last executing test programs:

51.392846058s ago: executing program 3 (id=397):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4)

51.392664718s ago: executing program 3 (id=398):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x20d49, 0x1800008, 0x84, 0x4, 0xfff8, 0x0, 0x1000, 0x4000000000b, 0x4bfb, 0x4, 0x7ff, 0xffffffffffff0000, 0x20003, 0x5, 0x9, 0x100000090], 0xa000, 0x28657})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x10}}, 0x20000010)
timer_create(0x3, &(0x7f0000000280)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000300)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x1d, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$key(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0x10}}, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0)

50.577948741s ago: executing program 3 (id=407):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0xfc, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@text16={0x20, 0x0}], 0x11, 0x10, 0x0, 0x0)

50.520306477s ago: executing program 3 (id=408):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000040)=0x6, 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x20)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x800, 0xfffffffe, 0x2f6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000240)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10)
sendmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="3034d56a", 0x4}], 0x1}}], 0x1, 0x20044888)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540))
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000900)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000940)={'syzkaller1\x00', @multicast})
write$tun(0xffffffffffffffff, &(0x7f0000000980)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x324, 0x201, 0x6, 0x0, 0x4, @multicast, "", @remote}}}}}, 0x2a)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r9, &(0x7f00000004c0)='off', 0x3)

50.519372487s ago: executing program 3 (id=409):
rt_sigprocmask(0x0, &(0x7f0000000340)={[0xffffffff7ffffffd]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x3, &(0x7f0000000380)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f00000003c0))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000400)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
open_tree(r1, &(0x7f0000000240)='./proc\x00', 0x1)
syz_clone(0x800091, 0x0, 0x0, 0x0, 0x0, 0x0)

50.509115318s ago: executing program 3 (id=410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

34.892784881s ago: executing program 32 (id=410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

3.298835553s ago: executing program 2 (id=785):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x20)
write$P9_RWALK(r3, &(0x7f0000000800)={0x30, 0x6f, 0x2, {0x3, [{0x2, 0x2, 0x3}, {0x40, 0x2, 0x5}, {0x2, 0x4, 0x8}]}}, 0x30)

3.240976939s ago: executing program 2 (id=786):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0)
write(r2, &(0x7f0000000780)='2', 0x1)
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x2c, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x18, 0x0, @wg=@cookie={0x3, 0x2, "f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e", "78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"}}}}, 0x66)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x8910, &(0x7f0000000280)={'ip6_vti0\x00', 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x0, 0x121)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x1})
write$tun(r5, &(0x7f0000000640)={@void, @val={0x0, 0x0, 0x1c, 0x93, 0x14, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x1e, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty}, {0x11, 0x6, 0x0, @empty, "ad94"}}}, 0x28)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @adiantum, 0x8, @desc1})
mkdirat(0xffffffffffffff9c, 0x0, 0x110)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x5, 0x4e22, 0x9, 0x2, 0x80, 0x0, 0x5c}, {0x7, 0xfffffffffffffff6, 0x5, 0x4, 0x5, 0x1, 0x72f, 0x28}, {0x9a84, 0xb57, 0x4a21, 0x6}, 0x4, 0x6e6bbf, 0x1, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x3c}, 0xa, @in=@rand_addr=0x64010101, 0x34ff, 0x0, 0x1, 0x2, 0x6, 0x0, 0x10}}, 0xe8)

3.240088569s ago: executing program 2 (id=787):
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x3, 0x8})
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x2f, 0x9, 0xffffffffffffffff})
fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x2, 0x9, 0x8f})
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)

3.184847244s ago: executing program 2 (id=788):
syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @private}, <r1=>0x0}, &(0x7f0000000040)=0x14)
setuid(0xee01)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x45, &(0x7f0000000340)={0x200000000000001}, 0x8)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000080)=@updpolicy={0x25c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x7}, {0xffffffffffffffff, 0x0, 0x7, 0x17ffffffffffb}, 0x40}, [@sa={0xe4, 0x6, {{@in6=@remote, @in=@empty, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x29, r1}, {@in=@private=0xa010101, 0x4d4, 0x6c}, @in=@private=0xa010100, {0x1000, 0x7e, 0xfff, 0x8a, 0x4, 0x63f, 0x1, 0x2}, {0x1ff, 0xffff, 0x80000000, 0x4}, {0x0, 0x5, 0x9}, 0x70bd2c, 0x3503, 0xa, 0x1, 0x2, 0x102}}, @policy={0xac, 0x7, {{@in=@local, @in=@remote, 0x4e24, 0x1, 0x4e24, 0xfffe, 0x2, 0x20, 0x180, 0x33, r1, 0xee01}, {0x34, 0x5, 0x6, 0x8935, 0xc4fa, 0x9, 0x100, 0x1}, {0xfffffffffffffffa, 0x20000000000000, 0x9, 0x6}, 0x84, 0x6e6bb2, 0x2, 0x1, 0x1, 0x1}}, @etimer_thresh={0x8, 0xc, 0x1}, @lastused={0xc, 0xf, 0x5}]}, 0x25c}}, 0x0)

3.184525995s ago: executing program 2 (id=789):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0)
syz_usb_connect(0x3, 0xb07, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102e014e0402d157805b86a010203010902f50a02320400060904"], &(0x7f0000000480)={0x0, 0x0, 0x34, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003280)=ANY=[@ANYBLOB="fc010000190001000000000000000000e00000010000000000000000000000000a01010200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0x0, 0xc, 0x6, "e569904a7a8b"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x40, 0x13, 0x4, "2dea3c0a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000beb000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@wrmsr={0x65, 0x20, {0x4b564d06, 0x80000001}}], 0x20})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
ftruncate(r9, 0x100000001)
ioctl$XFS_IOC_INUMBERS(r9, 0x80405880, &(0x7f0000000180)={{0xfffffffffffffffe, 0x6, 0xfffffffd, 0x3ff, 0x200}, [{0xfffffffffffffff8, 0xffffffffffffff2a, 0x8, 0x1}]})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fcdbdf250d00000008003200000000000a000900bbbbbbbbbbbb00000000290000e0ffff07003400ade7000005002a0000000000ec826bb70a490c2de261a1f4e9129c149845423bea0fa732836c140007b1ec4a8e5029b36a100ad5e85b60a3b6bdeb54784f3fab3f85e50cdac624d1e08d3fd94a8078222343faad05024643cb98f933883147f42128d3fc0f46f7a28d3e65461a584478a72a29807ebecbd0520866787b4980bcaaffde0a912bca5c163869dbe8dfac430e6134b70d7ef031b1cf3b8a1f2a69e60b806888d6608d49b153e30537d333a7a13e7c09286ee1"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40480c0)

2.748772209s ago: executing program 4 (id=797):
mkdirat(0xffffffffffffffff, &(0x7f0000002440)='./proc/thread-self/fail-nth\x00', 0x0)
mount(0x0, &(0x7f00000023c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000002700)='befs\x00', 0x3905012, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./proc/thread-self/fail-nth\x00', 0x2, 0x2)
r1 = add_key(&(0x7f0000002340)='asymmetric\x00', 0x0, &(0x7f0000002940)="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", 0x559, 0xffffffffffffffff)
write(r0, &(0x7f0000002780)='3', 0x4e)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000005780)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00002f4000/0x18000)=nil, &(0x7f00000057c0)=[@textreal={0x8, &(0x7f0000002400)="f30fc7b7b55f0f01c8260f0058f00f01c20f06db6f000f0faae0000cf30fc73066b8000000000f23d00f21f86635300000010f23f80f73d52d", 0x39}], 0x1, 0x23, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002ec0)=@svm={0x102, 0x1, 0x1080, {0x60000, 0xfcb7}, {"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"}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000020c0)={'ip6tnl0\x00', &(0x7f0000002100)=@ethtool_rxfh_indir})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x8922, &(0x7f0000002140)={'tunl0\x00', 0x0})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000002080)={0x5, 0xc4a})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f00000024c0)=""/255, &(0x7f00000025c0)=0xfffffffffffffecd)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000002240)=0x1, 0x4)
connect$inet6(r7, &(0x7f0000002280)={0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000004000000226bd7000fedbdf25cc614e04", @ANYRES8=r4, @ANYRES64=r8, @ANYRESOCT=r1], 0xfffffffffffffea7}, 0x1, 0x0, 0x0, 0xc800}, 0x100450d5)
getpeername$inet6(r7, 0x0, &(0x7f00000022c0))
mmap(&(0x7f00003d9000/0x4000)=nil, 0x4000, 0x1000001, 0x50, r2, 0xe04c8000)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0xffffff94)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000002180)={0xffff1000, 0x1000, 0x1})
ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000002600)={0xd4, 0x0, 0x8})

2.688859265s ago: executing program 4 (id=798):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000100)='fuseblk\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x80ff, 0x36)
pipe(&(0x7f0000000000))
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000440)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2)

2.679468736s ago: executing program 4 (id=799):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
timer_create(0x3, &(0x7f0000000280)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000300)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x1d, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r0 = socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$key(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[], 0x10}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="50000000300005040000000000000000000000003c00010038000100090001006761637400000000280002801800020000000000000000000000000000002000000000000c000300010000a0e36c84ca", 0x50}], 0x1}, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x842cc0, 0x0)
flock(r4, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'gretap0\x00', <r6=>0x0})
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000980)={0x54, 0x81, 0x5c5d, 0x5}, 0x10)
sendmsg(r2, &(0x7f00000001c0)={&(0x7f00000007c0)=@ll={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000880)="54a6020001080000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000008c0)="2cf2565b0e508224b706a643e9a8c932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777439cc590257a0641579678f72a6fc8ea7b95649d16eac1f42d60c75087468b851b0decaf5b66", 0x4d}], 0x2}, 0x40000)

2.612195703s ago: executing program 4 (id=802):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2) (async)
r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f00000002c0)="c10e000018001f06b9409b0dffff110d0220be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000440))
sendmsg$nl_route_sched_retired(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(r1, 0xffff) (async)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x2) (async)
fcntl$addseals(r1, 0x409, 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000280)={r1, 0x0, 0x0, 0x2000})
syz_clone3(&(0x7f0000000600)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) (async)
syz_clone3(&(0x7f0000000600)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)

2.536337561s ago: executing program 4 (id=804):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x8000000)

2.525954282s ago: executing program 4 (id=805):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10000004}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0x8d05, 0x4)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
open(&(0x7f0000000100)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x8e480, 0x130)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, &(0x7f0000000200))
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0)
r3 = socket(0x1, 0x2, 0x0)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
readv(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000300)=""/51, 0x33}], 0x2)
bind$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0)
write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x119)

1.776228598s ago: executing program 2 (id=813):
r0 = syz_usb_connect(0x1, 0xb3, &(0x7f00000000c0)=ANY=[@ANYRES16=<r1=>0xffffffffffffffff, @ANYRES16=<r2=>0x0, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x40})
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r5, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x8a, {"48b800000000000000800f23d00f21f8350000000f0f23f80f01c8b9900000400f32460f7988523c00002e0f01c3c74424003d010000c74424020a000000ff1c2466baf80cb8f8037f8bef66bafc0cb00deeb961050000b800000000ba000000800f3041fe890000000066baf80cb8915b5985ef66bafc0cec"}}], 0x8a})
r6 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000100)=0x7fffffff, 0x4)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0}, 0x0)

1.319727175s ago: executing program 1 (id=815):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0)
write(r2, &(0x7f0000000780)='2', 0x1)
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x5001})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x2c, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x18, 0x0, @wg=@cookie={0x3, 0x2, "f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e", "78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"}}}}, 0x66)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x8910, &(0x7f0000000280)={'ip6_vti0\x00', 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x0, 0x121)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x1})
write$tun(r5, &(0x7f0000000640)={@void, @val={0x0, 0x0, 0x1c, 0x93, 0x14, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x1e, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty}, {0x11, 0x6, 0x0, @empty, "ad94"}}}, 0x28)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @adiantum, 0x8, @desc1})
mkdirat(0xffffffffffffff9c, 0x0, 0x110)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x5, 0x4e22, 0x9, 0x2, 0x80, 0x0, 0x5c}, {0x7, 0xfffffffffffffff6, 0x5, 0x4, 0x5, 0x1, 0x72f, 0x28}, {0x9a84, 0xb57, 0x4a21, 0x6}, 0x4, 0x6e6bbf, 0x1, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x3c}, 0xa, @in=@rand_addr=0x64010101, 0x34ff, 0x0, 0x1, 0x2, 0x6, 0x0, 0x10}}, 0xe8)

1.319528155s ago: executing program 1 (id=816):
fsopen(&(0x7f0000000040)='ramfs\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x401, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x1ff, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac5, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)

1.26494179s ago: executing program 1 (id=817):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000b40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000e00)=""/227, 0xe3}, {&(0x7f0000000f00)=""/217, 0xd9}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/161, 0xa1}, {&(0x7f00000020c0)=""/144, 0x90}, {&(0x7f0000002180)=""/142, 0x8e}, {&(0x7f00000022c0)=""/276, 0x114}, {&(0x7f0000002400)=""/88, 0x58}], 0x8, 0x0, 0x20}, 0xe}], 0x1, 0x40000100, 0x0)

1.26453248s ago: executing program 1 (id=818):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x1})
mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/lo/tx_queue_len\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), 0x4)
read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = epoll_create1(0x80000)
r5 = getpid()
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000004480)={r4})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000046c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000004700)='./file0\x00', &(0x7f0000004740), 0x404, &(0x7f0000004780)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r6, &(0x7f0000004800)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000006840)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f00000068c0)="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", 0x2000, &(0x7f00000088c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008980)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r8, r9, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002480)={{{@in6=@private1, @in=@private}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000002440)=0xfffffffffffffe71)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f000000f6c0)={'syzkaller1\x00', 0x5001})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f000000f700)={'syzkaller1\x00', 0x1})
write$tun(r10, &(0x7f000000f740)=ANY=[@ANYBLOB="20031b003000320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0xfdef)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008c80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000008cc0)='./file0\x00', &(0x7f0000008d00), 0x404, &(0x7f0000008d40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000002000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r12, &(0x7f0000008dc0)={0x2020, 0x0, <r13=>0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
write$FUSE_INIT(r12, &(0x7f000000ae00)={0x50, 0x0, r13, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8c0419, &(0x7f0000002300)=ANY=[@ANYBLOB="7473616e733d7463702c706f72743d3078303030303030303030303030346532302c6e6f6465766d61702c63616368653d667301000000652c6163636573733d616e792c70726976706f72742c7065726d69745f646972656374696f2c736d61636b6673726f6f743d755b234f2f2c736d61636b66737472616e736d7574653d5e5be32c3a2a292b262a2d002c686173682c00394d517df4165df1eb3550a5d3a001712473439c8a63767853"])
syz_fuse_handle_req(r12, &(0x7f000000ae80)="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", 0x2000, &(0x7f000000ce80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000cf40)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r14, r15, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.264338671s ago: executing program 1 (id=819):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket(0x11, 0xa, 0x5)
getpeername$unix(r1, 0x0, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4)
write(r0, &(0x7f0000000180)="2400000021002551241c0165ff00fc02020000e900100f00", 0x18)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0)
memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
dup(r4)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200000002)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f00000005c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9)
write(r7, &(0x7f0000000340)='27', 0x2)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(r8, 0x406, r7)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000380)={'veth1_to_bridge\x00', @remote})

1.259003931s ago: executing program 1 (id=820):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000007c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000800)={0xb, 0x5, 0xa66f, 0x9, 0xae}, 0x14)
r2 = fsopen$ext4(&(0x7f0000000840)='ext3\x00', 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000380)={{<r3=>r2, &(0x7f00000000c0)='\x00', 0x8002, &(0x7f0000000100)={@align=0x6, {0x5, 0x8, 0x151, 0x5}}, 0x80000001, &(0x7f0000000140), &(0x7f0000000180)=0x8c}, 0x1, &(0x7f0000000280)=[{0x3, 0x7e43, &(0x7f00000001c0)='*:\x00', &(0x7f0000000200)="b722197985d38ff0aa00f60a5b0690ae9a8e76b8cf32a5a832c2d33bdf8c7034acf71d250c4967a269c2ea8cfd26df2ca042ce76d9d58aadd71f2168321e7be45000b34625e597a7ff61ca1d409b84e3935f1ebaa4", 0x55, 0x2c}]})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902"], &(0x7f0000000600)={0x0, 0x0, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="050f73"], 0x1, [{0x0, 0x0}]})
sendto$inet(r3, &(0x7f0000000900)="5113bc817affd743e1988d5cceb1f50f64465f444d6fb55e35fb32c0d8f74d862d670c9d77ba03b61cf129293fbcc587db5f6d82c21548fb7f390edfbf02add8aa3a318b0080267292a8420fd1edfb31d650ee19ff6e6cc9e16dd893cd2f", 0x5e, 0x48, &(0x7f0000000980)={0x2, 0x4e21, @loopback}, 0x10)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x30000000000000)
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x843}}]})
syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
sendto$inet(r3, &(0x7f00000006c0)="4cb36636d0660b67ca0ef036492c571eda7870d77633ee69a1c4dbfec8dab836c0a9b6030d60eca254342c46036cbdfe687ca05c5866e6e532ae4e441b1606c7fcc830af30dd37f1cd587b1d792ac23404601b78b09fc7ea45d8e19cae40941d1a8060685b20f9ff82154956eb162741b89c64400a15b33aeb672e798ce8971cb725285141fb1c09499a05ed348ad45590cee188f5f22bd7fd0bf8ecaaef0e8110e4f2fcad3c9974c95ecd22c867542d897f549321468e4c", 0xb8, 0xc040, &(0x7f0000000780)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0)
write$vga_arbiter(r5, &(0x7f00000008c0)=@other={'lock', ' ', 'none'}, 0xa)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

993.443048ms ago: executing program 0 (id=821):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x10, 0x572, 0x9, 0x7, "ff000d00009a468e0cd912098d00"})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000400)={0x1, <r1=>r0, 'id1\x00'})
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000580)={0x3, 0xffffffffffffff87, 0xf3, &(0x7f0000000480)=""/243})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
read(r5, &(0x7f00000008c0)=""/220, 0xdc)
shutdown(r5, 0x1)
ptrace$getsig(0x4202, r4, 0x19, 0x0)
socket(0x10, 0x803, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f0000000180))
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x81, 0x7, 0x6, 0x2, 0x5, "b36c451cc43ca014"})
ioctl(r3, 0x7f, &(0x7f0000000240)="75a9d6013e07dfdeea4da01ec9d7049e29a79e9db469752a5500232b2ce27d11e14441ddb1d1d3f028b894a5731dc8021b28fce33dc3416e3faaa2d59662c0c561e95d7f6a4519a27343e83d95af854a69a613a531b803edd2")
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xa)
pipe(&(0x7f0000000700)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
writev(r8, &(0x7f0000000100), 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$cgroup_pid(r9, &(0x7f0000000800), 0xffffff98)
splice(r7, 0x0, r9, 0x0, 0x80, 0xd)
landlock_restrict_self(0xffffffffffffffff, 0xc)
socket(0x10, 0x803, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000840), &(0x7f0000000880)=0x4)
socket$unix(0x1, 0x1, 0x0)

108.751578ms ago: executing program 0 (id=822):
socket$inet6(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
syz_ublk_setup_io_uring(0x25df, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=<r3=>0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) (async)
pipe2(0x0, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r3, &(0x7f0000000040)={0x0, 0x88ae, 0x200, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x330}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x3, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0)

67.516722ms ago: executing program 0 (id=823):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000001380)={0x5, 0x2})
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200), 0xcd}, 0xfff}], 0x1, 0x0, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000380)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000480)="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", 0xdf3}, {&(0x7f0000001280)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557", 0x90}], 0x5)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001340)=0xffff1884, 0x4)
write$rfkill(r0, 0x0, 0x0)

28.965497ms ago: executing program 0 (id=824):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x32, &(0x7f0000000300)={&(0x7f0000000340)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@dev}}, 0x28}}, 0x4840)

912.989µs ago: executing program 0 (id=825):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0)
write(r2, &(0x7f0000000780)='2', 0x1)
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x5001})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x2c, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x18, 0x0, @wg=@cookie={0x3, 0x2, "f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e", "78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"}}}}, 0x66)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x8910, &(0x7f0000000280)={'ip6_vti0\x00', 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x0, 0x121)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x1})
write$tun(r5, &(0x7f0000000640)={@void, @val={0x0, 0x0, 0x1c, 0x93, 0x14, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x1e, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty}, {0x11, 0x6, 0x0, @empty, "ad94"}}}, 0x28)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @adiantum, 0x8, @desc1})
mkdirat(0xffffffffffffff9c, 0x0, 0x110)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x5, 0x4e22, 0x9, 0x2, 0x80, 0x0, 0x5c}, {0x7, 0xfffffffffffffff6, 0x5, 0x4, 0x5, 0x1, 0x72f, 0x28}, {0x9a84, 0xb57, 0x4a21, 0x6}, 0x4, 0x6e6bbf, 0x1, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x3c}, 0xa, @in=@rand_addr=0x64010101, 0x34ff, 0x0, 0x1, 0x2, 0x6, 0x0, 0x10}}, 0xe8)

0s ago: executing program 0 (id=826):
fsopen(&(0x7f0000000040)='ramfs\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x401, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x1ff, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac5, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)

kernel console output (not intermixed with test programs):

