bhb_loop+0x50/0xa0 [ 36.979367][ T649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.979394][ T649] RIP: 0033:0x7f17cf59e159 [ 36.979416][ T649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.979437][ T649] RSP: 002b:00007f17d04fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 36.979455][ T649] RAX: ffffffffffffffda RBX: 00007f17cf825fa0 RCX: 00007f17cf59e159 [ 36.979467][ T649] RDX: 0000000000000000 RSI: 0000000000048141 RDI: 0000200000000080 [ 36.979478][ T649] RBP: 00007f17cf635024 R08: 0000000000000000 R09: 0000000000000000 [ 36.979489][ T649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.979499][ T649] R13: 00007f17cf826038 R14: 00007f17cf825fa0 R15: 00007ffcb2e0f928 [ 36.979515][ T649] [ 37.234453][ T418] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 37.267201][ T418] usb 1-1: device descriptor read/8, error -71 [ 37.278751][ T649] overlay: ./file0 is not a directory [ 37.400575][ T418] usb 1-1: device descriptor read/8, error -71 [ 37.599436][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.619435][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.639468][ T418] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 37.660456][ T418] usb 1-1: device descriptor read/8, error -71 [ 37.749458][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 37.754689][ T10] usb 4-1: device descriptor read/64, error -71 [ 37.762423][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.774747][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.785074][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 37.798154][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 37.807516][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.816513][ T418] usb 1-1: device descriptor read/8, error -71 [ 37.823328][ T9] usb 3-1: config 0 descriptor?? [ 37.929560][ T418] usb usb1-port1: unable to enumerate USB device [ 37.999431][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.194581][ T671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 38.230616][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 38.230633][ T36] audit: type=1400 audit(1788812753.260:279): avc: denied { read write } for pid=663 comm="syz.2.97" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.239582][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.259688][ T36] audit: type=1400 audit(1788812753.260:280): avc: denied { open } for pid=663 comm="syz.2.97" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.270422][ T665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.299243][ T665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.310404][ T665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.320380][ T36] audit: type=1400 audit(1788812753.260:281): avc: denied { ioctl } for pid=663 comm="syz.2.97" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.322458][ T665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.420723][ T36] audit: type=1400 audit(1788812753.450:282): avc: denied { read } for pid=678 comm="syz.0.100" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.445066][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.449738][ T36] audit: type=1400 audit(1788812753.450:283): avc: denied { open } for pid=678 comm="syz.0.100" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.503975][ T680] syz.0.100 (680): /proc/678/oom_adj is deprecated, please use /proc/678/oom_score_adj instead. [ 38.532941][ T36] audit: type=1400 audit(1788812753.560:284): avc: denied { ioctl } for pid=678 comm="syz.0.100" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.610252][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 38.616377][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 38.627034][ T9] usb 3-1: USB disconnect, device number 7 [ 38.649948][ T683] FAULT_INJECTION: forcing a failure. [ 38.649948][ T683] name failslab, interval 1, probability 0, space 0, times 0 [ 38.662787][ T683] CPU: 0 UID: 0 PID: 683 Comm: syz.0.101 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 38.662823][ T683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.662836][ T683] Call Trace: [ 38.662843][ T683] [ 38.662853][ T683] __dump_stack+0x21/0x30 [ 38.662892][ T683] dump_stack_lvl+0x140/0x1c0 [ 38.662922][ T683] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.662952][ T683] ? __kasan_check_write+0x18/0x20 [ 38.662974][ T683] ? _raw_spin_lock_irq+0x93/0x120 [ 38.663005][ T683] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.663039][ T683] dump_stack+0x19/0x20 [ 38.663068][ T683] should_fail_ex+0x3c2/0x510 [ 38.663093][ T683] should_failslab+0xac/0x100 [ 38.663120][ T683] kmem_cache_alloc_noprof+0x42/0x410 [ 38.663142][ T683] ? __kasan_check_write+0x18/0x20 [ 38.663162][ T683] ? copy_pid_ns+0x25a/0xa60 [ 38.663192][ T683] copy_pid_ns+0x25a/0xa60 [ 38.663221][ T683] ? __cfi_copy_pid_ns+0x10/0x10 [ 38.663249][ T683] ? __kasan_check_write+0x18/0x20 [ 38.663271][ T683] create_new_namespaces+0x275/0x6f0 [ 38.663303][ T683] unshare_nsproxy_namespaces+0x124/0x180 [ 38.663336][ T683] ksys_unshare+0x4f9/0x920 [ 38.663367][ T683] ? fput+0x1a4/0x230 [ 38.663395][ T683] ? __cfi_ksys_unshare+0x10/0x10 [ 38.663475][ T683] __x64_sys_unshare+0x3c/0x50 [ 38.663505][ T683] x64_sys_call+0x2998/0x2ee0 [ 38.663524][ T683] do_syscall_64+0x57/0xf0 [ 38.663557][ T683] ? clear_bhb_loop+0x50/0xa0 [ 38.663582][ T683] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.663605][ T683] RIP: 0033:0x7f7e15b9e159 [ 38.663623][ T683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.663641][ T683] RSP: 002b:00007f7e16a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 38.663664][ T683] RAX: ffffffffffffffda RBX: 00007f7e15e25fa0 RCX: 00007f7e15b9e159 [ 38.663680][ T683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 38.663692][ T683] RBP: 00007f7e15c35024 R08: 0000000000000000 R09: 0000000000000000 [ 38.663705][ T683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.663718][ T683] R13: 00007f7e15e26038 R14: 00007f7e15e25fa0 R15: 00007ffedd692428 [ 38.663737][ T683] [ 38.899438][ T10] usb 4-1: device descriptor read/64, error -71 [ 39.009548][ T10] usb usb4-port1: attempt power cycle [ 39.360598][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.390621][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.489441][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.531328][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.574540][ T690] overlayfs: failed to resolve './file1/file0': -2 [ 39.594106][ T36] audit: type=1400 audit(1788812754.620:285): avc: denied { read append } for pid=691 comm="syz.0.105" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.618038][ T36] audit: type=1400 audit(1788812754.620:286): avc: denied { open } for pid=691 comm="syz.0.105" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.660871][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.669246][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.680243][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.691463][ T9] usb 3-1: string descriptor 0 read error: -22 [ 39.697746][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 39.706857][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.719122][ T9] usb 3-1: selecting invalid altsetting 1 [ 39.726845][ T9] usb 3-1: unit 3 not found! [ 39.769430][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 39.790420][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.849434][ T45] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 39.917160][ T688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.922341][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.926338][ T688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.940918][ T9] usb 3-1: unit 0 not found! [ 39.950653][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.029450][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 40.039623][ T10] usb usb4-port1: unable to enumerate USB device [ 40.142327][ T10] usb 3-1: USB disconnect, device number 8 [ 40.159466][ T45] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 40.309416][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 40.314985][ T45] usb usb1-port1: attempt power cycle [ 40.659427][ T45] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 40.689814][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 40.819480][ T45] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 40.839914][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 40.845394][ T45] usb usb1-port1: unable to enumerate USB device [ 40.902250][ T36] audit: type=1400 audit(1788812755.930:287): avc: denied { write } for pid=701 comm="syz.3.108" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.936813][ T36] audit: type=1400 audit(1788812755.960:288): avc: denied { ioctl } for pid=701 comm="syz.3.108" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.999708][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 41.129476][ T10] usb 3-1: device descriptor read/64, error -71 [ 41.289718][ T710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 41.369472][ T10] usb 3-1: device descriptor read/64, error -71 [ 41.539470][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.609467][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 41.669481][ T9] usb 2-1: device descriptor read/64, error -71 [ 41.739392][ T10] usb 3-1: device descriptor read/64, error -71 [ 41.909453][ T9] usb 2-1: device descriptor read/64, error -71 [ 41.989402][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.099627][ T10] usb usb3-port1: attempt power cycle [ 42.159541][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.289457][ T9] usb 2-1: device descriptor read/64, error -71 [ 42.439451][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 42.470642][ T10] usb 3-1: device descriptor read/8, error -71 [ 42.499446][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 42.529462][ T9] usb 2-1: device descriptor read/64, error -71 [ 42.605779][ T10] usb 3-1: device descriptor read/8, error -71 [ 42.639562][ T9] usb usb2-port1: attempt power cycle [ 42.649575][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 42.656061][ T45] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 42.664691][ T45] usb 4-1: config 0 has no interface number 0 [ 42.670988][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 42.681075][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 42.692599][ T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 42.701748][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.709789][ T45] usb 4-1: Product: syz [ 42.713967][ T45] usb 4-1: Manufacturer: syz [ 42.718581][ T45] usb 4-1: SerialNumber: syz [ 42.724013][ T45] usb 4-1: config 0 descriptor?? [ 42.729328][ T727] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 42.736591][ T727] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 42.849424][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 42.870826][ T10] usb 3-1: device descriptor read/8, error -71 [ 42.946060][ T727] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 42.953656][ T727] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 42.979449][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.999492][ T642] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 43.008289][ T10] usb 3-1: device descriptor read/8, error -71 [ 43.014605][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.129526][ T10] usb usb3-port1: unable to enumerate USB device [ 43.149539][ T642] usb 1-1: device descriptor read/64, error -71 [ 43.156901][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.163729][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 43.389431][ T642] usb 1-1: device descriptor read/64, error -71 [ 43.399430][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.420642][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.550573][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.629427][ T642] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 43.659504][ T9] usb usb2-port1: unable to enumerate USB device [ 43.758757][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 43.758775][ T36] audit: type=1400 audit(1788812758.780:297): avc: denied { bind } for pid=730 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.769955][ T642] usb 1-1: device descriptor read/64, error -71 [ 43.991895][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 44.002255][ T45] asix 4-1:0.34: probe with driver asix failed with error -71 [ 44.011233][ T45] usb 4-1: USB disconnect, device number 11 [ 44.029713][ T642] usb 1-1: device descriptor read/64, error -71 [ 44.081346][ T742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.090350][ T742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.139567][ T642] usb usb1-port1: attempt power cycle [ 44.329445][ T66] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.351999][ T745] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 44.367409][ T36] audit: type=1400 audit(1788812759.390:298): avc: denied { rename } for pid=744 comm="syz.1.122" name="file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.446457][ T13] bridge_slave_1: left allmulticast mode [ 44.452842][ T13] bridge_slave_1: left promiscuous mode [ 44.458622][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.466857][ T13] bridge_slave_0: left allmulticast mode [ 44.472706][ T13] bridge_slave_0: left promiscuous mode [ 44.478477][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.479546][ T642] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 44.486149][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 44.517826][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.532077][ T66] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 44.534182][ T642] usb 1-1: device descriptor read/8, error -71 [ 44.551628][ T66] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 44.563060][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.577955][ T66] usb 3-1: SerialNumber: syz [ 44.644760][ T13] veth1_macvtap: left promiscuous mode [ 44.652194][ T13] veth0_vlan: left promiscuous mode [ 44.700396][ T642] usb 1-1: device descriptor read/8, error -71 [ 44.707886][ T36] audit: type=1400 audit(1788812759.730:299): avc: denied { mounton } for pid=751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.783360][ T36] audit: type=1400 audit(1788812759.810:300): avc: denied { setopt } for pid=750 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.791052][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.803531][ T36] audit: type=1400 audit(1788812759.820:301): avc: denied { read } for pid=750 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.814899][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.836617][ T10] usb 3-1: USB disconnect, device number 13 [ 44.843668][ T751] bridge_slave_0: entered allmulticast mode [ 44.850320][ T751] bridge_slave_0: entered promiscuous mode [ 44.857317][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.864497][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.872319][ T751] bridge_slave_1: entered allmulticast mode [ 44.878652][ T751] bridge_slave_1: entered promiscuous mode [ 44.939710][ T642] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 44.953216][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.960316][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.961494][ T642] usb 1-1: device descriptor read/8, error -71 [ 44.977162][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.984258][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.011715][ T751] veth0_vlan: entered promiscuous mode [ 45.024697][ T751] veth1_macvtap: entered promiscuous mode [ 45.046098][ T36] audit: type=1400 audit(1788812760.070:302): avc: denied { mounton } for pid=751 comm="syz-executor" path="/root/syzkaller.WR9bpq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.100574][ T642] usb 1-1: device descriptor read/8, error -71 [ 45.219774][ T642] usb usb1-port1: unable to enumerate USB device [ 45.234355][ T768] FAULT_INJECTION: forcing a failure. [ 45.234355][ T768] name failslab, interval 1, probability 0, space 0, times 0 [ 45.247197][ T768] CPU: 0 UID: 0 PID: 768 Comm: syz.4.131 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 45.247237][ T768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.247254][ T768] Call Trace: [ 45.247263][ T768] [ 45.247273][ T768] __dump_stack+0x21/0x30 [ 45.247321][ T768] dump_stack_lvl+0x140/0x1c0 [ 45.247361][ T768] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.247400][ T768] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 45.247446][ T768] dump_stack+0x19/0x20 [ 45.247483][ T768] should_fail_ex+0x3c2/0x510 [ 45.247517][ T768] should_failslab+0xac/0x100 [ 45.247552][ T768] kmem_cache_alloc_noprof+0x42/0x410 [ 45.247581][ T768] ? p9_client_prepare_req+0x175/0xa50 [ 45.247623][ T768] p9_client_prepare_req+0x175/0xa50 [ 45.247661][ T768] ? __se_sys_mount+0x2bf/0x480 [ 45.247691][ T768] ? do_syscall_64+0x57/0xf0 [ 45.247731][ T768] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.247763][ T768] ? trace_raw_output_9p_fid_ref+0x190/0x190 [ 45.247807][ T768] p9_client_rpc+0x191/0xb50 [ 45.247841][ T768] ? p9_fid_create+0x3d0/0x3d0 [ 45.247874][ T768] ? __kasan_check_write+0x18/0x20 [ 45.247901][ T768] ? p9_conn_create+0x4f2/0x590 [ 45.247943][ T768] ? p9_fd_create+0x2f4/0x4c0 [ 45.247970][ T768] p9_client_create+0xa26/0x12d0 [ 45.248005][ T768] ? __cfi_p9_client_create+0x10/0x10 [ 45.248038][ T768] ? __kasan_kmalloc+0x96/0xb0 [ 45.248071][ T768] ? __kmalloc_cache_noprof+0x23c/0x470 [ 45.248101][ T768] ? v9fs_mount+0xc1/0x9d0 [ 45.248134][ T768] ? kasan_save_alloc_info+0x3a/0x50 [ 45.248160][ T768] ? __kasan_kmalloc+0x96/0xb0 [ 45.248207][ T768] ? kstrdup+0x7b/0x130 [ 45.248248][ T768] ? __asan_memset+0x39/0x50 [ 45.248276][ T768] v9fs_session_init+0x1c4/0x18a0 [ 45.248307][ T768] ? __cfi_v9fs_session_init+0x10/0x10 [ 45.248335][ T768] ? kasan_save_alloc_info+0x3a/0x50 [ 45.248361][ T768] ? __kasan_kmalloc+0x96/0xb0 [ 45.248395][ T768] ? __kmalloc_cache_noprof+0x23c/0x470 [ 45.248425][ T768] ? v9fs_mount+0xc1/0x9d0 [ 45.248458][ T768] v9fs_mount+0xdb/0x9d0 [ 45.248489][ T768] ? __cfi_v9fs_mount+0x10/0x10 [ 45.248520][ T768] ? selinux_capable+0x38/0x50 [ 45.248557][ T768] legacy_get_tree+0x106/0x1b0 [ 45.248595][ T768] ? __cfi_v9fs_mount+0x10/0x10 [ 45.248629][ T768] vfs_get_tree+0x9e/0x290 [ 45.248659][ T768] do_new_mount+0x251/0xb40 [ 45.248687][ T768] ? security_capable+0x44/0x130 [ 45.248721][ T768] path_mount+0x66a/0xff0 [ 45.248749][ T768] ? putname+0x113/0x150 [ 45.248781][ T768] __se_sys_mount+0x2bf/0x480 [ 45.248812][ T768] ? __x64_sys_mount+0xf0/0xf0 [ 45.248842][ T768] ? __kasan_check_write+0x18/0x20 [ 45.248870][ T768] ? fpregs_restore_userregs+0x11c/0x260 [ 45.248905][ T768] __x64_sys_mount+0xc3/0xf0 [ 45.248935][ T768] x64_sys_call+0x2021/0x2ee0 [ 45.248961][ T768] do_syscall_64+0x57/0xf0 [ 45.249001][ T768] ? clear_bhb_loop+0x50/0xa0 [ 45.249033][ T768] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.249063][ T768] RIP: 0033:0x7f92c1b9e159 [ 45.249087][ T768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.249110][ T768] RSP: 002b:00007f92c2a54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.249139][ T768] RAX: ffffffffffffffda RBX: 00007f92c1e25fa0 RCX: 00007f92c1b9e159 [ 45.249159][ T768] RDX: 0000200000000380 RSI: 0000200000000680 RDI: 0000000000000000 [ 45.249177][ T768] RBP: 00007f92c1c35024 R08: 0000200000000280 R09: 0000000000000000 [ 45.249205][ T768] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000000 [ 45.249230][ T768] R13: 00007f92c1e26038 R14: 00007f92c1e25fa0 R15: 00007ffc0313aed8 [ 45.249247][ T768] [ 45.660654][ T773] FAULT_INJECTION: forcing a failure. [ 45.660654][ T773] name failslab, interval 1, probability 0, space 0, times 0 [ 45.681188][ T773] CPU: 0 UID: 0 PID: 773 Comm: syz.3.135 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 45.681223][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.681237][ T773] Call Trace: [ 45.681244][ T773] [ 45.681252][ T773] __dump_stack+0x21/0x30 [ 45.681290][ T773] dump_stack_lvl+0x140/0x1c0 [ 45.681322][ T773] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.681356][ T773] dump_stack+0x19/0x20 [ 45.681387][ T773] should_fail_ex+0x3c2/0x510 [ 45.681414][ T773] should_failslab+0xac/0x100 [ 45.681443][ T773] __kmalloc_node_noprof+0x69/0x500 [ 45.681469][ T773] ? __kvmalloc_node_noprof+0x128/0x300 [ 45.681492][ T773] __kvmalloc_node_noprof+0x128/0x300 [ 45.681513][ T773] ? __kasan_kmalloc+0x96/0xb0 [ 45.681541][ T773] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 45.681561][ T773] ? udmabuf_create+0xe2/0x1250 [ 45.681584][ T773] udmabuf_create+0x424/0x1250 [ 45.681614][ T773] ? ioctl_has_perm+0x39a/0x500 [ 45.681640][ T773] ? proc_fail_nth_write+0x184/0x220 [ 45.681675][ T773] ? udmabuf_ioctl+0x310/0x310 [ 45.681696][ T773] ? selinux_file_ioctl+0x732/0x1480 [ 45.681719][ T773] ? vfs_write+0xbcf/0xfd0 [ 45.681742][ T773] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 45.681766][ T773] ? __kasan_check_write+0x18/0x20 [ 45.681789][ T773] udmabuf_ioctl+0x1f4/0x310 [ 45.681811][ T773] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 45.681835][ T773] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.681865][ T773] ? security_file_ioctl+0x3e/0x110 [ 45.681886][ T773] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 45.681907][ T773] __se_sys_ioctl+0x126/0x1b0 [ 45.681935][ T773] __x64_sys_ioctl+0x7f/0xa0 [ 45.681963][ T773] x64_sys_call+0x1878/0x2ee0 [ 45.681982][ T773] do_syscall_64+0x57/0xf0 [ 45.682014][ T773] ? clear_bhb_loop+0x50/0xa0 [ 45.682040][ T773] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.682065][ T773] RIP: 0033:0x7f9543d9e159 [ 45.682083][ T773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.682102][ T773] RSP: 002b:00007f9544b7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.682129][ T773] RAX: ffffffffffffffda RBX: 00007f9544025fa0 RCX: 00007f9543d9e159 [ 45.682147][ T773] RDX: 0000200000000040 RSI: 0000000040187542 RDI: 0000000000000003 [ 45.682163][ T773] RBP: 00007f9543e35024 R08: 0000000000000000 R09: 0000000000000000 [ 45.682178][ T773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.682191][ T773] R13: 00007f9544026038 R14: 00007f9544025fa0 R15: 00007ffd02cbf9d8 [ 45.682211][ T773] [ 45.967096][ T36] audit: type=1400 audit(1788812760.990:303): avc: denied { map } for pid=772 comm="syz.3.135" path="pipe:[2850]" dev="pipefs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 46.198986][ T791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.237192][ T36] audit: type=1400 audit(1788812761.260:304): avc: denied { map } for pid=793 comm="syz.0.139" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 46.281889][ T798] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 46.294463][ T798] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 46.307760][ T805] x_tables: duplicate entry at hook 2 [ 46.329390][ T36] audit: type=1400 audit(1788812761.350:305): avc: denied { mounton } for pid=801 comm="syz.0.142" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.379388][ T36] audit: type=1400 audit(1788812761.400:306): avc: denied { ioctl } for pid=801 comm="syz.0.142" path="socket:[7613]" dev="sockfs" ino=7613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.760423][ T820] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 46.958070][ T832] FAULT_INJECTION: forcing a failure. [ 46.958070][ T832] name failslab, interval 1, probability 0, space 0, times 0 [ 46.970964][ T832] CPU: 0 UID: 0 PID: 832 Comm: syz.3.149 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 46.971001][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.971015][ T832] Call Trace: [ 46.971041][ T832] [ 46.971049][ T832] __dump_stack+0x21/0x30 [ 46.971087][ T832] dump_stack_lvl+0x140/0x1c0 [ 46.971117][ T832] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.971147][ T832] ? __kasan_check_write+0x18/0x20 [ 46.971169][ T832] ? finish_task_switch+0x1d9/0x770 [ 46.971198][ T832] dump_stack+0x19/0x20 [ 46.971226][ T832] should_fail_ex+0x3c2/0x510 [ 46.971252][ T832] should_failslab+0xac/0x100 [ 46.971279][ T832] __kmalloc_cache_noprof+0x41/0x470 [ 46.971303][ T832] ? tcp_sendmsg_fastopen+0x1de/0x6f0 [ 46.971332][ T832] ? __sched_text_start+0x10/0x10 [ 46.971353][ T832] ? plist_add+0x4d4/0x570 [ 46.971382][ T832] tcp_sendmsg_fastopen+0x1de/0x6f0 [ 46.971412][ T832] tcp_sendmsg_locked+0x4431/0x4ac0 [ 46.971440][ T832] ? avc_has_perm_noaudit+0x26b/0x360 [ 46.971467][ T832] ? avc_has_perm_noaudit+0x289/0x360 [ 46.971494][ T832] ? __kasan_check_write+0x18/0x20 [ 46.971516][ T832] ? _raw_spin_lock_bh+0x96/0x130 [ 46.971548][ T832] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 46.971579][ T832] ? __cfi_futex_wake_mark+0x10/0x10 [ 46.971600][ T832] ? _raw_spin_unlock_bh+0x54/0x60 [ 46.971630][ T832] ? lock_sock_nested+0x216/0x2a0 [ 46.971651][ T832] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 46.971680][ T832] ? check_stack_object+0x10f/0x150 [ 46.971702][ T832] ? __check_object_size+0xdc/0x870 [ 46.971724][ T832] ? __cfi_tcp_sendmsg+0x10/0x10 [ 46.971751][ T832] tcp_sendmsg+0x3e/0xd0 [ 46.971778][ T832] ? __cfi_tcp_sendmsg+0x10/0x10 [ 46.971804][ T832] inet6_sendmsg+0xb7/0x120 [ 46.971835][ T832] ? __cfi_inet6_sendmsg+0x10/0x10 [ 46.971867][ T832] __sys_sendto+0x4aa/0x6e0 [ 46.971893][ T832] ? __cfi___sys_sendto+0x10/0x10 [ 46.971920][ T832] ? __se_sys_futex+0x13c/0x320 [ 46.971951][ T832] ? __kasan_check_write+0x18/0x20 [ 46.971977][ T832] __x64_sys_sendto+0xe9/0x100 [ 46.972003][ T832] x64_sys_call+0x2c2c/0x2ee0 [ 46.972028][ T832] do_syscall_64+0x57/0xf0 [ 46.972059][ T832] ? clear_bhb_loop+0x50/0xa0 [ 46.972084][ T832] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.972108][ T832] RIP: 0033:0x7f9543d9e159 [ 46.972126][ T832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.972144][ T832] RSP: 002b:00007f9544b7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 46.972168][ T832] RAX: ffffffffffffffda RBX: 00007f9544025fa0 RCX: 00007f9543d9e159 [ 46.972184][ T832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 46.972197][ T832] RBP: 00007f9543e35024 R08: 00002000000001c0 R09: 000000000000001c [ 46.972211][ T832] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 46.972225][ T832] R13: 00007f9544026038 R14: 00007f9544025fa0 R15: 00007ffd02cbf9d8 [ 46.972244][ T832] [ 47.079513][ T45] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 47.400399][ T844] capability: warning: `syz.3.152' uses deprecated v2 capabilities in a way that may be insecure [ 47.403592][ T843] rust_binder: 842:843 got transaction to invalid handle 1 [ 47.418609][ T843] rust_binder: 842:843 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 47.472530][ T849] overlayfs: invalid redirect ((null)) [ 47.490496][ T45] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.502694][ T45] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.519330][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 47.534632][ T45] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 47.553968][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.562105][ T862] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.569384][ T862] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.577771][ T862] bridge0: entered allmulticast mode [ 47.584240][ T45] usb 5-1: config 0 descriptor?? [ 47.598727][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.605891][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.613264][ T862] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.620353][ T862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.629733][ T861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.638869][ T861] MTRR 1 not used [ 47.660738][ T862] bridge0: entered promiscuous mode [ 47.699512][ T642] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 47.710955][ T866] capability: warning: `syz.3.158' uses 32-bit capabilities (legacy support in use) [ 47.849408][ T642] usb 1-1: Using ep0 maxpacket: 16 [ 47.856004][ T642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.869614][ T642] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.882867][ T642] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.899397][ T642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.909658][ T642] usb 1-1: Product: syz [ 47.914106][ T642] usb 1-1: Manufacturer: syz [ 47.918924][ T642] usb 1-1: SerialNumber: syz [ 47.955120][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 47.989460][ T313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 48.002161][ T826] netlink: 'syz.4.146': attribute type 17 has an invalid length. [ 48.011902][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 48.029445][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 48.042285][ T45] usb 5-1: USB disconnect, device number 2 [ 48.142591][ T642] usb 1-1: 0:2 : does not exist [ 48.145622][ T339] rust_binder: 842: undelivered TRANSACTION_ERROR: 29201 [ 48.161399][ T642] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 48.181531][ T313] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 48.192761][ T642] usb 1-1: USB disconnect, device number 20 [ 48.199254][ T313] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 48.209284][ T313] usb 4-1: Product: syz [ 48.214827][ T313] usb 4-1: config 0 descriptor?? [ 48.222108][ T313] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 48.222722][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.250055][ T313] usb 4-1: Detected FT232H [ 48.425831][ T313] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 48.434395][ T313] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 48.441535][ T313] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 48.448800][ T313] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.458314][ T313] usb 4-1: USB disconnect, device number 12 [ 48.465530][ T313] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.475111][ T313] ftdi_sio 4-1:0.0: device disconnected [ 48.543991][ T880] FAULT_INJECTION: forcing a failure. [ 48.543991][ T880] name failslab, interval 1, probability 0, space 0, times 0 [ 48.556801][ T880] CPU: 1 UID: 0 PID: 880 Comm: syz.4.163 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 48.556845][ T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.556863][ T880] Call Trace: [ 48.556872][ T880] [ 48.556889][ T880] __dump_stack+0x21/0x30 [ 48.556921][ T880] dump_stack_lvl+0x140/0x1c0 [ 48.556948][ T880] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.556983][ T880] dump_stack+0x19/0x20 [ 48.557009][ T880] should_fail_ex+0x3c2/0x510 [ 48.557032][ T880] should_failslab+0xac/0x100 [ 48.557083][ T880] kmem_cache_alloc_noprof+0x42/0x410 [ 48.557113][ T880] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 48.557149][ T880] ? alloc_empty_file+0xbf/0x270 [ 48.557175][ T880] ? arch_stack_walk+0x10a/0x170 [ 48.557194][ T880] alloc_empty_file+0xbf/0x270 [ 48.557220][ T880] path_openat+0xf4/0x35a0 [ 48.557245][ T880] ? stack_depot_save_flags+0x38/0x800 [ 48.557270][ T880] ? do_pte_missing+0x28e9/0x4440 [ 48.557294][ T880] ? schedule+0xc5/0x240 [ 48.557313][ T880] ? kasan_save_track+0x4f/0x80 [ 48.557334][ T880] ? kasan_save_track+0x3e/0x80 [ 48.557355][ T880] ? kasan_save_alloc_info+0x3a/0x50 [ 48.557372][ T880] ? __kasan_slab_alloc+0x73/0x90 [ 48.557395][ T880] ? getname+0x1b/0x30 [ 48.557415][ T880] ? do_sys_openat2+0xda/0x1d0 [ 48.557442][ T880] ? __x64_sys_openat+0x13a/0x170 [ 48.557472][ T880] ? x64_sys_call+0xe69/0x2ee0 [ 48.557489][ T880] ? do_syscall_64+0x57/0xf0 [ 48.557519][ T880] ? do_filp_open+0x440/0x440 [ 48.557547][ T880] do_filp_open+0x1f2/0x440 [ 48.557573][ T880] ? __cfi_do_filp_open+0x10/0x10 [ 48.557603][ T880] ? alloc_fd+0x4c1/0x570 [ 48.557626][ T880] do_sys_openat2+0x134/0x1d0 [ 48.557654][ T880] ? do_sys_open+0x100/0x100 [ 48.557681][ T880] ? __kasan_check_write+0x18/0x20 [ 48.557700][ T880] ? do_user_addr_fault+0xbf5/0x1230 [ 48.557730][ T880] ? pipe_fcntl+0x520/0x520 [ 48.557751][ T880] __x64_sys_openat+0x13a/0x170 [ 48.557780][ T880] x64_sys_call+0xe69/0x2ee0 [ 48.557797][ T880] do_syscall_64+0x57/0xf0 [ 48.557825][ T880] ? clear_bhb_loop+0x50/0xa0 [ 48.557848][ T880] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.557868][ T880] RIP: 0033:0x7f92c1b5e98e [ 48.557884][ T880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.557900][ T880] RSP: 002b:00007f92c2a51ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.557920][ T880] RAX: ffffffffffffffda RBX: 00007f92c2a546c0 RCX: 00007f92c1b5e98e [ 48.557935][ T880] RDX: 0000000000000002 RSI: 00007f92c1c343aa RDI: ffffffffffffff9c [ 48.557956][ T880] RBP: 00007f92c1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 48.557969][ T880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000072 [ 48.557980][ T880] R13: 0000200000000080 R14: 0000000000000001 R15: 00007ffc0313aed8 [ 48.557997][ T880] [ 48.873682][ T887] SELinux: Context system_u:object_r:lib_t:s0 is not valid (left unmapped). [ 48.882993][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 48.883010][ T36] audit: type=1400 audit(1788812763.910:316): avc: denied { relabelto } for pid=886 comm="syz.0.165" name="file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:lib_t:s0" [ 48.914587][ T36] audit: type=1400 audit(1788812763.910:317): avc: denied { associate } for pid=886 comm="syz.0.165" name="file0" dev="tmpfs" ino=182 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:lib_t:s0" [ 48.961084][ T890] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 48.972183][ T890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.131343][ T36] audit: type=1400 audit(1788812764.160:318): avc: denied { mounton } for pid=894 comm="syz.2.167" path="/proc/147/task" dev="proc" ino=8896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.274184][ T913] MTRR 1 not used [ 49.296289][ T36] audit: type=1400 audit(1788812764.320:319): avc: denied { create } for pid=912 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.335503][ T916] incfs: Can't find or create .index dir in ./file0 [ 49.342436][ T36] audit: type=1400 audit(1788812764.360:320): avc: denied { mounton } for pid=915 comm="syz.3.173" path="/47/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 49.365188][ T916] incfs: mount failed -1 [ 49.539414][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 49.689411][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 49.695710][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.706098][ T45] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.717089][ T45] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.726892][ T45] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 49.739737][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 49.746393][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 49.755813][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.764588][ T45] usb 3-1: config 0 descriptor?? [ 49.851629][ T36] audit: type=1400 audit(1788812764.880:321): avc: denied { create } for pid=930 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.871536][ T36] audit: type=1400 audit(1788812764.880:322): avc: denied { ioctl } for pid=930 comm="syz.0.176" path="socket:[9135]" dev="sockfs" ino=9135 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.924879][ T36] audit: type=1400 audit(1788812764.950:323): avc: denied { search } for pid=934 comm="syz.0.178" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.178822][ T36] audit: type=1400 audit(1788812765.200:324): avc: denied { remount } for pid=952 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.209545][ T642] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 50.369435][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 50.378663][ T959] MTRR 1 not used [ 50.382646][ T36] audit: type=1400 audit(1788812765.400:325): avc: denied { mounton } for pid=912 comm="syz.2.172" path="/47/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 50.407349][ T642] usb 1-1: Using ep0 maxpacket: 16 [ 50.413156][ T642] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 50.417276][ T957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.438466][ T642] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 50.443497][ T957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.453676][ T642] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 50.463978][ T642] usb 1-1: Product: syz [ 50.468502][ T642] usb 1-1: Manufacturer: syz [ 50.489450][ T339] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 50.490654][ T642] r8152-cfgselector 1-1: Unknown version 0x0000 [ 50.503889][ T642] r8152-cfgselector 1-1: config 0 descriptor?? [ 50.510410][ T9] usb 5-1: device descriptor read/64, error -71 [ 50.650685][ T339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.660884][ T339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.689411][ T339] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 50.698546][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.738924][ T965] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 50.749396][ T9] usb 5-1: device descriptor read/64, error -71 [ 50.761394][ T642] r8152-cfgselector 1-1: bad CDC descriptors [ 50.772202][ T642] r8152-cfgselector 1-1: USB disconnect, device number 21 [ 50.989408][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 51.119548][ T9] usb 5-1: device descriptor read/64, error -71 [ 51.126865][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.137843][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.152434][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.171770][ T969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.182996][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.193466][ T969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.206189][ T642] usb 4-1: USB disconnect, device number 13 [ 51.400920][ T975] fuse: Bad value for 'fd' [ 51.859406][ T9] usb 5-1: device descriptor read/64, error -71 [ 51.979521][ T9] usb usb5-port1: attempt power cycle [ 52.249730][ T998] netlink: 68 bytes leftover after parsing attributes in process `syz.3.193'. [ 52.329440][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 52.346309][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 52.355730][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.362057][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 52.378118][ T45] usb 3-1: USB disconnect, device number 14 [ 52.510463][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.670444][ T1010] ./dev/sda1: Can't lookup blockdev [ 52.749421][ T45] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 52.779425][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 52.800479][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.889433][ T45] usb 3-1: device descriptor read/64, error -71 [ 52.930512][ T9] usb 5-1: device descriptor read/8, error -71 [ 53.039545][ T9] usb usb5-port1: unable to enumerate USB device [ 53.129469][ T45] usb 3-1: device descriptor read/64, error -71 [ 53.189462][ T66] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 53.340582][ T66] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.353605][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.360428][ T66] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 53.369695][ T45] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 53.377371][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.386675][ T66] usb 1-1: config 0 descriptor?? [ 53.509409][ T45] usb 3-1: device descriptor read/64, error -71 [ 53.750651][ T45] usb 3-1: device descriptor read/64, error -71 [ 53.794549][ T66] ryos 0003:1E7D:3232.0004: report_id 3238645963 is invalid [ 53.802026][ T66] ryos 0003:1E7D:3232.0004: item 0 4 1 8 parsing failed [ 53.809151][ T66] ryos 0003:1E7D:3232.0004: parse failed [ 53.815336][ T66] ryos 0003:1E7D:3232.0004: probe with driver ryos failed with error -22 [ 53.859529][ T45] usb usb3-port1: attempt power cycle [ 53.979408][ T339] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 53.997850][ T66] usb 1-1: USB disconnect, device number 22 [ 54.130676][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.141738][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.151722][ T339] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 54.160891][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.169796][ T339] usb 5-1: config 0 descriptor?? [ 54.209424][ T45] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 54.230868][ T45] usb 3-1: device descriptor read/8, error -71 [ 54.360527][ T45] usb 3-1: device descriptor read/8, error -71 [ 54.578289][ T339] usbhid 5-1:0.0: can't add hid device: -71 [ 54.584439][ T339] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 54.593317][ T339] usb 5-1: USB disconnect, device number 7 [ 54.599391][ T45] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 54.620551][ T45] usb 3-1: device descriptor read/8, error -71 [ 54.703834][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 54.703853][ T36] audit: type=1400 audit(1788812769.730:335): avc: denied { bind } for pid=1034 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.730206][ T36] audit: type=1400 audit(1788812769.740:336): avc: denied { map } for pid=1034 comm="syz.0.206" path="socket:[8168]" dev="sockfs" ino=8168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.753439][ T36] audit: type=1400 audit(1788812769.740:337): avc: denied { read write } for pid=1034 comm="syz.0.206" path="socket:[8168]" dev="sockfs" ino=8168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.777044][ T36] audit: type=1400 audit(1788812769.740:338): avc: denied { getopt } for pid=1034 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.781260][ T45] usb 3-1: device descriptor read/8, error -71 [ 54.832372][ T36] audit: type=1400 audit(1788812769.860:339): avc: denied { getopt } for pid=1037 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.919588][ T45] usb usb3-port1: unable to enumerate USB device [ 54.973561][ T1044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.129506][ T339] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 55.164317][ T1049] mmap: syz.0.212 (1049): VmData 29188096 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 55.277099][ T1057] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 55.286127][ T1057] netlink: 104 bytes leftover after parsing attributes in process `syz.0.215'. [ 55.299431][ T339] usb 4-1: Using ep0 maxpacket: 16 [ 55.305806][ T339] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 55.317412][ T339] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 55.330785][ T339] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 55.342471][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.354044][ T339] usb 4-1: config 0 descriptor?? [ 55.460240][ T66] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 55.572545][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.581273][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.611369][ T66] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 55.623792][ T66] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 55.632968][ T66] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 55.641448][ T66] usb 5-1: Product: syz [ 55.645676][ T66] usb 5-1: Manufacturer: syz [ 55.653234][ T66] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 55.704979][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.705016][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.711440][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.717726][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.724054][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.730454][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.736666][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.742917][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.749207][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.755446][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.761791][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.768006][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.774256][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.780492][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.786671][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.792943][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.799152][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.805426][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.807484][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.814367][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.821008][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.827445][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.840105][ T339] hid (null): bogus close delimiter [ 55.840134][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.851582][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.857885][ T66] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 55.861550][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.870629][ T339] itetech 0003:048D:8595.0005: unexpected long global item [ 55.887597][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.887639][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.887640][ T66] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 55.901068][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.908946][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.915568][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.919461][ T339] itetech 0003:048D:8595.0005: probe with driver itetech failed with error -22 [ 55.922385][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.937143][ T66] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 55.948815][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.950710][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.959146][ T66] usb 5-1: USB disconnect, device number 8 [ 55.975744][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 55.975779][ T1072] rust_binder: Write failure EINVAL in pid:172 [ 56.110057][ T9] usb 4-1: USB disconnect, device number 14 [ 56.269404][ T10] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 56.379436][ T45] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 56.403501][ T10] usb 1-1: device descriptor read/64, error -71 [ 56.410288][ T36] audit: type=1400 audit(1788812771.430:340): avc: denied { getopt } for pid=1088 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.530580][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 56.548109][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 56.559007][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 56.577164][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.586393][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.594539][ T45] usb 3-1: Product: syz [ 56.598760][ T45] usb 3-1: Manufacturer: syz [ 56.603435][ T45] usb 3-1: SerialNumber: syz [ 56.609264][ T1087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.679401][ T10] usb 1-1: device descriptor read/64, error -71 [ 56.747715][ T36] audit: type=1400 audit(1788812771.770:341): avc: denied { create } for pid=1126 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.789874][ T1129] : renamed from bridge0 (while UP) [ 56.798267][ T36] audit: type=1400 audit(1788812771.820:342): avc: denied { create } for pid=1128 comm="syz.4.230" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.799512][ T1129] incfs: Error accessing: ./file0. [ 56.820372][ T1087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.824370][ T1129] incfs: mount failed -20 [ 56.832138][ T36] audit: type=1400 audit(1788812771.820:343): avc: denied { mounton } for pid=1128 comm="syz.4.230" path="/22/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.858599][ T1087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.866042][ T36] audit: type=1400 audit(1788812771.860:344): avc: denied { write } for pid=1128 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.889398][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 56.919453][ T10] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 57.049425][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 57.054564][ T10] usb 1-1: device descriptor read/64, error -71 [ 57.061970][ T9] usb 4-1: config 3 has an invalid interface number: 140 but max is 0 [ 57.070293][ T9] usb 4-1: config 3 has no interface number 0 [ 57.076406][ T9] usb 4-1: config 3 interface 140 has no altsetting 0 [ 57.085358][ T9] usb 4-1: string descriptor 0 read error: -22 [ 57.089026][ T45] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 57.091968][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=0ed1, bcdDevice=a0.70 [ 57.097675][ T45] cdc_ncm 3-1:1.0: bind() failure [ 57.106645][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.115474][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 57.126716][ T45] cdc_ncm 3-1:1.1: bind() failure [ 57.130935][ T9] usb 4-1: Found UVC 0.00 device (16d0:0ed1) [ 57.144275][ T9] usb 4-1: No valid video chain found. [ 57.269701][ T642] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.299438][ T10] usb 1-1: device descriptor read/64, error -71 [ 57.329469][ T45] usb 4-1: USB disconnect, device number 15 [ 57.409510][ T10] usb usb1-port1: attempt power cycle [ 57.419432][ T642] usb 5-1: Using ep0 maxpacket: 8 [ 57.425745][ T642] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 57.434150][ T642] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 57.442382][ T642] usb 5-1: config 0 has no interface number 0 [ 57.448555][ T642] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 57.458454][ T642] usb 5-1: config 0 interface 200 has no altsetting 0 [ 57.468719][ T642] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 57.477921][ T642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.486129][ T642] usb 5-1: Product: syz [ 57.490573][ T642] usb 5-1: Manufacturer: syz [ 57.495179][ T642] usb 5-1: SerialNumber: syz [ 57.500781][ T642] usb 5-1: config 0 descriptor?? [ 57.710730][ T642] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input7 [ 57.724001][ T642] usb 5-1: USB disconnect, device number 9 [ 57.759444][ T10] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 57.780659][ T10] usb 1-1: device descriptor read/8, error -71 [ 57.859826][ T1154] netlink: 92 bytes leftover after parsing attributes in process `syz.3.236'. [ 57.922970][ T10] usb 1-1: device descriptor read/8, error -71 [ 58.169467][ T10] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 58.190550][ T10] usb 1-1: device