last executing test programs: 6.951076765s ago: executing program 1 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x60040000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r6 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000001040)={0x5, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x24, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r8 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4008004}, 0x24008001) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) syz_usb_ep_write(r8, 0x81, 0x8, &(0x7f0000000100)="a101000000000000") syz_usb_disconnect(r8) 5.967720628s ago: executing program 0 (id=411): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000280)='fuse\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.276890955s ago: executing program 1 (id=417): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="140100001a000100feffffff00010000ff02000000000000000000000000000000000000000000004e20071c4e2100b5020000203a00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004"], 0x154}}, 0x844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040), 0x0) syz_usb_ep_read(r6, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf251500000004000180580001800d0001007564703a73797a320000000044000400200001000a004e2100200000fc01000000000000000d00000000000101000000200002000a006e2400000001fc02000000000000000000000000000106000000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4040) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x8c, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x60008800}, 0x20040010) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x19537050cf0330a9) 5.086231529s ago: executing program 0 (id=419): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='pr', 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000080)="5b9d5bd2955eb530638bbc75bf19b79e5bb86a1dc9c468169cf545cacc0358404e8709ea30fa58eac6026c074b81cc28362670601947d42bf94c271347c25f0fd5b5d63d3b810585e7b1b2c11e471545a6d6dcc8f2beb9739fda85c368ba25fac53e4eb67904565a3541ea6021c59470eb6177534152615ec12f4269091842c8c64959e3e2acd127", 0x88, 0x8008080, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000000)={0x0, 0x31ba, 0x8000, 0x1, 0x317, 0x0, r5}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce9f, 0x4000, 0x2, 0x19f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb60, 0x100, 0x2, 0x37e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x524b, 0x8, 0x3, 0x137, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa6e7, 0x20, 0x1, 0x4b, 0x0, r3}}], 0x4, &(0x7f0000001d00)={0x2e, 0x10, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9545}, 0x0, r1, '\x00', {0x4, 0x28d, 0x0, &(0x7f0000000d00)=@buf_512="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"}}, &(0x7f0000001d80)) syz_ublk_setup_queues(r6, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0xb0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 4.600505381s ago: executing program 1 (id=421): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x6, 0x2, 0xa244, 0x2, 0x1, 0x2003}) syz_usb_connect$uac2(0x0, 0x97, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000200301032009080b00050107202e0904000000010120000924010e00021500bb0c2403030003090705000c09040100000102200009f41520c6c68510a9090501091000090211082501023c0700020904020000010220000904020101010220001024010d08020300000017800000006b090582094000810907082501013f050400"/150], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x137, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x2, 0x1, 0x1, 0x100, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "de178336"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x67, 0x10, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x3}, [@mdlm_detail={0xc5, 0x24, 0x13, 0x1, "75c7268df5368a82739b3296fbdc2894ee13c52c9af988f9c4e5ea75125a2e2bc82c49822d19fa9b5c3ade60b80a07910523a4b1c1325753d2b472a336cb85607b48b28f4599eaf87f0723bae6e8dc7e97070da45d4d081fcb18e4cb85d9e1336c8c2f9a55b5e6840b88dbd9c0ba1005fcc39dae584da59cdc0b0da03c91930c7be1c6aea66a47f737d6c40f5c531adfad2db0b0d94c5d37758b2d86416f71db0ebd10a0079cc2dedf4861640b4fb73d2b71a0e9b5ea6d1785861ba101667a5c0f"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x85, 0x93, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x248, 0x3, 0x9, 0xa}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x1, 0x9, 0x67, 0x8, 0x1}, 0x5c, &(0x7f0000000540)=ANY=[@ANYBLOB="050f5c070020100a63e5ff01000fee01000000ff000000000001000406010018100a00a30000008f07d2c00000000000000000300000000b10010c000008001700040a100300040008060900"], 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2001}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x68, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x101, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x24008014}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000600)=ANY=[], 0x342) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_open_procfs$namespace(r7, &(0x7f0000001200)='ns/mnt\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005580)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000005680)=0xe8) syz_fuse_handle_req(r1, &(0x7f0000003280)="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", 0x2000, &(0x7f0000005b80)={&(0x7f0000005280)={0x50, 0xfffffffffffffff5, 0x10001, {0x7, 0x2d, 0x8000, 0x80, 0x3e98, 0x8, 0xfffffffd, 0xfe2, 0x0, 0x0, 0x4, 0xfffffff8}}, &(0x7f0000005300)={0x18, 0x0, 0x0, {0x80000001}}, &(0x7f0000005340)={0x18, 0x0, 0x8000000000000001, {0x1}}, &(0x7f0000005380)={0x18, 0x0, 0x2, {0x8}}, &(0x7f00000053c0)={0x18, 0xffffffffffffffda, 0x1, {0x5}}, &(0x7f0000005400)={0x28, 0x0, 0x7, {{0x9, 0x7, 0x2, r7}}}, &(0x7f0000005440)={0x60, 0x0, 0x8, {{0x4c1, 0xff, 0x3, 0x31bf, 0x4, 0x1000, 0x0, 0x5}}}, &(0x7f00000054c0)={0x18, 0x0, 0xfff, {0x1bf}}, &(0x7f0000005500)={0x1f, 0xffffffffffffffda, 0x3, {'memory.current\x00'}}, &(0x7f0000005540)={0x20, 0x0, 0x4afed5a2, {0x0, 0x12}}, &(0x7f00000056c0)={0x78, 0xfffffffffffffffe, 0x3, {0xf, 0x1, 0x0, {0x3, 0x4, 0xb1f, 0x0, 0x1, 0x7, 0x1, 0xfffffff7, 0xc, 0x8000, 0x8d7, r10, r6, 0x2, 0x5}}}, &(0x7f0000005740)={0x90, 0x0, 0x1, {0x3, 0x3, 0x5, 0xd, 0x3, 0x1, {0x1, 0xbef, 0x0, 0x8001, 0x6, 0x1, 0x6, 0x20000000, 0xfffffffd, 0x1000, 0x9, r5, r6, 0x4f}}}, &(0x7f0000000740)={0x90, 0x0, 0xe67, [{0x0, 0x3, 0x4, 0x200, '(\'!-'}, {0x1, 0xa2, 0xa, 0x4, '.#{][,\xf4%))'}, {0x0, 0x80000000, 0x0, 0x5}, {0x4, 0x1ff, 0x7, 0xe, 'ns/mnt\x00'}]}, &(0x7f0000000640)=ANY=[@ANYBLOB="b00000000000000003000000c35e0000020000000000000002000000000000000100000000000000ff0300000000000004000000040000000400000000000000fbffffffffffffff40330000000000000200000000000000499e5278010000000000000007000000000000000900000007000000a40100000010000077ed044a599e10f919516267465a88cfa8fa0c5ef709ba77e9d553428052439c41c35440f8e58049d62d", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000004000000000000000100000000000000000400000000000005000000060000007b2d23295d000000"], &(0x7f0000005940)={0xa0, 0x0, 0xfffffffffffffffa, {{0x5, 0x3, 0x5, 0xffffffff, 0x8001, 0x7, {0x0, 0x5, 0x4, 0x8, 0x4, 0xfffffffffffffffb, 0x7, 0x3, 0x6, 0x1000, 0x5, r5, r6, 0x8, 0xfe9}}, {0x0, 0x6}}}, &(0x7f0000005a00)={0x20, 0x0, 0x1ff, {0x0, 0x4, 0x0, 0x25}}, &(0x7f0000005a40)={0x130, 0x0, 0x10000, {0x7, 0xffffffff, 0x0, '\x00', {0x1000, 0x0, 0x9, 0xfff, r5, r6, 0x8000, '\x00', 0xfffffffffffffffb, 0x0, 0x8, 0xcc, {0x7ff, 0x4}, {0x1, 0x7}, {0x2}, {0x8, 0x7}, 0x0, 0x1, 0x400, 0x7}}}}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000300)={0x2, 0x1000}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r11, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x0, 0x0, 0x0, 0x0, 0xd40, &(0x7f0000000000), 0xf, 0xff, 0xfffa}) capget(&(0x7f0000000140)={0x20071026, r7}, &(0x7f0000000240)={0x2, 0x7fffffff, 0x9, 0x9, 0x8001, 0x7}) write$vga_arbiter(r11, &(0x7f0000000080)=@unlock_all, 0xb) 4.569334741s ago: executing program 0 (id=422): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x7}}, 0x10) read$usbmon(r0, &(0x7f0000000040)=""/17, 0x11) 3.723209422s ago: executing program 0 (id=432): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "de131189"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 3.209034674s ago: executing program 0 (id=433): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x2, 0x0, &(0x7f00001a2000/0x4000)=nil}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) creat(&(0x7f0000000180)='./file4\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x8004587d, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 2.731435305s ago: executing program 2 (id=440): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000280)='fuse\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.348206294s ago: executing program 0 (id=441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x0, "3dcd"}, @local=@item_012={0x1, 0x2, 0x3, '\r'}, @main=@item_012={0x2, 0x0, 0x8, "c08e"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.886628435s ago: executing program 2 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000002c0)) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r4, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000240)) mount(0x0, &(0x7f00000001c0)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x908041, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './my_sys/bus/pci/devices/0000:00:01.0/config', [], 0xa, "e24c8a6d2d"}, 0x35) sendfile(r5, r5, 0x0, 0x6) fallocate(r3, 0x0, 0x3, 0x8) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) 1.823330857s ago: executing program 2 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000004, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a00010d000000000000000004000080080004"], 0x1c}], 0x1}, 0x0) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r5}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="52739cf5e43d10e2a6315760b1a338bfe6d5a08e9d7da698e5eb48e043ebfba43b8b31dcb2541f541e1b20d5ee868ba32262c2f226cce271b6846d577caf33497ac104c565dba5b05d757f9abcb767", 0x4f}], 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000700)={0x0, 0x3}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0xff, 0x0, 0x0, 0xbf, 0x7, 0xfc, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x1, 0x3, 0x0, 0x9, 0xfc}, {0x0, 0x8000000, 0x8, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xc000, 0x1, 0xe, 0x7f, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x19}, {0xffffffff, 0xdddd1000, 0xa, 0x87, 0x0, 0x0, 0x7, 0x20, 0x0, 0x83}, {0x25000, 0x6000, 0x4, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x4000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x2, 0xf801, 0xdddd1000, [0x9, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) 1.768314978s ago: executing program 2 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000002c0)) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r4, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000240)) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) 1.746470828s ago: executing program 2 (id=446): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1000}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000007c0)=0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d900b80c0000000f23c00f21f83501000f000f23f8ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x6a}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) vmsplice(r8, &(0x7f00000005c0)=[{&(0x7f0000000280)="69bd82eeba957ca70d013d356d9a68f5bacc1788f15fcf48c71b124df9fc3c4520e3ca2e955f7c43e6467e3d485612e8d86bea7cdbeeb54baa89aa006b7ff6ef96b5c4f39be86c76e97e16322fa91e112b065815b29922f348735c9dd40b4bd705814bcd0beb403840a5a7880f3b3efa1af84b7e555c961e25a5b9", 0x7b}, {&(0x7f0000000300)="3a651d000f95ded3e39fe658d8c58e9afb1cc0ce70931ec0e84d2beb7b0299801d1022a5a2616291b7ed33520c69ac84a4ef90410f3f974234e83fd0d341912cea00928b71971d6f47b202844508593334bad2922a57fe01d3581e3e6e9e5eab56d9af185fa868b5acee4cb1d56ef8908caf", 0x72}, {&(0x7f0000000380)="cc87b7c38f7f5e8dd3a04b5d0766948beeb47407b40446a76318d2a9e802712388ecebd83d8ad3a1fcfdc0fd322516342144aa32c9db4596194e81d7906f307a2f6206f016c6825438e39012ca0127eac6ba6653ee81e63eb46240238e0b89b176c514ff8b95da6c5684df05d978f994cbe700f7335a0b16286b923fc60aed1dfa96d06f2f6b269c4060ebd0b4ed30da11ce2fd4a67893e1eab6edbc5006042e1a477ab671a53eb45301344b0f7587882a4caef43bd24d89c22b6b1803096be4e509fca309ec6c9b1ff898dee43ce16c182aa409ce12e8695adaac6fa14ff8d9e5d8898e7767ae85fbe8980924c1e0f39af2fb2b802a3a", 0xf7}, {&(0x7f0000000480)="e5b818797baed5154b221416a59d94b3e75d9d", 0x13}, {&(0x7f00000004c0)="7719740fd8b6daa39f621659cfb14b0e5bba8ff12dbbbad3bb1610", 0x1b}, {&(0x7f0000000500)="c7199b7ba2ed4555b04d61688eb674c324efa8f7ee85a30e4bd16d07f9dc48f4826d49067739ee1f60a1949b99afe5f7a2ba3bca16fc25865def4b8b5bbb8c4b8d776b0b42bc0d8dd210d9f0edd4bfa68f82852ab748be4f6d591024a8d760aad51bb25a12135576e963e49773d4a91fd7adb50083", 0x75}, {&(0x7f0000000580)="22934d69acdd5306caf7c902b3f1a0f0bc71e3fc20467716ce9d3bc46fa13caf2feb5dcd77431e845539f0d04a34e4af", 0x30}], 0x7, 0x5) socket$inet6(0xa, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r9 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r9, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) close(r5) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 1.575251962s ago: executing program 2 (id=447): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101802, 0x110) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a23, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xc, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x3, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x8, 0x0, r12, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r10, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, &(0x7f0000000280)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r13 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r13, 0x8, &(0x7f0000000240)={0x1, 0x1, 0x32, 0xffffffff80000001}) r14 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) syz_usb_control_io$hid(r14, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000960100060b0000000000002a90a0753883"], 0x0}, 0x0) 1.573418192s ago: executing program 