0000001
[   42.069322][  T825] R13: 00007f57a3626038 R14: 00007f57a3625fa0 R15: 00007ffe50c2e0e8
[   42.069331][  T825]  </TASK>
[   42.341914][  T384] usb 3-1: not running at top speed; connect to a high speed hub
[   42.350396][  T384] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   42.361485][  T384] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.371342][  T384] usb 3-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00
[   42.391711][  T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.408066][  T384] hub 3-1:1.0: USB hub found
[   42.442460][  T831] FAULT_INJECTION: forcing a failure.
[   42.442460][  T831] name failslab, interval 1, probability 0, space 0, times 0
[   42.455159][  T831] CPU: 0 UID: 0 PID: 831 Comm: syz.0.178 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   42.455180][  T831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   42.455188][  T831] Call Trace:
[   42.455193][  T831]  <TASK>
[   42.455198][  T831]  __dump_stack+0x21/0x30
[   42.455213][  T831]  dump_stack_lvl+0x140/0x1c0
[   42.455223][  T831]  ? __cfi_dump_stack_lvl+0x10/0x10
[   42.455234][  T831]  dump_stack+0x19/0x20
[   42.455243][  T831]  should_fail_ex+0x3c2/0x510
[   42.455253][  T831]  should_failslab+0xac/0x100
[   42.455265][  T831]  __kmalloc_cache_node_noprof+0x46/0x430
[   42.455284][  T831]  ? __get_vm_area_node+0x150/0x390
[   42.455297][  T831]  ? kasan_save_alloc_info+0x3a/0x50
[   42.455311][  T831]  ? __kasan_slab_alloc+0x73/0x90
[   42.455321][  T831]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[   42.455336][  T831]  __get_vm_area_node+0x150/0x390
[   42.455350][  T831]  __vmalloc_node_range_noprof+0x340/0x1300
[   42.455363][  T831]  ? copy_process+0x579/0x33a0
[   42.455379][  T831]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   42.455393][  T831]  ? kasan_save_alloc_info+0x3a/0x50
[   42.455406][  T831]  ? __kasan_slab_alloc+0x73/0x90
[   42.455416][  T831]  ? arch_dup_task_struct+0x5b/0xe0
[   42.455427][  T831]  ? __asan_memcpy+0x5a/0x80
[   42.455441][  T831]  dup_task_struct+0x5d6/0xd80
[   42.455460][  T831]  ? copy_process+0x579/0x33a0
[   42.455474][  T831]  ? _raw_spin_lock_irq+0x93/0x120
[   42.455486][  T831]  ? copy_process+0x33a0/0x33a0
[   42.455499][  T831]  ? __kasan_check_write+0x18/0x20
[   42.455513][  T831]  copy_process+0x579/0x33a0
[   42.455528][  T831]  ? kasan_save_alloc_info+0x3a/0x50
[   42.455541][  T831]  ? __cfi_copy_process+0x10/0x10
[   42.455555][  T831]  ? __kmalloc_cache_noprof+0x23c/0x470
[   42.455570][  T831]  ? __kasan_check_write+0x18/0x20
[   42.455584][  T831]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   42.455598][  T831]  vhost_task_create+0x1f7/0x3f0
[   42.455611][  T831]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   42.455625][  T831]  ? __cfi_vhost_task_create+0x10/0x10
[   42.455637][  T831]  ? __cfi_vhost_task_fn+0x10/0x10
[   42.455649][  T831]  ? __kasan_check_write+0x18/0x20
[   42.455663][  T831]  ? mutex_lock+0x97/0x1d0
[   42.455676][  T831]  ? __cfi_mutex_lock+0x10/0x10
[   42.455688][  T831]  ? kernel_text_address+0xa9/0xe0
[   42.455704][  T831]  kvm_mmu_post_init_vm+0x161/0x300
[   42.455714][  T831]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   42.455730][  T831]  ? _parse_integer_limit+0x195/0x1e0
[   42.455745][  T831]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   42.455761][  T831]  ? kstrtoull+0x13b/0x1e0
[   42.455774][  T831]  ? kstrtouint+0x78/0xf0
[   42.455788][  T831]  ? ioctl_has_perm+0x1bc/0x500
[   42.455797][  T831]  ? __asan_memcpy+0x5a/0x80
[   42.455811][  T831]  ? ioctl_has_perm+0x408/0x500
[   42.455820][  T831]  ? has_cap_mac_admin+0xd0/0xd0
[   42.455829][  T831]  ? __kasan_check_write+0x18/0x20
[   42.455843][  T831]  ? mutex_lock_killable+0x97/0x1d0
[   42.455856][  T831]  ? __cfi_mutex_lock_killable+0x10/0x10
[   42.455869][  T831]  ? proc_fail_nth_write+0x184/0x220
[   42.455884][  T831]  kvm_vcpu_ioctl+0xa43/0x1000
[   42.455897][  T831]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   42.455907][  T831]  ? hook_file_ioctl+0x1ef/0x590
[   42.455921][  T831]  ? __cfi_vfs_write+0x10/0x10
[   42.455935][  T831]  ? __cfi_hook_file_ioctl+0x10/0x10
[   42.455948][  T831]  ? __kasan_check_write+0x18/0x20
[   42.455962][  T831]  ? mutex_unlock+0x90/0x240
[   42.455974][  T831]  ? __cfi_mutex_unlock+0x10/0x10
[   42.455988][  T831]  ? __fget_files+0x2bc/0x330
[   42.455999][  T831]  ? bpf_lsm_file_ioctl+0xd/0x20
[   42.456010][  T831]  ? security_file_ioctl+0x3e/0x110
[   42.456035][  T831]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   42.456046][  T831]  __se_sys_ioctl+0x126/0x1b0
[   42.456057][  T831]  __x64_sys_ioctl+0x7f/0xa0
[   42.456068][  T831]  x64_sys_call+0x1878/0x2ee0
[   42.456079][  T831]  do_syscall_64+0x57/0xf0
[   42.456090][  T831]  ? clear_bhb_loop+0x50/0xa0
[   42.456105][  T831]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   42.456119][  T831] RIP: 0033:0x7fdb82fa94d9
[   42.456130][  T831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.456139][  T831] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   42.456151][  T831] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   42.456159][  T831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   42.456167][  T831] RBP: 00007fdb83e57090 R08: 0000000000000000 R09: 0000000000000000
[   42.456174][  T831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.456181][  T831] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   42.456190][  T831]  </TASK>
[   42.919534][  T829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'.
[   42.981924][  T384] hub 3-1:1.0: config failed, can't read hub descriptor (err -22)
[   43.210063][  T384] usb 3-1: USB disconnect, device number 6
[   43.243898][   T36] audit: type=1400 audit(1794505546.320:268): avc:  denied  { shutdown } for  pid=838 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   43.265197][  T841] device-mapper: ioctl: Unable to change name on mapped device  to one that already exists: syzd1
[   43.282844][  T843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'.
[   43.761866][  T867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   43.853371][  T870] veth1_to_bridge: entered allmulticast mode
[   43.859901][  T870] FAULT_INJECTION: forcing a failure.
[   43.859901][  T870] name failslab, interval 1, probability 0, space 0, times 0
[   43.872631][  T870] CPU: 0 UID: 0 PID: 870 Comm: syz.1.193 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   43.872663][  T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   43.872677][  T870] Call Trace:
[   43.872685][  T870]  <TASK>
[   43.872695][  T870]  __dump_stack+0x21/0x30
[   43.872716][  T870]  dump_stack_lvl+0x140/0x1c0
[   43.872731][  T870]  ? __cfi_dump_stack_lvl+0x10/0x10
[   43.872748][  T870]  ? swake_up_one_online_ipi+0x30/0x30
[   43.872770][  T870]  dump_stack+0x19/0x20
[   43.872785][  T870]  should_fail_ex+0x3c2/0x510
[   43.872802][  T870]  should_failslab+0xac/0x100
[   43.872820][  T870]  kmem_cache_alloc_node_noprof+0x45/0x420
[   43.872850][  T870]  ? __alloc_skb+0x10c/0x360
[   43.872872][  T870]  ? __kasan_check_write+0x18/0x20
[   43.872897][  T870]  ? _raw_spin_lock_bh+0x96/0x130
[   43.872918][  T870]  __alloc_skb+0x10c/0x360
[   43.872939][  T870]  __inet6_rt_notify+0x357/0x530
[   43.872976][  T870]  ? __fib6_drop_pcpu_from+0x271/0x290
[   43.873003][  T870]  ? notifier_call_chain+0x289/0x2b0
[   43.873026][  T870]  ? inet6_rt_notify+0x50/0x50
[   43.873045][  T870]  ? atomic_notifier_call_chain+0x41/0x60
[   43.873067][  T870]  ? call_fib_notifiers+0xa4/0xc0
[   43.873091][  T870]  inet6_rt_del_notify+0x2f/0x40
[   43.873109][  T870]  fib6_del+0xb9b/0xf40
[   43.873135][  T870]  ? __cfi_fib6_del+0x10/0x10
[   43.873157][  T870]  ? kernel_text_address+0xa9/0xe0
[   43.873185][  T870]  ? fib6_ifdown+0x2f1/0x4f0
[   43.873213][  T870]  fib6_clean_node+0x2bb/0x560
[   43.873237][  T870]  ? __cfi_fib6_clean_node+0x10/0x10
[   43.873263][  T870]  fib6_walk_continue+0x518/0x740
[   43.873289][  T870]  __fib6_clean_all+0x2a2/0x440
[   43.873327][  T870]  ? __cfi_fib6_ifdown+0x10/0x10
[   43.873355][  T870]  ? fib6_clean_all+0x50/0x50
[   43.873379][  T870]  ? __cfi_fib6_clean_node+0x10/0x10
[   43.873404][  T870]  ? __cfi_fib6_ifdown+0x10/0x10
[   43.873433][  T870]  ? __cfi_fib6_ifdown+0x10/0x10
[   43.873459][  T870]  fib6_clean_all+0x2e/0x50
[   43.873481][  T870]  rt6_disable_ip+0x124/0x810
[   43.873498][  T870]  ? __queue_work+0xb67/0x1130
[   43.873524][  T870]  ? __cfi_rt6_disable_ip+0x10/0x10
[   43.873542][  T870]  ? __kasan_check_read+0x15/0x20
[   43.873567][  T870]  addrconf_ifdown+0x161/0x1970
[   43.873586][  T870]  ? __try_to_del_timer_sync+0x2e8/0x440
[   43.873605][  T870]  ? addrconf_cleanup+0x150/0x150
[   43.873623][  T870]  ? __kasan_check_write+0x18/0x20
[   43.873648][  T870]  ? mutex_unlock+0x90/0x240
[   43.873671][  T870]  ? __cfi_mutex_unlock+0x10/0x10
[   43.873694][  T870]  ? __cfi_device_cmp+0x10/0x10
[   43.873715][  T870]  ? masq_device_event+0xe0/0xe0
[   43.873736][  T870]  addrconf_notify+0x17a/0xeb0
[   43.873756][  T870]  ? ip6mr_device_event+0x1ed/0x230
[   43.873782][  T870]  ? __cfi_addrconf_notify+0x10/0x10
[   43.873801][  T870]  notifier_call_chain+0x106/0x2b0
[   43.873823][  T870]  raw_notifier_call_chain+0x31/0x40
[   43.873845][  T870]  __dev_notify_flags+0x293/0x5a0
[   43.873872][  T870]  ? __cfi___dev_notify_flags+0x10/0x10
[   43.873898][  T870]  ? __dev_change_flags+0x536/0x6c0
[   43.873925][  T870]  ? __cfi___dev_change_flags+0x10/0x10
[   43.873959][  T870]  ? ioctl_has_perm+0x39a/0x500
[   43.873979][  T870]  dev_change_flags+0xe7/0x1b0
[   43.874007][  T870]  dev_ifsioc+0x4ef/0xc10
[   43.874031][  T870]  dev_ioctl+0x9c1/0x1000
[   43.874054][  T870]  sock_do_ioctl+0x249/0x330
[   43.874073][  T870]  ? sock_show_fdinfo+0xd0/0xd0
[   43.874091][  T870]  ? hook_file_ioctl+0x1ef/0x590
[   43.874116][  T870]  ? hook_file_truncate+0x241/0x2b0
[   43.874140][  T870]  ? __cfi_do_futex+0x10/0x10
[   43.874161][  T870]  sock_ioctl+0x568/0x7e0
[   43.874178][  T870]  ? __cfi_sock_ioctl+0x10/0x10
[   43.874196][  T870]  ? __fget_files+0x2bc/0x330
[   43.874216][  T870]  ? bpf_lsm_file_ioctl+0xd/0x20
[   43.874236][  T870]  ? security_file_ioctl+0x3e/0x110
[   43.874262][  T870]  ? __cfi_sock_ioctl+0x10/0x10
[   43.874279][  T870]  __se_sys_ioctl+0x126/0x1b0
[   43.874300][  T870]  __x64_sys_ioctl+0x7f/0xa0
[   43.874319][  T870]  x64_sys_call+0x1878/0x2ee0
[   43.874339][  T870]  do_syscall_64+0x57/0xf0
[   43.874359][  T870]  ? clear_bhb_loop+0x50/0xa0
[   43.874384][  T870]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   43.874408][  T870] RIP: 0033:0x7f57a33a94d9
[   43.874426][  T870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.874442][  T870] RSP: 002b:00007f57a1dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.874463][  T870] RAX: ffffffffffffffda RBX: 00007f57a3626090 RCX: 00007f57a33a94d9
[   43.874479][  T870] RDX: 0000200000000380 RSI: 0000000000008914 RDI: 000000000000000d
[   43.874493][  T870] RBP: 00007f57a343804e R08: 0000000000000000 R09: 0000000000000000
[   43.874506][  T870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   43.874518][  T870] R13: 00007f57a3626128 R14: 00007f57a3626090 R15: 00007ffe50c2e0e8
[   43.874536][  T870]  </TASK>
[   43.874745][  T384] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   44.365697][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.390628][  T877] support for cryptoloop has been removed.  Use dm-crypt instead.
[   44.481941][  T877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=877 comm=syz.3.196
[   44.542173][  T384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.553694][  T384] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   44.562926][  T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.570949][  T384] usb 3-1: Product: syz
[   44.575296][  T384] usb 3-1: Manufacturer: syz
[   44.579885][  T384] usb 3-1: SerialNumber: syz
[   44.631574][  T873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'.
[   44.771128][  T329] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   44.778795][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   44.931140][   T10] usb 4-1: Using ep0 maxpacket: 32
[   44.937331][  T329] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   44.946548][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.957607][  T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.965696][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.975881][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   44.985751][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.997790][   T10] usb 4-1: config 0 descriptor??
[   45.003783][   T10] hub 4-1:0.0: USB hub found
[   45.187033][  T894] input: syz0 as /devices/virtual/input/input7
[   45.197787][  T384] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[   45.204653][  T384] cdc_ncm 3-1:1.0: bind() failure
[   45.209975][   T10] hub 4-1:0.0: 1 port detected
[   45.221463][  T329] usb 2-1: USB disconnect, device number 9
[   45.230500][  T384] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   45.245962][  T384] cdc_ncm 3-1:1.1: bind() failure
[   45.275703][  T899] FAULT_INJECTION: forcing a failure.
[   45.275703][  T899] name failslab, interval 1, probability 0, space 0, times 0
[   45.288542][  T899] CPU: 0 UID: 0 PID: 899 Comm: syz.0.204 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   45.288562][  T899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   45.288570][  T899] Call Trace:
[   45.288573][  T899]  <TASK>
[   45.288578][  T899]  __dump_stack+0x21/0x30
[   45.288593][  T899]  dump_stack_lvl+0x140/0x1c0
[   45.288603][  T899]  ? __cfi_dump_stack_lvl+0x10/0x10
[   45.288613][  T899]  ? __kasan_check_write+0x18/0x20
[   45.288629][  T899]  ? copy_mm+0x307/0x1da0
[   45.288645][  T899]  dump_stack+0x19/0x20
[   45.288654][  T899]  should_fail_ex+0x3c2/0x510
[   45.288664][  T899]  should_failslab+0xac/0x100
[   45.288675][  T899]  kmem_cache_alloc_noprof+0x42/0x410
[   45.288690][  T899]  ? alloc_pid+0xa5/0xb80
[   45.288747][  T899]  ? __asan_memcpy+0x5a/0x80
[   45.288762][  T899]  alloc_pid+0xa5/0xb80
[   45.288775][  T899]  copy_process+0x1494/0x33a0
[   45.288791][  T899]  ? __cfi_copy_process+0x10/0x10
[   45.288805][  T899]  ? __kmalloc_cache_noprof+0x23c/0x470
[   45.288820][  T899]  ? __kasan_check_write+0x18/0x20
[   45.288834][  T899]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   45.288849][  T899]  vhost_task_create+0x1f7/0x3f0
[   45.288861][  T899]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   45.288875][  T899]  ? __cfi_vhost_task_create+0x10/0x10
[   45.288890][  T899]  ? __cfi_vhost_task_fn+0x10/0x10
[   45.288903][  T899]  ? __kasan_check_write+0x18/0x20
[   45.288916][  T899]  ? mutex_lock+0x97/0x1d0
[   45.288929][  T899]  ? __cfi_mutex_lock+0x10/0x10
[   45.288942][  T899]  ? kernel_text_address+0xa9/0xe0
[   45.288957][  T899]  kvm_mmu_post_init_vm+0x161/0x300
[   45.288968][  T899]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   45.288983][  T899]  ? _parse_integer_limit+0x195/0x1e0
[   45.288999][  T899]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   45.289014][  T899]  ? kstrtoull+0x13b/0x1e0
[   45.289027][  T899]  ? kstrtouint+0x78/0xf0
[   45.289041][  T899]  ? ioctl_has_perm+0x1bc/0x500
[   45.289050][  T899]  ? __asan_memcpy+0x5a/0x80
[   45.289064][  T899]  ? ioctl_has_perm+0x408/0x500
[   45.289074][  T899]  ? has_cap_mac_admin+0xd0/0xd0
[   45.289083][  T899]  ? __kasan_check_write+0x18/0x20
[   45.289097][  T899]  ? mutex_lock_killable+0x97/0x1d0
[   45.289110][  T899]  ? __cfi_mutex_lock_killable+0x10/0x10
[   45.289123][  T899]  ? proc_fail_nth_write+0x184/0x220
[   45.289137][  T899]  kvm_vcpu_ioctl+0xa43/0x1000
[   45.289150][  T899]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   45.289161][  T899]  ? hook_file_ioctl+0x1ef/0x590
[   45.289175][  T899]  ? __cfi_vfs_write+0x10/0x10
[   45.289189][  T899]  ? __cfi_hook_file_ioctl+0x10/0x10
[   45.289202][  T899]  ? __kasan_check_write+0x18/0x20
[   45.289222][  T899]  ? mutex_unlock+0x90/0x240
[   45.289234][  T899]  ? __cfi_mutex_unlock+0x10/0x10
[   45.289247][  T899]  ? __fget_files+0x2bc/0x330
[   45.289258][  T899]  ? bpf_lsm_file_ioctl+0xd/0x20
[   45.289269][  T899]  ? security_file_ioctl+0x3e/0x110
[   45.289284][  T899]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   45.289295][  T899]  __se_sys_ioctl+0x126/0x1b0
[   45.289306][  T899]  __x64_sys_ioctl+0x7f/0xa0
[   45.289317][  T899]  x64_sys_call+0x1878/0x2ee0
[   45.289328][  T899]  do_syscall_64+0x57/0xf0
[   45.289338][  T899]  ? clear_bhb_loop+0x50/0xa0
[   45.289353][  T899]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   45.289366][  T899] RIP: 0033:0x7fdb82fa94d9
[   45.289377][  T899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.289386][  T899] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   45.289398][  T899] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   45.289406][  T899] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   45.289413][  T899] RBP: 00007fdb83e57090 R08: 0000000000000000 R09: 0000000000000000
[   45.289419][  T899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.289431][  T899] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   45.289440][  T899]  </TASK>
[   45.891264][   T36] audit: type=1400 audit(1794505548.970:269): avc:  denied  { search } for  pid=911 comm="syz.0.209" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   46.159248][  T914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'.
[   46.168920][   T10] usb 4-1: USB disconnect, device number 4
[   46.707994][   T10] usb 3-1: USB disconnect, device number 7
[   46.759778][   T36] audit: type=1400 audit(1794505549.830:270): avc:  denied  { map } for  pid=923 comm="syz.0.213" path="/50/dev/ram0" dev="devtmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   46.921803][  T936] FAULT_INJECTION: forcing a failure.
[   46.921803][  T936] name failslab, interval 1, probability 0, space 0, times 0
[   46.968156][  T936] CPU: 0 UID: 0 PID: 936 Comm: syz.2.217 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   46.968177][  T936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   46.968185][  T936] Call Trace:
[   46.968188][  T936]  <TASK>
[   46.968192][  T936]  __dump_stack+0x21/0x30
[   46.968207][  T936]  dump_stack_lvl+0x140/0x1c0
[   46.968217][  T936]  ? __cfi_dump_stack_lvl+0x10/0x10
[   46.968227][  T936]  ? avc_has_perm+0x155/0x240
[   46.968239][  T936]  ? __cfi_avc_has_perm+0x10/0x10
[   46.968250][  T936]  ? hook_file_open+0x1f2/0x8d0
[   46.968263][  T936]  dump_stack+0x19/0x20
[   46.968272][  T936]  should_fail_ex+0x3c2/0x510
[   46.968282][  T936]  should_failslab+0xac/0x100
[   46.968294][  T936]  __kmalloc_cache_noprof+0x41/0x470
[   46.968310][  T936]  ? vhost_task_create+0x12c/0x3f0
[   46.968323][  T936]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   46.968338][  T936]  vhost_task_create+0x12c/0x3f0
[   46.968349][  T936]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   46.968363][  T936]  ? __cfi_vhost_task_create+0x10/0x10
[   46.968376][  T936]  ? __cfi_vhost_task_fn+0x10/0x10
[   46.968387][  T936]  ? __kasan_check_write+0x18/0x20
[   46.968402][  T936]  ? mutex_lock+0x97/0x1d0
[   46.968415][  T936]  ? __cfi_mutex_lock+0x10/0x10
[   46.968427][  T936]  ? kernel_text_address+0xa9/0xe0
[   46.968443][  T936]  kvm_mmu_post_init_vm+0x161/0x300
[   46.968454][  T936]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   46.968469][  T936]  ? _parse_integer_limit+0x195/0x1e0
[   46.968484][  T936]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   46.968499][  T936]  ? kstrtoull+0x13b/0x1e0
[   46.968512][  T936]  ? kstrtouint+0x78/0xf0
[   46.968526][  T936]  ? ioctl_has_perm+0x1bc/0x500
[   46.968535][  T936]  ? __asan_memcpy+0x5a/0x80
[   46.968548][  T936]  ? ioctl_has_perm+0x408/0x500
[   46.968558][  T936]  ? has_cap_mac_admin+0xd0/0xd0
[   46.968567][  T936]  ? __kasan_check_write+0x18/0x20
[   46.968590][  T936]  ? mutex_lock_killable+0x97/0x1d0
[   46.968603][  T936]  ? __cfi_mutex_lock_killable+0x10/0x10
[   46.968615][  T936]  ? proc_fail_nth_write+0x184/0x220
[   46.968630][  T936]  kvm_vcpu_ioctl+0xa43/0x1000
[   46.968642][  T936]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   46.968653][  T936]  ? hook_file_ioctl+0x1ef/0x590
[   46.968666][  T936]  ? __cfi_vfs_write+0x10/0x10
[   46.968681][  T936]  ? __cfi_hook_file_ioctl+0x10/0x10
[   46.968693][  T936]  ? __kasan_check_write+0x18/0x20
[   46.968707][  T936]  ? mutex_unlock+0x90/0x240
[   46.968719][  T936]  ? __cfi_mutex_unlock+0x10/0x10
[   46.968732][  T936]  ? __fget_files+0x2bc/0x330
[   46.968744][  T936]  ? bpf_lsm_file_ioctl+0xd/0x20
[   46.968756][  T936]  ? security_file_ioctl+0x3e/0x110
[   46.968771][  T936]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   46.968781][  T936]  __se_sys_ioctl+0x126/0x1b0
[   46.968792][  T936]  __x64_sys_ioctl+0x7f/0xa0
[   46.968803][  T936]  x64_sys_call+0x1878/0x2ee0
[   46.968814][  T936]  do_syscall_64+0x57/0xf0
[   46.968825][  T936]  ? clear_bhb_loop+0x50/0xa0
[   46.968839][  T936]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   46.968852][  T936] RIP: 0033:0x7fc0cf7a94d9
[   46.968862][  T936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.968871][  T936] RSP: 002b:00007fc0d0624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   46.968884][  T936] RAX: ffffffffffffffda RBX: 00007fc0cfa25fa0 RCX: 00007fc0cf7a94d9
[   46.968892][  T936] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   46.968898][  T936] RBP: 00007fc0d0624090 R08: 0000000000000000 R09: 0000000000000000
[   46.968905][  T936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.968912][  T936] R13: 00007fc0cfa26038 R14: 00007fc0cfa25fa0 R15: 00007ffdf23a31e8
[   46.968920][  T936]  </TASK>
[   47.471453][  T943] device-mapper: table: 252:5: crypt: Error allocating crypto tfm (-EINVAL)
[   47.480285][  T943] device-mapper: ioctl: error adding target to table
[   47.643918][  T949] syzkaller0: entered promiscuous mode
[   47.649478][  T949] syzkaller0: entered allmulticast mode
[   47.693047][  T952] FAULT_INJECTION: forcing a failure.
[   47.693047][  T952] name failslab, interval 1, probability 0, space 0, times 0
[   47.705787][  T952] CPU: 0 UID: 0 PID: 952 Comm: syz.3.223 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   47.705806][  T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   47.705814][  T952] Call Trace:
[   47.705818][  T952]  <TASK>
[   47.705823][  T952]  __dump_stack+0x21/0x30
[   47.705839][  T952]  dump_stack_lvl+0x140/0x1c0
[   47.705849][  T952]  ? __cfi_dump_stack_lvl+0x10/0x10
[   47.705860][  T952]  dump_stack+0x19/0x20
[   47.705868][  T952]  should_fail_ex+0x3c2/0x510
[   47.705879][  T952]  should_failslab+0xac/0x100
[   47.705890][  T952]  kmem_cache_alloc_node_noprof+0x45/0x420
[   47.705910][  T952]  ? dup_task_struct+0xc1/0xd80
[   47.705925][  T952]  ? kasan_save_alloc_info+0x3a/0x50
[   47.705939][  T952]  ? __kasan_kmalloc+0x96/0xb0
[   47.705949][  T952]  ? __kmalloc_cache_noprof+0x23c/0x470
[   47.705964][  T952]  dup_task_struct+0xc1/0xd80
[   47.705978][  T952]  ? __kasan_check_write+0x18/0x20
[   47.705991][  T952]  ? _raw_spin_lock_irq+0x93/0x120
[   47.706003][  T952]  ? copy_process+0x33a0/0x33a0
[   47.706017][  T952]  ? __kasan_check_write+0x18/0x20
[   47.706031][  T952]  copy_process+0x579/0x33a0
[   47.706045][  T952]  ? kasan_save_alloc_info+0x3a/0x50
[   47.706059][  T952]  ? __cfi_copy_process+0x10/0x10
[   47.706072][  T952]  ? __kmalloc_cache_noprof+0x23c/0x470
[   47.706087][  T952]  ? __kasan_check_write+0x18/0x20
[   47.706101][  T952]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   47.706114][  T952]  vhost_task_create+0x1f7/0x3f0
[   47.706127][  T952]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   47.706181][  T952]  ? __cfi_vhost_task_create+0x10/0x10
[   47.706194][  T952]  ? __cfi_vhost_task_fn+0x10/0x10
[   47.706205][  T952]  ? __kasan_check_write+0x18/0x20
[   47.706219][  T952]  ? mutex_lock+0x97/0x1d0
[   47.706232][  T952]  ? __cfi_mutex_lock+0x10/0x10
[   47.706244][  T952]  ? kernel_text_address+0xa9/0xe0
[   47.706260][  T952]  kvm_mmu_post_init_vm+0x161/0x300
[   47.706270][  T952]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   47.706286][  T952]  ? _parse_integer_limit+0x195/0x1e0
[   47.706301][  T952]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   47.706316][  T952]  ? kstrtoull+0x13b/0x1e0
[   47.706330][  T952]  ? kstrtouint+0x78/0xf0
[   47.706343][  T952]  ? ioctl_has_perm+0x1bc/0x500
[   47.706352][  T952]  ? __asan_memcpy+0x5a/0x80
[   47.706366][  T952]  ? ioctl_has_perm+0x408/0x500
[   47.706375][  T952]  ? has_cap_mac_admin+0xd0/0xd0
[   47.706384][  T952]  ? __kasan_check_write+0x18/0x20
[   47.706398][  T952]  ? mutex_lock_killable+0x97/0x1d0
[   47.706411][  T952]  ? __cfi_mutex_lock_killable+0x10/0x10
[   47.706425][  T952]  ? proc_fail_nth_write+0x184/0x220
[   47.706439][  T952]  kvm_vcpu_ioctl+0xa43/0x1000
[   47.706451][  T952]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   47.706462][  T952]  ? hook_file_ioctl+0x1ef/0x590
[   47.706475][  T952]  ? __cfi_vfs_write+0x10/0x10