descriptor read/8, error -71 [ 58.320472][ T10] usb 1-1: device descriptor read/8, error -71 [ 58.429560][ T10] usb usb1-port1: unable to enumerate USB device [ 58.779462][ T66] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 58.930992][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.939605][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.949783][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.960880][ T66] usb 4-1: string descriptor 0 read error: -22 [ 58.967128][ T66] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 58.976235][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.086141][ T1174] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc01 [ 59.134115][ T1187] netlink: 144 bytes leftover after parsing attributes in process `syz.4.243'. [ 59.195810][ T10] usb 3-1: USB disconnect, device number 19 [ 59.209990][ T66] usb 4-1: USB disconnect, device number 16 [ 59.287065][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.324594][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.589425][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 59.748240][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.753059][ T10] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 59.766183][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.774567][ T10] usb 3-1: Product: syz [ 59.778816][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.788438][ T10] usb 3-1: Manufacturer: syz [ 59.794056][ T10] usb 3-1: SerialNumber: syz [ 59.979383][ T642] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 60.006822][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 60.025104][ T10] usb 3-1: USB disconnect, device number 20 [ 60.040331][ T10] usblp0: removed [ 60.119384][ T642] usb 4-1: device descriptor read/64, error -71 [ 60.313640][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 60.313659][ T36] audit: type=1400 audit(1788812775.340:348): avc: denied { create } for pid=1226 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.369422][ T642] usb 4-1: device descriptor read/64, error -71 [ 60.447026][ T36] audit: type=1400 audit(1788812775.470:349): avc: denied { mounton } for pid=1232 comm="syz.4.253" path="/34/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 60.449027][ T1234] netlink: 'syz.4.253': attribute type 10 has an invalid length. [ 60.612663][ T642] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 60.689437][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 60.749407][ T642] usb 4-1: device descriptor read/64, error -71 [ 60.829386][ T45] usb 5-1: device descriptor read/64, error -71 [ 61.009424][ T642] usb 4-1: device descriptor read/64, error -71 [ 61.079426][ T45] usb 5-1: device descriptor read/64, error -71 [ 61.119592][ T642] usb usb4-port1: attempt power cycle [ 61.319419][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 61.449480][ T45] usb 5-1: device descriptor read/64, error -71 [ 61.469402][ T642] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 61.500491][ T642] usb 4-1: device descriptor read/8, error -71 [ 61.573456][ T1261] futex_wake_op: syz.2.258 tries to shift op by 144; fix this program [ 61.628658][ T36] audit: type=1400 audit(1788812776.650:350): avc: denied { write } for pid=1263 comm="syz.2.259" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 61.652104][ T36] audit: type=1400 audit(1788812776.660:351): avc: denied { map } for pid=1263 comm="syz.2.259" path="socket:[11825]" dev="sockfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.669198][ T642] usb 4-1: device descriptor read/8, error -71 [ 61.685948][ T36] audit: type=1400 audit(1788812776.660:352): avc: denied { read } for pid=1263 comm="syz.2.259" path="socket:[11825]" dev="sockfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.709689][ T1267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.718581][ T1267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.719467][ T45] usb 5-1: device descriptor read/64, error -71 [ 61.839488][ T45] usb usb5-port1: attempt power cycle [ 61.848674][ T1274] kvm: pic: non byte write [ 61.883716][ T1274] kvm_intel: kvm [1273]: vcpu5, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x212016 [ 61.929464][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 61.937144][ T642] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 61.960636][ T642] usb 4-1: device descriptor read/8, error -71 [ 62.014636][ T36] audit: type=1400 audit(1788812777.040:353): avc: denied { append } for pid=1277 comm="syz.0.263" name="sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.069468][ T10] usb 3-1: device descriptor read/64, error -71 [ 62.100659][ T642] usb 4-1: device descriptor read/8, error -71 [ 62.179418][ T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 62.209585][ T642] usb usb4-port1: unable to enumerate USB device [ 62.210856][ T45] usb 5-1: device descriptor read/8, error -71 [ 62.309426][ T10] usb 3-1: device descriptor read/64, error -71 [ 62.341593][ T1283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.351494][ T45] usb 5-1: device descriptor read/8, error -71 [ 62.550319][ T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 62.599444][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 62.620708][ T45] usb 5-1: device descriptor read/8, error -71 [ 62.689465][ T10] usb 3-1: device descriptor read/64, error -71 [ 62.750563][ T45] usb 5-1: device descriptor read/8, error -71 [ 62.869728][ T45] usb usb5-port1: unable to enumerate USB device [ 62.929455][ T10] usb 3-1: device descriptor read/64, error -71 [ 63.039564][ T10] usb usb3-port1: attempt power cycle [ 63.302696][ T36] audit: type=1400 audit(1788812778.330:354): avc: denied { search } for pid=1289 comm="syz.3.267" name="/" dev="configfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.325087][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.329622][ T36] audit: type=1400 audit(1788812778.330:355): avc: denied { read } for pid=1289 comm="syz.3.267" name="/" dev="configfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.353404][ T36] audit: type=1400 audit(1788812778.330:356): avc: denied { open } for pid=1289 comm="syz.3.267" path="/" dev="configfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.389458][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 63.410578][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.511802][ T1295] overlayfs: workdir and upperdir must be separate subtrees [ 63.518808][ T1296] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 63.533604][ T1296] overlayfs: workdir and upperdir must be separate subtrees [ 63.560450][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.576218][ T36] audit: type=1400 audit(1788812778.600:357): avc: denied { bind } for pid=1301 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.603495][ T1302] input: syz0 as /devices/virtual/input/input8 [ 63.799459][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 63.820582][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.839421][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 63.949464][ T66] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 63.951076][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.969419][ T45] usb 1-1: device descriptor read/64, error -71 [ 64.079586][ T10] usb usb3-port1: unable to enumerate USB device [ 64.100919][ T66] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.109583][ T66] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.120939][ T66] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 64.130093][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 64.138156][ T66] usb 5-1: Product: syz [ 64.142407][ T66] usb 5-1: Manufacturer: syz [ 64.150150][ T66] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 64.209480][ T45] usb 1-1: device descriptor read/64, error -71 [ 64.449471][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 64.550476][ T66] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 64.589429][ T45] usb 1-1: device descriptor read/64, error -71 [ 64.839419][ T45] usb 1-1: device descriptor read/64, error -71 [ 64.949592][ T45] usb usb1-port1: attempt power cycle [ 65.289432][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 65.310767][ T45] usb 1-1: device descriptor read/8, error -71 [ 65.349424][ T629] Bluetooth: hci0: command 0x1003 tx timeout [ 65.349424][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.490545][ T45] usb 1-1: device descriptor read/8, error -71 [ 65.643439][ T1327] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 65.653569][ T1327] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 65.667809][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 65.667828][ T36] audit: type=1400 audit(1788812780.690:362): avc: denied { name_bind 0x1000000 } for pid=1328 comm="syz.2.279" path="socket:[12509]" dev="sockfs" ino=12509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.713530][ T36] audit: type=1400 audit(1788812780.740:363): avc: denied { cmd } for pid=1332 comm="syz.3.280" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 65.736878][ T36] audit: type=1400 audit(1788812780.740:364): avc: denied { write } for pid=1332 comm="syz.3.280" name="mcfilter" dev="proc" ino=4026532401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.759887][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 65.775579][ T36] audit: type=1400 audit(1788812780.800:365): avc: denied { ioctl } for pid=1335 comm="syz.3.281" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.781082][ T45] usb 1-1: device descriptor read/8, error -71 [ 65.946529][ T45] usb 1-1: device descriptor read/8, error -71 [ 66.059602][ T45] usb usb1-port1: unable to enumerate USB device [ 66.516923][ T36] audit: type=1400 audit(1788812781.540:366): avc: denied { mount } for pid=1342 comm="syz.2.284" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 66.518769][ T1343] overlayfs: invalid origin (0000) [ 66.547626][ T36] audit: type=1400 audit(1788812781.580:367): avc: denied { write } for pid=1342 comm="syz.2.284" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.574554][ T1345] FAULT_INJECTION: forcing a failure. [ 66.574554][ T1345] name failslab, interval 1, probability 0, space 0, times 0 [ 66.587291][ T1345] CPU: 1 UID: 0 PID: 1345 Comm: syz.3.285 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 66.587331][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.587348][ T1345] Call Trace: [ 66.587356][ T1345] [ 66.587365][ T1345] __dump_stack+0x21/0x30 [ 66.587406][ T1345] dump_stack_lvl+0x140/0x1c0 [ 66.587442][ T1345] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.587475][ T1345] ? do_futex+0x32a/0x510 [ 66.587507][ T1345] dump_stack+0x19/0x20 [ 66.587538][ T1345] should_fail_ex+0x3c2/0x510 [ 66.587565][ T1345] should_failslab+0xac/0x100 [ 66.587593][ T1345] kmem_cache_alloc_noprof+0x42/0x410 [ 66.587618][ T1345] ? getname_flags+0xcc/0x6b0 [ 66.587651][ T1345] getname_flags+0xcc/0x6b0 [ 66.587676][ T1345] ? __kasan_check_write+0x18/0x20 [ 66.587700][ T1345] __x64_sys_mkdirat+0x7e/0xa0 [ 66.587730][ T1345] x64_sys_call+0x2ba8/0x2ee0 [ 66.587751][ T1345] do_syscall_64+0x57/0xf0 [ 66.587783][ T1345] ? clear_bhb_loop+0x50/0xa0 [ 66.587810][ T1345] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.587836][ T1345] RIP: 0033:0x7f9543d9e159 [ 66.587856][ T1345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.587877][ T1345] RSP: 002b:00007f9544b7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 66.587902][ T1345] RAX: ffffffffffffffda RBX: 00007f9544025fa0 RCX: 00007f9543d9e159 [ 66.587921][ T1345] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 66.587939][ T1345] RBP: 00007f9543e35024 R08: 0000000000000000 R09: 0000000000000000 [ 66.587956][ T1345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.587972][ T1345] R13: 00007f9544026038 R14: 00007f9544025fa0 R15: 00007ffd02cbf9d8 [ 66.587994][ T1345] [ 66.590626][ T36] audit: type=1400 audit(1788812781.580:368): avc: denied { remove_name } for pid=1342 comm="syz.2.284" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.767337][ T31] usb 5-1: USB disconnect, device number 14 [ 66.770745][ T36] audit: type=1400 audit(1788812781.580:369): avc: denied { unlink } for pid=1342 comm="syz.2.284" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.833326][ T36] audit: type=1400 audit(1788812781.850:370): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 66.862884][ T1347] kvm: MWAIT instruction emulated as NOP! [ 66.905540][ T1360] netlink: 'syz.4.289': attribute type 27 has an invalid length. [ 66.942347][ T1365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.291'. [ 66.955894][ T1363] FAULT_INJECTION: forcing a failure. [ 66.955894][ T1363] name failslab, interval 1, probability 0, space 0, times 0 [ 66.968824][ T36] audit: type=1400 audit(1788812781.980:371): avc: denied { relabelfrom } for pid=1362 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.969577][ T1363] CPU: 1 UID: 0 PID: 1363 Comm: syz.2.290 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 66.969674][ T1363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.969716][ T1363] Call Trace: [ 66.969738][ T1363] [ 66.969759][ T1363] __dump_stack+0x21/0x30 [ 66.969866][ T1363] dump_stack_lvl+0x140/0x1c0 [ 66.969964][ T1363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.970069][ T1363] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 66.970143][ T1363] dump_stack+0x19/0x20 [ 66.970222][ T1363] should_fail_ex+0x3c2/0x510 [ 66.970298][ T1363] should_failslab+0xac/0x100 [ 66.970414][ T1363] kmem_cache_alloc_noprof+0x42/0x410 [ 66.970494][ T1363] ? kernfs_xattr_get+0x85/0xa0 [ 66.970563][ T1363] ? __kernfs_new_node+0xf1/0x740 [ 66.970646][ T1363] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 66.970732][ T1363] __kernfs_new_node+0xf1/0x740 [ 66.970814][ T1363] ? __kasan_check_write+0x18/0x20 [ 66.970878][ T1363] ? kernfs_new_node+0x280/0x280 [ 66.970953][ T1363] ? down_write+0xee/0x2b0 [ 66.971036][ T1363] ? __cfi_down_write+0x10/0x10 [ 66.971110][ T1363] ? __kasan_check_write+0x18/0x20 [ 66.971179][ T1363] ? up_write+0x66/0x280 [ 66.971266][ T1363] ? kernfs_activate+0x1ee/0x200 [ 66.971350][ T1363] kernfs_new_node+0x154/0x280 [ 66.971432][ T1363] __kernfs_create_file+0x52/0x280 [ 66.971513][ T1363] sysfs_add_file_mode_ns+0x1d2/0x280 [ 66.971577][ T1363] internal_create_group+0x66c/0xe70 [ 66.971651][ T1363] ? kernfs_create_dir_ns+0x118/0x130 [ 66.971756][ T1363] ? sysfs_create_group+0x40/0x40 [ 66.971850][ T1363] ? sysfs_create_dir_ns+0x15f/0x210 [ 66.971923][ T1363] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 66.971997][ T1363] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 66.972093][ T1363] sysfs_create_groups+0x5c/0x130 [ 66.972173][ T1363] kobject_add_internal+0x75e/0xc20 [ 66.972270][ T1363] kobject_init_and_add+0x12c/0x1a0 [ 66.972357][ T1363] ? tun_attach+0xa04/0xed0 [ 66.972429][ T1363] ? tun_set_iff+0x47f/0xec0 [ 66.972485][ T1363] ? __tun_chr_ioctl+0x852/0x1fb0 [ 66.972541][ T1363] ? tun_chr_ioctl+0x2e/0x40 [ 66.972603][ T1363] ? __cfi_kobject_init_and_add+0x10/0x10 [ 66.972697][ T1363] ? kasan_save_alloc_info+0x3a/0x50 [ 66.972752][ T1363] ? __kasan_kmalloc+0x96/0xb0 [ 66.972833][ T1363] netdev_queue_update_kobjects+0x209/0x550 [ 66.972929][ T1363] netif_set_real_num_tx_queues+0x15f/0x870 [ 66.972993][ T1363] tun_attach+0xa04/0xed0 [ 66.973065][ T1363] tun_set_iff+0x47f/0xec0 [ 66.973135][ T1363] __tun_chr_ioctl+0x852/0x1fb0 [ 66.973219][ T1363] ? tun_flow_create+0x400/0x400 [ 66.973289][ T1363] ? alloc_file_pseudo+0x191/0x1f0 [ 66.973382][ T1363] ? __fget_files+0x2bc/0x330 [ 66.973465][ T1363] tun_chr_ioctl+0x2e/0x40 [ 66.973551][ T1363] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 66.973613][ T1363] __se_sys_ioctl+0x126/0x1b0 [ 66.973689][ T1363] __x64_sys_ioctl+0x7f/0xa0 [ 66.973770][ T1363] x64_sys_call+0x1878/0x2ee0 [ 66.973825][ T1363] do_syscall_64+0x57/0xf0 [ 66.973918][ T1363] ? clear_bhb_loop+0x50/0xa0 [ 66.973999][ T1363] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.974066][ T1363] RIP: 0033:0x7f17cf59e159 [ 66.974119][ T1363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.974174][ T1363] RSP: 002b:00007f17d04fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.974246][ T1363] RAX: ffffffffffffffda RBX: 00007f17cf825fa0 RCX: 00007f17cf59e159 [ 66.974296][ T1363] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000005 [ 66.974339][ T1363] RBP: 00007f17cf635024 R08: 0000000000000000 R09: 0000000000000000 [ 66.974381][ T1363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.974423][ T1363] R13: 00007f17cf826038 R14: 00007f17cf825fa0 R15: 00007ffcb2e0f928 [ 66.974476][ T1363] [ 66.993948][ T1363] kobject: kobject_add_internal failed for tx-1 (error: -12 parent: queues) [ 67.485626][ T1375] Invalid argument reading file caps for ./file0 [ 67.500046][ T66] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 67.540100][ T1379] mmap: syz.0.295 (1379) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.629412][ T642] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 67.660638][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.672061][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.682054][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.695050][ T66] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.709155][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.719158][ T66] usb 4-1: config 0 descriptor?? [ 67.803397][ T642] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 67.811423][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 67.822802][ T1414] bridge: RTM_NEWNEIGH with invalid ether address [ 67.831831][ T642] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 67.839596][ T1415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1415 comm=syz.2.302 [ 67.840452][ T642] usb 5-1: can't read configurations, error -61 [ 67.860116][ T1415] bridge: RTM_NEWNEIGH with invalid ether address [ 67.869783][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.878465][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.979379][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 67.987311][ T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 67.996511][ T642] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 68.004210][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.012681][ T10] usb 1-1: Product: syz [ 68.016967][ T10] usb 1-1: Manufacturer: syz [ 68.021872][ T10] usb 1-1: SerialNumber: syz [ 68.069421][ T418] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 68.129030][ T66] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 68.143585][ T66] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 68.179766][ T642] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 68.189228][ T642] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 68.197152][ T642] usb 5-1: can't read configurations, error -61 [ 68.203910][ T642] usb usb5-port1: attempt power cycle [ 68.220566][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.234112][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.244500][ T418] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 68.253800][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 68.260635][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.269420][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 68.277434][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 68.283904][ T418] usb 3-1: config 0 descriptor?? [ 68.296053][ T10] usb 1-1: USB disconnect, device number 31 [ 68.307922][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.492866][ T418] usbhid 3-1:0.0: can't add hid device: -71 [ 68.498959][ T418] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 68.508092][ T418] usb 3-1: USB disconnect, device number 25 [ 68.549528][ T642] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 68.570209][ T642] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 68.579278][ T642] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 68.588275][ T642] usb 5-1: can't read configurations, error -61 [ 68.719491][ T642] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 68.740234][ T642] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 68.753633][ T642] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 68.762594][ T642] usb 5-1: can't read configurations, error -61 [ 68.769155][ T642] usb usb5-port1: unable to enumerate USB device [ 69.549512][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 69.579419][ T10] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 69.699397][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 69.706606][ T31] usb 3-1: config 3 has an invalid interface number: 190 but max is 3 [ 69.709529][ T10] usb 4-1: device descriptor read/64, error -32 [ 69.715248][ T31] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 69.729844][ T31] usb 3-1: config 3 has an invalid interface number: 99 but max is 3 [ 69.737969][ T31] usb 3-1: config 3 has an invalid interface number: 124 but max is 3 [ 69.746178][ T31] usb 3-1: config 3 has an invalid interface number: 143 but max is 3 [ 69.754414][ T31] usb 3-1: config 3 has no interface number 0 [ 69.760546][ T31] usb 3-1: config 3 has no interface number 1 [ 69.766655][ T31] usb 3-1: config 3 has no interface number 2 [ 69.772798][ T31] usb 3-1: config 3 has no interface number 3 [ 69.778936][ T31] usb 3-1: config 3 interface 190 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 69.789850][ T31] usb 3-1: config 3 interface 99 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 69.800702][ T31] usb 3-1: config 3 interface 124 altsetting 176 has a duplicate endpoint with address 0xB, skipping [ 69.811720][ T31] usb 3-1: config 3 interface 124 altsetting 176 has a duplicate endpoint with address 0x5, skipping [ 69.822660][ T31] usb 3-1: config 3 interface 124 altsetting 176 bulk endpoint 0x8 has invalid maxpacket 8 [ 69.832886][ T31] usb 3-1: config 3 interface 124 altsetting 176 has a duplicate endpoint with address 0x8, skipping [ 69.843821][ T31] usb 3-1: config 3 interface 124 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 69.854733][ T31] usb 3-1: config 3 interface 124 altsetting 176 has an invalid descriptor for endpoint zero, skipping [ 69.865845][ T31] usb 3-1: config 3 interface 124 altsetting 176 has a duplicate endpoint with address 0xA, skipping [ 69.876802][ T31] usb 3-1: config 3 interface 143 altsetting 129 has an endpoint descriptor with address 0x95, changing to 0x85 [ 69.888949][ T31] usb 3-1: config 3 interface 143 altsetting 129 endpoint 0x85 has invalid maxpacket 33941, setting to 1024 [ 69.900491][ T31] usb 3-1: config 3 interface 143 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 69.911490][ T31] usb 3-1: config 3 interface 143 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 69.922557][ T31] usb 3-1: config 3 interface 143 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 69.933672][ T31] usb 3-1: config 3 interface 143 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 69.944782][ T66] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 69.952438][ T31] usb 3-1: config 3 interface 143 altsetting 129 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 69.963652][ T31] usb 3-1: config 3 interface 143 altsetting 129 has a duplicate endpoint with address 0x5, skipping [ 69.969546][ T10] usb 4-1: device descriptor read/64, error -32 [ 69.975032][ T31] usb 3-1: config 3 interface 143 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 69.991763][ T31] usb 3-1: config 3 interface 143 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 70.003385][ T31] usb 3-1: config 3 interface 143 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 70.014331][ T31] usb 3-1: config 3 interface 143 altsetting 129 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 70.027882][ T31] usb 3-1: config 3 interface 190 has no altsetting 0 [ 70.034703][ T31] usb 3-1: config 3 interface 99 has no altsetting 0 [ 70.041639][ T31] usb 3-1: config 3 interface 124 has no altsetting 0 [ 70.048530][ T31] usb 3-1: config 3 interface 143 has no altsetting 0 [ 70.056901][ T31] usb 3-1: Dual-Role OTG device on HNP port [ 70.063080][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=819a, bcdDevice=4c.db [ 70.072223][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.080311][ T31] usb 3-1: Product: syz [ 70.084509][ T31] usb 3-1: Manufacturer: syz [ 70.089126][ T31] usb 3-1: SerialNumber: syz [ 70.119417][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 70.127976][ T1451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.136654][ T1451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.229554][ T10] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 70.272073][ T1451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.282813][ T1451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.340690][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.349139][ T66] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 70.356819][ T66] usb 1-1: can't read configurations, error -71 [ 70.369410][ T10] usb 4-1: device descriptor read/64, error -32 [ 70.501278][ T31] usb 3-1: bad CDC descriptors [ 70.509903][ T31] usb 3-1: USB disconnect, device number 26 [ 70.609432][ T10] usb 4-1: device descriptor read/64, error -32 [ 70.789431][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 70.865919][ T1461] tmpfs: Unknown parameter 'usrquota' [ 70.891835][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 70.891856][ T36] audit: type=1400 audit(1788812785.920:377): avc: denied { bind } for pid=1462 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.939411][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 70.945811][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.958065][ T45] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 70.967318][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.975404][ T45] usb 5-1: Product: syz [ 70.979673][ T45] usb 5-1: Manufacturer: syz [ 70.984305][ T45] usb 5-1: SerialNumber: syz [ 70.989969][ T45] usb 5-1: config 0 descriptor?? [ 70.997458][ T45] usb 5-1: bad CDC descriptors [ 71.002626][ T45] usb 5-1: unsupported MDLM descriptors [ 71.146164][ T1476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.155920][ T1475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.197363][ T45] usb 5-1: USB disconnect, device number 19 [ 71.284117][ T36] audit: type=1400 audit(1788812786.310:378): avc: denied { sqpoll } for pid=1481 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.332904][ T1484] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.342200][ T36] audit: type=1400 audit(1788812786.370:379): avc: denied { watch watch_reads } for pid=1483 comm="syz.2.324" path="/" dev="ramfs" ino=13097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 71.551414][ T36] audit: type=1400 audit(1788812786.580:380): avc: denied { write } for pid=1491 comm="syz.0.327" name="functions" dev="configfs" ino=3918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.574412][ T36] audit: type=1400 audit(1788812786.610:381): avc: denied { add_name } for pid=1491 comm="syz.0.327" name="uvc.