1 (id=448): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r6, 0x0, 0x23, 0x0, 0x0) dup(r5) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x6, 0xfc, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff3, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.547421393s ago: executing program 1 (id=449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c8010000100033062cbd70000000000000000000000000000000ffff7f00000100000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000300020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000003000000020000fe2300000000000000d8000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000080"], 0x1c8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0) 1.510682794s ago: executing program 1 (id=450): r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a184cf49d513b7bf7cdcebe6423101690e5269a5b2be351ef182d84744d9664f21b1c4bd8c72c0905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a184cf49d513b7bf7cdcebe6423101690e5269a5b2be351ef182d84744d9664f21b1c4bd8c72c0905820240"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) setresgid(0xee00, 0x0, 0xee01) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x50) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) (async) 1.201101812s ago: executing program 3 (id=453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000280)='fuse\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 316.726042ms ago: executing program 3 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000002c0)) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r4, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000240)) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) 299.882533ms ago: executing program 3 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) 167.197536ms ago: executing program 3 (id=456): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x368, 0x3706) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x1) setuid(0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x4f0) io_setup(0xb, &(0x7f00000000c0)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_destroy(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6, @in6=@mcast2}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180), 0x1000, &(0x7f0000000740)={[{@uid={'uid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x2}}, {@uid={'uid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x6}}, {@mode}, {@mode={'mode', 0x3d, 0x6}}], [{@pcr={'pcr', 0x3d, 0x13}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'workdir'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c1) 96.483638ms ago: executing program 3 (id=457): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r6, 0x0, 0x23, 0x0, 0x0) dup(r5) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x6, 0xfc, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff3, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 39.245209ms ago: executing program 3 (id=458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c8010000100033062cbd70000000000000000000000000000000ffff7f00000100000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000400020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000003000000020000fe2300000000000000d8000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000080"], 0x1c8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0) 0s ago: executing program 32 (id=458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c8010000100033062cbd70000000000000000000000000000000ffff7f00000100000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000400020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000003000000020000fe2300000000000000d8000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000080"], 0x1c8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 28.790865][ T36] audit: type=1400 audit(1788542977.260:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.795037][ T286] cgroup: Unknown subsys name 'net' [ 28.814177][ T36] audit: type=1400 audit(1788542977.260:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.843505][ T36] audit: type=1400 audit(1788542977.290:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.843994][ T286] cgroup: Unknown subsys name 'devices' [ 28.970649][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.976815][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.072018][ T36] audit: type=1400 audit(1788542977.540:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.096656][ T36] audit: type=1400 audit(1788542977.540:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.123625][ T36] audit: type=1400 audit(1788542977.540:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.133305][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.157421][ T36] audit: type=1400 audit(1788542977.630:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.187345][ T36] audit: type=1400 audit(1788542977.630:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.204746][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.214114][ T36] audit: type=1400 audit(1788542977.660:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.249045][ T36] audit: type=1400 audit(1788542977.660:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.109775][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.117310][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.124751][ T295] bridge_slave_0: entered allmulticast mode [ 30.132129][ T295] bridge_slave_0: entered promiscuous mode [ 30.140047][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.147503][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.155483][ T295] bridge_slave_1: entered allmulticast mode [ 30.162437][ T295] bridge_slave_1: entered promiscuous mode [ 30.238059][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.245138][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.252326][ T294] bridge_slave_0: entered allmulticast mode [ 30.259619][ T294] bridge_slave_0: entered promiscuous mode [ 30.284674][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.293358][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.300835][ T294] bridge_slave_1: entered allmulticast mode [ 30.308229][ T294] bridge_slave_1: entered promiscuous mode [ 30.316533][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.324293][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.331672][ T293] bridge_slave_0: entered allmulticast mode [ 30.338347][ T293] bridge_slave_0: entered promiscuous mode [ 30.352227][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.359619][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.367005][ T293] bridge_slave_1: entered allmulticast mode [ 30.373643][ T293] bridge_slave_1: entered promiscuous mode [ 30.429758][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.437128][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.444649][ T296] bridge_slave_0: entered allmulticast mode [ 30.451106][ T296] bridge_slave_0: entered promiscuous mode [ 30.458404][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.465808][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.473325][ T296] bridge_slave_1: entered allmulticast mode [ 30.479875][ T296] bridge_slave_1: entered promiscuous mode [ 30.579026][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.586731][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.594367][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.602041][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.644165][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.651994][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.659570][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.667068][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.682296][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.689671][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.697155][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.704541][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.715139][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.722641][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.730230][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.737433][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.750489][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.758014][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.765614][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.773655][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.781276][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.789217][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.797415][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.805422][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.822274][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.829799][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.842732][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.850023][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.892933][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.900528][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.917470][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.924822][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.940413][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.947657][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.958982][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.967629][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.993340][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.000846][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.011229][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.018853][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.036650][ T295] veth0_vlan: entered promiscuous mode [ 31.059157][ T295] veth1_macvtap: entered promiscuous mode [ 31.088758][ T296] veth0_vlan: entered promiscuous mode [ 31.107317][ T293] veth0_vlan: entered promiscuous mode [ 31.124978][ T296] veth1_macvtap: entered promiscuous mode [ 31.139222][ T294] veth0_vlan: entered promiscuous mode [ 31.166103][ T293] veth1_macvtap: entered promiscuous mode [ 31.179002][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.196365][ T294] veth1_macvtap: entered promiscuous mode [ 31.277831][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.380134][ T325] capability: warning: `syz.1.5' uses deprecated v2 capabilities in a way that may be insecure [ 31.568158][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.578121][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.688069][ T311] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 31.728081][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 31.728081][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 31.741215][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.752186][ T46] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.764937][ T46] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 31.774414][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.783446][ T46] usb 3-1: Product: syz [ 31.795867][ T46] usb 3-1: Manufacturer: syz [ 31.801651][ T46] usb 3-1: SerialNumber: syz [ 31.849203][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.865806][ T311] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.876940][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.886498][ T311] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 31.890167][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 31.896699][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.912878][ T10] usb 4-1: can't read configurations, error -71 [ 31.920673][ T311] usb 2-1: Product: syz [ 31.925086][ T311] usb 2-1: Manufacturer: syz [ 31.929921][ T311] usb 2-1: SerialNumber: syz [ 31.968058][ T72] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 32.011859][ T322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.119628][ T72] usb 1-1: No LPM exit latency info found, disabling LPM. [ 32.127896][ T72] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 32.138938][ T72] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 32.140535][ T330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.159198][ T330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.167117][ T72] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 32.170900][ T311] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 32.190902][ T311] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 32.194818][ T72] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 32.199855][ T311] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 32.210028][ T72] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 32.226147][ T46] usb 3-1: unit 4 not found! [ 32.233006][ T311] usb 2-1: USB disconnect, device number 2 [ 32.239368][ T72] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 32, setting to 8 [ 32.252406][ T46] usb 3-1: USB disconnect, device number 2 [ 32.310063][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.336129][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 32.472671][ T338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 32.978112][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.127995][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 33.134803][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.143345][ T10] usb 4-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 33.154073][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.163405][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 49408, setting to 1024 [ 33.177086][ T10] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 33.186697][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.195957][ T10] usb 4-1: Product: syz [ 33.200541][ T10] usb 4-1: Manufacturer: syz [ 33.205220][ T10] usb 4-1: SerialNumber: syz [ 33.413568][ T347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.423332][ T347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.438391][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.445881][ T10] usb 4-1: unit 2 not found! [ 33.450855][ T10] usb 4-1: unit 0 