[   47.706490][  T952]  ? __cfi_hook_file_ioctl+0x10/0x10
[   47.706503][  T952]  ? __kasan_check_write+0x18/0x20
[   47.706516][  T952]  ? mutex_unlock+0x90/0x240
[   47.706528][  T952]  ? __cfi_mutex_unlock+0x10/0x10
[   47.706542][  T952]  ? __fget_files+0x2bc/0x330
[   47.706554][  T952]  ? bpf_lsm_file_ioctl+0xd/0x20
[   47.706565][  T952]  ? security_file_ioctl+0x3e/0x110
[   47.706580][  T952]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   47.706591][  T952]  __se_sys_ioctl+0x126/0x1b0
[   47.706602][  T952]  __x64_sys_ioctl+0x7f/0xa0
[   47.706612][  T952]  x64_sys_call+0x1878/0x2ee0
[   47.706623][  T952]  do_syscall_64+0x57/0xf0
[   47.706634][  T952]  ? clear_bhb_loop+0x50/0xa0
[   47.706648][  T952]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   47.706662][  T952] RIP: 0033:0x7fb642ba94d9
[   47.706672][  T952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.706681][  T952] RSP: 002b:00007fb6439a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   47.706694][  T952] RAX: ffffffffffffffda RBX: 00007fb642e25fa0 RCX: 00007fb642ba94d9
[   47.706702][  T952] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   47.706709][  T952] RBP: 00007fb6439a6090 R08: 0000000000000000 R09: 0000000000000000
[   47.706716][  T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.706722][  T952] R13: 00007fb642e26038 R14: 00007fb642e25fa0 R15: 00007fff17999848
[   47.706731][  T952]  </TASK>
[   48.126576][  T947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.221'.
[   48.136308][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   48.208204][  T959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'.
[   48.217494][   T36] audit: type=1326 audit(1794505551.290:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.0.226" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb82fa94d9 code=0x0
[   48.311722][  T967] syzkaller1: entered promiscuous mode
[   48.317207][  T967] syzkaller1: entered allmulticast mode
[   48.326128][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.337734][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   48.347095][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.355178][   T10] usb 2-1: Product: syz
[   48.359366][   T10] usb 2-1: Manufacturer: syz
[   48.364016][   T10] usb 2-1: SerialNumber: syz
[   48.406637][  T969] kvm: emulating exchange as write
[   48.411887][  T969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   48.449907][   T36] audit: type=1400 audit(1794505551.520:272): avc:  denied  { connect } for  pid=971 comm="syz.3.231" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.470359][   T36] audit: type=1400 audit(1794505551.520:273): avc:  denied  { write } for  pid=971 comm="syz.3.231" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.662058][   T36] audit: type=1400 audit(1794505551.740:274): avc:  denied  { read } for  pid=980 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.760681][  T994] syzkaller1: entered promiscuous mode
[   48.766345][  T994] syzkaller1: entered allmulticast mode
[   48.870806][   T36] audit: type=1400 audit(1794505551.940:275): avc:  denied  { mounton } for  pid=1001 comm="syz.2.241" path="/45/file0" dev="incremental-fs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   48.894244][   T36] audit: type=1400 audit(1794505551.950:276): avc:  denied  { write } for  pid=1001 comm="syz.2.241" name="/" dev="incremental-fs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   48.916764][   T36] audit: type=1400 audit(1794505551.950:277): avc:  denied  { add_name } for  pid=1001 comm="syz.2.241" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   48.937321][   T36] audit: type=1400 audit(1794505551.950:278): avc:  denied  { create } for  pid=1001 comm="syz.2.241" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.957433][   T36] audit: type=1400 audit(1794505551.950:279): avc:  denied  { associate } for  pid=1001 comm="syz.2.241" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   48.975120][   T10] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[   48.978913][   T36] audit: type=1400 audit(1794505551.950:280): avc:  denied  { read } for  pid=1001 comm="syz.2.241" name="file1" dev="incremental-fs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   48.985243][   T10] cdc_ncm 2-1:1.0: bind() failure
[   49.023941][   T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   49.030801][   T10] cdc_ncm 2-1:1.1: bind() failure
[   49.123930][ T1027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   49.270618][ T1034] syz.3.252 uses obsolete (PF_INET,SOCK_PACKET)
[   49.534840][ T1044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'.
[   50.040912][ T1058] FAULT_INJECTION: forcing a failure.
[   50.040912][ T1058] name failslab, interval 1, probability 0, space 0, times 0
[   50.053734][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   50.061306][ T1058] CPU: 0 UID: 0 PID: 1058 Comm: syz.0.261 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   50.061327][ T1058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   50.061334][ T1058] Call Trace:
[   50.061338][ T1058]  <TASK>
[   50.061344][ T1058]  __dump_stack+0x21/0x30
[   50.061359][ T1058]  dump_stack_lvl+0x140/0x1c0
[   50.061369][ T1058]  ? __cfi_dump_stack_lvl+0x10/0x10
[   50.061380][ T1058]  dump_stack+0x19/0x20
[   50.061389][ T1058]  should_fail_ex+0x3c2/0x510
[   50.061399][ T1058]  should_failslab+0xac/0x100
[   50.061411][ T1058]  __kmalloc_cache_node_noprof+0x46/0x430
[   50.061428][ T1058]  ? __get_vm_area_node+0x150/0x390
[   50.061441][ T1058]  ? kasan_save_alloc_info+0x3a/0x50
[   50.061454][ T1058]  ? __kasan_slab_alloc+0x73/0x90
[   50.061465][ T1058]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[   50.061480][ T1058]  __get_vm_area_node+0x150/0x390
[   50.061492][ T1058]  __vmalloc_node_range_noprof+0x340/0x1300
[   50.061506][ T1058]  ? copy_process+0x579/0x33a0
[   50.061523][ T1058]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   50.061539][ T1058]  ? kasan_save_alloc_info+0x3a/0x50
[   50.061552][ T1058]  ? __kasan_slab_alloc+0x73/0x90
[   50.061563][ T1058]  ? arch_dup_task_struct+0x5b/0xe0
[   50.061574][ T1058]  ? __asan_memcpy+0x5a/0x80
[   50.061588][ T1058]  dup_task_struct+0x5d6/0xd80
[   50.061602][ T1058]  ? copy_process+0x579/0x33a0
[   50.061616][ T1058]  ? _raw_spin_lock_irq+0x93/0x120
[   50.061627][ T1058]  ? copy_process+0x33a0/0x33a0
[   50.061640][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.061655][ T1058]  copy_process+0x579/0x33a0
[   50.061670][ T1058]  ? kasan_save_alloc_info+0x3a/0x50
[   50.061683][ T1058]  ? __cfi_copy_process+0x10/0x10
[   50.061697][ T1058]  ? __kmalloc_cache_noprof+0x23c/0x470
[   50.061712][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.061726][ T1058]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   50.061741][ T1058]  vhost_task_create+0x1f7/0x3f0
[   50.061754][ T1058]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   50.061768][ T1058]  ? __cfi_vhost_task_create+0x10/0x10
[   50.061781][ T1058]  ? __cfi_vhost_task_fn+0x10/0x10
[   50.061793][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.061807][ T1058]  ? mutex_lock+0x97/0x1d0
[   50.061819][ T1058]  ? __cfi_mutex_lock+0x10/0x10
[   50.061832][ T1058]  ? kernel_text_address+0xa9/0xe0
[   50.061848][ T1058]  kvm_mmu_post_init_vm+0x161/0x300
[   50.061858][ T1058]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   50.061874][ T1058]  ? _parse_integer_limit+0x195/0x1e0
[   50.061889][ T1058]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   50.061904][ T1058]  ? kstrtoull+0x13b/0x1e0
[   50.061917][ T1058]  ? kstrtouint+0x78/0xf0
[   50.061931][ T1058]  ? ioctl_has_perm+0x1bc/0x500
[   50.061941][ T1058]  ? __asan_memcpy+0x5a/0x80
[   50.061955][ T1058]  ? ioctl_has_perm+0x408/0x500
[   50.061964][ T1058]  ? has_cap_mac_admin+0xd0/0xd0
[   50.061974][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.061988][ T1058]  ? mutex_lock_killable+0x97/0x1d0
[   50.062001][ T1058]  ? __cfi_mutex_lock_killable+0x10/0x10
[   50.062014][ T1058]  ? proc_fail_nth_write+0x184/0x220
[   50.062029][ T1058]  kvm_vcpu_ioctl+0xa43/0x1000
[   50.062066][ T1058]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   50.062079][ T1058]  ? hook_file_ioctl+0x1ef/0x590
[   50.062094][ T1058]  ? __cfi_vfs_write+0x10/0x10
[   50.062109][ T1058]  ? __cfi_hook_file_ioctl+0x10/0x10
[   50.062122][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.062136][ T1058]  ? mutex_unlock+0x90/0x240
[   50.062149][ T1058]  ? __cfi_mutex_unlock+0x10/0x10
[   50.062162][ T1058]  ? __fget_files+0x2bc/0x330
[   50.062175][ T1058]  ? bpf_lsm_file_ioctl+0xd/0x20
[   50.062186][ T1058]  ? security_file_ioctl+0x3e/0x110
[   50.062202][ T1058]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   50.062213][ T1058]  __se_sys_ioctl+0x126/0x1b0
[   50.062225][ T1058]  __x64_sys_ioctl+0x7f/0xa0
[   50.062236][ T1058]  x64_sys_call+0x1878/0x2ee0
[   50.062247][ T1058]  do_syscall_64+0x57/0xf0
[   50.062258][ T1058]  ? clear_bhb_loop+0x50/0xa0
[   50.062272][ T1058]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   50.062286][ T1058] RIP: 0033:0x7fdb82fa94d9
[   50.062296][ T1058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.062306][ T1058] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   50.062319][ T1058] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   50.062327][ T1058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   50.062334][ T1058] RBP: 00007fdb83e57090 R08: 0000000000000000 R09: 0000000000000000
[   50.062341][ T1058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.062348][ T1058] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   50.062357][ T1058]  </TASK>
[   50.062363][ T1058] warn_alloc: 2 callbacks suppressed
[   50.062369][ T1058] syz.0.261: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[   50.575541][ T1072] syzkaller1: entered promiscuous mode
[   50.593792][ T1072] syzkaller1: entered allmulticast mode
[   50.599950][  T384] usb 2-1: USB disconnect, device number 10
[   50.611191][ T1058] ,cpuset=syz0,mems_allowed=0
[   50.616001][ T1058] CPU: 0 UID: 0 PID: 1058 Comm: syz.0.261 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   50.616020][ T1058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   50.616028][ T1058] Call Trace:
[   50.616032][ T1058]  <TASK>
[   50.616037][ T1058]  __dump_stack+0x21/0x30
[   50.616055][ T1058]  dump_stack_lvl+0x140/0x1c0
[   50.616065][ T1058]  ? __cfi_dump_stack_lvl+0x10/0x10
[   50.616075][ T1058]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   50.616088][ T1058]  dump_stack+0x19/0x20
[   50.616096][ T1058]  warn_alloc+0x1e7/0x2c0
[   50.616109][ T1058]  ? __kasan_kmalloc+0x28/0xb0
[   50.616121][ T1058]  ? __cfi_warn_alloc+0x10/0x10
[   50.616133][ T1058]  ? __get_vm_area_node+0x150/0x390
[   50.616146][ T1058]  ? kasan_save_alloc_info+0x3a/0x50
[   50.616161][ T1058]  ? __get_vm_area_node+0x382/0x390
[   50.616174][ T1058]  __vmalloc_node_range_noprof+0x365/0x1300
[   50.616195][ T1058]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   50.616208][ T1058]  ? kasan_save_alloc_info+0x3a/0x50
[   50.616221][ T1058]  ? __kasan_slab_alloc+0x73/0x90
[   50.616238][ T1058]  ? arch_dup_task_struct+0x5b/0xe0
[   50.616250][ T1058]  ? __asan_memcpy+0x5a/0x80
[   50.616264][ T1058]  dup_task_struct+0x5d6/0xd80
[   50.616278][ T1058]  ? copy_process+0x579/0x33a0
[   50.616292][ T1058]  ? _raw_spin_lock_irq+0x93/0x120
[   50.616303][ T1058]  ? copy_process+0x33a0/0x33a0
[   50.616316][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.616330][ T1058]  copy_process+0x579/0x33a0
[   50.616345][ T1058]  ? kasan_save_alloc_info+0x3a/0x50
[   50.616359][ T1058]  ? __cfi_copy_process+0x10/0x10
[   50.616372][ T1058]  ? __kmalloc_cache_noprof+0x23c/0x470
[   50.616388][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.616402][ T1058]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   50.616417][ T1058]  vhost_task_create+0x1f7/0x3f0
[   50.616429][ T1058]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   50.616443][ T1058]  ? __cfi_vhost_task_create+0x10/0x10
[   50.616463][ T1058]  ? __cfi_vhost_task_fn+0x10/0x10
[   50.616475][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.616489][ T1058]  ? mutex_lock+0x97/0x1d0
[   50.616502][ T1058]  ? __cfi_mutex_lock+0x10/0x10
[   50.616514][ T1058]  ? kernel_text_address+0xa9/0xe0
[   50.616530][ T1058]  kvm_mmu_post_init_vm+0x161/0x300
[   50.616541][ T1058]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   50.616556][ T1058]  ? _parse_integer_limit+0x195/0x1e0
[   50.616572][ T1058]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   50.616586][ T1058]  ? kstrtoull+0x13b/0x1e0
[   50.616600][ T1058]  ? kstrtouint+0x78/0xf0
[   50.616614][ T1058]  ? ioctl_has_perm+0x1bc/0x500
[   50.616623][ T1058]  ? __asan_memcpy+0x5a/0x80
[   50.616637][ T1058]  ? ioctl_has_perm+0x408/0x500
[   50.616646][ T1058]  ? has_cap_mac_admin+0xd0/0xd0
[   50.616655][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.616669][ T1058]  ? mutex_lock_killable+0x97/0x1d0
[   50.616682][ T1058]  ? __cfi_mutex_lock_killable+0x10/0x10
[   50.616695][ T1058]  ? proc_fail_nth_write+0x184/0x220
[   50.616710][ T1058]  kvm_vcpu_ioctl+0xa43/0x1000
[   50.616721][ T1058]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   50.616732][ T1058]  ? hook_file_ioctl+0x1ef/0x590
[   50.616745][ T1058]  ? __cfi_vfs_write+0x10/0x10
[   50.616761][ T1058]  ? __cfi_hook_file_ioctl+0x10/0x10
[   50.616773][ T1058]  ? __kasan_check_write+0x18/0x20
[   50.616787][ T1058]  ? mutex_unlock+0x90/0x240
[   50.616799][ T1058]  ? __cfi_mutex_unlock+0x10/0x10
[   50.616813][ T1058]  ? __fget_files+0x2bc/0x330
[   50.616824][ T1058]  ? bpf_lsm_file_ioctl+0xd/0x20
[   50.616836][ T1058]  ? security_file_ioctl+0x3e/0x110
[   50.616850][ T1058]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   50.616861][ T1058]  __se_sys_ioctl+0x126/0x1b0
[   50.616872][ T1058]  __x64_sys_ioctl+0x7f/0xa0
[   50.616883][ T1058]  x64_sys_call+0x1878/0x2ee0
[   50.616894][ T1058]  do_syscall_64+0x57/0xf0
[   50.616905][ T1058]  ? clear_bhb_loop+0x50/0xa0
[   50.616919][ T1058]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   50.616933][ T1058] RIP: 0033:0x7fdb82fa94d9
[   50.616944][ T1058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.616955][ T1058] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   50.616968][ T1058] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   50.616977][ T1058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   50.616983][ T1058] RBP: 00007fdb83e57090 R08: 0000000000000000 R09: 0000000000000000
[   50.616991][ T1058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.616997][ T1058] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   50.617006][ T1058]  </TASK>
[   50.617059][ T1058] Mem-Info:
[   51.070858][ T1058] active_anon:10390 inactive_anon:0 isolated_anon:0
[   51.070858][ T1058]  active_file:5782 inactive_file:2674 isolated_file:0
[   51.070858][ T1058]  unevictable:0 dirty:156 writeback:0
[   51.070858][ T1058]  slab_reclaimable:6513 slab_unreclaimable:70280
[   51.070858][ T1058]  mapped:27459 shmem:3031 pagetables:856
[   51.070858][ T1058]  sec_pagetables:0 bounce:0
[   51.070858][ T1058]  kernel_misc_reclaimable:0
[   51.070858][ T1058]  free:1531207 free_pcp:2045 free_cma:0
[   51.116322][ T1058] Node 0 active_anon:41560kB inactive_anon:0kB active_file:23128kB inactive_file:10696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109836kB dirty:624kB writeback:0kB shmem:12124kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4616kB pagetables:3340kB sec_pagetables:0kB all_unreclaimable? no
[   51.162596][ T1058] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:5024kB free_cma:0kB
[   51.193067][ T1058] lowmem_reserve[]: 0 3920 3920
[   51.198053][ T1058] Normal free:3173456kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41560kB inactive_anon:0kB active_file:23128kB inactive_file:10696kB unevictable:0kB writepending:652kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4808kB local_pcp:3152kB free_cma:0kB
[   51.230217][ T1058] lowmem_reserve[]: 0 0 0
[   51.234714][ T1058] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB
[   51.250321][   T10] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   51.262148][   T10] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9
[   51.273355][   T10] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   51.285138][ T1058] Normal: 177*4kB (U) 253*8kB (UE) 304*16kB (UM) 23*32kB (UM) 41*64kB (UME) 13*128kB (UM) 9*256kB (UME) 15*512kB (ME) 11*1024kB (UME) 1*2048kB (M) 766*4096kB (ME) = 3173452kB
[   51.302785][ T1058] 11504 total pagecache pages
[   51.307598][ T1058] 19 pages in swap cache
[   51.312032][ T1058] Free swap  = 58764kB
[   51.316274][ T1058] Total swap = 124996kB
[   51.320556][ T1058] 2097051 pages RAM
[   51.324485][   T10] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[   51.333677][   T10] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[   51.342069][   T10] usb 3-1: Manufacturer: syz
[   51.346789][   T10] usb 3-1: SerialNumber: syz
[   51.351458][ T1058] 0 pages HighMem/MovableOnly
[   51.356420][ T1058] 354592 pages reserved
[   51.360995][ T1058] 0 pages cma reserved
[   51.365205][ T1052] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   51.373939][ T1058] Memory allocations:
[   51.378069][ T1058]          0 B        0 init/main.c:1477 func:do_initcalls
[   51.390321][ T1058]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   51.412035][ T1058]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   51.438601][ T1058]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   51.455233][ T1058]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   51.472085][ T1058]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   51.489736][ T1058]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   51.499731][ T1058]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   51.508663][ T1058]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   51.517424][ T1058]          0 B        0 init/initramfs.c:101 func:find_link
[   51.525534][ T1081] device-mapper: table: 252:6: crypt: Error decoding and setting key (-ENOKEY)
[   51.534586][ T1081] device-mapper: ioctl: error adding target to table
[   51.575206][   T10] usb 3-1: USB disconnect, device number 8
[   51.791134][  T384] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   51.952050][  T384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   51.968962][  T384] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   51.981101][  T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.999307][  T384] usb 4-1: Product: syz
[   52.004207][  T384] usb 4-1: Manufacturer: syz
[   52.008793][  T384] usb 4-1: SerialNumber: syz
[   52.050627][ T1102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'.
[   52.130598][ T1111] input: syz0 as /devices/virtual/input/input10
[   52.149138][  T385] udevd[385]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   52.281129][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   52.454567][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.480707][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.514997][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   52.537669][   T10] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0
[   52.563249][   T10] usb 2-1: Product: syz
[   52.581154][   T66] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   52.590834][   T10] usb 2-1: config 0 descriptor??
[   52.617493][  T384] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[   52.632216][  T384] cdc_ncm 4-1:1.0: bind() failure
[   52.667761][  T384] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   52.686500][  T384] cdc_ncm 4-1:1.1: bind() failure
[   52.762108][   T66] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.783447][   T66] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.803411][   T66] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   52.831121][   T66] usb 3-1: config 0 interface 0 has no altsetting 0
[   52.848565][   T66] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[   52.860186][   T66] usb 3-1: New USB device strings: Mfr=0, Product=10, SerialNumber=0
[   52.868438][   T66] usb 3-1: Product: syz
[   52.873307][   T66] usb 3-1: config 0 descriptor??
[   53.022208][   T10] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   53.029022][   T10] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   53.036013][   T10] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   53.042891][   T10] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   53.049792][   T10] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   53.056668][   T10] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   53.063720][   T10] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   53.071272][   T10] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[   53.088089][ T1113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.096930][ T1113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.153011][   T66] usbhid 3-1:0.0: can't add hid device: -71
[   53.159122][   T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   53.167986][   T66] usb 3-1: USB disconnect, device number 9
[   53.238277][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   53.238295][   T36] audit: type=1400 audit(1794505556.310:288): avc:  denied  { create } for  pid=1105 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   53.264355][   T10] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device
[   53.275063][   T10] pyra 0003:1E7D:2CF6.0004: couldn't install mouse
[   53.286944][   T10] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71
[   53.296935][   T10] usb 2-1: USB disconnect, device number 11
[   53.322787][ T1120] fido_id[1120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   53.359228][ T1122] fuse: Bad value for 'fd'
[   53.661181][   T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   53.811611][   T66] usb 1-1: Using ep0 maxpacket: 16
[   53.818083][   T66] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[   53.826390][   T66] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   53.843559][   T66] usb 1-1: config 0 has no interface number 0
[   53.849757][   T66] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[   53.859623][   T66] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   53.869696][   T66] usb 1-1: config 0 interface 98 has no altsetting 0
[   53.877764][   T66] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[   53.886942][   T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.896129][   T66] usb 1-1: Product: syz
[   53.900389][   T66] usb 1-1: Manufacturer: syz
[   53.905041][   T66] usb 1-1: SerialNumber: syz
[   53.910162][   T66] usb 1-1: config 0 descriptor??
[   53.915557][ T1125] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   53.922818][ T1125] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   54.055842][ T1136] FAULT_INJECTION: forcing a failure.
[   54.055842][ T1136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.082835][ T1136] CPU: 0 UID: 0 PID: 1136 Comm: syz.1.288 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   54.082858][ T1136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   54.082866][ T1136] Call Trace:
[   54.082869][ T1136]  <TASK>
[   54.082874][ T1136]  __dump_stack+0x21/0x30
[   54.082892][ T1136]  dump_stack_lvl+0x140/0x1c0
[   54.082902][ T1136]  ? __cfi_dump_stack_lvl+0x10/0x10
[   54.082914][ T1136]  ? check_stack_object+0x138/0x150
[   54.082930][ T1136]  dump_stack+0x19/0x20
[   54.082944][ T1136]  should_fail_ex+0x3c2/0x510
[   54.082955][ T1136]  should_fail+0xf/0x20
[   54.082963][ T1136]  should_fail_usercopy+0x1e/0x30
[   54.082974][ T1136]  _copy_to_user+0x24/0xa0
[   54.082986][ T1136]  simple_read_from_buffer+0xed/0x160
[   54.083000][ T1136]  proc_fail_nth_read+0x1aa/0x220
[   54.083013][ T1136]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   54.083026][ T1136]  ? bpf_lsm_file_permission+0xd/0x20
[   54.083039][ T1136]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   54.083052][ T1136]  vfs_read+0x28b/0xc70
[   54.083068][ T1136]  ? __cfi_vfs_read+0x10/0x10
[   54.083088][ T1136]  ? __kasan_check_write+0x18/0x20
[   54.083103][ T1136]  ? mutex_lock+0x97/0x1d0
[   54.083122][ T1136]  ? __cfi_mutex_lock+0x10/0x10
[   54.083135][ T1136]  ksys_read+0x145/0x260
[   54.083143][ T1136]  ? xfd_validate_state+0x68/0x140
[   54.083158][ T1136]  ? __cfi_ksys_read+0x10/0x10
[   54.083167][ T1136]  ? __kasan_check_write+0x18/0x20
[   54.083181][ T1136]  ? fpregs_restore_userregs+0x11c/0x260
[   54.083199][ T1136]  __x64_sys_read+0x7f/0x90
[   54.083207][ T1136]  x64_sys_call+0x2638/0x2ee0
[   54.083218][ T1136]  do_syscall_64+0x57/0xf0
[   54.083229][ T1136]  ? clear_bhb_loop+0x50/0xa0
[   54.083244][ T1136]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   54.083257][ T1136] RIP: 0033:0x7f57a3369d0e
[   54.083267][ T1136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   54.083276][ T1136] RSP: 002b:00007f57a1df6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   54.083288][ T1136] RAX: ffffffffffffffda RBX: 00007f57a1df76c0 RCX: 00007f57a3369d0e