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.639791][ T36] audit: type=1400 audit(1788812786.670:382): avc: denied { create } for pid=1496 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 71.663629][ T629] Bluetooth: hci0: sending frame failed (-49) [ 71.669815][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 71.799394][ T10] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 71.841562][ T10] usb 4-1: device firmware changed [ 71.846983][ T642] usb 4-1: USB disconnect, device number 21 [ 71.969392][ T45] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 71.989553][ T642] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 72.130500][ T45] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 72.143767][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.150995][ T642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.163131][ T45] usb 5-1: config 0 descriptor?? [ 72.169406][ T642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.188269][ T642] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.201238][ T642] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.212321][ T642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.224569][ T642] usb 4-1: config 0 descriptor?? [ 72.403970][ T36] audit: type=1400 audit(1788812787.430:383): avc: denied { append } for pid=1520 comm="syz.0.337" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.464167][ T36] audit: type=1400 audit(1788812787.490:384): avc: denied { read } for pid=1522 comm="syz.0.338" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.488250][ T36] audit: type=1400 audit(1788812787.520:385): avc: denied { execute } for pid=1522 comm="syz.0.338" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 72.779455][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 72.846533][ T36] audit: type=1400 audit(1788812787.870:386): avc: denied { write } for pid=1487 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.848559][ T642] usbhid 4-1:0.0: can't add hid device: -71 [ 72.871763][ T642] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 72.880834][ T642] usb 4-1: USB disconnect, device number 22 [ 72.950696][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.963332][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 72.972507][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.981532][ T45] usb 5-1: Cannot set autoneg [ 72.982286][ T10] usb 3-1: Product: syz [ 72.986391][ T45] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 72.990453][ T10] usb 3-1: Manufacturer: syz [ 72.990471][ T10] usb 3-1: SerialNumber: syz [ 73.014073][ T45] usb 5-1: USB disconnect, device number 20 [ 73.021868][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 73.028142][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 73.219558][ T1531] netlink: 5224 bytes leftover after parsing attributes in process `syz.0.342'. [ 73.509406][ T642] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 73.587874][ T1542] kvm: kvm [1541]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 73.596821][ T1542] kvm: kvm [1541]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 73.669389][ T642] usb 1-1: Using ep0 maxpacket: 32 [ 73.680513][ T642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.706481][ T642] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 73.737960][ T642] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.747915][ T642] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.759846][ T642] usb 1-1: config 1 interface 1 has no altsetting 0 [ 73.767944][ T642] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.777164][ T642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.791106][ T642] usb 1-1: Product: syz [ 73.799375][ T642] usb 1-1: Manufacturer: syz [ 73.804055][ T642] usb 1-1: SerialNumber: syz [ 73.836956][ T1552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.847266][ T1552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.026123][ T642] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 74.040972][ T642] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 74.063620][ T642] usb 1-1: USB disconnect, device number 34 [ 74.069671][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 74.088415][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.125222][ T1567] netlink: 'syz.3.352': attribute type 16 has an invalid length. [ 74.140548][ T1567] netlink: 64114 bytes leftover after parsing attributes in process `syz.3.352'. [ 74.219467][ T10] usb 5-1: device descriptor read/64, error -71 [ 74.419413][ T66] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 74.469414][ T10] usb 5-1: device descriptor read/64, error -71 [ 74.549996][ T66] usb 4-1: device descriptor read/64, error -71 [ 74.709404][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 74.789434][ T66] usb 4-1: device descriptor read/64, error -71 [ 74.839410][ T10] usb 5-1: device descriptor read/64, error -71 [ 74.859404][ T642] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 75.010615][ T642] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.022445][ T642] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 75.030397][ T66] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 75.035167][ T642] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 75.051228][ T642] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 75.060336][ T642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.089401][ T10] usb 5-1: device descriptor read/64, error -71 [ 75.169424][ T66] usb 4-1: device descriptor read/64, error -71 [ 75.199866][ T10] usb usb5-port1: attempt power cycle [ 75.271922][ T642] usb 1-1: string descriptor 0 read error: -71 [ 75.278438][ T642] hub 1-1:32.0: USB hub found [ 75.284491][ T642] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 75.310346][ T642] usb 1-1: USB disconnect, device number 35 [ 75.409470][ T66] usb 4-1: device descriptor read/64, error -71 [ 75.519564][ T66] usb usb4-port1: attempt power cycle [ 75.548134][ T642] usb 3-1: USB disconnect, device number 27 [ 75.554205][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 75.590112][ T10] usb 5-1: device descriptor read/8, error -71 [ 75.706218][ T1629] loop7: detected capacity change from 0 to 7 [ 75.712843][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.722087][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.730661][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.731479][ T10] usb 5-1: device descriptor read/8, error -71 [ 75.739885][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.753932][ T1629] loop7: unable to read partition table [ 75.759867][ T1629] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 75.769148][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.781322][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.789204][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 75.799353][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.808570][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.821043][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.830247][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.841584][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.850785][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.860169][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.860637][ T66] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 75.869445][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.910440][ T66] usb 4-1: device descriptor read/8, error -71 [ 75.979410][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 76.023978][ T10] usb 5-1: device descriptor read/8, error -71 [ 76.042002][ T66] usb 4-1: device descriptor read/8, error -71 [ 76.161279][ T10] usb 5-1: device descriptor read/8, error -71 [ 76.259428][ T31] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 76.270131][ T10] usb usb5-port1: unable to enumerate USB device [ 76.299440][ T66] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 76.320782][ T66] usb 4-1: device descriptor read/8, error -71 [ 76.409402][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 76.415811][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.426099][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.436589][ T31] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 76.445744][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.453857][ T31] usb 3-1: Product: syz [ 76.458171][ T31] usb 3-1: Manufacturer: syz [ 76.458435][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 76.458478][ T36] audit: type=1400 audit(1788812791.480:397): avc: denied { create } for pid=1655 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.463148][ T31] usb 3-1: SerialNumber: syz [ 76.493783][ T66] usb 4-1: device descriptor read/8, error -71 [ 76.609543][ T66] usb usb4-port1: unable to enumerate USB device [ 76.705918][ T31] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 76.716236][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.726452][ T31] usb 3-1: USB disconnect, device number 28 [ 76.737982][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.289559][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 77.335383][ T1675] overlayfs: failed to resolve './file1/file0': -2 [ 77.348617][ T1686] overlayfs: failed to resolve './bus': -2 [ 77.358567][ T1682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 77.429427][ T31] usb 5-1: device descriptor read/64, error -71 [ 77.480503][ T1691] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.488346][ T1694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.497881][ T1690] kvm: pic: level sensitive irq not supported [ 77.497988][ T1690] kvm: pic: non byte read [ 77.508643][ T642] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 77.516667][ T1690] kvm: pic: level sensitive irq not supported [ 77.516773][ T1690] kvm: pic: non byte read [ 77.527784][ T1690] kvm: pic: level sensitive irq not supported [ 77.527850][ T1690] kvm: pic: non byte read [ 77.538710][ T1690] kvm: pic: level sensitive irq not supported [ 77.538808][ T1690] kvm: pic: non byte read [ 77.610941][ T1697] FAULT_INJECTION: forcing a failure. [ 77.610941][ T1697] name failslab, interval 1, probability 0, space 0, times 0 [ 77.623836][ T1697] CPU: 0 UID: 0 PID: 1697 Comm: syz.2.375 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 77.623881][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.623893][ T1697] Call Trace: [ 77.623898][ T1697] [ 77.623906][ T1697] __dump_stack+0x21/0x30 [ 77.623938][ T1697] dump_stack_lvl+0x140/0x1c0 [ 77.623962][ T1697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.623987][ T1697] ? do_futex+0x32a/0x510 [ 77.624012][ T1697] dump_stack+0x19/0x20 [ 77.624035][ T1697] should_fail_ex+0x3c2/0x510 [ 77.624055][ T1697] should_failslab+0xac/0x100 [ 77.624078][ T1697] __kmalloc_cache_noprof+0x41/0x470 [ 77.624096][ T1697] ? fsnotify_alloc_group+0x9a/0x3a0 [ 77.624115][ T1697] fsnotify_alloc_group+0x9a/0x3a0 [ 77.624133][ T1697] do_inotify_init+0x5a/0x550 [ 77.624153][ T1697] __ia32_sys_inotify_init+0x14/0x20 [ 77.624174][ T1697] x64_sys_call+0x2c08/0x2ee0 [ 77.624189][ T1697] do_syscall_64+0x57/0xf0 [ 77.624215][ T1697] ? clear_bhb_loop+0x50/0xa0 [ 77.624234][ T1697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.624253][ T1697] RIP: 0033:0x7f17cf59e159 [ 77.624267][ T1697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.624282][ T1697] RSP: 002b:00007f17d04fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 77.624301][ T1697] RAX: ffffffffffffffda RBX: 00007f17cf825fa0 RCX: 00007f17cf59e159 [ 77.624314][ T1697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.624324][ T1697] RBP: 00007f17cf825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 77.624335][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.624345][ T1697] R13: 00007f17cf826038 R14: 00007f17cf825fa0 R15: 00007ffcb2e0f928 [ 77.624360][ T1697] [ 77.819421][ T31] usb 5-1: device descriptor read/64, error -71 [ 77.829474][ T642] usb 1-1: Using ep0 maxpacket: 16 [ 77.835790][ T642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.846887][ T642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.856773][ T642] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 77.869875][ T642] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 77.879059][ T642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.887990][ T642] usb 1-1: config 0 descriptor?? [ 78.059435][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 78.059435][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 78.189586][ T10] usb 3-1: device descriptor read/64, error -71 [ 78.199514][ T31] usb 5-1: device descriptor read/64, error -71 [ 78.297895][ T642] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 78.305896][ T642] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 78.313175][ T642] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 78.321671][ T642] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 78.329008][ T642] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 78.336458][ T642] appleir 0003:05AC:8241.0007: No inputs registered, leaving [ 78.345532][ T642] appleir 0003:05AC:8241.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 78.401804][ T36] audit: type=1400 audit(1788812793.433:398): avc: denied { shutdown } for pid=1702 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.449466][ T31] usb 5-1: device descriptor read/64, error -71 [ 78.449460][ T10] usb 3-1: device descriptor read/64, error -71 [ 78.551176][ T9] usb 1-1: USB disconnect, device number 36 [ 78.571411][ T31] usb usb5-port1: attempt power cycle [ 78.689708][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 78.819462][ T642] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 78.827175][ T10] usb 3-1: device descriptor read/64, error -71 [ 78.939427][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 78.960514][ T31] usb 5-1: device descriptor read/8, error -71 [ 78.991223][ T1712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.001003][ T1712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.011003][ T642] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 79.018625][ T642] usb 4-1: can't read configurations, error -71 [ 79.079392][ T10] usb 3-1: device descriptor read/64, error -71 [ 79.090437][ T31] usb 5-1: device descriptor read/8, error -71 [ 79.189596][ T10] usb usb3-port1: attempt power cycle [ 79.349454][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 79.370488][ T31] usb 5-1: device descriptor read/8, error -71 [ 79.500542][ T31] usb 5-1: device descriptor read/8, error -71 [ 79.530494][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 79.560705][ T10] usb 3-1: device descriptor read/8, error -71 [ 79.609558][ T31] usb usb5-port1: unable to enumerate USB device [ 79.690605][ T10] usb 3-1: device descriptor read/8, error -71 [ 79.829458][ T66] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 79.849433][ T642] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 79.939416][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 79.962589][ T36] audit: type=1400 audit(1788812794.993:399): avc: denied { getopt } for pid=1734 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.972106][ T10] usb 3-1: device descriptor read/8, error -71 [ 79.982662][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 79.994939][ T66] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.005888][ T66] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.009480][ T642] usb 4-1: Using ep0 maxpacket: 32 [ 80.016144][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.024094][ T642] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 57752, setting to 1024 [ 80.027455][ T66] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 80.039105][ T642] usb 4-1: config 1 interface 0 has no altsetting 0 [ 80.048442][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.056812][ T642] usb 4-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.40 [ 80.071905][ T642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.072306][ T66] usb 1-1: config 0 descriptor?? [ 80.086410][ T642] usb 4-1: Manufacturer: ֽ礨푚쩥뺞騳颁볊旁깭᚝䫛 [ 80.095378][ T642] usb 4-1: SerialNumber: 隢嶰秇醡쯔襔ﲐ掷䧉ҷ⿍㴫⫋栏⤿肄툨鼜傏ᘨ뙯㡍덦Ꝣ젮췽毫詠ﷳ꼵㇖ἣ馿澕ꗨ﹩㵳譸ﮝ码⤅ᦒ纰檝摆骊ᮐ乜冃桛䮋憢묚ﻘ⪼쀻嶃缀욁滋뷡浓뾟緊颳ύ쇣襮챔躚蟂⒐竤ỵ᫜湆䕘䙆ᛘ㔯ჱၩ쒵瞍퉦骈❾꜒譾⚨윻迼ፓ쏝쭱䇂쭒등 [ 80.129217][ T10] usb 3-1: device descriptor read/8, error -71 [ 80.239475][ T10] usb usb3-port1: unable to enumerate USB device [ 80.329394][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 80.334929][ T1726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.346316][ T1726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.364102][ T642] usbhid 4-1:1.0: can't add hid device: -71 [ 80.370176][ T642] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 80.380016][ T642] usb 4-1: USB disconnect, device number 28 [ 80.459457][ T9] usb 5-1: device descriptor read/64, error -71 [ 80.487393][ T66] usbhid 1-1:0.0: can't add hid device: -32 [ 80.493509][ T66] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 80.699440][ T9] usb 5-1: device descriptor read/64, error -71 [ 80.882824][ T36] audit: type=1400 audit(1788812795.913:400): avc: denied { getopt } for pid=1743 comm="syz.3.391" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.917181][ T36] audit: type=1400 audit(1788812795.943:401): avc: denied { remount } for pid=1745 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.939493][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 80.969993][ T36] audit: type=1400 audit(1788812796.003:402): avc: denied { block_suspend } for pid=1748 comm="syz.3.394" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.089428][ T9] usb 5-1: device descriptor read/64, error -71 [ 81.199424][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 81.329944][ T9] usb 5-1: device descriptor read/64, error -71 [ 81.350604][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.365030][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.374157][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.382393][ T31] usb 3-1: Product: syz [ 81.386601][ T31] usb 3-1: Manufacturer: syz [ 81.391268][ T31] usb 3-1: SerialNumber: syz [ 81.400461][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 81.440865][ T9] usb usb5-port1: attempt power cycle [ 81.454398][ T1765] ------------[ cut here ]------------ [ 81.459977][ T1765] WARNING: CPU: 0 PID: 1765 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 81.469556][ T1765] Modules linked in: [ 81.473500][ T1765] CPU: 0 UID: 0 PID: 1765 Comm: syz.3.399 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 81.485043][ T1765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.495192][ T1765] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 81.501372][ T1765] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 05 cb 0b 06 00 0f 85 c2 00 00 00 c6 05 f8 ca 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 81.521114][ T1765] RSP: 0018:ffffc9000e767880 EFLAGS: 00010246 [ 81.527237][ T1765] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 81.535297][ T1765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e767938 [ 81.539510][ T36] audit: type=1400 audit(1788812796.533:403): avc: denied { read write } for pid=1764 comm="syz.3.399" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 81.543351][ T1765] RBP: ffffc9000e7679a8 R08: ffffc9000e767937 R09: 0000000000000000 [ 81.543376][ T1765] R10: ffffc9000e767920 R11: fffff52001cecf27 R12: ffffc9000e7678c0 [ 81.568698][ T36] audit: type=1400 audit(1788812796.533:404): avc: denied { open } for pid=1764 comm="syz.3.399" path="/108/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 81.575877][ T1765] R13: dffffc0000000000 R14: 1ffff92001cecf14 R15: 0000000000000000 [ 81.616746][ T1765] FS: 00007f9544b7e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 81.625764][ T1765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.632429][ T1765] CR2: 0000200000001000 CR3: 000000012af84000 CR4: 00000000003526b0 [ 81.640496][ T1765] Call Trace: [ 81.643820][ T1765] [ 81.646786][ T1765] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.649177][ T31] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 81.652929][ T1765] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 81.660588][ T31] cdc_ncm 3-1:1.0: bind() failure [ 81.664741][ T1765] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 81.673870][ T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 81.675407][ T1765] ___kmalloc_large_node+0x81/0x220 [ 81.687443][ T1765] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 81.687497][ T31] cdc_ncm 3-1:1.1: bind() failure [ 81.693164][ T1765] __kmalloc_large_node_noprof+0x1e/0xd0 [ 81.703906][ T1765] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 81.709621][ T1765] __kmalloc_noprof+0x326/0x510 [ 81.714514][ T1765] ? __cfi_lockref_get+0x10/0x10 [ 81.719523][ T1765] incfs_realloc_mount_info+0xa7/0x4c0 [ 81.725029][ T1765] ? incfs_add_sysfs_node+0x118/0x230 [ 81.730464][ T1765] ? __kasan_check_write+0x18/0x20 [ 81.735630][ T1765] incfs_alloc_mount_info+0x478/0x5f0 [ 81.741093][ T1765] incfs_mount_fs+0x3ca/0x970 [ 81.745814][ T1765] ? __cfi_incfs_mount_fs+0x10/0x10 [ 81.751071][ T1765] ? selinux_capable+0x38/0x50 [ 81.755912][ T1765] legacy_get_tree+0x106/0x1b0 [ 81.760732][ T1765] ? __cfi_incfs_mount_fs+0x10/0x10 [ 81.765977][ T1765] vfs_get_tree+0x9e/0x290 [ 81.770478][ T1765] do_new_mount+0x251/0xb40 [ 81.775102][ T1765] ? security_capable+0x44/0x130 [ 81.780106][ T1765] path_mount+0x66a/0xff0 [ 81.784500][ T1765] ? putname+0x113/0x150 [ 81.788763][ T1765] __se_sys_mount+0x2bf/0x480 [ 81.793515][ T1765] ? __x64_sys_mount+0xf0/0xf0 [ 81.798318][ T1765] ? __kasan_check_write+0x18/0x20 [ 81.803522][ T1765] ? fpregs_restore_userregs+0x11c/0x260 [ 81.809205][ T1765] __x64_sys_mount+0xc3/0xf0 [ 81.813884][ T1765] x64_sys_call+0x2021/0x2ee0 [ 81.818599][ T1765] do_syscall_64+0x57/0xf0 [ 81.823079][ T1765] ? clear_bhb_loop+0x50/0xa0 [ 81.827791][ T1765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.833752][ T1765] RIP: 0033:0x7f9543d9e159 [ 81.838196][ T1765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.857879][ T1765] RSP: 002b:00007f9544b7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.866354][ T1765] RAX: ffffffffffffffda RBX: 00007f9544025fa0 RCX: 00007f9543d9e159 [ 81.874393][ T1765] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 81.882432][ T1765] RBP: 00007f9543e35024 R08: 0000200000000580 R09: 0000000000000000 [ 81.890746][ T1765] R10: 0000000000010080 R11: 0000000000000246 R12: 0000000000000000 [ 81.898780][ T1765] R13: 00007f9544026038 R14: 00007f9544025fa0 R15: 00007ffd02cbf9d8 [ 81.906909][ T1765] [ 81.910086][ T1765] ---[ end trace 0000000000000000 ]--- [ 81.915653][ T1765] incfs: Error allocating mount info. -12 [ 81.921583][ T1765] incfs: mount failed -12 [ 82.179446][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 82.210618][ T9] usb 5-1: device descriptor read/8, error -71 [ 82.340503][ T9] usb 5-1: device descriptor read/8, error -71 [ 82.579421][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 82.600685][ T9] usb 5-1: device descriptor read/8, error -71 [ 82.616304][ T642] usb 1-1: USB disconnect, device number 37 [ 82.730589][ T9] usb 5-1: device descriptor read/8, error -71 [ 82.839549][ T9] usb usb5-port1: unable to enumerate USB device [ 83.973153][ T9] usb 3-1: USB disconnect, device number 33