not found! [ 33.460580][ T10] usb 4-1: USB disconnect, device number 3 [ 33.487309][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.580544][ T51] device offline error, dev sda, sector 274742 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 33.592052][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2019 starting block 34342) [ 33.604210][ T51] device offline error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 16 prio class 2 [ 33.607383][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2019, error -5) [ 33.617291][ T51] device offline error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 11 prio class 2 [ 33.639906][ T51] device offline error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 7 prio class 2 [ 33.646197][ T297] Buffer I/O error on device sda1, logical block 34304 [ 33.651869][ T51] device offline error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 33.668663][ T51] device offline error, dev sda, sector 280880 op 0x1:(WRITE) flags 0x4000 phys_seg 6 prio class 2 [ 33.680076][ T51] device offline error, dev sda, sector 281392 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 33.691401][ T51] device offline error, dev sda, sector 281904 op 0x1:(WRITE) flags 0x4000 phys_seg 6 prio class 2 [ 33.703498][ T44] device offline error, dev sda, sector 282416 op 0x1:(WRITE) flags 0x4000 phys_seg 34 prio class 2 [ 33.724186][ T44] device offline error, dev sda, sector 282928 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 33.736548][ T44] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35942) [ 33.748828][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 33.762670][ T297] Buffer I/O error on device sda1, logical block 34816 [ 33.770025][ T297] Buffer I/O error on device sda1, logical block 34817 [ 33.773019][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139302) [ 33.777869][ T297] Buffer I/O error on device sda1, logical block 34818 [ 33.788999][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139306) [ 33.805289][ T297] Buffer I/O error on device sda1, logical block 34819 [ 33.808958][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139342) [ 33.816069][ T297] Buffer I/O error on device sda1, logical block 34820 [ 33.827365][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139394) [ 33.835759][ T297] Buffer I/O error on device sda1, logical block 34821 [ 33.846723][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139407) [ 33.854471][ T297] Buffer I/O error on device sda1, logical block 34822 [ 33.865855][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139416) [ 33.873636][ T297] Buffer I/O error on device sda1, logical block 34823 [ 33.884975][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139427) [ 33.892539][ T297] Buffer I/O error on device sda1, logical block 34824 [ 33.903693][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139432) [ 33.924395][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 33.937250][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 33.950897][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 33.964103][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 33.977818][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 33.978072][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.991878][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 34.011982][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 34.025180][ T297] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 34.042302][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 34.042333][ T36] audit: type=1400 audit(1788542982.510:147): avc: denied { create } for pid=369 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.043012][ T363] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 34.049767][ T73] JBD2: Detected IO errors while flushing file data on sda1-8 [ 34.085476][ T73] Aborting journal on device sda1-8. [ 34.089998][ T363] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 34.091462][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 34.109353][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 34.112595][ T363] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 34.127599][ T36] audit: type=1400 audit(1788542982.580:148): avc: denied { mmap_zero } for pid=369 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 34.128434][ T363] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 34.177060][ T36] audit: type=1400 audit(1788542982.640:149): avc: denied { create } for pid=369 comm="syz.3.18" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.186761][ T363] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 34.208311][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 34.213028][ T36] audit: type=1400 audit(1788542982.650:150): avc: denied { map } for pid=369 comm="syz.3.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.216668][ T363] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 34.216859][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.251924][ T36] audit: type=1400 audit(1788542982.650:151): avc: denied { read write } for pid=369 comm="syz.3.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.282560][ T363] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 34.291748][ T46] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.301952][ T363] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 34.319836][ T363] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 34.330400][ T46] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 34.340116][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.358222][ T46] usb 3-1: Product: syz [ 34.363150][ T46] usb 3-1: Manufacturer: syz [ 34.367894][ T46] usb 3-1: SerialNumber: syz [ 34.412005][ T363] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 34.427970][ T72] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 34.437870][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.476407][ T72] usb 1-1: Product: 㠊 [ 34.480834][ T72] usb 1-1: Manufacturer: 鄷窻곚﹬ㄖ箊䰎柷嶁ᅭ켓Ḕᬼ䊗눌籝虄䐲悇鱗ι픤㚕喰东鍯蓰撔埙㬏쇥览㭡怌ࢫꇥ๺멟宊覉졍鈁㹁紭뎌溪f棩鷉₞椙甍慱䏅䧈䔶晵熦ص㪻頴纡늧㱗蛄殙猳㮺ề೬뎝ﵵႨ朘䄒噏봋岥煂췱࿶뵩橋笊㖞갥⏉쐡梢ꩡ룋퇢휎夛踣볯஬衃䚜䩄掟 [ 34.517997][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.549958][ T72] usb 1-1: can't set config #1, error -71 [ 34.577749][ T72] usb 1-1: USB disconnect, device number 2 [ 34.586470][ T367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 34.617585][ T110] udevd[110]: worker [313] terminated by signal 7 (Bus error) [ 34.626697][ T110] udevd[110]: worker [313] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 34.639183][ T46] usb 3-1: unit 4 not found! [ 34.663110][ T46] usb 3-1: USB disconnect, device number 3 [ 34.685959][ T375] udevd[375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.755592][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.779862][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.797124][ T311] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 34.815169][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.825656][ T364] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 conventional PCI endpoint [ 34.835819][ T311] usb 4-1: config 0 descriptor?? [ 34.881372][ T110] udevd[110]: worker [336] terminated by signal 7 (Bus error) [ 34.937355][ T364] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 34.961820][ T72] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 35.008315][ T364] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 35.028316][ T110] udevd[110]: worker [336] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 35.191505][ T364] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 35.205044][ T364] virtio-pci 0000:00:03.0: probe with driver virtio-pci failed with error -22 [ 35.209506][ T72] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.228708][ T110] udevd[110]: worker [319] terminated by signal 7 (Bus error) [ 35.238522][ T36] audit: type=1400 audit(1788542983.700:152): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 35.261494][ T110] udevd[110]: worker [319] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 35.274729][ T377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.275467][ T72] usb 1-1: language id specifier not provided by device, defaulting to English [ 35.304836][ T380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.305451][ T36] audit: type=1400 audit(1788542983.740:153): avc: denied { create } for pid=376 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.328938][ T380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.345479][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 35.363299][ T36] audit: type=1400 audit(1788542983.740:154): avc: denied { create } for pid=376 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.367002][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 35.383978][ T36] audit: type=1400 audit(1788542983.820:155): avc: denied { getopt } for pid=376 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.416567][ T72] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 35.425880][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.438418][ T36] audit: type=1400 audit(1788542983.900:156): avc: denied { create } for pid=378 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 35.458119][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 35.466413][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 35.482813][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 35.498276][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 35.505711][ T380] ======================================================= [ 35.505711][ T380] WARNING: The mand mount option has been deprecated and [ 35.505711][ T380] and is ignored by this kernel. Remove the mand [ 35.505711][ T380] option from the mount to silence this warning. [ 35.505711][ T380] ======================================================= [ 35.515897][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 35.555852][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.590819][ T311] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 35.616119][ T311] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 35.636144][ T311] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 35.651451][ T311] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -5 [ 35.729338][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.738088][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 35.756851][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 35.769851][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.788200][ T31] usb 2-1: Product: syz [ 35.796037][ T31] usb 2-1: Manufacturer: syz [ 35.805332][ T31] usb 2-1: SerialNumber: syz [ 35.822026][ T311] usb 4-1: USB disconnect, device number 4 [ 36.070088][ T72] usb 1-1: MIDIStreaming interface descriptor not found [ 36.171415][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.179120][ T31] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 36.189913][ T31] usb 2-1: failed to enable PITCH for EP 0x82 [ 36.200974][ T31] usb 2-1: USB disconnect, device number 3 [ 36.287815][ T374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=75 sclass=netlink_route_socket pid=374 comm=syz.0.19 [ 36.530552][ T394] FAULT_INJECTION: forcing a failure. [ 36.530552][ T394] name failslab, interval 1, probability 0, space 0, times 1 [ 36.543617][ T394] CPU: 0 UID: 0 PID: 394 Comm: syz.1.23 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 36.543668][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.543691][ T394] Call Trace: [ 36.543699][ T394] [ 36.543706][ T394] __dump_stack+0x21/0x30 [ 36.543748][ T394] dump_stack_lvl+0x140/0x1c0 [ 36.543777][ T394] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.543814][ T394] dump_stack+0x19/0x20 [ 36.543844][ T394] should_fail_ex+0x3c2/0x510 [ 36.543871][ T394] should_failslab+0xac/0x100 [ 36.543899][ T394] kmem_cache_alloc_noprof+0x42/0x410 [ 36.543922][ T394] ? security_inode_alloc+0x51/0x230 [ 36.543961][ T394] security_inode_alloc+0x51/0x230 [ 36.543988][ T394] inode_init_always_gfp+0x756/0x9e0 [ 36.544016][ T394] alloc_inode+0xc5/0x270 [ 36.544044][ T394] new_inode+0x25/0x1e0 [ 36.544071][ T394] ? start_creating+0x1fb/0x310 [ 36.544095][ T394] ? debugfs_create_dir+0x20/0x470 [ 36.544119][ T394] debugfs_create_dir+0xfa/0x470 [ 36.544143][ T394] kvm_create_vm_debugfs+0x20d/0xb50 [ 36.544176][ T394] ? __mmu_notifier_register+0x364/0x6b0 [ 36.544201][ T394] ? kvm_enable_virtualization+0x150/0x150 [ 36.544232][ T394] ? __kasan_check_write+0x18/0x20 [ 36.544255][ T394] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 36.544281][ T394] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 36.544312][ T394] kvm_dev_ioctl+0xb57/0x14c0 [ 36.544349][ T394] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 36.544384][ T394] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.544415][ T394] ? security_file_ioctl+0x3e/0x110 [ 36.544435][ T394] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 36.544466][ T394] __se_sys_ioctl+0x126/0x1b0 [ 36.544490][ T394] __x64_sys_ioctl+0x7f/0xa0 [ 36.544516][ T394] x64_sys_call+0x1878/0x2ee0 [ 36.544537][ T394] do_syscall_64+0x57/0xf0 [ 36.544569][ T394] ? clear_bhb_loop+0x50/0xa0 [ 36.544593][ T394] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.544617][ T394] RIP: 0033:0x7ff47e39e159 [ 36.544649][ T394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.544669][ T394] RSP: 002b:00007ff47cdf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.544702][ T394] RAX: ffffffffffffffda RBX: 00007ff47e625fa0 RCX: 00007ff47e39e159 [ 36.544720][ T394] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 36.544735][ T394] RBP: 00007ff47e435024 R08: 0000000000000000 R09: 0000000000000000 [ 36.544749][ T394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.544763][ T394] R13: 00007ff47e626038 R14: 00007ff47e625fa0 R15: 00007fff16fc8608 [ 36.544783][ T394] [ 36.544844][ T394] debugfs: out of free dentries, can not create directory '394-5' [ 36.837799][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.893546][ T400] overlayfs: missing 'workdir' [ 