[   54.083297][ T1136] RDX: 000000000000000f RSI: 00007f57a1df70a0 RDI: 0000000000000007
[   54.083304][ T1136] RBP: 00007f57a1df7090 R08: 0000000000000000 R09: 0000000000000000
[   54.083310][ T1136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.083316][ T1136] R13: 00007f57a3626038 R14: 00007f57a3625fa0 R15: 00007ffe50c2e0e8
[   54.083325][ T1136]  </TASK>
[   54.335506][ T1125] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   54.342824][ T1125] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   54.571237][   T10] usb 4-1: USB disconnect, device number 5
[   54.692871][ T1145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.750809][   T66] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   54.761052][   T66] asix 1-1:0.98: probe with driver asix failed with error -71
[   54.774972][   T66] usb 1-1: USB disconnect, device number 6
[   54.781506][ T1139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'.
[   54.804930][   T36] audit: type=1400 audit(1794505557.880:289): avc:  denied  { setopt } for  pid=1148 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   54.824205][   T36] audit: type=1400 audit(1794505557.880:290): avc:  denied  { bind } for  pid=1148 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   55.051190][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   55.201139][   T10] usb 3-1: Using ep0 maxpacket: 32
[   55.207331][   T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.218408][   T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.240901][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   55.250542][   T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   55.259471][   T10] usb 3-1: Product: syz
[   55.263937][   T10] usb 3-1: Manufacturer: syz
[   55.270244][   T10] hub 3-1:4.0: USB hub found
[   55.469884][   T10] hub 3-1:4.0: 2 ports detected
[   55.521156][   T66] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   55.541157][  T329] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   55.671135][   T66] usb 2-1: Using ep0 maxpacket: 16
[   55.677575][   T66] usb 2-1: unable to get BOS descriptor or descriptor too short
[   55.686057][   T66] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   55.698269][  T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.708765][   T66] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   55.718145][   T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.727072][ T1162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.735633][   T66] usb 2-1: Product: syz
[   55.740133][ T1162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.748052][   T66] usb 2-1: Manufacturer: syz
[   55.753132][   T66] usb 2-1: SerialNumber: syz
[   55.757898][  T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   55.767501][   T36] audit: type=1400 audit(1794505558.840:291): avc:  denied  { setopt } for  pid=1148 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   55.767818][  T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.796893][  T329] usb 1-1: Product: syz
[   55.801494][  T329] usb 1-1: Manufacturer: syz
[   55.806287][  T329] usb 1-1: SerialNumber: syz
[   56.007932][   T66] usb 2-1: Audio class v2/v3 interfaces need an interface association
[   56.017176][   T66] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   56.226766][   T66] usb 2-1: 2:1 : can't get High Capability descriptor
[   56.426700][  T329] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[   56.433874][  T329] cdc_ncm 1-1:1.0: bind() failure
[   56.440312][   T66] usb 2-1: USB disconnect, device number 12
[   56.446925][ T1166] FAULT_INJECTION: forcing a failure.
[   56.446925][ T1166] name failslab, interval 1, probability 0, space 0, times 0
[   56.460318][  T329] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   56.467832][  T329] cdc_ncm 1-1:1.1: bind() failure
[   56.474543][ T1166] CPU: 0 UID: 0 PID: 1166 Comm: syz.3.301 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   56.474573][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   56.474585][ T1166] Call Trace:
[   56.474591][ T1166]  <TASK>
[   56.474598][ T1166]  __dump_stack+0x21/0x30
[   56.474621][ T1166]  dump_stack_lvl+0x140/0x1c0
[   56.474638][ T1166]  ? __cfi_dump_stack_lvl+0x10/0x10
[   56.474658][ T1166]  dump_stack+0x19/0x20
[   56.474672][ T1166]  should_fail_ex+0x3c2/0x510
[   56.474689][ T1166]  should_failslab+0xac/0x100
[   56.474709][ T1166]  kmem_cache_alloc_noprof+0x42/0x410
[   56.474733][ T1166]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   56.474752][ T1166]  ? alloc_empty_file+0xbf/0x270
[   56.474772][ T1166]  ? arch_stack_walk+0x10a/0x170
[   56.474793][ T1166]  alloc_empty_file+0xbf/0x270
[   56.474814][ T1166]  path_openat+0xf4/0x35a0
[   56.474834][ T1166]  ? stack_depot_save_flags+0x38/0x800
[   56.474854][ T1166]  ? kasan_save_track+0x4f/0x80
[   56.474871][ T1166]  ? kasan_save_track+0x3e/0x80
[   56.474887][ T1166]  ? kasan_save_alloc_info+0x3a/0x50
[   56.474909][ T1166]  ? __kasan_slab_alloc+0x73/0x90
[   56.474926][ T1166]  ? getname+0x1b/0x30
[   56.474941][ T1166]  ? do_sys_openat2+0xda/0x1d0
[   56.474961][ T1166]  ? __x64_sys_openat+0x13a/0x170
[   56.474980][ T1166]  ? x64_sys_call+0xe69/0x2ee0
[   56.474997][ T1166]  ? do_syscall_64+0x57/0xf0
[   56.475017][ T1166]  ? do_filp_open+0x440/0x440
[   56.475037][ T1166]  do_filp_open+0x1f2/0x440
[   56.475056][ T1166]  ? __cfi_do_filp_open+0x10/0x10
[   56.475077][ T1166]  ? alloc_fd+0x4c1/0x570
[   56.475096][ T1166]  do_sys_openat2+0x134/0x1d0
[   56.475118][ T1166]  ? fput+0x1a4/0x230
[   56.475136][ T1166]  ? do_sys_open+0x100/0x100
[   56.475155][ T1166]  ? ksys_write+0x1f3/0x260
[   56.475170][ T1166]  ? __cfi_ksys_write+0x10/0x10
[   56.475186][ T1166]  __x64_sys_openat+0x13a/0x170
[   56.475208][ T1166]  x64_sys_call+0xe69/0x2ee0
[   56.475226][ T1166]  do_syscall_64+0x57/0xf0
[   56.475244][ T1166]  ? clear_bhb_loop+0x50/0xa0
[   56.475268][ T1166]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.475292][ T1166] RIP: 0033:0x7fb642ba94d9
[   56.475308][ T1166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.475323][ T1166] RSP: 002b:00007fb6439a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   56.475341][ T1166] RAX: ffffffffffffffda RBX: 00007fb642e25fa0 RCX: 00007fb642ba94d9
[   56.475355][ T1166] RDX: 0000000000000400 RSI: 000020000000a940 RDI: ffffffffffffff9c
[   56.475368][ T1166] RBP: 00007fb6439a6090 R08: 0000000000000000 R09: 0000000000000000
[   56.475379][ T1166] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[   56.475391][ T1166] R13: 00007fb642e26038 R14: 00007fb642e25fa0 R15: 00007fff17999848
[   56.475407][ T1166]  </TASK>
[   56.795277][ T1170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'.
[   56.823419][   T10] hub 3-1:4.0: hub_hub_status failed (err = -32)
[   56.829811][   T10] hub 3-1:4.0: config failed, can't get hub status (err -32)
[   56.899220][ T1176] FAULT_INJECTION: forcing a failure.
[   56.899220][ T1176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.912365][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.3.305 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   56.912386][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   56.912393][ T1176] Call Trace:
[   56.912398][ T1176]  <TASK>
[   56.912403][ T1176]  __dump_stack+0x21/0x30
[   56.912418][ T1176]  dump_stack_lvl+0x140/0x1c0
[   56.912428][ T1176]  ? __cfi_dump_stack_lvl+0x10/0x10
[   56.912459][ T1176]  dump_stack+0x19/0x20
[   56.912468][ T1176]  should_fail_ex+0x3c2/0x510
[   56.912479][ T1176]  should_fail+0xf/0x20
[   56.912487][ T1176]  should_fail_usercopy+0x1e/0x30
[   56.912498][ T1176]  _copy_from_user+0x20/0xa0
[   56.912510][ T1176]  dm_ctl_ioctl+0x151/0xde0
[   56.912524][ T1176]  ? selinux_file_ioctl+0x732/0x1480
[   56.912540][ T1176]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   56.912556][ T1176]  ? __fget_files+0x2bc/0x330
[   56.912569][ T1176]  ? bpf_lsm_file_ioctl+0xd/0x20
[   56.912580][ T1176]  ? security_file_ioctl+0x3e/0x110
[   56.912595][ T1176]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   56.912608][ T1176]  __se_sys_ioctl+0x126/0x1b0
[   56.912620][ T1176]  __x64_sys_ioctl+0x7f/0xa0
[   56.912631][ T1176]  x64_sys_call+0x1878/0x2ee0
[   56.912642][ T1176]  do_syscall_64+0x57/0xf0
[   56.912653][ T1176]  ? clear_bhb_loop+0x50/0xa0
[   56.912668][ T1176]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.912682][ T1176] RIP: 0033:0x7fb642ba94d9
[   56.912693][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.912702][ T1176] RSP: 002b:00007fb6439a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   56.912714][ T1176] RAX: ffffffffffffffda RBX: 00007fb642e25fa0 RCX: 00007fb642ba94d9
[   56.912723][ T1176] RDX: 00002000000005c0 RSI: 00000000c138fd05 RDI: 0000000000000003
[   56.912731][ T1176] RBP: 00007fb6439a6090 R08: 0000000000000000 R09: 0000000000000000
[   56.912738][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.912744][ T1176] R13: 00007fb642e26038 R14: 00007fb642e25fa0 R15: 00007fff17999848
[   56.912753][ T1176]  </TASK>
[   57.535653][ T1181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'.
[   57.853934][ T1189] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   57.862182][ T1189] netlink: 'syz.2.310': attribute type 32 has an invalid length.
[   58.061301][  T329] usb 3-1: reset high-speed USB device number 10 using dummy_hcd
[   58.069920][  T329] usb 3-1: device reset changed ep0 maxpacket size!
[   58.076825][  T329] usb 3-1: USB disconnect, device number 10
[   58.095540][ T1195] fuse: Bad value for 'user_id'
[   58.100485][ T1195] fuse: Bad value for 'user_id'
[   58.194682][ T1202] FAULT_INJECTION: forcing a failure.
[   58.194682][ T1202] name failslab, interval 1, probability 0, space 0, times 0
[   58.207805][ T1202] CPU: 0 UID: 0 PID: 1202 Comm: syz.1.316 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   58.207829][ T1202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   58.207837][ T1202] Call Trace:
[   58.207841][ T1202]  <TASK>
[   58.207845][ T1202]  __dump_stack+0x21/0x30
[   58.207861][ T1202]  dump_stack_lvl+0x140/0x1c0
[   58.207871][ T1202]  ? __cfi_dump_stack_lvl+0x10/0x10
[   58.207882][ T1202]  dump_stack+0x19/0x20
[   58.207892][ T1202]  should_fail_ex+0x3c2/0x510
[   58.207903][ T1202]  should_failslab+0xac/0x100
[   58.207915][ T1202]  kmem_cache_alloc_bulk_noprof+0x4c/0x480
[   58.207926][ T1202]  ? pcpu_block_update_hint_alloc+0x8a0/0xc50
[   58.207940][ T1202]  ? mas_dup_build+0x562/0x1ac0
[   58.207957][ T1202]  mas_dup_build+0xb02/0x1ac0
[   58.207973][ T1202]  __mt_dup+0x16f/0x290
[   58.207987][ T1202]  ? __cfi___mt_dup+0x10/0x10
[   58.208002][ T1202]  ? __kasan_check_write+0x18/0x20
[   58.208017][ T1202]  copy_mm+0x716/0x1da0
[   58.208032][ T1202]  ? copy_signal+0x6c0/0x6c0
[   58.208046][ T1202]  ? _raw_spin_lock+0x92/0x120
[   58.208057][ T1202]  ? __asan_memset+0x39/0x50
[   58.208072][ T1202]  ? __init_rwsem+0x110/0x1f0
[   58.208084][ T1202]  ? copy_signal+0x4ef/0x6c0
[   58.208098][ T1202]  copy_process+0x12d1/0x33a0
[   58.208113][ T1202]  ? __cfi_copy_process+0x10/0x10
[   58.208128][ T1202]  kernel_clone+0x233/0x810
[   58.208142][ T1202]  ? __cfi_kernel_clone+0x10/0x10
[   58.208156][ T1202]  ? do_futex+0x32a/0x510
[   58.208168][ T1202]  __x64_sys_clone+0x1b7/0x230
[   58.208182][ T1202]  ? __cfi___x64_sys_clone+0x10/0x10
[   58.208198][ T1202]  ? __kasan_check_write+0x18/0x20
[   58.208212][ T1202]  ? fpregs_restore_userregs+0x11c/0x260
[   58.208226][ T1202]  ? switch_fpu_return+0x12/0x20
[   58.208239][ T1202]  x64_sys_call+0x2b3c/0x2ee0
[   58.208251][ T1202]  do_syscall_64+0x57/0xf0
[   58.208261][ T1202]  ? clear_bhb_loop+0x50/0xa0
[   58.208275][ T1202]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   58.208289][ T1202] RIP: 0033:0x7f57a33a94d9
[   58.208299][ T1202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.208308][ T1202] RSP: 002b:00007f57a1df6fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   58.208321][ T1202] RAX: ffffffffffffffda RBX: 00007f57a3625fa0 RCX: 00007f57a33a94d9
[   58.208329][ T1202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000800091
[   58.208336][ T1202] RBP: 00007f57a343804e R08: 0000000000000000 R09: 0000000000000000
[   58.208343][ T1202] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   58.208350][ T1202] R13: 00007f57a3626038 R14: 00007f57a3625fa0 R15: 00007ffe50c2e0e8
[   58.208359][ T1202]  </TASK>
[   58.482829][   T36] audit: type=1400 audit(1794505561.560:292): avc:  denied  { append } for  pid=1203 comm="syz.0.317" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   58.486704][   T10] usb 1-1: USB disconnect, device number 7
[   58.537762][ T1210] netlink: 324 bytes leftover after parsing attributes in process `syz.0.317'.
[   58.601155][  T329] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   58.643349][ T1217] fuse: Bad value for 'user_id'
[   58.648276][ T1217] fuse: Bad value for 'user_id'
[   58.762225][  T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.773264][  T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.783054][  T329] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   58.792266][  T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.804146][  T329] usb 3-1: config 0 descriptor??
[   58.818082][ T1215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.321'.
[   58.981128][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   59.132062][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.143636][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.153376][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.161457][   T10] usb 4-1: Product: syz
[   59.165706][   T10] usb 4-1: Manufacturer: syz
[   59.170309][   T10] usb 4-1: SerialNumber: syz
[   59.211766][  T329] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   59.218872][  T329] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   59.226027][  T329] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   59.233232][  T329] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   59.240243][  T329] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   59.247510][  T329] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   59.254526][  T329] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   59.262272][  T329] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[   59.377017][ T1234] FAULT_INJECTION: forcing a failure.
[   59.377017][ T1234] name failslab, interval 1, probability 0, space 0, times 0
[   59.399923][ T1234] CPU: 0 UID: 0 PID: 1234 Comm: syz.0.328 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   59.399944][ T1234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   59.399951][ T1234] Call Trace:
[   59.399955][ T1234]  <TASK>
[   59.399959][ T1234]  __dump_stack+0x21/0x30
[   59.399974][ T1234]  dump_stack_lvl+0x140/0x1c0
[   59.399984][ T1234]  ? __cfi_dump_stack_lvl+0x10/0x10
[   59.399993][ T1234]  ? avc_has_perm+0x155/0x240
[   59.400008][ T1234]  ? __cfi_avc_has_perm+0x10/0x10
[   59.400019][ T1234]  ? hook_file_open+0x1f2/0x8d0
[   59.400033][ T1234]  dump_stack+0x19/0x20
[   59.400042][ T1234]  should_fail_ex+0x3c2/0x510
[   59.400052][ T1234]  should_failslab+0xac/0x100
[   59.400063][ T1234]  __kmalloc_cache_noprof+0x41/0x470
[   59.400079][ T1234]  ? vhost_task_create+0x12c/0x3f0
[   59.400093][ T1234]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   59.400107][ T1234]  vhost_task_create+0x12c/0x3f0
[   59.400119][ T1234]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   59.400133][ T1234]  ? __cfi_vhost_task_create+0x10/0x10
[   59.400145][ T1234]  ? __cfi_vhost_task_fn+0x10/0x10
[   59.400157][ T1234]  ? __kasan_check_write+0x18/0x20
[   59.400172][ T1234]  ? mutex_lock+0x97/0x1d0
[   59.400185][ T1234]  ? __cfi_mutex_lock+0x10/0x10
[   59.400197][ T1234]  ? kernel_text_address+0xa9/0xe0
[   59.400214][ T1234]  kvm_mmu_post_init_vm+0x161/0x300
[   59.400224][ T1234]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   59.400240][ T1234]  ? _parse_integer_limit+0x195/0x1e0
[   59.400255][ T1234]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   59.400270][ T1234]  ? kstrtoull+0x13b/0x1e0
[   59.400284][ T1234]  ? kstrtouint+0x78/0xf0
[   59.400298][ T1234]  ? ioctl_has_perm+0x1bc/0x500
[   59.400307][ T1234]  ? __asan_memcpy+0x5a/0x80
[   59.400321][ T1234]  ? ioctl_has_perm+0x408/0x500
[   59.400337][ T1234]  ? has_cap_mac_admin+0xd0/0xd0
[   59.400346][ T1234]  ? __kasan_check_write+0x18/0x20
[   59.400360][ T1234]  ? mutex_lock_killable+0x97/0x1d0
[   59.400373][ T1234]  ? __cfi_mutex_lock_killable+0x10/0x10
[   59.400386][ T1234]  ? proc_fail_nth_write+0x184/0x220
[   59.400401][ T1234]  kvm_vcpu_ioctl+0xa43/0x1000
[   59.400413][ T1234]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   59.400424][ T1234]  ? hook_file_ioctl+0x1ef/0x590
[   59.400437][ T1234]  ? __cfi_vfs_write+0x10/0x10
[   59.400451][ T1234]  ? __cfi_hook_file_ioctl+0x10/0x10
[   59.400464][ T1234]  ? __kasan_check_write+0x18/0x20
[   59.400478][ T1234]  ? mutex_unlock+0x90/0x240
[   59.400490][ T1234]  ? __cfi_mutex_unlock+0x10/0x10
[   59.400504][ T1234]  ? __fget_files+0x2bc/0x330
[   59.400515][ T1234]  ? bpf_lsm_file_ioctl+0xd/0x20
[   59.400527][ T1234]  ? security_file_ioctl+0x3e/0x110
[   59.400542][ T1234]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   59.400553][ T1234]  __se_sys_ioctl+0x126/0x1b0
[   59.400564][ T1234]  __x64_sys_ioctl+0x7f/0xa0
[   59.400574][ T1234]  x64_sys_call+0x1878/0x2ee0
[   59.400586][ T1234]  do_syscall_64+0x57/0xf0
[   59.400596][ T1234]  ? clear_bhb_loop+0x50/0xa0
[   59.400611][ T1234]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   59.400625][ T1234] RIP: 0033:0x7fdb82fa94d9
[   59.400635][ T1234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.400644][ T1234] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   59.400657][ T1234] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   59.400665][ T1234] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   59.400672][ T1234] RBP: 00007fdb83e57090 R08: 0000000000000000 R09: 0000000000000000
[   59.400679][ T1234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.400686][ T1234] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   59.400695][ T1234]  </TASK>
[   59.768325][  T329] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00
[   59.843386][   T36] audit: type=1400 audit(1794505562.920:293): avc:  denied  { watch watch_reads } for  pid=1243 comm="syz.0.332" path="/79/file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   59.991359][   T10] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[   59.997397][   T10] cdc_ncm 4-1:1.0: bind() failure
[   60.003270][   T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   60.010062][   T10] cdc_ncm 4-1:1.1: bind() failure
[   60.311129][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   60.351361][  T329] cp2112 0003:10C4:EA90.0005: error setting SMBus config
[   60.359086][  T329] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71
[   60.370001][  T329] usb 3-1: USB disconnect, device number 11
[   60.462168][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.474888][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   60.485050][   T10] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   60.494316][   T10] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[   60.502776][   T10] usb 1-1: Product: syz
[   60.507006][   T10] usb 1-1: Manufacturer: syz
[   60.703167][   T36] audit: type=1400 audit(1794505563.780:294): avc:  denied  { connect } for  pid=1258 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   60.716882][   T10] usb 1-1: Found UVC 1.00 device syz (225a:e1d4)
[   60.722780][   T36] audit: type=1400 audit(1794505563.780:295): avc:  denied  { getopt } for  pid=1258 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   60.729246][   T10] usb 1-1: No streaming interface found for terminal 2.
[   60.816341][   T36] audit: type=1326 audit(1794505563.890:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1267 comm="syz.1.338" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57a33a94d9 code=0x0
[   60.934565][   T10] usb 1-1: USB disconnect, device number 8
[   61.164326][   T36] audit: type=1326 audit(1794505564.240:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.341" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0cf7a94d9 code=0x7fc00000
[   61.165674][ T1280] usbcore.quirks: string doesn't fit in 127 chars.
[   61.196345][   T36] audit: type=1326 audit(1794505564.270:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.341" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0cf7a94d9 code=0x7fc00000
[   61.221500][   T36] audit: type=1326 audit(1794505564.270:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.341" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0cf7a94d9 code=0x7fc00000
[   61.246685][   T36] audit: type=1326 audit(1794505564.270:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.341" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0cf7a94d9 code=0x7fc00000
[   61.271832][   T36] audit: type=1326 audit(1794505564.270:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.341" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0cf7a94d9 code=0x7fc00000
[   61.751155][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   61.771910][  T329] usb 4-1: USB disconnect, device number 6
[   61.921129][   T10] usb 1-1: Using ep0 maxpacket: 16
[   61.927743][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   61.936207][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   61.948984][   T10] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   61.958206][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.969239][   T10] usb 1-1: Product: syz
[   61.973462][   T10] usb 1-1: Manufacturer: syz
[   61.978084][   T10] usb 1-1: SerialNumber: syz
[   62.021722][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   62.171163][    T9] usb 2-1: Using ep0 maxpacket: 8
[   62.187781][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   62.200318][   T10] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   62.215362][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7
[   62.228706][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   62.242065][    T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[   62.251393][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.259657][    T9] usb 2-1: Product: syz
[   62.266985][    T9] usb 2-1: Manufacturer: syz
[   62.274541][    T9] usb 2-1: SerialNumber: syz
[   62.290234][  T329] smpboot: CPU 1 is now offline
[   62.400053][   T10] usb 1-1: 2:1 : can't get High Capability descriptor
[   62.563823][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   62.580889][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   62.590748][    T9] usb 2-1: unable to issue vendor read request (ret = -71)
[   62.600893][ T1291] ���f��^$��: renamed from lo (while UP)
[   62.611129][    T9] usb 2-1: unable to issue vendor read request (ret = -71)
[   62.620618][ T1291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.629371][  T329] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   62.647374][    T9] usb 2-1: unable to issue vendor read request (ret = -71)
[   62.655201][ T1291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.665870][    T9] usb 2-1: unable to issue vendor read request (ret = -71)
[   62.683925][    T9] usb 2-1: USB disconnect, device number 13
[   62.721736][   T10] usb 1-1: USB disconnect, device number 9
[   62.812136][  T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.826872][  T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   62.838579][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.847087][  T329] usb 3-1: Product: syz
[   62.851473][  T329] usb 3-1: Manufacturer: syz
[   62.856077][  T329] usb 3-1: SerialNumber: syz
[   63.071102][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   63.177027][ T1347] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   63.232196][   T10] usb 1-1: Using ep0 maxpacket: 16
[   63.331035][   T10] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[   63.339591][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.362659][ T1356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   63.372039][   T10] usb 1-1: config 0 has no interface number 0
[   63.383714][   T10] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[   63.400220][   T10] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   63.410538][   T10] usb 1-1: config 0 interface 98 has no altsetting 0
[   63.419088][   T10] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[   63.450201][ T1361] FAULT_INJECTION: forcing a failure.
[   63.450201][ T1361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.463406][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.471659][   T10] usb 1-1: Product: syz
[   63.475954][   T10] usb 1-1: Manufacturer: syz
[   63.480601][ T1361] CPU: 0 UID: 0 PID: 1361 Comm: syz.1.371 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   63.480619][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   63.480627][ T1361] Call Trace:
[   63.480632][ T1361]  <TASK>
[   63.480637][ T1361]  __dump_stack+0x21/0x30
[   63.480652][ T1361]  dump_stack_lvl+0x140/0x1c0
[   63.480662][ T1361]  ? __cfi_dump_stack_lvl+0x10/0x10
[   63.480672][ T1361]  ? check_stack_object+0x138/0x150
[   63.480691][ T1361]  dump_stack+0x19/0x20
[   63.480700][ T1361]  should_fail_ex+0x3c2/0x510
[   63.480710][ T1361]  should_fail+0xf/0x20
[   63.480719][ T1361]  should_fail_usercopy+0x1e/0x30
[   63.480730][ T1361]  _copy_to_user+0x24/0xa0
[   63.480742][ T1361]  simple_read_from_buffer+0xed/0x160
[   63.480755][ T1361]  proc_fail_nth_read+0x1aa/0x220
[   63.480772][ T1361]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   63.480788][ T1361]  ? bpf_lsm_file_permission+0xd/0x20
[   63.480800][ T1361]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   63.480813][ T1361]  vfs_read+0x28b/0xc70
[   63.480828][ T1361]  ? __cfi_vfs_read+0x10/0x10
[   63.480845][ T1361]  ? __kasan_check_write+0x18/0x20
[   63.480863][ T1361]  ? mutex_lock+0x97/0x1d0
[   63.480877][ T1361]  ? __cfi_mutex_lock+0x10/0x10
[   63.480890][ T1361]  ksys_read+0x145/0x260
[   63.480899][ T1361]  ? __cfi_ksys_read+0x10/0x10
[   63.480911][ T1361]  ? __kasan_check_write+0x18/0x20
[   63.480924][ T1361]  ? fput+0x1a4/0x230
[   63.480936][ T1361]  ? __kasan_check_read+0x15/0x20
[   63.480950][ T1361]  __x64_sys_read+0x7f/0x90
[   63.480959][ T1361]  x64_sys_call+0x2638/0x2ee0
[   63.480971][ T1361]  do_syscall_64+0x57/0xf0
[   63.480981][ T1361]  ? clear_bhb_loop+0x50/0xa0
[   63.480996][ T1361]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   63.481018][ T1361] RIP: 0033:0x7f57a3369d0e
[   63.481028][ T1361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   63.481038][ T1361] RSP: 002b:00007f57a1df6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   63.481051][ T1361] RAX: ffffffffffffffda RBX: 00007f57a1df76c0 RCX: 00007f57a3369d0e
[   63.481059][ T1361] RDX: 000000000000000f RSI: 00007f57a1df70a0 RDI: 0000000000000007
[   63.481066][ T1361] RBP: 00007f57a1df7090 R08: 0000000000000000 R09: 0000000000000000
[   63.481072][ T1361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.481079][ T1361] R13: 00007f57a3626038 R14: 00007f57a3625fa0 R15: 00007ffe50c2e0e8
[   63.481088][ T1361]  </TASK>
[   63.722613][   T10] usb 1-1: SerialNumber: syz
[   63.727894][   T10] usb 1-1: config 0 descriptor??
[   63.732913][  T329] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[   63.738959][  T329] cdc_ncm 3-1:1.0: bind() failure
[   63.744617][  T329] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   63.751403][  T329] cdc_ncm 3-1:1.1: bind() failure
[   63.758915][ T1333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   63.766075][ T1333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   63.929029][ T1366] kvm: pic: single mode not supported
[   63.929281][ T1366] kvm: pic: level sensitive irq not supported
[   63.978527][ T1333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   64.000697][ T1333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   64.015107][ T1379] kvm: pic: single mode not supported
[   64.015120][ T1379] kvm: pic: level sensitive irq not supported
[   64.020727][ T1379] kvm: pic: single mode not supported
[   64.026923][ T1379] kvm: pic: level sensitive irq not supported
[   64.032872][ T1379] kvm: pic: single mode not supported
[   64.038948][ T1379] kvm: pic: level sensitive irq not supported
[   64.044837][ T1379] kvm: pic: single mode not supported
[   64.050941][ T1379] kvm: pic: level sensitive irq not supported
[   64.056691][ T1379] kvm: pic: single mode not supported
[   64.062815][ T1379] kvm: pic: level sensitive irq not supported
[   64.068408][ T1379] kvm: pic: single mode not supported
[   64.074504][ T1379] kvm: pic: level sensitive irq not supported
[   64.080364][ T1379] kvm: pic: single mode not supported
[   64.086469][ T1379] kvm: pic: level sensitive irq not supported
[   64.092293][ T1379] kvm: pic: single mode not supported
[   64.098382][ T1379] kvm: pic: level sensitive irq not supported
[   64.104636][ T1379] kvm: pic: single mode not supported
[   64.110748][ T1379] kvm: pic: level sensitive irq not supported
[   64.410766][   T10] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   64.428184][   T10] asix 1-1:0.98: probe with driver asix failed with error -71
[   64.440577][   T10] usb 1-1: USB disconnect, device number 10
[   64.704057][ T1385] tipc: Enabling <eth:lo> not permitted
[   64.709698][ T1385] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   64.976564][ T1395] netlink: 44 bytes leftover after parsing attributes in process `syz.0.383'.
[   65.264631][   T36] kauditd_printk_skb: 150 callbacks suppressed
[   65.264644][   T36] audit: type=1400 audit(1794505568.340:452): avc:  denied  { connect } for  pid=1405 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   65.384888][   T10] usb 3-1: USB disconnect, device number 12
[   65.721106][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   65.837691][ T1419] FAULT_INJECTION: forcing a failure.
[   65.837691][ T1419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.850816][ T1419] CPU: 0 UID: 0 PID: 1419 Comm: syz.0.392 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   65.850837][ T1419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   65.850845][ T1419] Call Trace:
[   65.850849][ T1419]  <TASK>
[   65.850855][ T1419]  __dump_stack+0x21/0x30
[   65.850871][ T1419]  dump_stack_lvl+0x140/0x1c0
[   65.850882][ T1419]  ? __cfi_dump_stack_lvl+0x10/0x10
[   65.850893][ T1419]  dump_stack+0x19/0x20
[   65.850903][ T1419]  should_fail_ex+0x3c2/0x510
[   65.850914][ T1419]  should_fail+0xf/0x20
[   65.850923][ T1419]  should_fail_usercopy+0x1e/0x30
[   65.850934][ T1419]  copy_page_from_iter_atomic+0x34b/0x1780
[   65.850949][ T1419]  ? __cfi_copy_page_from_iter_atomic+0x10/0x10
[   65.850961][ T1419]  ? inode_to_bdi+0x6d/0x100
[   65.850974][ T1419]  ? __kasan_check_read+0x15/0x20
[   65.850989][ T1419]  generic_perform_write+0x588/0x970
[   65.851003][ T1419]  ? __cfi_generic_perform_write+0x10/0x10
[   65.851015][ T1419]  ? generic_write_checks_count+0x426/0x540
[   65.851028][ T1419]  ? file_update_time+0xa3/0x210
[   65.851042][ T1419]  shmem_file_write_iter+0x105/0x130
[   65.851054][ T1419]  vfs_write+0x762/0xfd0
[   65.851073][ T1419]  ? __cfi_vfs_write+0x10/0x10
[   65.851089][ T1419]  __x64_sys_pwrite64+0x198/0x230
[   65.851099][ T1419]  ? __cfi___x64_sys_pwrite64+0x10/0x10
[   65.851110][ T1419]  ? switch_fpu_return+0x12/0x20
[   65.851124][ T1419]  x64_sys_call+0xd50/0x2ee0
[   65.851135][ T1419]  do_syscall_64+0x57/0xf0
[   65.851147][ T1419]  ? clear_bhb_loop+0x50/0xa0
[   65.851163][ T1419]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   65.851177][ T1419] RIP: 0033:0x7fdb82fa94d9
[   65.851188][ T1419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.851198][ T1419] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[   65.851210][ T1419] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   65.851218][ T1419] RDX: 00000000200000c1 RSI: 00002000000003c0 RDI: 0000000000000004
[   65.851226][ T1419] RBP: 00007fdb8303804e R08: 0000000000000000 R09: 0000000000000000
[   65.851233][ T1419] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000
[   65.851240][ T1419] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   65.851249][ T1419]  </TASK>
[   66.079229][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   66.111127][   T10] usb 3-1: Using ep0 maxpacket: 8
[   66.118361][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   66.130646][   T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40
[   66.139776][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.147813][   T10] usb 3-1: Product: syz
[   66.152111][   T10] usb 3-1: Manufacturer: syz
[   66.156819][   T10] usb 3-1: SerialNumber: syz
[   66.331101][    T9] usb 2-1: Using ep0 maxpacket: 16
[   66.337369][    T9] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[   66.345901][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   66.372893][    T9] usb 2-1: config 0 has no interface number 0
[   66.392944][    T9] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[   66.423050][    T9] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   66.455035][    T9] usb 2-1: config 0 interface 98 has no altsetting 0
[   66.476613][    T9] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[   66.492677][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.522077][    T9] usb 2-1: Product: syz
[   66.526288][    T9] usb 2-1: Manufacturer: syz
[   66.546961][    T9] usb 2-1: SerialNumber: syz
[   66.565764][    T9] usb 2-1: config 0 descriptor??
[   66.580612][ T1412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   66.588458][ T1412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   66.688147][   T36] audit: type=1400 audit(1794505569.760:453): avc:  denied  { checkpoint_restore } for  pid=1427 comm="syz.0.395" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.744184][   T10] usb 3-1: 1:1 : bogus bTerminalLink 1
[   66.757383][   T10] usb 3-1: unit 4 not found!
[   66.769394][   T10] usb 3-1: unit 6 not found!
[   66.804673][   T10] usb 3-1: USB disconnect, device number 13
[   66.816156][ T1412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   66.830167][ T1412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   66.977661][   T36] audit: type=1400 audit(1794505570.050:454): avc:  denied  { ioctl } for  pid=1436 comm="syz.3.398" path="/115/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=73 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   67.279033][    T9] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   67.290966][    T9] asix 2-1:0.98: probe with driver asix failed with error -71
[   67.301438][    T9] usb 2-1: USB disconnect, device number 14
[   67.359072][   T36] audit: type=1400 audit(1794505570.430:455): avc:  denied  { bind } for  pid=1445 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.380582][   T36] audit: type=1400 audit(1794505570.460:456): avc:  denied  { setopt } for  pid=1445 comm="syz.2.402" laddr=::1 lport=1 faddr=::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.469825][   T36] audit: type=1400 audit(1794505570.540:457): avc:  denied  { ioctl } for  pid=1454 comm="syz.2.404" path="socket:[18232]" dev="sockfs" ino=18232 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.672976][ T1458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'.
[   67.741128][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   67.843218][ T1460] netlink: 'syz.1.406': attribute type 2 has an invalid length.
[   67.891141][    T9] usb 3-1: Using ep0 maxpacket: 16
[   67.907716][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.930828][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   67.946234][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[   67.956430][   T36] audit: type=1400 audit(1794505571.020:458): avc:  denied  { unmount } for  pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   68.001298][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3840, setting to 64
[   68.036109][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   68.070083][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   68.081419][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   68.089408][    T9] usb 3-1: SerialNumber: syz
[   68.112695][ T1455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   68.121776][    T9] hub 3-1:1.0: bad descriptor, ignoring hub
[   68.127696][    T9] hub 3-1:1.0: probe with driver hub failed with error -5
[   68.135334][   T10] usb 1-1: Using ep0 maxpacket: 16
[   68.152193][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.171260][    T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[   68.179640][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.199988][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   68.211528][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.230090][   T10] usb 1-1: Product: syz
[   68.236455][   T10] usb 1-1: Manufacturer: syz
[   68.245620][   T10] usb 1-1: SerialNumber: syz
[   68.451172][    T9] usb 3-1: USB disconnect, device number 14
[   68.966134][   T10] usb 1-1: 0:2 : does not exist
[   68.977839][ T1485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'.
[   68.992481][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   69.016138][   T10] usb 1-1: USB disconnect, device number 11
[   69.111104][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   69.122225][   T36] audit: type=1400 audit(1794505572.200:459): avc:  denied  { watch } for  pid=1488 comm="syz.0.419" path="/99/control" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   69.236143][   T36] audit: type=1400 audit(1794505572.310:460): avc:  denied  { connect } for  pid=1488 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.311149][    T9] usb 3-1: Using ep0 maxpacket: 16
[   69.320033][    T9] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[   69.328367][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.349223][    T9] usb 3-1: config 0 has no interface number 0
[   69.360672][    T9] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[   69.380768][    T9] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   69.401033][    T9] usb 3-1: config 0 interface 98 has no altsetting 0
[   69.416158][    T9] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[   69.425472][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.440726][    T9] usb 3-1: Product: syz
[   69.450082][    T9] usb 3-1: Manufacturer: syz
[   69.466045][    T9] usb 3-1: SerialNumber: syz
[   69.480880][    T9] usb 3-1: config 0 descriptor??
[   69.500124][ T1479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.510456][ T1479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.527816][ T1504] input: syz0 as /devices/virtual/input/input22
[   69.740443][ T1479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.751765][ T1479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   70.168222][    T9] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   70.182917][ T1512] FAULT_INJECTION: forcing a failure.
[   70.182917][ T1512] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   70.201178][    T9] asix 3-1:0.98: probe with driver asix failed with error -71
[   70.220682][    T9] usb 3-1: USB disconnect, device number 15
[   70.226812][ T1512] CPU: 0 UID: 0 PID: 1512 Comm: syz.0.425 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   70.226830][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   70.226837][ T1512] Call Trace:
[   70.226840][ T1512]  <TASK>
[   70.226844][ T1512]  __dump_stack+0x21/0x30
[   70.226860][ T1512]  dump_stack_lvl+0x140/0x1c0
[   70.226870][ T1512]  ? __cfi_dump_stack_lvl+0x10/0x10
[   70.226880][ T1512]  dump_stack+0x19/0x20
[   70.226889][ T1512]  should_fail_ex+0x3c2/0x510
[   70.226899][ T1512]  should_fail_alloc_page+0xec/0x110
[   70.226912][ T1512]  __alloc_pages_noprof+0x1c0/0x7e0
[   70.226925][ T1512]  ? kernel_text_address+0xa9/0xe0
[   70.226941][ T1512]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   70.226954][ T1512]  ? unwind_get_return_address+0x51/0x90
[   70.226969][ T1512]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   70.226980][ T1512]  get_free_pages_noprof+0x14/0x40
[   70.226993][ T1512]  kasan_populate_vmalloc_pte+0x4c/0x170
[   70.227009][ T1512]  __apply_to_page_range+0x7bf/0xd00
[   70.227020][ T1512]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[   70.227035][ T1512]  ? __x64_sys_ioctl+0x7f/0xa0
[   70.227046][ T1512]  ? apply_to_page_range+0x60/0x60
[   70.227056][ T1512]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[   70.227071][ T1512]  apply_to_page_range+0x3f/0x60
[   70.227080][ T1512]  kasan_populate_vmalloc+0x64/0x80
[   70.227094][ T1512]  alloc_vmap_area+0x1e8e/0x26f0
[   70.227109][ T1512]  ? kasan_save_alloc_info+0x3a/0x50
[   70.227122][ T1512]  ? vm_map_ram+0xdd0/0xdd0
[   70.227135][ T1512]  ? __kmalloc_cache_node_noprof+0x225/0x430
[   70.227150][ T1512]  ? __get_vm_area_node+0x150/0x390
[   70.227164][ T1512]  __get_vm_area_node+0x1f8/0x390
[   70.227177][ T1512]  __vmalloc_node_range_noprof+0x340/0x1300
[   70.227191][ T1512]  ? copy_process+0x579/0x33a0
[   70.227208][ T1512]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   70.227221][ T1512]  ? kasan_save_alloc_info+0x3a/0x50
[   70.227235][ T1512]  ? __kasan_slab_alloc+0x73/0x90
[   70.227245][ T1512]  ? arch_dup_task_struct+0x5b/0xe0
[   70.227256][ T1512]  ? __asan_memcpy+0x5a/0x80
[   70.227271][ T1512]  dup_task_struct+0x5d6/0xd80
[   70.227284][ T1512]  ? copy_process+0x579/0x33a0
[   70.227298][ T1512]  ? _raw_spin_lock_irq+0x93/0x120
[   70.227310][ T1512]  ? copy_process+0x33a0/0x33a0
[   70.227323][ T1512]  ? __kasan_check_write+0x18/0x20
[   70.227338][ T1512]  copy_process+0x579/0x33a0
[   70.227353][ T1512]  ? kasan_save_alloc_info+0x3a/0x50
[   70.227367][ T1512]  ? __cfi_copy_process+0x10/0x10
[   70.227381][ T1512]  ? __kmalloc_cache_noprof+0x23c/0x470
[   70.227396][ T1512]  ? __kasan_check_write+0x18/0x20
[   70.227417][ T1512]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   70.227431][ T1512]  vhost_task_create+0x1f7/0x3f0
[   70.227444][ T1512]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   70.227458][ T1512]  ? __cfi_vhost_task_create+0x10/0x10
[   70.227471][ T1512]  ? __cfi_vhost_task_fn+0x10/0x10
[   70.227483][ T1512]  ? __kasan_check_write+0x18/0x20
[   70.227498][ T1512]  ? mutex_lock+0x97/0x1d0
[   70.227511][ T1512]  ? __cfi_mutex_lock+0x10/0x10
[   70.227523][ T1512]  ? kernel_text_address+0xa9/0xe0
[   70.227539][ T1512]  kvm_mmu_post_init_vm+0x161/0x300
[   70.227549][ T1512]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   70.227565][ T1512]  ? _parse_integer_limit+0x195/0x1e0
[   70.227581][ T1512]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   70.227596][ T1512]  ? kstrtoull+0x13b/0x1e0
[   70.227610][ T1512]  ? kstrtouint+0x78/0xf0
[   70.227624][ T1512]  ? ioctl_has_perm+0x1bc/0x500
[   70.227634][ T1512]  ? __asan_memcpy+0x5a/0x80
[   70.227648][ T1512]  ? ioctl_has_perm+0x408/0x500
[   70.227658][ T1512]  ? has_cap_mac_admin+0xd0/0xd0
[   70.227667][ T1512]  ? __kasan_check_write+0x18/0x20
[   70.227682][ T1512]  ? mutex_lock_killable+0x97/0x1d0
[   70.227696][ T1512]  ? __cfi_mutex_lock_killable+0x10/0x10
[   70.227709][ T1512]  ? proc_fail_nth_write+0x184/0x220
[   70.227727][ T1512]  kvm_vcpu_ioctl+0xa43/0x1000
[   70.227739][ T1512]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   70.227750][ T1512]  ? hook_file_ioctl+0x1ef/0x590
[   70.227764][ T1512]  ? __cfi_vfs_write+0x10/0x10
[   70.227779][ T1512]  ? __cfi_hook_file_ioctl+0x10/0x10
[   70.227793][ T1512]  ? __kasan_check_write+0x18/0x20
[   70.227807][ T1512]  ? mutex_unlock+0x90/0x240
[   70.227819][ T1512]  ? __cfi_mutex_unlock+0x10/0x10
[   70.227833][ T1512]  ? __fget_files+0x2bc/0x330
[   70.227845][ T1512]  ? bpf_lsm_file_ioctl+0xd/0x20
[   70.227857][ T1512]  ? security_file_ioctl+0x3e/0x110
[   70.227873][ T1512]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   70.227884][ T1512]  __se_sys_ioctl+0x126/0x1b0
[   70.227895][ T1512]  __x64_sys_ioctl+0x7f/0xa0
[   70.227906][ T1512]  x64_sys_call+0x1878/0x2ee0
[   70.227918][ T1512]  do_syscall_64+0x57/0xf0
[   70.227929][ T1512]  ? clear_bhb_loop+0x50/0xa0
[   70.227944][ T1512]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   70.227959][ T1512] RIP: 0033:0x7fdb82fa94d9
[   70.227969][ T1512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.227979][ T1512] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.227991][ T1512] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   70.227999][ T1512] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   70.228006][ T1512] RBP: 00007fdb83e57090 R08: 0000000000000000 R09: 0000000000000000
[   70.228014][ T1512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.228021][ T1512] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   70.228030][ T1512]  </TASK>
[   70.228056][ T1512] syz.0.425: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[   71.341502][   T36] audit: type=1400 audit(1794505574.380:461): avc:  denied  { write } for  pid=1516 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   71.412047][ T1529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.431'.
[   71.490882][ T1512] ,cpuset=syz0,mems_allowed=0
[   71.518143][ T1512] CPU: 0 UID: 0 PID: 1512 Comm: syz.0.425 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   71.518165][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   71.518172][ T1512] Call Trace:
[   71.518176][ T1512]  <TASK>
[   71.518181][ T1512]  __dump_stack+0x21/0x30
[   71.518198][ T1512]  dump_stack_lvl+0x140/0x1c0
[   71.518208][ T1512]  ? __cfi_dump_stack_lvl+0x10/0x10
[   71.518218][ T1512]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   71.518231][ T1512]  dump_stack+0x19/0x20
[   71.518241][ T1512]  warn_alloc+0x1e7/0x2c0
[   71.518254][ T1512]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   71.518269][ T1512]  ? __cfi_warn_alloc+0x10/0x10
[   71.518281][ T1512]  ? __get_vm_area_node+0x211/0x390
[   71.518295][ T1512]  ? __get_vm_area_node+0x211/0x390
[   71.518309][ T1512]  __vmalloc_node_range_noprof+0x365/0x1300
[   71.518325][ T1512]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   71.518339][ T1512]  ? kasan_save_alloc_info+0x3a/0x50
[   71.518354][ T1512]  ? __kasan_slab_alloc+0x73/0x90
[   71.518365][ T1512]  ? arch_dup_task_struct+0x5b/0xe0
[   71.518385][ T1512]  ? __asan_memcpy+0x5a/0x80
[   71.518399][ T1512]  dup_task_struct+0x5d6/0xd80
[   71.518414][ T1512]  ? copy_process+0x579/0x33a0
[   71.518428][ T1512]  ? _raw_spin_lock_irq+0x93/0x120
[   71.518439][ T1512]  ? copy_process+0x33a0/0x33a0
[   71.518453][ T1512]  ? __kasan_check_write+0x18/0x20
[   71.518468][ T1512]  copy_process+0x579/0x33a0
[   71.518483][ T1512]  ? kasan_save_alloc_info+0x3a/0x50
[   71.518497][ T1512]  ? __cfi_copy_process+0x10/0x10
[   71.518511][ T1512]  ? __kmalloc_cache_noprof+0x23c/0x470
[   71.518527][ T1512]  ? __kasan_check_write+0x18/0x20
[   71.518542][ T1512]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   71.518557][ T1512]  vhost_task_create+0x1f7/0x3f0
[   71.518570][ T1512]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   71.518584][ T1512]  ? __cfi_vhost_task_create+0x10/0x10
[   71.518597][ T1512]  ? __cfi_vhost_task_fn+0x10/0x10
[   71.518609][ T1512]  ? __kasan_check_write+0x18/0x20
[   71.518623][ T1512]  ? mutex_lock+0x97/0x1d0
[   71.518635][ T1512]  ? __cfi_mutex_lock+0x10/0x10
[   71.518648][ T1512]  ? kernel_text_address+0xa9/0xe0
[   71.518664][ T1512]  kvm_mmu_post_init_vm+0x161/0x300
[   71.518674][ T1512]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   71.518690][ T1512]  ? _parse_integer_limit+0x195/0x1e0
[   71.518706][ T1512]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   71.518721][ T1512]  ? kstrtoull+0x13b/0x1e0
[   71.518735][ T1512]  ? kstrtouint+0x78/0xf0
[   71.518749][ T1512]  ? ioctl_has_perm+0x1bc/0x500
[   71.518758][ T1512]  ? __asan_memcpy+0x5a/0x80
[   71.518773][ T1512]  ? ioctl_has_perm+0x408/0x500
[   71.518782][ T1512]  ? has_cap_mac_admin+0xd0/0xd0
[   71.518792][ T1512]  ? __kasan_check_write+0x18/0x20
[   71.518806][ T1512]  ? mutex_lock_killable+0x97/0x1d0
[   71.518819][ T1512]  ? __cfi_mutex_lock_killable+0x10/0x10
[   71.518832][ T1512]  ? proc_fail_nth_write+0x184/0x220
[   71.518846][ T1512]  kvm_vcpu_ioctl+0xa43/0x1000
[   71.518859][ T1512]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   71.518869][ T1512]  ? hook_file_ioctl+0x1ef/0x590
[   71.518883][ T1512]  ? __cfi_vfs_write+0x10/0x10
[   71.518899][ T1512]  ? __cfi_hook_file_ioctl+0x10/0x10
[   71.518912][ T1512]  ? __kasan_check_write+0x18/0x20
[   71.518926][ T1512]  ? mutex_unlock+0x90/0x240
[   71.518938][ T1512]  ? __cfi_mutex_unlock+0x10/0x10
[   71.518952][ T1512]  ? __fget_files+0x2bc/0x330
[   71.518964][ T1512]  ? bpf_lsm_file_ioctl+0xd/0x20
[   71.518975][ T1512]  ? security_file_ioctl+0x3e/0x110
[   71.518990][ T1512]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   71.519002][ T1512]  __se_sys_ioctl+0x126/0x1b0
[   71.519013][ T1512]  __x64_sys_ioctl+0x7f/0xa0
[   71.519024][ T1512]  x64_sys_call+0x1878/0x2ee0
[   71.519035][ T1512]  do_syscall_64+0x57/0xf0
[   71.519047][ T1512]  ? clear_bhb_loop+0x50/0xa0
[   71.519061][ T1512]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   71.519075][ T1512] RIP: 0033:0x7fdb82fa94d9
[   71.519085][ T1512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.519094][ T1512] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.519107][ T1512] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   71.519116][ T1512] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   71.519123][ T1512] RBP: 00007fdb83e57090 R08: 0000000000000000 R09: 0000000000000000
[   71.519131][ T1512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.519137][ T1512] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   71.519146][ T1512]  </TASK>
[   71.519151][ T1512] Mem-Info:
[   72.083955][ T1544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'.
[   72.181125][   T36] audit: type=1400 audit(1794505575.180:462): avc:  denied  { getopt } for  pid=1543 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   72.415041][ T1550] syzkaller1: entered promiscuous mode
[   72.420525][ T1550] syzkaller1: entered allmulticast mode
[   72.551346][ T1512] active_anon:9729 inactive_anon:31 isolated_anon:0