36.928982][ T400] incfs: Options parsing error. -22 [ 36.934443][ T400] incfs: mount failed -22 [ 36.989840][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.001818][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.003250][ T402] overlayfs: workdir and upperdir must be separate subtrees [ 37.013316][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 37.030791][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.040478][ T9] usb 3-1: config 0 descriptor?? [ 37.257987][ T9] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 37.265456][ T9] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 37.273144][ T9] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 37.280356][ T9] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 37.288471][ T9] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 37.348047][ T72] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.435594][ T414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.445673][ T414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.472520][ T10] usb 1-1: USB disconnect, device number 3 [ 37.498666][ T9] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 37.509312][ T72] usb 2-1: Using ep0 maxpacket: 16 [ 37.516628][ T9] usb 3-1: USB disconnect, device number 4 [ 37.523300][ T72] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.537626][ T72] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.548056][ T72] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 37.561849][ T72] usb 2-1: config 0 interface 0 has no altsetting 0 [ 37.568661][ T72] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.577785][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.586578][ T72] usb 2-1: config 0 descriptor?? [ 37.598198][ T110] udevd[110]: worker [375] terminated by signal 7 (Bus error) [ 37.606218][ T110] udevd[110]: worker [375] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 37.678086][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.794958][ T418] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 conventional PCI endpoint [ 37.835608][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.909570][ T418] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 37.910170][ T31] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 37.977821][ T418] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 37.980563][ T31] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 38.018701][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 38.022672][ T31] usb 4-1: config 0 has no interface number 0 [ 38.045766][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.048579][ T31] usb 4-1: config 0 interface 255 has no altsetting 0 [ 38.073658][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.078832][ T31] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 38.132739][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 38.142791][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.166303][ T10] usb 1-1: Product: syz [ 38.167873][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.176391][ T10] usb 1-1: Manufacturer: syz [ 38.184347][ T31] usb 4-1: config 0 descriptor?? [ 38.198167][ T10] usb 1-1: SerialNumber: syz [ 38.204215][ T31] ftdi_sio 4-1:0.255: FTDI USB Serial Device converter detected [ 38.216649][ T31] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 38.256140][ T110] udevd[110]: worker [331] terminated by signal 7 (Bus error) [ 38.264091][ T110] udevd[110]: worker [331] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 38.274137][ T418] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 38.278992][ T110] udevd[110]: worker [387] terminated by signal 7 (Bus error) [ 38.284830][ T418] virtio-pci 0000:00:03.0: probe with driver virtio-pci failed with error -22 [ 38.293765][ T110] udevd[110]: worker [387] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 38.312854][ T72] usbhid 2-1:0.0: can't add hid device: -71 [ 38.319671][ T72] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 38.332660][ T72] usb 2-1: USB disconnect, device number 4 [ 38.341639][ T110] udevd[110]: worker [422] terminated by signal 7 (Bus error) [ 38.350168][ T110] udevd[110]: worker [422] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.255' [ 38.379160][ T110] udevd[110]: worker [423] terminated by signal 7 (Bus error) [ 38.387123][ T110] udevd[110]: worker [423] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.255' [ 38.444357][ T417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 38.458050][ T10] usb 1-1: unit 4 not found! [ 38.467126][ T10] usb 1-1: USB disconnect, device number 4 [ 38.498012][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 38.719455][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.728604][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 38.736527][ T31] usb 3-1: can't read configurations, error -71 [ 38.939895][ T435] kvm: kvm [434]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 39.012644][ T438] tipc: Started in network mode [ 39.017871][ T438] tipc: Node identity , cluster identity 4711 [ 39.024475][ T438] tipc: Failed to set node id, please configure manually [ 39.031967][ T438] tipc: Enabling of bearer rejected, failed to enable media [ 39.048579][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 39.048618][ T36] audit: type=1400 audit(1788542987.520:177): avc: denied { ioctl } for pid=437 comm="syz.0.35" path="socket:[3808]" dev="sockfs" ino=3808 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.080076][ T36] audit: type=1400 audit(1788542987.520:178): avc: denied { write } for pid=437 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.126462][ T440] netlink: 'syz.0.36': attribute type 29 has an invalid length. [ 39.158690][ T36] audit: type=1400 audit(1788542987.620:179): avc: denied { ioctl } for pid=441 comm="syz.0.37" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3811 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.232629][ T36] audit: type=1400 audit(1788542987.700:180): avc: denied { mount } for pid=448 comm="syz.1.39" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.255249][ T36] audit: type=1400 audit(1788542987.710:181): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.274451][ T451] ./dev/sda1: Can't lookup blockdev [ 39.275815][ T449] ./dev/sda1: Can't lookup blockdev [ 39.299781][ T36] audit: type=1400 audit(1788542987.770:182): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.324821][ T453] 9pnet_fd: Insufficient options for proto=fd [ 39.353325][ T36] audit: type=1400 audit(1788542987.790:183): avc: denied { create } for pid=452 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.376562][ T36] audit: type=1400 audit(1788542987.790:184): avc: denied { read write } for pid=452 comm="syz.2.41" dev="sockfs" ino=3819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.405864][ T36] audit: type=1400 audit(1788542987.810:185): avc: denied { connect } for pid=452 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.430928][ T36] audit: type=1400 audit(1788542987.810:186): avc: denied { map } for pid=454 comm="syz.1.42" path="socket:[4894]" dev="sockfs" ino=4894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 39.499005][ T474] ./dev/sda1: Can't lookup blockdev [ 39.578019][ T72] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.728005][ T72] usb 1-1: Using ep0 maxpacket: 8 [ 39.735100][ T72] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.745949][ T72] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.756461][ T72] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 39.765887][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.774220][ T72] usb 1-1: Product: syz [ 39.778440][ T72] usb 1-1: Manufacturer: syz [ 39.783234][ T72] usb 1-1: SerialNumber: syz [ 39.798071][ T372] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 39.806004][ T31] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 39.958996][ T372] usb 2-1: not running at top speed; connect to a high speed hub [ 39.968034][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 39.979351][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 39.990659][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 39.995070][ T457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 40.002536][ T372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.022159][ T72] usb 1-1: unit 4 not found! [ 40.022838][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 40.037206][ T372] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 40.046492][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.049864][ T72] usb 1-1: USB disconnect, device number 5 [ 40.067444][ T31] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 40.077363][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.088887][ T372] usb 2-1: Found UVC 1.00 device (0000:0000) [ 40.097251][ T31] usb 3-1: Product: syz [ 40.101977][ T31] usb 3-1: Manufacturer: syz [ 40.106737][ T31] usb 3-1: SerialNumber: syz [ 40.112772][ T466] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.120039][ T466] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.128579][ T31] pl2303 3-1:1.0: pl2303 converter detected [ 40.134728][ T31] pl2303 3-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 40.286532][ T372] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 40.296778][ T372] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 40.306777][ T372] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 40.315865][ T372] usb 2-1: USB disconnect, device number 5 [ 40.337165][ T72] usb 3-1: USB disconnect, device number 6 [ 40.424759][ T10] usb 4-1: USB disconnect, device number 5 [ 40.431146][ T10] ftdi_sio 4-1:0.255: device disconnected [ 40.644752][ T489] netlink: 140 bytes leftover after parsing attributes in process `syz.0.50'. [ 40.667692][ T495] ./dev/sda1: Can't lookup blockdev [ 40.748974][ T500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 41.018025][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.048014][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.168010][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 41.174768][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.185934][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.196182][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 41.198181][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 41.209739][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 41.218305][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 41.224764][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.234871][ T10] usb 2-1: config 0 has no interface number 0 [ 41.248460][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 41.248928][ T31] usb 1-1: config 0 descriptor?? [ 41.259558][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 41.271121][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.279885][ T10] usb 2-1: Product: syz [ 41.284464][ T10] usb 2-1: Manufacturer: syz [ 41.289590][ T10] usb 2-1: SerialNumber: syz [ 41.295716][ T10] usb 2-1: config 0 descriptor?? [ 41.302454][ T10] smsc75xx v1.0.0 [ 41.568088][ T333] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.704339][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 41.715324][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.732219][ T333] usb 4-1: Using ep0 maxpacket: 8 [ 41.745173][ T333] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.756308][ T333] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.767529][ T333] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 41.783556][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.787173][ T516] netlink: 'syz.2.59': attribute type 3 has an invalid length. [ 41.792785][ T333] usb 4-1: Product: syz [ 41.801077][ T516] netlink: 'syz.2.59': attribute type 3 has an invalid length. [ 41.804567][ T333] usb 4-1: Manufacturer: syz [ 41.817845][ T333] usb 4-1: SerialNumber: syz [ 41.823150][ T516] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 41.832968][ T516] flags: 0x4000000000000000(zone=1) [ 41.838422][ T516] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 41.847571][ T516] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 41.857227][ T516] page dumped because: unmovable page [ 41.862987][ T516] page_owner tracks the page as allocated [ 41.869491][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.878123][ T516] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1155318025, free_ts 0 [ 41.879254][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.892672][ T516] register_early_stack+0x99/0x100 [ 41.906882][ T516] init_page_owner+0x40/0x840 [ 41.906926][ T516] page_ext_init+0x3f8/0x44b [ 41.906960][ T516] mm_core_init+0x4b/0x7b [ 41.907047][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 41.907113][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 Sep 4 17:29:50 [ 41.935429][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 41.938866][ T31] usb 1-1: USB disconnect, device number 6 lert kernel: [ [ 41.945682][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 41.862987][ T5[ 41.965073][ T516] page_owner free stack trace missing 16] page_owner t[ 41.970884][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 racks the page as allocated Sep 4 17:29:50 [ 41.988282][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 41.998751][ T517] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 lert kernel: [ [ 42.009026][ T517] flags: 0x4000000000000000(zone=1) [ 42.010209][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 41.878123][ T5[ 42.015767][ T517] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 42.034165][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 16] page last al[ 42.038966][ T517] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 42.044180][ T512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. located via orde[ 42.054481][ T517] page dumped because: unmovable page r 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 11553180[ 42.076014][ T333] usb 4-1: unit 4 not found! 