[   72.551346][ T1512]  active_file:15801 inactive_file:2718 isolated_file:0
[   72.551346][ T1512]  unevictable:0 dirty:170 writeback:0
[   72.551346][ T1512]  slab_reclaimable:4155 slab_unreclaimable:79073
[   72.551346][ T1512]  mapped:25346 shmem:1906 pagetables:859
[   72.551346][ T1512]  sec_pagetables:0 bounce:0
[   72.551346][ T1512]  kernel_misc_reclaimable:0
[   72.551346][ T1512]  free:1515425 free_pcp:1354 free_cma:0
[   72.598525][   T36] audit: type=1400 audit(1794505575.670:463): avc:  denied  { listen } for  pid=1554 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   72.677334][ T1512] Node 0 active_anon:38812kB inactive_anon:124kB active_file:63204kB inactive_file:10872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102164kB dirty:680kB writeback:0kB shmem:7624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4672kB pagetables:3332kB sec_pagetables:0kB all_unreclaimable? no
[   72.759966][ T1512] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:5024kB free_cma:0kB
[   72.820659][ T1512] lowmem_reserve[]: 0 3920 3920
[   72.825696][ T1512] Normal free:3113412kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38708kB inactive_anon:124kB active_file:63204kB inactive_file:10872kB unevictable:0kB writepending:680kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:216kB local_pcp:216kB free_cma:0kB
[   72.891141][ T1512] lowmem_reserve[]: 0 0 0
[   72.901263][ T1512] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB
[   72.953596][ T1512] Normal: 638*4kB (UE) 915*8kB (UME) 1445*16kB (UME) 553*32kB (UME) 392*64kB (UME) 99*128kB (UME) 47*256kB (UME) 12*512kB (UME) 5*1024kB (UME) 3*2048kB (M) 731*4096kB (UM) = 3112064kB
[   72.981183][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   73.021874][ T1512] 20688 total pagecache pages
[   73.026569][ T1512] 267 pages in swap cache
[   73.051248][ T1512] Free swap  = 164kB
[   73.055333][ T1512] Total swap = 124996kB
[   73.074487][ T1512] 2097051 pages RAM
[   73.078343][ T1512] 0 pages HighMem/MovableOnly
[   73.095179][ T1512] 354592 pages reserved
[   73.099355][ T1512] 0 pages cma reserved
[   73.124852][ T1512] Memory allocations:
[   73.128860][ T1512]          0 B        0 init/main.c:1477 func:do_initcalls
[   73.150439][    T9] usb 3-1: config 2 has an invalid interface number: 43 but max is 0
[   73.158614][    T9] usb 3-1: config 2 has no interface number 0
[   73.173974][ T1512]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   73.184043][    T9] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[   73.211138][ T1512]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   73.228896][    T9] usb 3-1: config 2 interface 43 altsetting 13 has an endpoint descriptor with address 0xA5, changing to 0x85
[   73.250865][ T1512]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   73.281031][    T9] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x85 has invalid maxpacket 8
[   73.291024][ T1512]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   73.298960][ T1512]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   73.317791][    T9] usb 3-1: config 2 interface 43 has no altsetting 0
[   73.351906][ T1512]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   73.360359][    T9] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   73.369728][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.389851][ T1512]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   73.398739][   T46] bridge_slave_1: left allmulticast mode
[   73.404474][   T46] bridge_slave_1: left promiscuous mode
[   73.410060][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.421438][    T9] usb 3-1: Product: syz
[   73.425611][    T9] usb 3-1: Manufacturer: syz
[   73.450507][ T1512]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   73.459388][    T9] usb 3-1: SerialNumber: syz
[   73.471399][   T46] 0�X��D��: left promiscuous mode
[   73.480974][ T1512]          0 B        0 init/initramfs.c:101 func:find_link
[   73.489864][ T1558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   73.500536][ T1558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   73.511151][   T46] bridge0: port 1(
00�X��D��) entered disabled state
[   73.580197][ T1572] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[   73.614426][ T1572] audit: out of memory in audit_log_start
[   73.622892][   T46] veth1_macvtap: left promiscuous mode
[   73.643957][   T46] veth0_vlan: left promiscuous mode
[   73.690692][   T36] audit: type=1400 audit(1794505576.760:464): avc:  denied  { mounton } for  pid=1575 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   73.771144][   T36] audit: type=1400 audit(1794505576.840:465): avc:  denied  { create } for  pid=1575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   73.836303][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.853979][ T1575] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.861462][ T1575] bridge_slave_0: entered allmulticast mode
[   73.877749][ T1575] bridge_slave_0: entered promiscuous mode
[   73.888343][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.907731][ T1575] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.917799][ T1575] bridge_slave_1: entered allmulticast mode
[   73.923750][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   73.942045][ T1575] bridge_slave_1: entered promiscuous mode
[   74.023845][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.030887][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.038153][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.045173][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.101779][   T10] usb 1-1: Using ep0 maxpacket: 32
[   74.113365][   T10] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   74.124809][   T10] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[   74.153839][   T10] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[   74.177473][ T1575] veth0_vlan: entered promiscuous mode
[   74.194736][ T1575] veth1_macvtap: entered promiscuous mode
[   74.201587][   T10] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   74.220781][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.243289][   T10] usb 1-1: Product: syz
[   74.247464][   T10] usb 1-1: Manufacturer: ⟸煟䅨㟱銕끩カ냚ⱓ軯牚䴩⭹
[   74.268416][    T9] ums-usbat 3-1:2.43: USB Mass Storage device detected
[   74.281385][   T36] audit: type=1400 audit(1794505577.340:466): avc:  denied  { mount } for  pid=1575 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   74.333270][   T10] usb 1-1: SerialNumber: syz
[   74.339669][ T1584] syzkaller1: entered promiscuous mode
[   74.345542][    T9] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1
[   74.362888][ T1574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   74.374525][ T1584] syzkaller1: entered allmulticast mode
[   74.380450][ T1574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   74.391132][    T9] ums-usbat 3-1:2.43: probe with driver ums-usbat failed with error -5
[   74.401346][   T36] audit: type=1400 audit(1794505577.340:467): avc:  denied  { mounton } for  pid=1575 comm="syz-executor" path="/root/syzkaller.xvNbOE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   74.443205][    T9] usb 3-1: USB disconnect, device number 16
[   75.041874][ T1574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.064155][ T1574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.077251][   T36] audit: type=1400 audit(1794505578.150:468): avc:  denied  { create } for  pid=1590 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   75.301729][   T10] usb 1-1: MIDIStreaming interface descriptor not found
[   75.414881][ T1605] overlay: ./file0 is not a directory
[   75.427241][ T1605] incfs: Error accessing: ./file0.
[   75.437877][ T1605] incfs: mount failed -20
[   75.478574][ T1605] pic_ioport_write: 23 callbacks suppressed
[   75.478591][ T1605] kvm: pic: level sensitive irq not supported
[   75.491612][ T1605] pic_ioport_write: 28 callbacks suppressed
[   75.491627][ T1605] kvm: pic: single mode not supported
[   76.151096][  T384] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   76.218849][ T1612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.241963][ T1612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.346057][  T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.367187][  T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.409318][  T384] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.432987][ T1617] netlink: 'syz.2.458': attribute type 12 has an invalid length.
[   76.441982][  T384] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00
[   76.467230][  T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.483301][ T1619] syzkaller1: entered promiscuous mode
[   76.493853][  T384] usb 2-1: config 0 descriptor??
[   76.502602][ T1619] syzkaller1: entered allmulticast mode
[   76.624110][ T1622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.641248][ T1622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.929369][  T384] usbhid 2-1:0.0: can't add hid device: -71
[   76.936930][  T384] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   76.951441][  T384] usb 2-1: USB disconnect, device number 15
[   77.116258][ T1626] kvm: pic: single mode not supported
[   77.391109][  T384] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   77.562041][  T384] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 140, changing to 11
[   77.578981][  T384] usb 3-1: config 0 interface 0 has no altsetting 0
[   77.600337][  T384] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   77.628843][  T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.641242][ T1639] syzkaller1: entered promiscuous mode
[   77.653277][ T1639] syzkaller1: entered allmulticast mode
[   77.661489][  T384] usb 3-1: config 0 descriptor??
[   77.684517][   T10] usb 1-1: USB disconnect, device number 12
[   77.875587][  T384] usb 3-1: string descriptor 0 read error: -71
[   77.883541][  T384] usbhid 3-1:0.0: can't add hid device: -22
[   77.889465][  T384] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[   77.921728][  T384] usb 3-1: USB disconnect, device number 17
[   77.961128][    T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[   78.031144][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   78.122029][    T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   78.141106][    T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.161183][    T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   78.174044][   T10] usb 1-1: device descriptor read/64, error -71
[   78.190453][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[   78.207244][    T9] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[   78.221096][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.242543][    T9] usb 2-1: config 0 descriptor??
[   78.421254][   T10] usb 1-1: device descriptor read/64, error -71
[   78.650209][    T9] input: HID 13ec:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:13EC:0006.0006/input/input25
[   78.663473][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   78.691871][    T9] zydacron 0003:13EC:0006.0006: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0
[   78.811103][   T10] usb 1-1: device descriptor read/64, error -71
[   79.051099][   T10] usb 1-1: device descriptor read/64, error -71
[   79.161158][   T10] usb usb1-port1: attempt power cycle
[   79.501101][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   79.532253][   T10] usb 1-1: device descriptor read/8, error -71
[   79.662005][   T10] usb 1-1: device descriptor read/8, error -71
[   79.901092][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   79.931981][   T10] usb 1-1: device descriptor read/8, error -71
[   80.061990][   T10] usb 1-1: device descriptor read/8, error -71
[   80.171201][   T10] usb usb1-port1: unable to enumerate USB device
[   80.306403][ T1661] FAULT_INJECTION: forcing a failure.
[   80.306403][ T1661] name failslab, interval 1, probability 0, space 0, times 0
[   80.339329][ T1661] CPU: 0 UID: 0 PID: 1661 Comm: syz.1.476 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   80.339352][ T1661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   80.339360][ T1661] Call Trace:
[   80.339365][ T1661]  <TASK>
[   80.339370][ T1661]  __dump_stack+0x21/0x30
[   80.339385][ T1661]  dump_stack_lvl+0x140/0x1c0
[   80.339396][ T1661]  ? __cfi_dump_stack_lvl+0x10/0x10
[   80.339407][ T1661]  dump_stack+0x19/0x20
[   80.339416][ T1661]  should_fail_ex+0x3c2/0x510
[   80.339427][ T1661]  should_failslab+0xac/0x100
[   80.339439][ T1661]  kmem_cache_alloc_node_noprof+0x45/0x420
[   80.339455][ T1661]  ? dup_task_struct+0xc1/0xd80
[   80.339470][ T1661]  ? kasan_save_alloc_info+0x3a/0x50
[   80.339484][ T1661]  ? __kasan_kmalloc+0x96/0xb0
[   80.339495][ T1661]  ? __kmalloc_cache_noprof+0x23c/0x470
[   80.339510][ T1661]  dup_task_struct+0xc1/0xd80
[   80.339531][ T1661]  ? __kasan_check_write+0x18/0x20
[   80.339546][ T1661]  ? _raw_spin_lock_irq+0x93/0x120
[   80.339558][ T1661]  ? copy_process+0x33a0/0x33a0
[   80.339571][ T1661]  ? __kasan_check_write+0x18/0x20
[   80.339586][ T1661]  copy_process+0x579/0x33a0
[   80.339601][ T1661]  ? kasan_save_alloc_info+0x3a/0x50
[   80.339615][ T1661]  ? __cfi_copy_process+0x10/0x10
[   80.339629][ T1661]  ? __kmalloc_cache_noprof+0x23c/0x470
[   80.339644][ T1661]  ? __kasan_check_write+0x18/0x20
[   80.339658][ T1661]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   80.339673][ T1661]  vhost_task_create+0x1f7/0x3f0
[   80.339686][ T1661]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   80.339700][ T1661]  ? __cfi_vhost_task_create+0x10/0x10
[   80.339713][ T1661]  ? __cfi_vhost_task_fn+0x10/0x10
[   80.339725][ T1661]  ? __kasan_check_write+0x18/0x20
[   80.339739][ T1661]  ? mutex_lock+0x97/0x1d0
[   80.339753][ T1661]  ? __cfi_mutex_lock+0x10/0x10
[   80.339765][ T1661]  ? kernel_text_address+0xa9/0xe0
[   80.339782][ T1661]  kvm_mmu_post_init_vm+0x161/0x300
[   80.339792][ T1661]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   80.339808][ T1661]  ? _parse_integer_limit+0x195/0x1e0
[   80.339824][ T1661]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   80.339839][ T1661]  ? kstrtoull+0x13b/0x1e0
[   80.339853][ T1661]  ? kstrtouint+0x78/0xf0
[   80.339867][ T1661]  ? ioctl_has_perm+0x1bc/0x500
[   80.339877][ T1661]  ? __asan_memcpy+0x5a/0x80
[   80.339891][ T1661]  ? ioctl_has_perm+0x408/0x500
[   80.339900][ T1661]  ? has_cap_mac_admin+0xd0/0xd0
[   80.339910][ T1661]  ? __kasan_check_write+0x18/0x20
[   80.339924][ T1661]  ? mutex_lock_killable+0x97/0x1d0
[   80.339937][ T1661]  ? __cfi_mutex_lock_killable+0x10/0x10
[   80.339950][ T1661]  ? proc_fail_nth_write+0x184/0x220
[   80.339964][ T1661]  kvm_vcpu_ioctl+0xa43/0x1000
[   80.339976][ T1661]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   80.339987][ T1661]  ? hook_file_ioctl+0x1ef/0x590
[   80.340001][ T1661]  ? __cfi_vfs_write+0x10/0x10
[   80.340016][ T1661]  ? __cfi_hook_file_ioctl+0x10/0x10
[   80.340029][ T1661]  ? __kasan_check_write+0x18/0x20
[   80.340043][ T1661]  ? mutex_unlock+0x90/0x240
[   80.340056][ T1661]  ? __cfi_mutex_unlock+0x10/0x10
[   80.340069][ T1661]  ? __fget_files+0x2bc/0x330
[   80.340080][ T1661]  ? bpf_lsm_file_ioctl+0xd/0x20
[   80.340092][ T1661]  ? security_file_ioctl+0x3e/0x110
[   80.340107][ T1661]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   80.340119][ T1661]  __se_sys_ioctl+0x126/0x1b0
[   80.340130][ T1661]  __x64_sys_ioctl+0x7f/0xa0
[   80.340141][ T1661]  x64_sys_call+0x1878/0x2ee0
[   80.340152][ T1661]  do_syscall_64+0x57/0xf0
[   80.340163][ T1661]  ? clear_bhb_loop+0x50/0xa0
[   80.340178][ T1661]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   80.340195][ T1661] RIP: 0033:0x7f6e581a94d9
[   80.340206][ T1661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.340215][ T1661] RSP: 002b:00007f6e58fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.340228][ T1661] RAX: ffffffffffffffda RBX: 00007f6e58425fa0 RCX: 00007f6e581a94d9
[   80.340236][ T1661] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   80.340244][ T1661] RBP: 00007f6e58fc9090 R08: 0000000000000000 R09: 0000000000000000
[   80.340251][ T1661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.340258][ T1661] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   80.340267][ T1661]  </TASK>
[   81.446890][ T1666] syzkaller1: entered promiscuous mode
[   81.452857][ T1666] syzkaller1: entered allmulticast mode
[   81.506433][   T66] usb 2-1: USB disconnect, device number 16
[   81.563494][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   81.574546][ T1670] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[   81.591515][ T1670] FAULT_INJECTION: forcing a failure.
[   81.591515][ T1670] name failslab, interval 1, probability 0, space 0, times 0
[   81.621148][ T1670] CPU: 0 UID: 0 PID: 1670 Comm: syz.0.480 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   81.621172][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   81.621181][ T1670] Call Trace:
[   81.621185][ T1670]  <TASK>
[   81.621191][ T1670]  __dump_stack+0x21/0x30
[   81.621206][ T1670]  dump_stack_lvl+0x140/0x1c0
[   81.621218][ T1670]  ? __cfi_dump_stack_lvl+0x10/0x10
[   81.621229][ T1670]  dump_stack+0x19/0x20
[   81.621241][ T1670]  should_fail_ex+0x3c2/0x510
[   81.621254][ T1670]  ? security_prepare_creds+0x66/0x260
[   81.621267][ T1670]  should_failslab+0xac/0x100
[   81.621279][ T1670]  __kmalloc_noprof+0x69/0x510
[   81.621295][ T1670]  ? kasan_save_alloc_info+0x3a/0x50
[   81.621311][ T1670]  ? security_prepare_creds+0x66/0x260
[   81.621321][ T1670]  ? __kasan_slab_alloc+0x73/0x90
[   81.621333][ T1670]  security_prepare_creds+0x66/0x260
[   81.621343][ T1670]  prepare_creds+0x46d/0x6b0
[   81.621357][ T1670]  lookup_user_key+0x20d/0x1230
[   81.621371][ T1670]  ? __cfi_lookup_user_key+0x10/0x10
[   81.621384][ T1670]  ? __cfi_lookup_user_key_possessed+0x10/0x10
[   81.621397][ T1670]  ? memdup_user+0xb1/0x170
[   81.621410][ T1670]  ? strndup_user+0x40/0xd0
[   81.621427][ T1670]  __se_sys_add_key+0x317/0x4b0
[   81.621437][ T1670]  ? __x64_sys_add_key+0xf0/0xf0
[   81.621448][ T1670]  ? __kasan_check_write+0x18/0x20
[   81.621463][ T1670]  ? fpregs_restore_userregs+0x11c/0x260
[   81.621478][ T1670]  __x64_sys_add_key+0xc3/0xf0
[   81.621488][ T1670]  x64_sys_call+0x195f/0x2ee0
[   81.621500][ T1670]  do_syscall_64+0x57/0xf0
[   81.621512][ T1670]  ? clear_bhb_loop+0x50/0xa0
[   81.621527][ T1670]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   81.621541][ T1670] RIP: 0033:0x7fdb82fa94d9
[   81.621552][ T1670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.621562][ T1670] RSP: 002b:00007fdb83e57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   81.621575][ T1670] RAX: ffffffffffffffda RBX: 00007fdb83225fa0 RCX: 00007fdb82fa94d9
[   81.621584][ T1670] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140
[   81.621591][ T1670] RBP: 00007fdb8303804e R08: ffffffffffffffff R09: 0000000000000000
[   81.621599][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.621606][ T1670] R13: 00007fdb83226038 R14: 00007fdb83225fa0 R15: 00007ffd0c029ba8
[   81.621616][ T1670]  </TASK>
[   81.887496][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   81.887507][   T36] audit: type=1400 audit(1794505584.960:470): avc:  denied  { map } for  pid=1671 comm="syz.0.481" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   81.930294][ T1676] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[   81.939513][ T1676] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[   81.956879][ T1678] FAULT_INJECTION: forcing a failure.
[   81.956879][ T1678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.970016][ T1678] CPU: 0 UID: 0 PID: 1678 Comm: syz.1.484 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   81.970037][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   81.970045][ T1678] Call Trace:
[   81.970049][ T1678]  <TASK>
[   81.970055][ T1678]  __dump_stack+0x21/0x30
[   81.970070][ T1678]  dump_stack_lvl+0x140/0x1c0
[   81.970081][ T1678]  ? __cfi_dump_stack_lvl+0x10/0x10
[   81.970091][ T1678]  ? check_stack_object+0x138/0x150
[   81.970108][ T1678]  dump_stack+0x19/0x20
[   81.970117][ T1678]  should_fail_ex+0x3c2/0x510
[   81.970128][ T1678]  should_fail+0xf/0x20
[   81.970137][ T1678]  should_fail_usercopy+0x1e/0x30
[   81.970148][ T1678]  _copy_to_user+0x24/0xa0
[   81.970161][ T1678]  simple_read_from_buffer+0xed/0x160
[   81.970175][ T1678]  proc_fail_nth_read+0x1aa/0x220
[   81.970189][ T1678]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   81.970202][ T1678]  ? bpf_lsm_file_permission+0xd/0x20
[   81.970215][ T1678]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   81.970228][ T1678]  vfs_read+0x28b/0xc70
[   81.970243][ T1678]  ? __cfi_vfs_read+0x10/0x10
[   81.970257][ T1678]  ? __kasan_check_write+0x18/0x20
[   81.970273][ T1678]  ? mutex_lock+0x97/0x1d0
[   81.970286][ T1678]  ? __cfi_mutex_lock+0x10/0x10
[   81.970300][ T1678]  ksys_read+0x145/0x260
[   81.970309][ T1678]  ? __cfi_ksys_read+0x10/0x10
[   81.970319][ T1678]  ? __kasan_check_read+0x15/0x20
[   81.970333][ T1678]  __x64_sys_read+0x7f/0x90
[   81.970342][ T1678]  x64_sys_call+0x2638/0x2ee0
[   81.970353][ T1678]  do_syscall_64+0x57/0xf0
[   81.970364][ T1678]  ? clear_bhb_loop+0x50/0xa0
[   81.970391][ T1678]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   81.970405][ T1678] RIP: 0033:0x7f6e58169d0e
[   81.970415][ T1678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   81.970424][ T1678] RSP: 002b:00007f6e58fc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   81.970437][ T1678] RAX: ffffffffffffffda RBX: 00007f6e58fc96c0 RCX: 00007f6e58169d0e
[   81.970445][ T1678] RDX: 000000000000000f RSI: 00007f6e58fc90a0 RDI: 0000000000000006
[   81.970453][ T1678] RBP: 00007f6e58fc9090 R08: 0000000000000000 R09: 0000000000000000
[   81.970465][ T1678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.970472][ T1678] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   81.970481][ T1678]  </TASK>
[   82.204064][   T10] usb 3-1: device descriptor read/64, error -71
[   82.210957][   T36] audit: type=1400 audit(1794505585.020:471): avc:  denied  { setopt } for  pid=1675 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   82.231264][   T36] audit: type=1400 audit(1794505585.030:472): avc:  denied  { write } for  pid=1677 comm="syz.1.484" name="icmp6" dev="proc" ino=4026532834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   82.617016][ T1685] syzkaller1: entered promiscuous mode
[   82.622715][   T10] usb 3-1: device descriptor read/64, error -71
[   82.639141][ T1685] syzkaller1: entered allmulticast mode
[   82.716160][ T1689] FAULT_INJECTION: forcing a failure.
[   82.716160][ T1689] name failslab, interval 1, probability 0, space 0, times 0
[   82.739148][ T1689] CPU: 0 UID: 0 PID: 1689 Comm: syz.1.489 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   82.739170][ T1689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   82.739178][ T1689] Call Trace:
[   82.739182][ T1689]  <TASK>
[   82.739187][ T1689]  __dump_stack+0x21/0x30
[   82.739203][ T1689]  dump_stack_lvl+0x140/0x1c0
[   82.739214][ T1689]  ? __cfi_dump_stack_lvl+0x10/0x10
[   82.739226][ T1689]  dump_stack+0x19/0x20
[   82.739236][ T1689]  should_fail_ex+0x3c2/0x510
[   82.739247][ T1689]  should_failslab+0xac/0x100
[   82.739259][ T1689]  kmem_cache_alloc_bulk_noprof+0x4c/0x480
[   82.739271][ T1689]  ? pcpu_block_update_hint_alloc+0x8a0/0xc50
[   82.739284][ T1689]  ? mas_dup_build+0x562/0x1ac0
[   82.739301][ T1689]  mas_dup_build+0xb02/0x1ac0
[   82.739317][ T1689]  __mt_dup+0x16f/0x290
[   82.739331][ T1689]  ? __cfi___mt_dup+0x10/0x10
[   82.739347][ T1689]  ? __kasan_check_write+0x18/0x20
[   82.739362][ T1689]  copy_mm+0x716/0x1da0
[   82.739377][ T1689]  ? copy_signal+0x6c0/0x6c0
[   82.739391][ T1689]  ? _raw_spin_lock+0x92/0x120
[   82.739403][ T1689]  ? __asan_memset+0x39/0x50
[   82.739417][ T1689]  ? __init_rwsem+0x110/0x1f0
[   82.739430][ T1689]  ? copy_signal+0x4ef/0x6c0
[   82.739444][ T1689]  copy_process+0x12d1/0x33a0
[   82.739459][ T1689]  ? __cfi_copy_process+0x10/0x10
[   82.739474][ T1689]  kernel_clone+0x233/0x810
[   82.739489][ T1689]  ? __cfi_kernel_clone+0x10/0x10
[   82.739503][ T1689]  ? do_futex+0x32a/0x510
[   82.739516][ T1689]  __x64_sys_clone+0x1b7/0x230
[   82.739530][ T1689]  ? __cfi___x64_sys_clone+0x10/0x10
[   82.739558][ T1689]  ? __kasan_check_write+0x18/0x20
[   82.739574][ T1689]  ? fpregs_restore_userregs+0x11c/0x260
[   82.739590][ T1689]  ? switch_fpu_return+0x12/0x20
[   82.739604][ T1689]  x64_sys_call+0x2b3c/0x2ee0
[   82.739616][ T1689]  do_syscall_64+0x57/0xf0
[   82.739628][ T1689]  ? clear_bhb_loop+0x50/0xa0
[   82.739643][ T1689]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   82.739657][ T1689] RIP: 0033:0x7f6e581a94d9
[   82.739667][ T1689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.739677][ T1689] RSP: 002b:00007f6e58fc8fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   82.739690][ T1689] RAX: ffffffffffffffda RBX: 00007f6e58425fa0 RCX: 00007f6e581a94d9
[   82.739698][ T1689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000800091
[   82.739706][ T1689] RBP: 00007f6e5823804e R08: 0000000000000000 R09: 0000000000000000
[   82.739713][ T1689] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   82.739720][ T1689] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   82.739729][ T1689]  </TASK>
[   83.391151][  T384] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   83.511977][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   83.554501][  T310] bridge_slave_1: left allmulticast mode
[   83.560152][  T310] bridge_slave_1: left promiscuous mode
[   83.571202][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.581125][  T384] usb 1-1: device descriptor read/64, error -71
[   83.591364][  T310] bridge_slave_0: left allmulticast mode
[   83.597004][  T310] bridge_slave_0: left promiscuous mode
[   83.620816][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.660605][ T1697] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   83.683877][  T310] veth1_macvtap: left promiscuous mode
[   83.689424][  T310] veth0_vlan: left promiscuous mode
[   83.695201][ T1697] rust_binder: Read failure Err(EFAULT) in pid:59
[   83.711346][ T1697] FAULT_INJECTION: forcing a failure.
[   83.711346][ T1697] name failslab, interval 1, probability 0, space 0, times 0
[   83.741173][ T1697] CPU: 0 UID: 0 PID: 1697 Comm: syz.1.493 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   83.741197][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   83.741205][ T1697] Call Trace:
[   83.741210][ T1697]  <TASK>
[   83.741216][ T1697]  __dump_stack+0x21/0x30
[   83.741231][ T1697]  dump_stack_lvl+0x140/0x1c0
[   83.741241][ T1697]  ? __cfi_dump_stack_lvl+0x10/0x10
[   83.741252][ T1697]  ? __asan_memcpy+0x5a/0x80
[   83.741268][ T1697]  dump_stack+0x19/0x20
[   83.741277][ T1697]  should_fail_ex+0x3c2/0x510
[   83.741288][ T1697]  should_failslab+0xac/0x100
[   83.741300][ T1697]  __kmalloc_node_track_caller_noprof+0x65/0x4f0
[   83.741316][ T1697]  ? _RNvMs0_CswPamI0U300_11rust_binderINtB5_7DTRWrapNtB5_11DeliverCodeE11arc_try_newB5_+0x56/0x230
[   83.741337][ T1697]  krealloc_noprof+0x8d/0x130
[   83.741356][ T1697]  _RNvMs0_CswPamI0U300_11rust_binderINtB5_7DTRWrapNtB5_11DeliverCodeE11arc_try_newB5_+0x56/0x230
[   83.741371][ T1697]  ? bpf_lsm_binder_transaction+0xd/0x20
[   83.741386][ T1697]  _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread11transaction+0x2acd/0x6f30
[   83.741402][ T1697]  ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x10/0x10
[   83.741422][ T1697]  ? _raw_spin_lock+0x92/0x120
[   83.741434][ T1697]  ? __cfi__raw_spin_lock+0x10/0x10
[   83.741445][ T1697]  ? _RNvMs3_NtCswPamI0U300_11rust_binder4nodeNtB5_7NodeRef5clone+0x3ec/0x7a0
[   83.741461][ T1697]  ? __cfi__RNvMs3_NtCswPamI0U300_11rust_binder4nodeNtB5_7NodeRef5clone+0x10/0x10
[   83.741476][ T1697]  ? __cfi__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10
[   83.741490][ T1697]  ? __kasan_check_write+0x18/0x20
[   83.741504][ T1697]  ? mutex_unlock+0x90/0x240
[   83.741517][ T1697]  ? __cfi_mutex_unlock+0x10/0x10
[   83.741530][ T1697]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process10update_ref+0x200/0x31c0
[   83.741546][ T1697]  ? __asan_memcpy+0x5a/0x80
[   83.741561][ T1697]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process10update_ref+0x6fc/0x31c0
[   83.741578][ T1697]  ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10
[   83.741597][ T1697]  ? __cfi__raw_spin_lock+0x10/0x10
[   83.741608][ T1697]  ? __kasan_check_write+0x18/0x20
[   83.741622][ T1697]  _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0xfc2/0xba30
[   83.741638][ T1697]  ? is_bpf_text_address+0x17b/0x1a0
[   83.741651][ T1697]  ? kernel_text_address+0xa9/0xe0
[   83.741667][ T1697]  ? __kernel_text_address+0x11/0x40
[   83.741682][ T1697]  ? unwind_get_return_address+0x51/0x90
[   83.741697][ T1697]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   83.741710][ T1697]  ? kasan_save_stack+0x4d/0x60
[   83.741720][ T1697]  ? kasan_save_stack+0x3e/0x60
[   83.741730][ T1697]  ? __kasan_record_aux_stack+0xb2/0xd0
[   83.741743][ T1697]  ? kasan_record_aux_stack_noalloc+0xf/0x20
[   83.741757][ T1697]  ? __call_rcu_common+0xd5/0x710
[   83.741771][ T1697]  ? call_rcu+0x14/0x20
[   83.741785][ T1697]  ? mas_wr_store_entry+0x22c5/0x3120
[   83.741798][ T1697]  ? mas_store_prealloc+0xc25/0x1250
[   83.741812][ T1697]  ? vma_complete+0x559/0xc50
[   83.741821][ T1697]  ? __split_vma+0xa6d/0xc10
[   83.741831][ T1697]  ? __kasan_check_write+0x18/0x20
[   83.741845][ T1697]  ? _raw_spin_trylock+0xb5/0x140
[   83.741856][ T1697]  ? __cfi__raw_spin_trylock+0x10/0x10
[   83.741866][ T1697]  ? __cfi__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x10/0x10
[   83.741880][ T1697]  ? _raw_spin_unlock+0x45/0x60
[   83.741891][ T1697]  ? call_rcu_nocb+0x694/0xc60
[   83.741903][ T1697]  ? swake_up_one_online_ipi+0x30/0x30
[   83.741916][ T1697]  ? mas_leaf_max_gap+0x472/0x630
[   83.741927][ T1697]  ? mas_parent_type+0x9b/0x130
[   83.741936][ T1697]  ? mas_update_gap+0x1f5/0x9c0
[   83.741945][ T1697]  ? mas_wr_store_entry+0x1bfc/0x3120
[   83.741959][ T1697]  ? __asan_set_shadow_00+0x12/0x20
[   83.741972][ T1697]  ? mas_wr_store_entry+0x2559/0x3120
[   83.741988][ T1697]  ? is_bpf_text_address+0x17b/0x1a0
[   83.742001][ T1697]  ? kernel_text_address+0xa9/0xe0
[   83.742016][ T1697]  ? __kernel_text_address+0x11/0x40
[   83.742030][ T1697]  ? unwind_get_return_address+0x51/0x90
[   83.742044][ T1697]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   83.742054][ T1697]  ? arch_stack_walk+0x10a/0x170
[   83.742069][ T1697]  ? is_bpf_text_address+0x17b/0x1a0
[   83.742081][ T1697]  ? kernel_text_address+0xa9/0xe0
[   83.742096][ T1697]  ? __kernel_text_address+0x11/0x40
[   83.742111][ T1697]  ? unwind_get_return_address+0x51/0x90
[   83.742125][ T1697]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   83.742134][ T1697]  ? arch_stack_walk+0x10a/0x170
[   83.742147][ T1697]  ? stack_trace_save+0xaa/0x100
[   83.742156][ T1697]  ? stack_depot_save_flags+0x38/0x800
[   83.742167][ T1697]  ? kasan_save_track+0x4f/0x80
[   83.742177][ T1697]  ? kasan_save_track+0x3e/0x80
[   83.742187][ T1697]  ? kasan_save_alloc_info+0x3a/0x50
[   83.742200][ T1697]  ? __kasan_slab_alloc+0x73/0x90
[   83.742210][ T1697]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[   83.742225][ T1697]  ? security_inode_alloc+0x51/0x230
[   83.742237][ T1697]  ? inode_init_always_gfp+0x756/0x9e0
[   83.742248][ T1697]  ? alloc_inode+0xc5/0x270
[   83.742259][ T1697]  ? new_inode+0x25/0x1e0
[   83.742269][ T1697]  ? proc_pid_make_inode+0x25/0x140
[   83.742280][ T1697]  ? proc_pident_instantiate+0x6d/0x2c0
[   83.742292][ T1697]  ? proc_pident_lookup+0x1c7/0x270
[   83.742302][ T1697]  ? proc_tid_base_lookup+0x2f/0x40
[   83.742316][ T1697]  ? path_openat+0x1124/0x35a0
[   83.742327][ T1697]  ? do_filp_open+0x1f2/0x440
[   83.742339][ T1697]  ? do_sys_openat2+0x134/0x1d0
[   83.742357][ T1697]  ? __x64_sys_openat+0x13a/0x170
[   83.742369][ T1697]  ? x64_sys_call+0xe69/0x2ee0
[   83.742380][ T1697]  ? do_syscall_64+0x57/0xf0
[   83.742391][ T1697]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.742407][ T1697]  ? avc_has_perm_noaudit+0x26b/0x360
[   83.742420][ T1697]  ? __asan_memcpy+0x5a/0x80
[   83.742434][ T1697]  ? avc_has_perm_noaudit+0x289/0x360
[   83.742446][ T1697]  ? avc_has_perm+0x155/0x240
[   83.742457][ T1697]  ? __kasan_check_write+0x18/0x20
[   83.742471][ T1697]  ? _raw_spin_lock+0x92/0x120
[   83.742482][ T1697]  ? __cfi__raw_spin_lock+0x10/0x10
[   83.742493][ T1697]  ? _raw_spin_unlock+0x45/0x60
[   83.742503][ T1697]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x1055/0x1ac0
[   83.742518][ T1697]  ? __cfi_selinux_file_open+0x10/0x10
[   83.742529][ T1697]  ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   83.742544][ T1697]  ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x18b6/0x4200
[   83.742563][ T1697]  ? __asan_memcpy+0x5a/0x80
[   83.742577][ T1697]  _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x18fe/0x4200
[   83.742595][ T1697]  ? __asan_set_shadow_00+0x12/0x20
[   83.742607][ T1697]  ? do_vfs_ioctl+0x1824/0x2010
[   83.742619][ T1697]  ? arch_stack_walk+0x10a/0x170
[   83.742630][ T1697]  ? __ia32_compat_sys_ioctl+0x980/0x980
[   83.742641][ T1697]  ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10
[   83.742659][ T1697]  ? _parse_integer+0x2e/0x40
[   83.742675][ T1697]  ? ioctl_has_perm+0x39a/0x500
[   83.742685][ T1697]  ? has_cap_mac_admin+0xd0/0xd0
[   83.742696][ T1697]  ? selinux_file_ioctl+0x732/0x1480
[   83.742711][ T1697]  ? vfs_write+0xbd2/0xfd0
[   83.742725][ T1697]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   83.742740][ T1697]  ? hook_file_ioctl+0x1ef/0x590
[   83.742753][ T1697]  ? __cfi_vfs_write+0x10/0x10
[   83.742768][ T1697]  ? __cfi_hook_file_ioctl+0x10/0x10
[   83.742781][ T1697]  ? __kasan_check_write+0x18/0x20
[   83.742795][ T1697]  ? mutex_unlock+0x90/0x240
[   83.742808][ T1697]  ? __cfi_mutex_unlock+0x10/0x10
[   83.742821][ T1697]  ? __fget_files+0x2bc/0x330
[   83.742833][ T1697]  ? bpf_lsm_file_ioctl+0xd/0x20
[   83.742844][ T1697]  ? security_file_ioctl+0x3e/0x110
[   83.742858][ T1697]  ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10
[   83.742875][ T1697]  __se_sys_ioctl+0x126/0x1b0
[   83.742886][ T1697]  __x64_sys_ioctl+0x7f/0xa0
[   83.742897][ T1697]  x64_sys_call+0x1878/0x2ee0
[   83.742908][ T1697]  do_syscall_64+0x57/0xf0
[   83.742918][ T1697]  ? clear_bhb_loop+0x50/0xa0
[   83.742932][ T1697]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.742945][ T1697] RIP: 0033:0x7f6e581a94d9
[   83.742956][ T1697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.742965][ T1697] RSP: 002b:00007f6e58fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   83.742979][ T1697] RAX: ffffffffffffffda RBX: 00007f6e58425fa0 RCX: 00007f6e581a94d9
[   83.742987][ T1697] RDX: 0000200000001a00 RSI: 00000000c0306201 RDI: 0000000000000003
[   83.742995][ T1697] RBP: 00007f6e58fc9090 R08: 0000000000000000 R09: 0000000000000000
[   83.743003][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.743010][ T1697] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   83.743019][ T1697]  </TASK>
[   83.743032][ T1697] rust_binder: 1696:1697 transaction call to 1696:0 failed ENOMEM, code 3 size 88-24 line thread.rs:1517
[   84.636299][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.643583][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.650630][ T1693] bridge_slave_0: entered allmulticast mode
[   84.657152][ T1693] bridge_slave_0: entered promiscuous mode
[   84.664248][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.671673][   T66] rust_binder: 1696: undelivered TRANSACTION_ERROR: 29201
[   84.681191][  T384] usb 1-1: device descriptor read/64, error -71
[   84.687596][   T10] usb 3-1: device descriptor read/64, error -71
[   84.698830][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.706844][ T1693] bridge_slave_1: entered allmulticast mode
[   84.713197][ T1693] bridge_slave_1: entered promiscuous mode
[   84.729878][   T36] audit: type=1400 audit(1794505587.800:473): avc:  denied  { ioctl } for  pid=1703 comm="syz.1.495" path="socket:[21182]" dev="sockfs" ino=21182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   84.775758][ T1706] syzkaller1: entered promiscuous mode
[   84.781396][ T1706] syzkaller1: entered allmulticast mode
[   84.823093][   T36] audit: type=1400 audit(1794505587.890:474): avc:  denied  { ioctl } for  pid=1707 comm="syz.1.497" path="socket:[21239]" dev="sockfs" ino=21239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   84.860169][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.867262][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.877009][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.884071][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.903718][ T1693] veth0_vlan: entered promiscuous mode
[   84.916169][ T1693] veth1_macvtap: entered promiscuous mode
[   84.931572][  T384] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   84.952531][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   84.962702][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   84.976806][   T10] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   84.986141][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.994580][   T10] usb 3-1: Product: syz
[   84.998827][   T10] usb 3-1: Manufacturer: syz
[   85.003872][   T10] usb 3-1: SerialNumber: syz
[   85.051091][   T66] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   85.061325][  T384] usb 1-1: device descriptor read/64, error -71
[   85.201091][   T66] usb 2-1: Using ep0 maxpacket: 8
[   85.207178][   T66] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8
[   85.219868][   T10] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   85.232938][   T66] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[   85.242313][   T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.252992][   T66] usb 2-1: Product: syz
[   85.257223][   T66] usb 2-1: Manufacturer: syz
[   85.262160][   T66] usb 2-1: SerialNumber: syz
[   85.269570][ T1708] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   85.301353][  T384] usb 1-1: device descriptor read/64, error -71
[   85.411242][  T384] usb usb1-port1: attempt power cycle
[   85.417872][   T10] usb 3-1: USB disconnect, device number 19
[   85.427262][   T10] usblp0: removed
[   85.479620][   T66] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   85.493211][   T66] usb 2-1: USB disconnect, device number 17
[   85.632307][ T1714] FAULT_INJECTION: forcing a failure.
[   85.632307][ T1714] name failslab, interval 1, probability 0, space 0, times 0
[   85.645172][ T1714] CPU: 0 UID: 0 PID: 1714 Comm: syz.0.498 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   85.645221][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   85.645229][ T1714] Call Trace:
[   85.645233][ T1714]  <TASK>
[   85.645238][ T1714]  __dump_stack+0x21/0x30
[   85.645255][ T1714]  dump_stack_lvl+0x140/0x1c0
[   85.645265][ T1714]  ? __cfi_dump_stack_lvl+0x10/0x10
[   85.645275][ T1714]  ? __cfi_handle_mm_fault+0x10/0x10
[   85.645288][ T1714]  dump_stack+0x19/0x20
[   85.645297][ T1714]  should_fail_ex+0x3c2/0x510
[   85.645308][ T1714]  should_failslab+0xac/0x100
[   85.645319][ T1714]  kmem_cache_alloc_noprof+0x42/0x410
[   85.645334][ T1714]  ? io_submit_one+0x14e/0x19e0
[   85.645347][ T1714]  io_submit_one+0x14e/0x19e0
[   85.645360][ T1714]  ? lookup_ioctx+0x360/0x360
[   85.645372][ T1714]  ? asm_exc_page_fault+0x2b/0x30
[   85.645388][ T1714]  ? __get_user_4+0x18/0x40
[   85.645403][ T1714]  ? lookup_ioctx+0x206/0x360
[   85.645415][ T1714]  __se_sys_io_submit+0x17f/0x3f0
[   85.645426][ T1714]  ? __x64_sys_io_submit+0xa0/0xa0
[   85.645436][ T1714]  ? ksys_write+0x1f3/0x260
[   85.645451][ T1714]  ? __kasan_check_read+0x15/0x20
[   85.645467][ T1714]  __x64_sys_io_submit+0x7f/0xa0
[   85.645478][ T1714]  x64_sys_call+0x1c95/0x2ee0
[   85.645489][ T1714]  do_syscall_64+0x57/0xf0
[   85.645500][ T1714]  ? clear_bhb_loop+0x50/0xa0
[   85.645514][ T1714]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   85.645528][ T1714] RIP: 0033:0x7fdb82fa94d9
[   85.645539][ T1714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.645549][ T1714] RSP: 002b:00007fdb83e36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   85.645562][ T1714] RAX: ffffffffffffffda RBX: 00007fdb83226090 RCX: 00007fdb82fa94d9
[   85.645571][ T1714] RDX: 0000200000006540 RSI: 0000000000000001 RDI: 00007fdb83e0d000
[   85.645579][ T1714] RBP: 00007fdb83e36090 R08: 0000000000000000 R09: 0000000000000000
[   85.645586][ T1714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.645594][ T1714] R13: 00007fdb83226128 R14: 00007fdb83226090 R15: 00007ffd0c029ba8
[   85.645603][ T1714]  </TASK>
[   86.073642][   T36] audit: type=1326 audit(1794505589.150:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.2.499" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0cf7a94d9 code=0x0
[   86.303780][ T1726] FAULT_INJECTION: forcing a failure.
[   86.303780][ T1726] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   86.317185][ T1726] CPU: 0 UID: 0 PID: 1726 Comm: syz.1.501 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   86.317207][ T1726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   86.317215][ T1726] Call Trace:
[   86.317221][ T1726]  <TASK>
[   86.317226][ T1726]  __dump_stack+0x21/0x30
[   86.317243][ T1726]  dump_stack_lvl+0x140/0x1c0
[   86.317253][ T1726]  ? __cfi_dump_stack_lvl+0x10/0x10
[   86.317264][ T1726]  dump_stack+0x19/0x20
[   86.317274][ T1726]  should_fail_ex+0x3c2/0x510
[   86.317285][ T1726]  should_fail_alloc_page+0xec/0x110
[   86.317297][ T1726]  __alloc_pages_noprof+0x1c0/0x7e0
[   86.317311][ T1726]  ? kernel_text_address+0xa9/0xe0
[   86.317327][ T1726]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   86.317341][ T1726]  ? unwind_get_return_address+0x51/0x90
[   86.317355][ T1726]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   86.317368][ T1726]  get_free_pages_noprof+0x14/0x40
[   86.317381][ T1726]  kasan_populate_vmalloc_pte+0x4c/0x170
[   86.317397][ T1726]  __apply_to_page_range+0x7bf/0xd00
[   86.317409][ T1726]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[   86.317424][ T1726]  ? __x64_sys_ioctl+0x7f/0xa0
[   86.317435][ T1726]  ? apply_to_page_range+0x60/0x60
[   86.317446][ T1726]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[   86.317461][ T1726]  apply_to_page_range+0x3f/0x60
[   86.317471][ T1726]  kasan_populate_vmalloc+0x64/0x80
[   86.317485][ T1726]  alloc_vmap_area+0x1e8e/0x26f0
[   86.317500][ T1726]  ? kasan_save_alloc_info+0x3a/0x50
[   86.317514][ T1726]  ? vm_map_ram+0xdd0/0xdd0
[   86.317526][ T1726]  ? __kmalloc_cache_node_noprof+0x225/0x430
[   86.317542][ T1726]  ? __get_vm_area_node+0x150/0x390
[   86.317555][ T1726]  __get_vm_area_node+0x1f8/0x390
[   86.317569][ T1726]  __vmalloc_node_range_noprof+0x340/0x1300
[   86.317582][ T1726]  ? copy_process+0x579/0x33a0
[   86.317598][ T1726]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   86.317612][ T1726]  ? kasan_save_alloc_info+0x3a/0x50
[   86.317626][ T1726]  ? __kasan_slab_alloc+0x73/0x90
[   86.317637][ T1726]  ? arch_dup_task_struct+0x5b/0xe0
[   86.317648][ T1726]  ? __asan_memcpy+0x5a/0x80
[   86.317662][ T1726]  dup_task_struct+0x5d6/0xd80
[   86.317676][ T1726]  ? copy_process+0x579/0x33a0
[   86.317689][ T1726]  ? _raw_spin_lock_irq+0x93/0x120
[   86.317701][ T1726]  ? copy_process+0x33a0/0x33a0
[   86.317714][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.317729][ T1726]  copy_process+0x579/0x33a0
[   86.317744][ T1726]  ? kasan_save_alloc_info+0x3a/0x50
[   86.317757][ T1726]  ? __cfi_copy_process+0x10/0x10
[   86.317771][ T1726]  ? __kmalloc_cache_noprof+0x23c/0x470
[   86.317786][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.317799][ T1726]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   86.317813][ T1726]  vhost_task_create+0x1f7/0x3f0
[   86.317825][ T1726]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   86.317840][ T1726]  ? __cfi_vhost_task_create+0x10/0x10
[   86.317852][ T1726]  ? __cfi_vhost_task_fn+0x10/0x10
[   86.317864][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.317878][ T1726]  ? mutex_lock+0x97/0x1d0
[   86.317890][ T1726]  ? __cfi_mutex_lock+0x10/0x10
[   86.317903][ T1726]  ? kernel_text_address+0xa9/0xe0
[   86.317918][ T1726]  kvm_mmu_post_init_vm+0x161/0x300
[   86.317929][ T1726]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   86.317944][ T1726]  ? _parse_integer_limit+0x195/0x1e0
[   86.317959][ T1726]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   86.317975][ T1726]  ? kstrtoull+0x13b/0x1e0
[   86.317988][ T1726]  ? kstrtouint+0x78/0xf0
[   86.318002][ T1726]  ? ioctl_has_perm+0x1bc/0x500
[   86.318012][ T1726]  ? __asan_memcpy+0x5a/0x80
[   86.318026][ T1726]  ? ioctl_has_perm+0x408/0x500
[   86.318035][ T1726]  ? has_cap_mac_admin+0xd0/0xd0
[   86.318045][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.318059][ T1726]  ? mutex_lock_killable+0x97/0x1d0
[   86.318072][ T1726]  ? __cfi_mutex_lock_killable+0x10/0x10
[   86.318092][ T1726]  ? proc_fail_nth_write+0x184/0x220
[   86.318106][ T1726]  kvm_vcpu_ioctl+0xa43/0x1000
[   86.318118][ T1726]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   86.318129][ T1726]  ? hook_file_ioctl+0x1ef/0x590
[   86.318143][ T1726]  ? __cfi_vfs_write+0x10/0x10
[   86.318161][ T1726]  ? __cfi_hook_file_ioctl+0x10/0x10
[   86.318174][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.318188][ T1726]  ? mutex_unlock+0x90/0x240
[   86.318201][ T1726]  ? __cfi_mutex_unlock+0x10/0x10
[   86.318214][ T1726]  ? __fget_files+0x2bc/0x330
[   86.318226][ T1726]  ? bpf_lsm_file_ioctl+0xd/0x20
[   86.318238][ T1726]  ? security_file_ioctl+0x3e/0x110
[   86.318253][ T1726]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   86.318264][ T1726]  __se_sys_ioctl+0x126/0x1b0
[   86.318275][ T1726]  __x64_sys_ioctl+0x7f/0xa0
[   86.318286][ T1726]  x64_sys_call+0x1878/0x2ee0
[   86.318297][ T1726]  do_syscall_64+0x57/0xf0
[   86.318308][ T1726]  ? clear_bhb_loop+0x50/0xa0
[   86.318323][ T1726]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   86.318337][ T1726] RIP: 0033:0x7f6e581a94d9
[   86.318348][ T1726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.318358][ T1726] RSP: 002b:00007f6e58fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.318371][ T1726] RAX: ffffffffffffffda RBX: 00007f6e58425fa0 RCX: 00007f6e581a94d9
[   86.318380][ T1726] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   86.318387][ T1726] RBP: 00007f6e58fc9090 R08: 0000000000000000 R09: 0000000000000000
[   86.318395][ T1726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.318402][ T1726] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   86.318411][ T1726]  </TASK>
[   86.318464][ T1726] syz.1.501: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0
[   86.877176][ T1726] CPU: 0 UID: 0 PID: 1726 Comm: syz.1.501 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   86.877194][ T1726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   86.877202][ T1726] Call Trace:
[   86.877206][ T1726]  <TASK>
[   86.877211][ T1726]  __dump_stack+0x21/0x30
[   86.877227][ T1726]  dump_stack_lvl+0x140/0x1c0
[   86.877237][ T1726]  ? __cfi_dump_stack_lvl+0x10/0x10
[   86.877247][ T1726]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   86.877261][ T1726]  dump_stack+0x19/0x20
[   86.877270][ T1726]  warn_alloc+0x1e7/0x2c0
[   86.877284][ T1726]  ? __cfi_warn_alloc+0x10/0x10
[   86.877296][ T1726]  ? __get_vm_area_node+0x211/0x390
[   86.877310][ T1726]  ? __get_vm_area_node+0x211/0x390
[   86.877323][ T1726]  __vmalloc_node_range_noprof+0x365/0x1300
[   86.877339][ T1726]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   86.877353][ T1726]  ? kasan_save_alloc_info+0x3a/0x50
[   86.877368][ T1726]  ? __kasan_slab_alloc+0x73/0x90
[   86.877379][ T1726]  ? arch_dup_task_struct+0x5b/0xe0
[   86.877391][ T1726]  ? __asan_memcpy+0x5a/0x80
[   86.877405][ T1726]  dup_task_struct+0x5d6/0xd80
[   86.877419][ T1726]  ? copy_process+0x579/0x33a0
[   86.877433][ T1726]  ? _raw_spin_lock_irq+0x93/0x120
[   86.877444][ T1726]  ? copy_process+0x33a0/0x33a0
[   86.877458][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.877473][ T1726]  copy_process+0x579/0x33a0
[   86.877488][ T1726]  ? kasan_save_alloc_info+0x3a/0x50
[   86.877502][ T1726]  ? __cfi_copy_process+0x10/0x10
[   86.877515][ T1726]  ? __kmalloc_cache_noprof+0x23c/0x470
[   86.877532][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.877546][ T1726]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   86.877561][ T1726]  vhost_task_create+0x1f7/0x3f0
[   86.877574][ T1726]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   86.877588][ T1726]  ? __cfi_vhost_task_create+0x10/0x10
[   86.877601][ T1726]  ? __cfi_vhost_task_fn+0x10/0x10
[   86.877613][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.877627][ T1726]  ? mutex_lock+0x97/0x1d0
[   86.877640][ T1726]  ? __cfi_mutex_lock+0x10/0x10
[   86.877652][ T1726]  ? kernel_text_address+0xa9/0xe0
[   86.877668][ T1726]  kvm_mmu_post_init_vm+0x161/0x300
[   86.877678][ T1726]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   86.877694][ T1726]  ? _parse_integer_limit+0x195/0x1e0
[   86.877711][ T1726]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   86.877726][ T1726]  ? kstrtoull+0x13b/0x1e0
[   86.877740][ T1726]  ? kstrtouint+0x78/0xf0
[   86.877754][ T1726]  ? ioctl_has_perm+0x1bc/0x500
[   86.877763][ T1726]  ? __asan_memcpy+0x5a/0x80
[   86.877778][ T1726]  ? ioctl_has_perm+0x408/0x500
[   86.877787][ T1726]  ? has_cap_mac_admin+0xd0/0xd0
[   86.877797][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.877811][ T1726]  ? mutex_lock_killable+0x97/0x1d0
[   86.877825][ T1726]  ? __cfi_mutex_lock_killable+0x10/0x10
[   86.877838][ T1726]  ? proc_fail_nth_write+0x184/0x220
[   86.877853][ T1726]  kvm_vcpu_ioctl+0xa43/0x1000
[   86.877865][ T1726]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   86.877876][ T1726]  ? hook_file_ioctl+0x1ef/0x590
[   86.877890][ T1726]  ? __cfi_vfs_write+0x10/0x10
[   86.877905][ T1726]  ? __cfi_hook_file_ioctl+0x10/0x10
[   86.877919][ T1726]  ? __kasan_check_write+0x18/0x20
[   86.877933][ T1726]  ? mutex_unlock+0x90/0x240