25, free_ts 0 S[ 42.082615][ T517] page_owner tracks the page as allocated ep 4 17:29:50 s[ 42.089344][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 yzkaller kern.al[ 42.093118][ T517] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1158703049, free_ts 0 ert kernel: [ 41.965073][ T51[ 42.117885][ T517] register_early_stack+0x99/0x100 6] page_owner fr[ 42.118536][ T333] usb 4-1: USB disconnect, device number 6 ee stack trace m[ 42.124016][ T517] init_page_owner+0x40/0x840 issing [ 42.138060][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Sep 4 17:29:50 [ 42.148742][ T517] page_ext_init+0x3f8/0x44b syzkaller kern.a[ 42.154069][ T517] mm_core_init+0x4b/0x7b lert kernel: [ 42.082615][ T5[ 42.162227][ T517] page_owner free stack trace missing 17] page_owner tracks the page as allocated Sep[ 42.171518][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 4 17:29:50 syzkaller kern.alert kernel: [ 42.093118][ T517] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1158703049, free_ts 0 Sep 4 17:29:50 syzkaller kern.alert kernel: [ 42.162227][ T517] page_owner free stack trace missing [ 42.448168][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.597954][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 42.608328][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 42.616871][ T31] usb 3-1: config 0 has no interface number 0 [ 42.623251][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.634873][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.645563][ T31] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 42.648104][ T537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.658226][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.666972][ T537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.681505][ T31] usb 3-1: config 0 descriptor?? [ 42.837993][ T372] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.008073][ T372] usb 4-1: Using ep0 maxpacket: 8 [ 43.014902][ T372] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.026652][ T372] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.040320][ T372] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.047501][ T372] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 43.057001][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.065820][ T372] usb 4-1: config 0 descriptor?? [ 43.078257][ T110] udevd[110]: worker [520] terminated by signal 7 (Bus error) [ 43.086884][ T110] udevd[110]: worker [520] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 43.098080][ T523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.107522][ T523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.119243][ T110] udevd[110]: worker [521] terminated by signal 7 (Bus error) [ 43.127097][ T110] udevd[110]: worker [521] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 43.144445][ T110] udevd[110]: worker [479] terminated by signal 7 (Bus error) [ 43.152932][ T110] udevd[110]: worker [479] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 43.428644][ T31] uclogic 0003:28BD:0094.0003: failed retrieving string descriptor #100: -71 [ 43.438222][ T31] uclogic 0003:28BD:0094.0003: failed retrieving pen parameters: -71 [ 43.446964][ T31] uclogic 0003:28BD:0094.0003: pen probing failed: -71 [ 43.454212][ T31] uclogic 0003:28BD:0094.0003: failed probing parameters: -71 [ 43.462072][ T31] uclogic 0003:28BD:0094.0003: probe with driver uclogic failed with error -71 [ 43.473844][ T31] usb 3-1: USB disconnect, device number 7 [ 43.504181][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.512839][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.521479][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.530702][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.539932][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.548773][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.557364][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.565982][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.574573][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.583083][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.591742][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.600688][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.609501][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.617372][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.626531][ T372] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0 [ 43.635482][ T372] logitech-hidpp-device 0003:046D:C262.0004: unbalanced collection at end of report description [ 43.646472][ T372] logitech-hidpp-device 0003:046D:C262.0004: hidpp_probe:parse failed [ 43.655468][ T372] logitech-hidpp-device 0003:046D:C262.0004: probe with driver logitech-hidpp-device failed with error -22 [ 43.671853][ T110] udevd[110]: worker [540] terminated by signal 7 (Bus error) [ 43.679935][ T110] udevd[110]: worker [540] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 43.714500][ T110] udevd[110]: worker [542] terminated by signal 7 (Bus error) [ 43.723822][ T110] udevd[110]: worker [542] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 43.736508][ T372] usb 4-1: USB disconnect, device number 7 [ 43.778027][ T46] usb 1-1: device descriptor read/64, error -71 [ 43.828336][ T10] usb 2-1: USB disconnect, device number 6 [ 44.018027][ T46] usb 1-1: device descriptor read/64, error -71 [ 44.177998][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.257977][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.338926][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.350563][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.360832][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.375570][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.385187][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.388334][ T46] usb 1-1: device descriptor read/64, error -71 [ 44.397055][ T10] usb 2-1: config 0 descriptor?? [ 44.649627][ T46] usb 1-1: device descriptor read/64, error -71 [ 44.768629][ T46] usb usb1-port1: attempt power cycle [ 44.808178][ T10] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 44.820095][ T10] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 44.849072][ T588] syz.2.72 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.918415][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 44.918434][ T36] audit: type=1400 audit(1788542993.390:204): avc: denied { name_bind } for pid=590 comm="syz.2.73" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.947513][ T36] audit: type=1400 audit(1788542993.410:205): avc: denied { setopt } for pid=590 comm="syz.2.73" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.108048][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.129277][ T46] usb 1-1: device descriptor read/8, error -71 [ 45.218017][ T372] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.259302][ T46] usb 1-1: device descriptor read/8, error -71 [ 45.368009][ T372] usb 3-1: Using ep0 maxpacket: 32 [ 45.375338][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.386739][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.397189][ T372] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.406850][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.415947][ T372] usb 3-1: config 0 descriptor?? [ 45.429106][ T372] hub 3-1:0.0: USB hub found [ 45.451584][ T36] audit: type=1400 audit(1788542993.920:206): avc: denied { unlink } for pid=596 comm="syz.3.75" name="#1" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.475642][ T36] audit: type=1400 audit(1788542993.920:207): avc: denied { mount } for pid=596 comm="syz.3.75" name="/" dev="overlay" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.498204][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.519491][ T46] usb 1-1: device descriptor read/8, error -71 [ 45.566034][ T36] audit: type=1400 audit(1788542994.030:208): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.623072][ T36] audit: type=1400 audit(1788542994.090:209): avc: denied { write } for pid=603 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.646222][ T372] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 45.659751][ T46] usb 1-1: device descriptor read/8, error -71 [ 45.778087][ T46] usb usb1-port1: unable to enumerate USB device [ 46.059190][ T372] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 46.068501][ T372] hid-generic 0003:046D:C31C.0006: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 46.258455][ T593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.267285][ T593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.378145][ T10] usb 3-1: USB disconnect, device number 8 [ 46.493459][ T36] audit: type=1400 audit(1788542994.960:210): avc: denied { read } for pid=611 comm="syz.0.78" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.519848][ T612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 46.530300][ T36] audit: type=1400 audit(1788542994.990:211): avc: denied { open } for pid=611 comm="syz.0.78" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.555578][ T36] audit: type=1400 audit(1788542994.990:212): avc: denied { ioctl } for pid=611 comm="syz.0.78" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.582484][ T36] audit: type=1400 audit(1788542994.990:213): avc: denied { create } for pid=611 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 46.642986][ T612] team_slave_1: entered promiscuous mode [ 46.648800][ T612] team_slave_1: entered allmulticast mode [ 46.657771][ T614] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.797097][ T623] sit0: entered promiscuous mode [ 46.810886][ T623] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 46.818626][ T623] netlink: 1 bytes leftover after parsing attributes in process `syz.2.81'. [ 46.858588][ T31] usb 2-1: USB disconnect, device number 7 [ 46.896135][ T630] ./dev/sda1: Can't lookup blockdev [ 46.908037][ T372] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.917961][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 46.958109][ T641] ./dev/sda1: Can't lookup blockdev [ 46.987044][ T644] netlink: 'syz.2.86': attribute type 27 has an invalid length. [ 46.997509][ T644] sit0: left promiscuous mode [ 47.068074][ T372] usb 4-1: Using ep0 maxpacket: 32 [ 47.074721][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.088229][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 47.089798][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.106730][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.124844][ T372] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 47.128183][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 47.136378][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.158498][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 47.168441][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.169508][ T372] usb 4-1: config 0 descriptor?? [ 47.177624][ T10] usb 1-1: Product: syz [ 47.177647][ T10] usb 1-1: Manufacturer: syz [ 47.177665][ T10] usb 1-1: SerialNumber: syz [ 47.188217][ T372] hub 4-1:0.0: USB hub found [ 47.386544][ T372] hub 4-1:0.0: 1 port detected [ 47.415499][ T621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 47.428251][ T10] usb 1-1: unit 4 not found! [ 47.447352][ T10] usb 1-1: USB disconnect, device number 11 [ 47.512946][ T668] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 47.568064][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.748250][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 47.755264][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.767068][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.777696][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 47.791352][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 47.801145][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.810217][ T31] usb 2-1: config 0 descriptor?? [ 48.049342][ T672] Write-error on swap-device (8:0:787782) [ 48.055394][ T672] Write-error on swap-device (8:0:787790) [ 48.061495][ T672] Write-error on swap-device (8:0:787798) [ 48.061876][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 48.067659][ T672] Write-error on swap-device (8:0:787806) Sep 4 17:29:56 [ 48.084038][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 48.095305][ T672] Write-error on swap-device (8:0:787814) lert kernel: [ [ 48.102455][ T672] Write-error on swap-device (8:0:787822) 48.049342][ T6[ 48.102876][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 72] Write-error [ 48.116215][ T672] Write-error on swap-device (8:0:787830) on swap-device ([ 48.129730][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 8:0:787782) Sep[ 48.140390][ T672] Write-error on swap-device (8:0:787838) 4 17:29:56 syz[ 48.147675][ T672] Write-error on swap-device (8:0:787846) kaller kern.aler[ 48.155995][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 t kernel: [ 48[ 48.166561][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 .055394][ T672][ 48.177406][ T672] Write-error on swap-device (8:0:787854) Write-error on [ 48.184955][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 swap-device (8:0:787790) Sep 4[ 48.198387][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 17:29:56 syzkaller kern.alert kernel: [ 48.061495][ T672] Write-error on swap-device (8:0:787798) Sep 4 17:29:56 syzkaller[ 48.219234][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 kern.alert kern[ 48.219566][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 el: [ 48.067659][ T672] Write[ 48.239179][ T675] ./dev/sda1: Can't lookup blockdev -error on swap-d[ 48.244201][ T31] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max evice (8:0:78780[ 48.255712][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 6) Sep 4 17:29:56 syzkaller kern.alert kernel: [ 48.095305][ T672] Write-error on swap-device (8:0:787814) Sep 4 17:29:56 syzkaller kern.alert kernel: [ 48.102455][ T672] Write-error on swap-device (8:0:787822) Sep 4 17:29:56 syzkaller kern.alert kernel: [ 48.116215][ T672] Write-error on swap-device (8:0:787830) Sep 4 17:29:56 syzkaller kern.alert kernel: [ 48.1[ 48.299324][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input4 40390][ T672] Write-error on swap-device (8:0:787838) Sep 4 17:29:56 syzkaller kern.alert kernel: [ 48.147675][ T672] Write-error on swap-device (8:0:787846) Sep 4 17:29:56 syzkaller k[ 48.329333][ T31] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 ern.alert kernel: [ 48.177406][ T672] Write-error on swap-dev[ 48.350900][ T678] udevd[678]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error ice (8:0:787854) [ 48.397437][ T683] ./dev/sda1: Can't lookup blockdev [ 48.424436][ T684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.427117][ T689] netlink: 104 bytes leftover after parsing attributes in process `syz.0.97'. [ 48.443752][ T149] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 48.469013][ T372] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 48.474585][ T684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.482629][ T372] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 48.501993][ T110] udevd[110]: worker [654] terminated by signal 7 (Bus error) [ 48.510355][ T110] udevd[110]: worker [654] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 48.519556][ T372] usbhid 4-1:0.0: can't add hid device: -32 [ 48.527669][ T372] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 48.561296][ T110] udevd[110]: worker [679] terminated by signal 7 (Bus error) [ 48.569467][ T110] udevd[110]: worker [679] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 48.584551][ T110] udevd[110]: worker [667] terminated by signal 7 (Bus error) [ 48.596296][ T110] udevd[110]: worker [667] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 48.719493][ T692] netlink: 51 bytes leftover after parsing attributes in process `syz.2.98'. [ 48.729191][ T708] netlink: 51 bytes leftover after parsing attributes in process `syz.2.98'. [ 48.740329][ T692] fuse: Bad value for 'fd' [ 48.746735][ T708] FAULT_INJECTION: forcing a failure. [ 48.746735][ T708] name failslab, interval 1, probability 0, space 0, times 0 [ 48.761454][ T708] CPU: 1 UID: 0 PID: 708 Comm: syz.2.98 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 48.761487][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.761500][ T708] Call Trace: [ 48.761507][ T708] [ 48.761515][ T708] __dump_stack+0x21/0x30 [ 48.761551][ T708] dump_stack_lvl+0x140/0x1c0 [ 48.761581][ T708] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.761612][ T708] dump_stack+0x19/0x20 [ 48.761639][ T708] should_fail_ex+0x3c2/0x510 [ 48.761663][ T708] ? anon_vma_name_alloc+0x5e/0x1a0 [ 48.761683][ T708] should_failslab+0xac/0x100 [ 48.761721][ T708] __kmalloc_noprof+0x69/0x510 [ 48.761744][ T708] ? anon_vma_name_alloc+0x5e/0x1a0 [ 48.761763][ T708] ? __kasan_check_write+0x18/0x20 [ 48.761784][ T708] ? _copy_from_user+0x87/0xa0 [ 48.761814][ T708] anon_vma_name_alloc+0x5e/0x1a0 [ 48.761834][ T708] prctl_set_vma+0x24d/0x590 [ 48.761857][ T708] ? prctl_get_mdwe+0x120/0x120 [ 48.761878][ T708] ? __kasan_check_read+0x15/0x20 [ 48.761898][ T708] ? static_key_count+0x45/0x70 [ 48.761925][ T708] ? security_task_prctl+0x2b4/0x2e0 [ 48.761951][ T708] __se_sys_prctl+0x4a9/0x1480 [ 48.761972][ T708] ? __x64_sys_prctl+0xf0/0xf0 [ 48.761992][ T708] ? __kasan_check_write+0x18/0x20 [ 48.762013][ T708] ? fpregs_restore_userregs+0x11c/0x260 [ 48.762039][ T708] __x64_sys_prctl+0xc3/0xf0 [ 48.762060][ T708] x64_sys_call+0x2614/0x2ee0 [ 48.762080][ T708] do_syscall_64+0x57/0xf0 [ 48.762110][ T708] ? clear_bhb_loop+0x50/0xa0 [ 48.762135][ T708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.762158][ T708] RIP: 0033:0x7f6a8a19e159 [ 48.762179][ T708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.762196][ T708] RSP: 002b:00007f6a88ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 48.762219][ T708] RAX: ffffffffffffffda RBX: 00007f6a8a426180 RCX: 00007f6a8a19e159 [ 48.762235][ T708] RDX: 0000200000ffb000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 48.762249][ T708] RBP: 00007f6a8a235024 R08: 0000200000000000 R09: 0000000000000000 [ 48.762264][ T708] R10: 00000000fffffd00 R11: 0000000000000246 R12: 0000000000000000 [ 48.762278][ T708] R13: 00007f6a8a426218 R14: 00007f6a8a426180 R15: 00007ffcc035ecc8 [ 48.762296][ T708] [ 49.158082][ T333] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.268031][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 49.308111][ T333] usb 1-1: Using ep0 maxpacket: 8 [ 49.315929][ T333] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.326607][ T333] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.337321][ T333] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 49.347212][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.356200][ T333] usb 1-1: Product: syz [ 49.361301][ T333] usb 1-1: Manufacturer: syz [ 49.366415][ T333] usb 1-1: SerialNumber: syz [ 49.419250][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.429844][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.440965][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.450628][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.458814][ T10] usb 3-1: Product: syz [ 49.463410][ T10] usb 3-1: Manufacturer: syz [ 49.468525][ T10] usb 3-1: SerialNumber: syz [ 49.575952][ T711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 49.593115][ T333] usb 1-1: unit 4 not found! [ 49.602705][ T333] usb 1-1: USB disconnect, device number 12 [ 49.621372][ T716] udevd[716]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.658146][ T718] ./dev/sda1: Can't lookup blockdev [ 49.739003][ T725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.748280][ T9] usb 4-1: USB disconnect, device number 8 [ 49.759210][ T725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.771056][ T728] ./dev/sda1: Can't lookup blockdev [ 49.773120][ T725] netlink: 104 bytes leftover after parsing attributes in process `syz.2.101'. [ 49.862197][ T735] Zero length message leads to an empty skb [ 50.110034][ T372] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.247997][ T372] usb 4-1: device descriptor read/64, error -71 [ 50.344748][ T31] usb 2-1: USB disconnect, device number 8 [ 50.360695][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 50.391604][ T739] ./dev/sda1: Can't lookup blockdev [ 50.469737][ T741] kvm: pic: non byte write [ 50.475856][ T741] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 50.497984][ T372] usb 4-1: device descriptor read/64, error -71 [ 50.528280][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 50.535394][ T46] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 50.543819][ T46] usb 1-1: config 0 has no interface number 0 [ 50.550760][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.562040][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.572726][ T46] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 50.582725][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.597450][ T46] usb 1-1: config 0 descriptor?? [ 50.737949][ T372] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 50.877980][ T372] usb 4-1: device descriptor read/64, error -71 [ 51.118450][ T372] usb 4-1: device descriptor read/64, error -71 [ 51.208156][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 51.208175][ T36] audit: type=1400 audit(1788542999.670:240): avc: denied { read write } for pid=736 comm="syz.0.110" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.240866][ T46] uclogic 0003:28BD:0094.0008: pen parameters not found [ 51.248316][ T372] usb usb4-port1: attempt power cycle [ 51.254772][ T46] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring [ 51.263911][ T46] usb 1-1: USB disconnect, device number 13 [ 51.276798][ T36] audit: type=1400 audit(1788542999.680:241): avc: denied { open } for pid=736 comm="syz.0.110" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.393806][ T756] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=756 comm=syz.1.113 [ 51.408366][ T36] audit: type=1400 audit(1788542999.880:242): avc: denied { setopt } for pid=753 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.587952][ T372] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 51.619391][ T372] usb 4-1: device descriptor read/8, error -71 [ 51.680532][ T761] ./dev/sda1: Can't lookup blockdev [ 51.716158][ T36] audit: type=1400 audit(1788543000.180:243): avc: denied { create } for pid=762 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.758953][ T372] usb 4-1: device descriptor read/8, error -71 [ 51.978032][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.997996][ T372] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 52.019145][ T372] usb 4-1: device descriptor read/8, error -71 [ 52.028438][ T314] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.077501][ T10] usb 3-1: cannot find UAC_HEADER [ 52.095216][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.118721][ T10] usb 3-1: USB disconnect, device number 9 [ 52.133816][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 52.142179][ T699] udevd[699]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.160209][ T372] usb 4-1: device descriptor read/8, error -71 [ 52.167549][ T46] usb 2-1: config 163 has an invalid interface number: 99 but max is 1 [ 52.176566][ T46] usb 2-1: config 163 has an invalid interface number: 6 but max is 1 [ 52.185522][ T314] usb 1-1: Using ep0 maxpacket: 8 [ 52.192398][ T314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.207859][ T46] usb 2-1: config 163 has no interface number 0 [ 52.214655][ T314] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.224488][ T46] usb 2-1: config 163 has no interface number 1 [ 52.231412][ T46] usb 2-1: config 163 interface 6 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 52.242661][ T46] usb 2-1: config 163 interface 99 has no altsetting 0 [ 52.250147][ T46] usb 2-1: config 163 interface 6 has no altsetting 0 [ 52.257466][ T314] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 52.267015][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.269207][ T194] EXT4-fs warning: 39 callbacks suppressed [ 52.269262][ T194] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block [ 52.275809][ T372] usb usb4-port1: unable to enumerate USB device [ 52.302648][ T314] usb 1-1: Product: syz [ 52.307049][ T314] usb 1-1: Manufacturer: syz [ 52.312234][ T314] usb 1-1: SerialNumber: syz [ 52.318629][ T46] usb 2-1: New USB device found, idVendor=2c7c, idProduct=6026, bcdDevice=21.b6 [ 52.328939][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.337474][ T46] usb 2-1: Product: syz [ 52.344945][ T46] usb 2-1: Manufacturer: 酯퍍⣷沍c铱ᩭ㗻雚軅⒨⻆ꁮ떊痑傼ˌ农퓭霁 [ 52.355478][ T46] usb 2-1: SerialNumber: syz [ 52.371773][ T110] udevd[110]: worker [712] terminated by signal 7 (Bus error) [ 52.530105][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 52.544172][ T314] usb 1-1: unit 4 not found! [ 52.568758][ T314] usb 1-1: USB disconnect, device number 14 [ 52.609678][ T46] usb 2-1: USB disconnect, device number 9 [ 52.817966][ T777] ./dev/sda1: Can't lookup blockdev [ 52.881876][ T781] FAULT_INJECTION: forcing a failure. [ 52.881876][ T781] name failslab, interval 1, probability 0, space 0, times 0 [ 52.895116][ T781] CPU: 0 UID: 0 PID: 781 Comm: syz.3.122 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 52.895144][ T781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.895155][ T781] Call Trace: [ 52.895160][ T781] [ 52.895168][ T781] __dump_stack+0x21/0x30 [ 52.895203][ T781] dump_stack_lvl+0x140/0x1c0 [ 52.895227][ T781] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.895254][ T781] dump_stack+0x19/0x20 [ 52.895276][ T781] should_fail_ex+0x3c2/0x510 [ 52.895296][ T781] ? security_key_alloc+0x60/0x2a0 [ 52.895312][ T781] should_failslab+0xac/0x100 [ 52.895334][ T781] __kmalloc_noprof+0x69/0x510 [ 52.895352][ T781] ? security_key_alloc+0x60/0x2a0 [ 52.895374][ T781] security_key_alloc+0x60/0x2a0 [ 52.895389][ T781] ? __asan_memset+0x39/0x50 [ 52.895406][ T781] key_alloc+0x694/0x1060 [ 52.895432][ T781] keyring_alloc+0x4b/0xc0 [ 52.895448][ T781] install_process_keyring_to_cred+0xa0/0x130 [ 52.895472][ T781] __se_sys_keyctl+0xb80/0xe40 [ 52.895493][ T781] ? __x64_sys_keyctl+0xf0/0xf0 [ 52.895515][ T781] ? __cfi_do_futex+0x10/0x10 [ 52.895538][ T781] ? mutex_unlock+0x90/0x240 [ 52.895558][ T781] ? __se_sys_futex+0x13c/0x320 [ 52.895581][ T781] ? fput+0x1a4/0x230 [ 52.895604][ T781] ? __x64_sys_futex+0x110/0x110 [ 52.895627][ T781] ? __cfi_ksys_write+0x10/0x10 [ 52.895646][ T781] ? __kasan_check_write+0x18/0x20 [ 52.895662][ T781] ? fpregs_restore_userregs+0x11c/0x260 [ 52.895684][ T781] __x64_sys_keyctl+0xc3/0xf0 [ 52.895705][ T781] x64_sys_call+0x996/0x2ee0 [ 52.895720][ T781] do_syscall_64+0x57/0xf0 [ 52.895745][ T781] ? clear_bhb_loop+0x50/0xa0 [ 52.895765][ T781] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.895783][ T781] RIP: 0033:0x7fc76979e159 [ 52.895797][ T781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.895812][ T781] RSP: 002b:00007fc76a741028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 52.895830][ T781] RAX: ffffffffffffffda RBX: 00007fc769a25fa0 RCX: 00007fc76979e159 [ 52.895843][ T781] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 52.895853][ T781] RBP: 00007fc769835024 R08: 0000000000000000 R09: 0000000000000000 [ 52.895867][ T781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.895877][ T781] R13: 00007fc769a26038 R14: 00007fc769a25fa0 R15: 00007ffe1fe8f7b8 [ 52.895892][ T781] [ 53.162974][ T786] ./dev/sda1: Can't lookup blockdev [ 53.195189][ T36] audit: type=1400 audit(1788543001.660:244): avc: denied { map } for pid=788 comm="syz.1.125" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.199885][ T789] syz.1.125: attempt to access beyond end of device [ 53.199885][ T789] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 53.235731][ T789] rust_binder: Failure in copy_transaction_data: EFAULT [ 53.235788][ T789] rust_binder: 788:789 transaction call to 788:0 failed EFAULT, code 0 size 768-240 [ 53.245282][ T36] audit: type=1400 audit(1788543001.700:245): avc: denied { call } for pid=788 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.254387][ T314] rust_binder: 788: undelivered TRANSACTION_ERROR: 29201 [ 53.278161][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.303043][ T791] fuseblk: Unknown parameter 'rootmodlgx39S000000000140000' [ 53.372210][ T800] ./dev/sda1: Can't lookup blockdev [ 53.406858][ T36] audit: type=1400 audit(1788543001.860:246): avc: denied { search } for pid=794 comm="syz.1.128" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.436811][ T36] audit: type=1400 audit(1788543001.860:247): avc: denied { write } for pid=794 comm="syz.1.128" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=5923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.438072][ T72] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.461871][ T36] audit: type=1400 audit(1788543001.860:248): avc: denied { add_name } for pid=794 comm="syz.1.128" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.468725][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 53.492571][ T36] audit: type=1400 audit(1788543001.860:249): avc: denied { create } for pid=794 comm="syz.1.128" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 53.519560][ T10] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 53.528755][ T10] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 53.547245][ T10] usb 3-1: config 32 has no interface number 0 [ 53.553846][ T10] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 53.563422][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.574202][ T10] uvcvideo 3-1:32.64: Found Unit with invalid ID 0 [ 53.581054][ T10] usb 3-1: Found UVC 0.00 device (0bd3:0569) [ 53.588855][ T10] usb 3-1: No valid video chain found. [ 53.597071][ T110] udevd[110]: worker [715] terminated by signal 7 (Bus error) [ 53.605706][ T110] udevd[110]: worker [715] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 53.624199][ T110] udevd[110]: worker [716] terminated by signal 7 (Bus error) [ 53.632179][ T110] udevd[110]: worker [716] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.64' [ 53.648045][ T314] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 53.671952][ T110] udevd[110]: worker [775] terminated by signal 7 (Bus error) [ 53.678247][ T806] capability: warning: `syz.1.132' uses 32-bit capabilities (legacy support in use) [ 53.682428][ T72] usb 4-1: Using ep0 maxpacket: 32 [ 53.697330][ T110] udevd[110]: worker [775] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 53.704181][ T806] SELinux: Context is not valid (left unmapped). [ 53.710290][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 53.728587][ T806] overlay: filesystem on ./file0 not supported as upperdir [ 53.729326][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.748719][ T72] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.758539][ T72] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.768640][ T72] usb 4-1: config 0 descriptor?? [ 53.775538][ T72] hub 4-1:0.0: bad descriptor, ignoring hub [ 53.782196][ T72] hub 4-1:0.0: probe with driver hub failed with error -5 [ 53.794369][ T110] udevd[110]: worker [804] terminated by signal 7 (Bus error) [ 53.807483][ T110] udevd[110]: worker [804] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 53.817455][ T811] ./dev/sda1: Can't lookup blockdev [ 53.819560][ T72] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 53.824945][ T314] usb 1-1: Using ep0 maxpacket: 8 [ 53.847922][ T314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.864024][ T314] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.875413][ T110] udevd[110]: worker [812] terminated by signal 7 (Bus error) [ 53.880905][ T314] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 53.887873][ T110] udevd[110]: worker [812] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 53.898399][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.916439][ T46] usb 3-1: USB disconnect, device number 10 [ 53.922979][ T314] usb 1-1: Product: syz [ 53.936852][ T314] usb 1-1: Manufacturer: syz [ 53.957976][ T314] usb 1-1: SerialNumber: syz [ 54.001532][ T823] overlay: Unknown parameter 'hash' [ 54.017550][ T823] __end_swap_bio_write: 212 callbacks suppressed [ 54.017574][ T823] Write-error on swap-device (8:0:788318) [ 54.024836][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 54.031836][ T823] Write-error on swap-device (8:0:788326) Sep 4 17:30:02 [ 54.046248][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 54.052187][ T823] Write-error on swap-device (8:0:788334) lert kernel: [ 54.017574][ T8[ 54.064328][ T823] Write-error on swap-device (8:0:788350) 23] Write-error [ 54.064433][ T823] Write-error on swap-device (8:0:788358) on swap-device (8:0:788318) [ 54.064507][ T823] Write-error on swap-device (8:0:788366) [ 54.064560][ T823] Write-error on swap-device (8:0:788374) [ 54.064684][ T823] Write-error on swap-device (8:0:788382) [ 54.088314][ T72] usb 4-1: USB disconnect, device number 13 Sep 4 17:30:02 [ 54.113591][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 54.124521][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 lert kernel: [ 54.031836][ T823] Write-error on swap-device (8:0:788326) Sep 4 17:30:02 syzkaller kern.aler[ 54.145533][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 t kernel: [ 54.052187][ T823] Write-error on swap-device (8:0:788334) Sep 4 17:30:02 syzkaller kern.alert kernel: [ 54.064328][ T823] Write-error on swap-device (8:0:788350) [ 54.178281][ T802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. Sep 4 17:30:02 [ 54.189833][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.alert kernel: [ 54.064433][ T823] Write-error on swap-device (8:0:788358) [ 54.208347][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Sep 4 17:30:02 syzkaller kern.alert kernel: [ 54.064507][ T823] Write-error on swap-device (8:0:788366) [ 54.229400][ T314] usb 1-1: unit 4 not found! [ 54.241801][ T314] usb 1-1: USB disconnect, device number 15 Sep 4 17:30:02 [ 54.248593][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.alert kernel: [ 54.064560][ T823] Write-error on swap-device (8:0:788374) Sep 4 17:30:02 syzkaller kern.alert kernel: [ 54.064684][ T823] Write-error on swap-device (8:0:788382) [ 54.517984][ T72] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 54.540402][ T836] ./dev/sda1: Can't lookup blockdev [ 54.622311][ T838] kvm: kvm [837]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 54.677949][ T72] usb 2-1: Using ep0 maxpacket: 32 [ 54.690474][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.705393][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 54.727969][ T72] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.746672][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.765854][ T72] usb 2-1: config 0 descriptor?? [ 54.776844][ T832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.787976][ T314] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.790242][ T72] hub 2-1:0.0: USB hub found [ 54.876448][ T843] kvm: pic: non byte write [ 54.884395][ T843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 54.926504][ T847] netlink: 196 bytes leftover after parsing attributes in process `syz.3.143'. [ 54.960029][ T314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.972677][ T314] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.989195][ T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.998103][ T314] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.006011][ T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.016904][ T314] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 55.028429][ T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.032371][ T314] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 55.037518][ T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.049438][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.063348][ T314] usb 3-1: Product: syz [ 55.067732][ T314] usb 3-1: Manufacturer: syz [ 55.072813][ T314] usb 3-1: SerialNumber: syz [ 55.087996][ T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.106619][ T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.120030][ T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.128988][ T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.137636][ T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.149348][ T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.162602][ T72] hub 2-1:0.0: 1 port detected [ 55.209284][ T355] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 55.299552][ T314] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 55.310964][ T314] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 55.325261][ T314] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 55.338890][ T314] usb 3-1: USB disconnect, device number 11 [ 55.378026][ T355] usb 4-1: Using ep0 maxpacket: 16 [ 55.385199][ T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.397267][ T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.407879][ T355] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 55.421381][ T355] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 55.430678][ T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.439821][ T355] usb 4-1: config 0 descriptor?? [ 55.770847][ T10] usb 2-1: USB disconnect, device number 10 [ 55.812621][ T868] ./dev/sda1: Can't lookup blockdev [ 55.848757][ T355] appleir 0003:05AC:8241.0009: unbalanced delimiter at end of report description [ 55.859930][ T355] appleir 0003:05AC:8241.0009: parse failed [ 55.867674][ T355] appleir 0003:05AC:8241.0009: probe with driver appleir failed with error -22 [ 55.877536][ T872] ./dev/sda1: Can't lookup blockdev [ 55.904491][ T876] netlink: 'syz.2.151': attribute type 27 has an invalid length. [ 55.913442][ T876] netlink: 'syz.2.151': attribute type 27 has an invalid length. [ 55.990861][ T888] zero sized request [ 56.042138][ T890] Write-error on swap-device (8:0:788150) [ 56.048296][ T890] Write-error on swap-device (8:0:788158) [ 56.059066][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Sep 4 17:30:04 [ 56.069529][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.alert kernel: [ 56.042138][ T890] Write-error on swap-device (8:0:788150) Sep 4 17:30:04 syzkaller kern.alert kernel: [ 56.048296][ T890] Write-error on swap-device (8:0:788158) [ 56.337063][ T903] ./dev/sda1: Can't lookup blockdev [ 56.447962][ T314] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 56.483197][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 56.483217][ T36] audit: type=1400 audit(1788543004.952:279): avc: denied { bind } for pid=908 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.609258][ T314] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.637014][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 56.650087][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 56.663310][ T314] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 56.674731][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.683367][ T314] usb 3-1: Product: syz [ 56.687778][ T314] usb 3-1: Manufacturer: syz [ 56.692668][ T314] usb 3-1: SerialNumber: syz [ 56.706133][ T314] usb 3-1: config 0 descriptor?? [ 56.719408][ T896] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.729016][ T36] audit: type=1400 audit(1788543005.202:280): avc: denied { bind } for pid=917 comm="syz.0.161" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.751947][ T314] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 56.793629][ T922] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.807226][ T922] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 56.834414][ T922] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.844413][ T922] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 56.876942][ T928] ./dev/sda1: Can't lookup blockdev [ 56.954124][ T314] usb 3-1: USB disconnect, device number 12 [ 57.879600][ T36] audit: type=1400 audit(1788543006.352:281): avc: denied { write } for pid=949 comm="syz.1.172" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.904701][ T950] incfs_lookup_dentry err:-13 [ 57.916280][ T36] audit: type=1400 audit(1788543006.372:282): avc: denied { open } for pid=949 comm="syz.1.172" path="/50/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.941071][ T36] audit: type=1400 audit(1788543006.372:283): avc: denied { ioctl } for pid=949 comm="syz.1.172" path="/50/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.986825][ T314] usb 4-1: USB disconnect, device number 14 [ 58.021934][ T36] audit: type=1400 audit(1788543006.492:284): avc: denied { read } for pid=951 comm="syz.1.173" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.141449][ T36] audit: type=1400 audit(1788543006.612:285): avc: denied { map } for pid=960 comm="syz.1.176" path="socket:[8416]" dev="sockfs" ino=8416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.184575][ T968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.178'. [ 58.194505][ T36] audit: type=1400 audit(1788543006.632:286): avc: denied { read accept } for pid=960 comm="syz.1.176" path="socket:[8416]" dev="sockfs" ino=8416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.239956][ T36] audit: type=1400 audit(1788543006.702:287): avc: denied { create } for pid=962 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.283916][ T36] audit: type=1400 audit(1788543006.752:288): avc: denied { mount } for pid=971 comm="syz.0.180" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.548159][ T314] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 58.607968][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 58.677954][ T314] usb 1-1: device descriptor read/64, error -71 [ 58.730274][ T990] ./dev/sda1: Can't lookup blockdev [ 58.736649][ T990] ./dev/sda1: Can't lookup blockdev [ 58.742149][ T990] ./dev/sda1: Can't lookup blockdev [ 58.748001][ T990] ./dev/sda1: Can't lookup blockdev [ 58.753531][ T990] ./dev/sda1: Can't lookup blockdev [ 58.759162][ T990] ./dev/sda1: Can't lookup blockdev [ 58.759894][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.764633][ T990] ./dev/sda1: Can't lookup blockdev [ 58.764795][ T990] ./dev/sda1: Can't lookup blockdev [ 58.778108][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.782031][ T990] ./dev/sda1: Can't lookup blockdev [ 58.786865][ T46] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 58.797010][ T990] ./dev/sda1: Can't lookup blockdev [ 58.802455][ T372] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 58.812411][ T990] ./dev/sda1: Can't lookup blockdev [ 58.817044][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.825201][ T990] ./dev/sda1: Can't lookup blockdev [ 58.839114][ T46] usb 2-1: config 0 descriptor?? [ 58.845133][ T990] ./dev/sda1: Can't lookup blockdev [ 58.854096][ T990] ./dev/sda1: Can't lookup blockdev [ 58.860095][ T990] ./dev/sda1: Can't lookup blockdev [ 58.865629][ T990] ./dev/sda1: Can't lookup blockdev [ 58.872025][ T990] ./dev/sda1: Can't lookup blockdev [ 58.874237][ T110] udevd[110]: worker [936] terminated by signal 7 (Bus error) [ 58.878632][ T990] ./dev/sda1: Can't lookup blockdev [ 58.886137][ T110] udevd[110]: worker [936] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 58.891636][ T990] ./dev/sda1: Can't lookup blockdev [ 58.906928][ T990] ./dev/sda1: Can't lookup blockdev [ 58.912683][ T990] ./dev/sda1: Can't lookup blockdev [ 58.918612][ T990] ./dev/sda1: Can't lookup blockdev [ 58.924098][ T990] ./dev/sda1: Can't lookup blockdev [ 58.929487][ T990] ./dev/sda1: Can't lookup blockdev [ 58.934861][ T990] ./dev/sda1: Can't lookup blockdev [ 58.940335][ T990] ./dev/sda1: Can't lookup blockdev [ 58.945788][ T990] ./dev/sda1: Can't lookup blockdev [ 58.951339][ T990] ./dev/sda1: Can't lookup blockdev [ 58.956700][ T990] ./dev/sda1: Can't lookup blockdev [ 58.962187][ T990] ./dev/sda1: Can't lookup blockdev [ 58.967638][ T990] ./dev/sda1: Can't lookup blockdev [ 58.968058][ T314] usb 1-1: device descriptor read/64, error -71 [ 58.973068][ T355] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 58.974161][ T990] ./dev/sda1: Can't lookup blockdev [ 58.992779][ T990] ./dev/sda1: Can't lookup blockdev [ 59.009744][ T372] usb 3-1: config 127 has an invalid interface number: 137 but max is 1 [ 59.018583][ T372] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 59.027677][ T372] usb 3-1: config 127 has an invalid interface number: 21 but max is 1 [ 59.037071][ T372] usb 3-1: config 127 has no interface number 0 [ 59.043694][ T372] usb 3-1: config 127 has no interface number 1 [ 59.050099][ T372] usb 3-1: config 127 interface 137 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 59.063269][ T372] usb 3-1: config 127 interface 137 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 59.075157][ T372] usb 3-1: config 127 interface 137 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0 [ 59.085786][ T372] usb 3-1: config 127 interface 137 altsetting 8 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 59.097788][ T372] usb 3-1: config 127 interface 137 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 59.108935][ T372] usb 3-1: config 127 interface 137 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 59.120389][ T372] usb 3-1: config 127 interface 137 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 59.131501][ T372] usb 3-1: config 127 interface 137 altsetting 8 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 59.139932][ T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.142981][ T372] usb 3-1: config 127 interface 137 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 59.155246][ T355] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.165645][ T372] usb 3-1: config 127 interface 137 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 59.179565][ T355] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 59.190708][ T372] usb 3-1: config 127 interface 137 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 59.199725][ T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.211775][ T372] usb 3-1: config 127 interface 137 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 59.222216][ T355] usb 4-1: config 0 descriptor?? [ 59.230258][ T314] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 59.244698][ T372] usb 3-1: config 127 interface 21 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 59.256599][ T372] usb 3-1: config 127 interface 21 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 59.268011][ T372] usb 3-1: config 127 interface 21 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 59.277538][ T981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.279444][ T372] usb 3-1: config 127 interface 21 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 59.297257][ T981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.307529][ T110] udevd[110]: worker [982] terminated by signal 7 (Bus error) [ 59.307533][ T372] usb 3-1: config 127 interface 21 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 59.316834][ T110] udevd[110]: worker [982] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 59.337347][ T46] arvo 0003:1E7D:30D4.000A: unbalanced collection at end of report description [ 59.340426][ T110] udevd[110]: worker [863] terminated by signal 7 (Bus error) [ 59.346946][ T372] usb 3-1: config 127 interface 137 has no altsetting 0 [ 59.361347][ T110] udevd[110]: worker [863] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 59.363273][ T46] arvo 0003:1E7D:30D4.000A: parse failed [ 59.378635][ T372] usb 3-1: config 127 interface 21 has no altsetting 0 [ 59.385826][ T46] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22 [ 59.396188][ T372] usb 3-1: New USB device found, idVendor=1199, idProduct=0020, bcdDevice=95.3f [ 59.406282][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.414623][ T372] usb 3-1: Product: 뗶㻫쳱㪲癍徏㇧怙槝얂䓭⨌Ӕタ傺뿿鬂䳔쐨備驵繁⮑埄좀ꚟæ왇桜橭뚊熷᥅玈燫ᦖ"喔맆ઌ䏹㋝鬙솑鬉剷殿誊䂌໑啴뺈읪ᑌ俶逅可鳀ꭞ듪熫갭쀍 [ 59.427841][ T110] udevd[110]: worker [930] terminated by signal 7 (Bus error) [ 59.437431][ T372] usb 3-1: Manufacturer: Ђ [ 59.448353][ T314] usb 1-1: device descriptor read/64, error -71 [ 59.455103][ T372] usb 3-1: SerialNumber: ꓀뱹䔼඄ゥ㺒㸇䇥澾쏴鄂ﯖ㼡쑩⋿䒽뙾䮗폁棓ᨣ妚窚ⷾ摻⽋竿㡏롓ៜῨ綬泽뻊竸㚧觏෿庇筸炑鳒寊켖碳脼̺嶯珪胠ᄇ歯⵮⯬엠뇰ԥ忞鏍̋ḋ駺昹̊䝴ě荓风뾲歫뚁铝ᐥ [ 59.483490][ T110] udevd[110]: worker [930] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 59.494919][ T110] udevd[110]: worker [993] terminated by signal 7 (Bus error) [ 59.503237][ T110] udevd[110]: worker [993] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 59.539290][ T31] usb 2-1: USB disconnect, device number 11 [ 59.650364][ T355] usbhid 4-1:0.0: can't add hid device: -71 [ 59.656662][ T355] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.675021][ T355] usb 4-1: USB disconnect, device number 15 [ 59.687964][ T314] usb 1-1: device descriptor read/64, error -71 [ 59.798080][ T314] usb usb1-port1: attempt power cycle [ 59.894313][ T372] usb 3-1: USB disconnect, device number 13 [ 60.148006][ T314] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 60.169586][ T314] usb 1-1: device descriptor read/8, error -71 [ 60.283525][ T1008] rust_binder: 1006:1008 got reply transaction with no transaction stack [ 60.292781][ T1008] rust_binder: 1006:1008 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 60.298093][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 60.311637][ T314] usb 1-1: device descriptor read/8, error -71 [ 60.458066][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 60.464868][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.468249][ T1010] FAULT_INJECTION: forcing a failure. [ 60.468249][ T1010] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.476628][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 60.493571][ T1010] CPU: 0 UID: 0 PID: 1010 Comm: syz.2.186 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 60.493677][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.493712][ T1010] Call Trace: [ 60.493740][ T1010] [ 60.493763][ T1010] __dump_stack+0x21/0x30 [ 60.493931][ T1010] dump_stack_lvl+0x140/0x1c0 [ 60.494017][ T1010] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.494103][ T1010] ? vfs_write+0xbcf/0xfd0 [ 60.494175][ T1010] dump_stack+0x19/0x20 [ 60.494253][ T1010] should_fail_ex+0x3c2/0x510 [ 60.494336][ T1010] should_fail+0xf/0x20 [ 60.494439][ T1010] should_fail_usercopy+0x1e/0x30 [ 60.494523][ T1010] _copy_from_user+0x20/0xa0 [ 60.494619][ T1010] __se_sys_io_uring_setup+0x170/0x2b0 [ 60.494712][ T1010] ? __se_sys_futex+0x13c/0x320 [ 60.494790][ T1010] ? __x64_sys_io_uring_setup+0x80/0x80 [ 60.494869][ T1010] ? __kasan_check_write+0x18/0x20 [ 60.494962][ T1010] __x64_sys_io_uring_setup+0x5f/0x80 [ 60.495050][ T1010] x64_sys_call+0x22c0/0x2ee0 [ 60.495114][ T1010] do_syscall_64+0x57/0xf0 [ 60.495202][ T1010] ? clear_bhb_loop+0x50/0xa0 [ 60.495276][ T1010] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.495351][ T1010] RIP: 0033:0x7f6a8a19e159 [ 60.495416][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.495476][ T1010] RSP: 002b:00007f6a88be2fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 60.495552][ T1010] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f6a8a19e159 [ 60.495605][ T1010] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000020 [ 60.495650][ T1010] RBP: 00007f6a8a235024 R08: 0000000000000000 R09: 0000000000000000 [ 60.495692][ T1010] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040 [ 60.495735][ T1010] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffcc035ecc8 [ 60.495790][ T1010] [ 60.708496][ T31] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 60.720926][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.729044][ T31] usb 2-1: Product: syz [ 60.733336][ T31] usb 2-1: Manufacturer: syz [ 60.738712][ T31] usb 2-1: SerialNumber: syz [ 60.757947][ T314] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 60.778978][ T314] usb 1-1: device descriptor read/8, error -71 [ 60.909280][ T314] usb 1-1: device descriptor read/8, error -71 [ 60.955148][ T1002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 60.966676][ T31] usb 2-1: unit 4 not found! [ 60.985253][ T31] usb 2-1: USB disconnect, device number 12 [ 61.018082][ T314] usb usb1-port1: unable to enumerate USB device [ 61.071479][ T10] rust_binder: 1006: undelivered TRANSACTION_COMPLETE [ 61.078946][ T10] rust_binder: 1006: undelivered TRANSACTION_ERROR: 29189 [ 61.336433][ T1042] FAULT_INJECTION: forcing a failure. [ 61.336433][ T1042] name failslab, interval 1, probability 0, space 0, times 0 [ 61.349796][ T1042] CPU: 1 UID: 0 PID: 1042 Comm: syz.0.194 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72 [ 61.349843][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.349858][ T1042] Call Trace: [ 61.349866][ T1042] [ 61.349876][ T1042] __dump_stack+0x21/0x30 [ 61.349916][ T1042] dump_stack_lvl+0x140/0x1c0 [ 61.349951][ T1042] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.349987][ T1042] ? __kasan_check_write+0x18/0x20 [ 61.350013][ T1042] ? _raw_spin_lock_irq+0x93/0x120 [ 61.350052][ T1042] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 61.350091][ T1042] dump_stack+0x19/0x20 [ 61.350124][ T1042] should_fail_ex+0x3c2/0x510 [ 61.350154][ T1042] should_failslab+0xac/0x100 [ 61.350186][ T1042] kmem_cache_alloc_noprof+0x42/0x410 [ 61.350213][ T1042] ? __kasan_check_write+0x18/0x20 [ 61.350238][ T1042] ? copy_pid_ns+0x25a/0xa60 [ 61.350274][ T1042] copy_pid_ns+0x25a/0xa60 [ 61.350306][ T1042] ? __cfi_copy_pid_ns+0x10/0x10 [ 61.350341][ T1042] ? __kasan_check_write+0x18/0x20 [ 61.350367][ T1042] create_new_namespaces+0x275/0x6f0 [ 61.350404][ T1042] unshare_nsproxy_namespaces+0x124/0x180 [ 61.350440][ T1042] ksys_unshare+0x4f9/0x920 [ 61.350472][ T1042] ? fput+0x1a4/0x230 [ 61.350502][ T1042] ? __cfi_ksys_unshare+0x10/0x10 [ 61.350535][ T1042] ? __kasan_check_write+0x18/0x20 [ 61.350560][ T1042] __x64_sys_unshare+0x3c/0x50 [ 61.350593][ T1042] x64_sys_call+0x2998/0x2ee0 [ 61.350626][ T1042] do_syscall_64+0x57/0xf0 [ 61.350663][ T1042] ? clear_bhb_loop+0x50/0xa0 [ 61.350690][ T1042] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.350716][ T1042] RIP: 0033:0x7fae7959e159 [ 61.350736][ T1042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.350758][ T1042] RSP: 002b:00007fae7a4b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 61.350784][ T1042] RAX: ffffffffffffffda RBX: 00007fae79825fa0 RCX: 00007fae7959e159 [ 61.350803][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 61.350819][ T1042] RBP: 00007fae79635024 R08: 0000000000000000 R09: 0000000000000000 [ 61.350835][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.350850][ T1042] R13: 00007fae79826038 R14: 00007fae79825fa0 R15: 00007ffdd247b568 [ 61.350871][ T1042] [ 61.610968][ T1047] ./dev/sda1: Can't lookup blockdev [ 61.616664][ T1047] ./dev/sda1: Can't lookup blockdev [ 61.686368][ T1053] incfs: Options parsing error. -22 [ 61.688298][ T1052] incfs: Options parsing error. -22 [ 61.692157][ T1053] incfs: mount failed -22 [ 61.697944][ T1052] incfs: mount failed -22 [ 61.842522][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 61.842543][ T36] audit: type=1400 audit(1788543010.312:296): avc: denied { setopt } for pid=1059 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.916239][ T36] audit: type=1400 audit(1788543010.382:297): avc: denied { execstack } for pid=1063 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.929920][ T1064] tipc: Started in network mode [ 61.948135][ T1064] tipc: Node identity 9ae3a336d748, cluster identity 4711 [ 61.955661][ T1064] tipc: Enabled bearer , priority 10 [ 61.969559][ T1063] tipc: Resetting bearer [ 61.988797][ T1063] tipc: Disabling bearer [ 62.010077][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 62.052169][ T36] audit: type=1400 audit(1788543010.522:298): avc: denied { getopt } for pid=1072 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.074308][ T1071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 62.134053][ T1076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 62.146038][ T1075] x_tables: duplicate entry at hook 1 [ 62.159018][ T1075] printk: legacy console [ttyS0] disabled SYZFAIL: posix_spawnp failed (errno 5: Input/output error) serialport: VM disconnected.