[   86.877945][ T1726]  ? __cfi_mutex_unlock+0x10/0x10
[   86.877958][ T1726]  ? __fget_files+0x2bc/0x330
[   86.877970][ T1726]  ? bpf_lsm_file_ioctl+0xd/0x20
[   86.877981][ T1726]  ? security_file_ioctl+0x3e/0x110
[   86.877996][ T1726]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   86.878007][ T1726]  __se_sys_ioctl+0x126/0x1b0
[   86.878019][ T1726]  __x64_sys_ioctl+0x7f/0xa0
[   86.878030][ T1726]  x64_sys_call+0x1878/0x2ee0
[   86.878041][ T1726]  do_syscall_64+0x57/0xf0
[   86.878052][ T1726]  ? clear_bhb_loop+0x50/0xa0
[   86.878067][ T1726]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   86.878081][ T1726] RIP: 0033:0x7f6e581a94d9
[   86.878091][ T1726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.878101][ T1726] RSP: 002b:00007f6e58fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.878113][ T1726] RAX: ffffffffffffffda RBX: 00007f6e58425fa0 RCX: 00007f6e581a94d9
[   86.878121][ T1726] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   86.878129][ T1726] RBP: 00007f6e58fc9090 R08: 0000000000000000 R09: 0000000000000000
[   86.878136][ T1726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.878143][ T1726] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   86.878157][ T1726]  </TASK>
[   86.878162][ T1726] Mem-Info:
[   87.333243][ T1726] active_anon:9668 inactive_anon:31 isolated_anon:0
[   87.333243][ T1726]  active_file:6100 inactive_file:2735 isolated_file:0
[   87.333243][ T1726]  unevictable:0 dirty:49 writeback:0
[   87.333243][ T1726]  slab_reclaimable:3964 slab_unreclaimable:74915
[   87.333243][ T1726]  mapped:24832 shmem:1905 pagetables:863
[   87.333243][ T1726]  sec_pagetables:0 bounce:0
[   87.333243][ T1726]  kernel_misc_reclaimable:0
[   87.333243][ T1726]  free:1529659 free_pcp:1632 free_cma:0
[   87.379186][ T1726] Node 0 active_anon:38672kB inactive_anon:124kB active_file:24400kB inactive_file:10940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99328kB dirty:196kB writeback:0kB shmem:7620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4768kB pagetables:3400kB sec_pagetables:0kB all_unreclaimable? no
[   87.438702][ T1726] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:5024kB free_cma:0kB
[   87.470444][ T1726] lowmem_reserve[]: 0 3920 3920
[   87.476227][ T1726] Normal free:3170944kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38620kB inactive_anon:124kB active_file:24400kB inactive_file:10940kB unevictable:0kB writepending:196kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:344kB local_pcp:344kB free_cma:0kB
[   87.516927][ T1735] syzkaller1: entered promiscuous mode
[   87.522564][ T1726] lowmem_reserve[]: 0 0 0
[   87.526928][ T1735] syzkaller1: entered allmulticast mode
[   87.533125][ T1726] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB
[   87.551575][ T1726] Normal: 114*4kB (UME) 603*8kB (UME) 607*16kB (UME) 614*32kB (UME) 435*64kB (UME) 218*128kB (UME) 91*256kB (UME) 28*512kB (UME) 20*1024kB (UME) 13*2048kB (UM) 731*4096kB (UM) = 3169296kB
[   87.570503][ T1726] 10990 total pagecache pages
[   87.588831][ T1726] 254 pages in swap cache
[   87.597924][ T1726] Free swap  = 65728kB
[   87.609138][ T1726] Total swap = 124996kB
[   87.613664][ T1726] 2097051 pages RAM
[   87.617458][ T1726] 0 pages HighMem/MovableOnly
[   87.635948][ T1726] 354592 pages reserved
[   87.640115][ T1726] 0 pages cma reserved
[   87.655608][ T1726] Memory allocations:
[   87.667151][ T1726]          0 B        0 init/main.c:1477 func:do_initcalls
[   87.683075][ T1726]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   87.691351][ T1726]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   87.699171][ T1726]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   87.707609][ T1726]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   87.716309][ T1726]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   87.738387][ T1726]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   87.748148][ T1726]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   87.756192][ T1726]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   87.764219][ T1726]          0 B        0 init/initramfs.c:101 func:find_link
[   87.827662][   T36] audit: type=1400 audit(1794505590.900:476): avc:  denied  { bind } for  pid=1744 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.850994][   T36] audit: type=1400 audit(1794505590.920:477): avc:  denied  { listen } for  pid=1744 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.874041][   T36] audit: type=1400 audit(1794505590.920:478): avc:  denied  { connect } for  pid=1744 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.078842][ T1755] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[   88.086590][  T384] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[   88.094266][ T1755] netlink: 'syz.4.512': attribute type 32 has an invalid length.
[   88.110133][ T1757] device-mapper: ioctl: Unable to rename non-existent device, syze1 to uuid syze1
[   88.137021][ T1759] veth1_to_bridge: entered allmulticast mode
[   88.143836][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.231137][  T384] usb 2-1: device descriptor read/64, error -71
[   88.314703][   T36] audit: type=1400 audit(1794505591.390:479): avc:  denied  { create } for  pid=1770 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   88.471107][  T384] usb 2-1: device descriptor read/64, error -71
[   88.604321][ T1779] veth1_to_bridge: entered allmulticast mode
[   88.622220][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.711120][  T384] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   88.740965][ T1789] ptp ptp0: new virtual clock ptp1
[   88.748387][ T1789] ptp ptp0: new virtual clock ptp2
[   88.758728][ T1789] ptp ptp0: new virtual clock ptp3
[   88.767344][ T1789] ptp ptp0: new virtual clock ptp4
[   88.772785][ T1789] ptp ptp0: guarantee physical clock free running
[   88.780077][ T1789] ptp ptp0: delete virtual clock ptp4
[   88.788762][ T1789] ptp ptp0: delete virtual clock ptp3
[   88.803281][ T1789] ptp ptp0: delete virtual clock ptp2
[   88.831665][ T1789] ptp ptp0: guarantee physical clock free running
[   88.844324][ T1796] loop4: detected capacity change from 0 to 7
[   88.861105][  T384] usb 2-1: device descriptor read/64, error -71
[   88.867802][ T1796] Buffer I/O error on dev loop4, logical block 0, async page read
[   88.886692][ T1796] Buffer I/O error on dev loop4, logical block 0, async page read
[   88.894738][ T1796]  loop4: unable to read partition table
[   88.900910][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   88.910456][ T1796] loop_reread_partitions: partition scan of loop4 (���������S�j��	���%��`��ր����5) failed (rc=-5)
[   88.922249][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   88.930073][  T363]  loop4: unable to read partition table
[   88.954970][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   88.981454][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.015979][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.041514][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.064855][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.080835][  T363] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.111099][  T384] usb 2-1: device descriptor read/64, error -71
[   89.127595][ T1817] netlink: 'syz.2.537': attribute type 32 has an invalid length.
[   89.201899][ T1819] kvm: pic: single mode not supported
[   89.203279][ T1819] kvm: pic: single mode not supported
[   89.220276][ T1819] kvm: pic: non byte write
[   89.235372][  T384] usb usb2-port1: attempt power cycle
[   89.290614][   T36] audit: type=1400 audit(1794505592.360:480): avc:  denied  { write } for  pid=1823 comm="syz.2.539" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   89.324227][ T1824] rust_binder: 1823:1824 got reply transaction with no transaction stack
[   89.333348][ T1824] rust_binder: 1823:1824 transaction reply to 0:0 failed EINVAL, code 1 size 104-24 line thread.rs:1556
[   89.363114][  T329] rust_binder: 1823: undelivered TRANSACTION_ERROR: 29201
[   89.485308][ T1842] netlink: 'syz.0.546': attribute type 32 has an invalid length.
[   89.572555][ T1845] FAULT_INJECTION: forcing a failure.
[   89.572555][ T1845] name failslab, interval 1, probability 0, space 0, times 0
[   89.591083][ T1845] CPU: 0 UID: 0 PID: 1845 Comm: syz.0.547 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   89.591105][ T1845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   89.591113][ T1845] Call Trace:
[   89.591117][ T1845]  <TASK>
[   89.591121][ T1845]  __dump_stack+0x21/0x30
[   89.591137][ T1845]  dump_stack_lvl+0x140/0x1c0
[   89.591147][ T1845]  ? __cfi_dump_stack_lvl+0x10/0x10
[   89.591157][ T1845]  ? is_bpf_text_address+0x17b/0x1a0
[   89.591171][ T1845]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   89.591184][ T1845]  dump_stack+0x19/0x20
[   89.591193][ T1845]  should_fail_ex+0x3c2/0x510
[   89.591204][ T1845]  should_failslab+0xac/0x100
[   89.591216][ T1845]  __kmalloc_node_noprof+0x69/0x500
[   89.591232][ T1845]  ? __kvmalloc_node_noprof+0x128/0x300
[   89.591246][ T1845]  ? __kasan_check_write+0x18/0x20
[   89.591261][ T1845]  __kvmalloc_node_noprof+0x128/0x300
[   89.591275][ T1845]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[   89.591288][ T1845]  ? xas_start+0x317/0x3e0
[   89.591300][ T1845]  ? __kasan_check_write+0x18/0x20
[   89.591313][ T1845]  ? enqueue_timer+0x1c5/0x4b0
[   89.591325][ T1845]  __kvm_mmu_topup_memory_cache+0x58e/0x7e0
[   89.591338][ T1845]  ? mutex_unlock+0x90/0x240
[   89.591351][ T1845]  kvm_mmu_topup_memory_cache+0x24/0x30
[   89.591362][ T1845]  kvm_mmu_load+0xa1/0x2900
[   89.591377][ T1845]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   89.591388][ T1845]  ? queue_delayed_work_on+0x16f/0x1f0
[   89.591403][ T1845]  ? kvm_apic_has_interrupt+0x77a/0x790
[   89.591419][ T1845]  vcpu_run+0x4d56/0x7810
[   89.591435][ T1845]  ? __schedule+0x16e8/0x2380
[   89.591451][ T1845]  ? signal_pending+0xc0/0xc0
[   89.591466][ T1845]  ? __kasan_check_write+0x18/0x20
[   89.591480][ T1845]  ? xfd_validate_state+0x68/0x140
[   89.591490][ T1845]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   89.591504][ T1845]  ? __kasan_check_write+0x18/0x20
[   89.591523][ T1845]  ? fpregs_mark_activate+0x68/0x160
[   89.591536][ T1845]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   89.591550][ T1845]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   89.591565][ T1845]  ? _parse_integer_limit+0x195/0x1e0
[   89.591580][ T1845]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   89.591595][ T1845]  ? kstrtoull+0x13b/0x1e0
[   89.591609][ T1845]  ? kstrtouint+0x78/0xf0
[   89.591623][ T1845]  ? ioctl_has_perm+0x1bc/0x500
[   89.591632][ T1845]  ? __asan_memcpy+0x5a/0x80
[   89.591646][ T1845]  ? ioctl_has_perm+0x408/0x500
[   89.591656][ T1845]  ? has_cap_mac_admin+0xd0/0xd0
[   89.591665][ T1845]  ? __kasan_check_write+0x18/0x20
[   89.591679][ T1845]  ? mutex_lock_killable+0x97/0x1d0
[   89.591692][ T1845]  ? __cfi_mutex_lock_killable+0x10/0x10
[   89.591706][ T1845]  ? proc_fail_nth_write+0x184/0x220
[   89.591720][ T1845]  kvm_vcpu_ioctl+0xa43/0x1000
[   89.591732][ T1845]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   89.591743][ T1845]  ? hook_file_ioctl+0x1ef/0x590
[   89.591757][ T1845]  ? __cfi_vfs_write+0x10/0x10
[   89.591772][ T1845]  ? __cfi_hook_file_ioctl+0x10/0x10
[   89.591785][ T1845]  ? __kasan_check_write+0x18/0x20
[   89.591799][ T1845]  ? mutex_unlock+0x90/0x240
[   89.591811][ T1845]  ? __cfi_mutex_unlock+0x10/0x10
[   89.591825][ T1845]  ? __fget_files+0x2bc/0x330
[   89.591836][ T1845]  ? bpf_lsm_file_ioctl+0xd/0x20
[   89.591848][ T1845]  ? security_file_ioctl+0x3e/0x110
[   89.591862][ T1845]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   89.591874][ T1845]  __se_sys_ioctl+0x126/0x1b0
[   89.591885][ T1845]  __x64_sys_ioctl+0x7f/0xa0
[   89.591896][ T1845]  x64_sys_call+0x1878/0x2ee0
[   89.591907][ T1845]  do_syscall_64+0x57/0xf0
[   89.591918][ T1845]  ? clear_bhb_loop+0x50/0xa0
[   89.591932][ T1845]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   89.591946][ T1845] RIP: 0033:0x7fdb82fa94d9
[   89.591956][ T1845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.591965][ T1845] RSP: 002b:00007fdb83e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   89.591977][ T1845] RAX: ffffffffffffffda RBX: 00007fdb83226090 RCX: 00007fdb82fa94d9
[   89.591986][ T1845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   89.591994][ T1845] RBP: 00007fdb83e36090 R08: 0000000000000000 R09: 0000000000000000
[   89.592001][ T1845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.592007][ T1845] R13: 00007fdb83226128 R14: 00007fdb83226090 R15: 00007ffd0c029ba8
[   89.592017][ T1845]  </TASK>
[   90.020236][  T384] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[   90.028475][  T329] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   90.044813][ T1848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'.
[   90.064698][  T384] usb 2-1: device descriptor read/8, error -71
[   90.181128][  T329] usb 3-1: Using ep0 maxpacket: 32
[   90.187971][  T329] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   90.199012][  T329] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[   90.209937][  T329] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[   90.220886][  T384] usb 2-1: device descriptor read/8, error -71
[   90.228141][  T329] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   90.237441][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.245756][  T329] usb 3-1: Product: syz
[   90.250006][  T329] usb 3-1: Manufacturer: ⟸煟䅨㟱銕끩カ냚ⱓ軯牚䴩⭹
[   90.258168][  T329] usb 3-1: SerialNumber: syz
[   90.265984][ T1833] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   90.273427][ T1833] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   90.301126][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   90.453285][    T9] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00
[   90.462637][  T384] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[   90.470247][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.478640][    T9] usb 1-1: Product: syz
[   90.483655][    T9] usb 1-1: Manufacturer: syz
[   90.488291][    T9] usb 1-1: SerialNumber: syz
[   90.493966][  T384] usb 2-1: device descriptor read/8, error -71
[   90.504346][    T9] ums-jumpshot 1-1:1.0: USB Mass Storage device detected
[   90.513323][    T9] ums-jumpshot 1-1:1.0: Quirks match for vid 05dc pid 0001: 2
[   90.622010][  T384] usb 2-1: device descriptor read/8, error -71
[   90.714067][    T9] usb 1-1: USB disconnect, device number 20
[   90.731276][  T384] usb usb2-port1: unable to enumerate USB device
[   90.886417][ T1833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.895438][ T1833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.104971][  T329] usb 3-1: MIDIStreaming interface descriptor not found
[   92.015667][ T1854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.025216][ T1854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.393078][    T9] usb 3-1: USB disconnect, device number 20
[   96.790777][   T36] audit: type=1400 audit(1794505599.860:481): avc:  denied  { map } for  pid=1858 comm="syz.0.550" path="socket:[23274]" dev="sockfs" ino=23274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.814120][ T1862] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 4294705151
[   96.850497][   T36] audit: type=1400 audit(1794505599.890:482): avc:  denied  { read } for  pid=1858 comm="syz.0.550" path="socket:[23274]" dev="sockfs" ino=23274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.883874][   T36] audit: type=1400 audit(1794505599.900:483): avc:  denied  { ioctl } for  pid=1858 comm="syz.0.550" path="socket:[23274]" dev="sockfs" ino=23274 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.943009][   T36] audit: type=1400 audit(1794505600.000:484): avc:  denied  { sqpoll } for  pid=1869 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   96.963267][ T1875] netlink: 'syz.2.557': attribute type 32 has an invalid length.
[   97.018443][ T1884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'.
[   97.030998][   T36] audit: type=1400 audit(1794505600.020:485): avc:  denied  { setattr } for  pid=1869 comm="syz.0.556" name="[io_uring]" dev="anon_inodefs" ino=23386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   97.311106][  T384] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[   97.381120][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   97.441117][  T384] usb 3-1: device descriptor read/64, error -71
[   97.531099][    T9] usb 1-1: Using ep0 maxpacket: 16
[   97.537446][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.548855][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   97.561976][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   97.571254][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.582874][    T9] usb 1-1: config 0 descriptor??
[   97.701104][  T384] usb 3-1: device descriptor read/64, error -71
[   97.941098][  T384] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[   97.995467][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.010677][ T1895] syzkaller1: entered promiscuous mode
[   98.016329][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.024455][ T1895] syzkaller1: entered allmulticast mode
[   98.030098][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.040472][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.047970][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.061103][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.078046][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.085361][  T384] usb 3-1: device descriptor read/64, error -71
[   98.093301][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.100514][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.115474][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.131105][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.145741][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.156209][   T36] audit: type=1400 audit(1794505601.230:486): avc:  denied  { mounton } for  pid=1903 comm="syz.1.569" path="/38/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   98.188991][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   98.203779][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input26
[   98.239627][    T9] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   98.277386][   T36] audit: type=1400 audit(1794505601.350:487): avc:  denied  { create } for  pid=1906 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   98.361086][  T384] usb 3-1: device descriptor read/64, error -71
[   98.413389][    T9] usb 1-1: USB disconnect, device number 21
[   98.471229][  T384] usb usb3-port1: attempt power cycle
[   98.811101][  T384] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[   98.832123][  T384] usb 3-1: device descriptor read/8, error -71
[   98.951068][ T1911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'.
[   98.961977][  T384] usb 3-1: device descriptor read/8, error -71
[   99.142203][ T1917] syzkaller1: entered promiscuous mode
[   99.147753][ T1917] syzkaller1: entered allmulticast mode
[   99.211240][    T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[   99.218881][  T384] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[   99.244910][ T1924] FAULT_INJECTION: forcing a failure.
[   99.244910][ T1924] name failslab, interval 1, probability 0, space 0, times 0
[   99.257676][ T1924] CPU: 0 UID: 0 PID: 1924 Comm: syz.1.577 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   99.257696][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   99.257705][ T1924] Call Trace:
[   99.257709][ T1924]  <TASK>
[   99.257713][ T1924]  __dump_stack+0x21/0x30
[   99.257730][ T1924]  dump_stack_lvl+0x140/0x1c0
[   99.257740][ T1924]  ? __cfi_dump_stack_lvl+0x10/0x10
[   99.257751][ T1924]  dump_stack+0x19/0x20
[   99.257760][ T1924]  should_fail_ex+0x3c2/0x510
[   99.257771][ T1924]  should_failslab+0xac/0x100
[   99.257786][ T1924]  kmem_cache_alloc_node_noprof+0x45/0x420
[   99.257801][ T1924]  ? dup_task_struct+0xc1/0xd80
[   99.257816][ T1924]  ? kasan_save_alloc_info+0x3a/0x50
[   99.257831][ T1924]  ? __kasan_kmalloc+0x96/0xb0
[   99.257842][ T1924]  ? __kmalloc_cache_noprof+0x23c/0x470
[   99.257857][ T1924]  dup_task_struct+0xc1/0xd80
[   99.257871][ T1924]  ? __kasan_check_write+0x18/0x20
[   99.257885][ T1924]  ? _raw_spin_lock_irq+0x93/0x120
[   99.257897][ T1924]  ? copy_process+0x33a0/0x33a0
[   99.257911][ T1924]  ? __kasan_check_write+0x18/0x20
[   99.257926][ T1924]  copy_process+0x579/0x33a0
[   99.257941][ T1924]  ? kasan_save_alloc_info+0x3a/0x50
[   99.257955][ T1924]  ? __cfi_copy_process+0x10/0x10
[   99.257968][ T1924]  ? __kmalloc_cache_noprof+0x23c/0x470
[   99.257984][ T1924]  ? __kasan_check_write+0x18/0x20
[   99.257998][ T1924]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   99.258012][ T1924]  vhost_task_create+0x1f7/0x3f0
[   99.258025][ T1924]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   99.258039][ T1924]  ? __cfi_vhost_task_create+0x10/0x10
[   99.258052][ T1924]  ? __cfi_vhost_task_fn+0x10/0x10
[   99.258063][ T1924]  ? __kasan_check_write+0x18/0x20
[   99.258078][ T1924]  ? mutex_lock+0x97/0x1d0
[   99.258090][ T1924]  ? __cfi_mutex_lock+0x10/0x10
[   99.258103][ T1924]  ? kernel_text_address+0xa9/0xe0
[   99.258119][ T1924]  kvm_mmu_post_init_vm+0x161/0x300
[   99.258130][ T1924]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   99.258145][ T1924]  ? _parse_integer_limit+0x195/0x1e0
[   99.258161][ T1924]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   99.258182][ T1924]  ? kstrtoull+0x13b/0x1e0
[   99.258196][ T1924]  ? kstrtouint+0x78/0xf0
[   99.258210][ T1924]  ? ioctl_has_perm+0x1bc/0x500
[   99.258220][ T1924]  ? __asan_memcpy+0x5a/0x80
[   99.258234][ T1924]  ? ioctl_has_perm+0x408/0x500
[   99.258244][ T1924]  ? has_cap_mac_admin+0xd0/0xd0
[   99.258253][ T1924]  ? __kasan_check_write+0x18/0x20
[   99.258267][ T1924]  ? mutex_lock_killable+0x97/0x1d0
[   99.258280][ T1924]  ? __cfi_mutex_lock_killable+0x10/0x10
[   99.258294][ T1924]  ? proc_fail_nth_write+0x184/0x220
[   99.258308][ T1924]  kvm_vcpu_ioctl+0xa43/0x1000
[   99.258321][ T1924]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   99.258331][ T1924]  ? hook_file_ioctl+0x1ef/0x590
[   99.258346][ T1924]  ? __cfi_vfs_write+0x10/0x10
[   99.258360][ T1924]  ? __cfi_hook_file_ioctl+0x10/0x10
[   99.258373][ T1924]  ? __kasan_check_write+0x18/0x20
[   99.258387][ T1924]  ? mutex_unlock+0x90/0x240
[   99.258400][ T1924]  ? __cfi_mutex_unlock+0x10/0x10
[   99.258413][ T1924]  ? __fget_files+0x2bc/0x330
[   99.258425][ T1924]  ? bpf_lsm_file_ioctl+0xd/0x20
[   99.258437][ T1924]  ? security_file_ioctl+0x3e/0x110
[   99.258452][ T1924]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   99.258463][ T1924]  __se_sys_ioctl+0x126/0x1b0
[   99.258474][ T1924]  __x64_sys_ioctl+0x7f/0xa0
[   99.258485][ T1924]  x64_sys_call+0x1878/0x2ee0
[   99.258496][ T1924]  do_syscall_64+0x57/0xf0
[   99.258507][ T1924]  ? clear_bhb_loop+0x50/0xa0
[   99.258523][ T1924]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   99.258537][ T1924] RIP: 0033:0x7f6e581a94d9
[   99.258547][ T1924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.258556][ T1924] RSP: 002b:00007f6e58fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.258569][ T1924] RAX: ffffffffffffffda RBX: 00007f6e58425fa0 RCX: 00007f6e581a94d9
[   99.258577][ T1924] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   99.258585][ T1924] RBP: 00007f6e58fc9090 R08: 0000000000000000 R09: 0000000000000000
[   99.258591][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.258598][ T1924] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   99.258607][ T1924]  </TASK>
[   99.259381][  T384] usb 3-1: device descriptor read/8, error -71
[   99.763006][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   99.778732][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.788696][    T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   99.798002][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.808461][    T9] usb 1-1: config 0 descriptor??
[   99.815869][  T384] usb 3-1: device descriptor read/8, error -71
[   99.898952][ T1928] kvm: pic: single mode not supported
[   99.931307][  T384] usb usb3-port1: unable to enumerate USB device
[   99.967891][ T1933] FAULT_INJECTION: forcing a failure.
[   99.967891][ T1933] name failslab, interval 1, probability 0, space 0, times 0
[   99.992273][ T1933] CPU: 0 UID: 0 PID: 1933 Comm: syz.1.581 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[   99.992294][ T1933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   99.992302][ T1933] Call Trace:
[   99.992306][ T1933]  <TASK>
[   99.992311][ T1933]  __dump_stack+0x21/0x30
[   99.992329][ T1933]  dump_stack_lvl+0x140/0x1c0
[   99.992339][ T1933]  ? __cfi_dump_stack_lvl+0x10/0x10
[   99.992350][ T1933]  ? avc_has_perm_noaudit+0x289/0x360
[   99.992363][ T1933]  dump_stack+0x19/0x20
[   99.992372][ T1933]  should_fail_ex+0x3c2/0x510
[   99.992383][ T1933]  should_failslab+0xac/0x100
[   99.992395][ T1933]  __kmalloc_node_noprof+0x69/0x500
[   99.992411][ T1933]  ? __kvmalloc_node_noprof+0x128/0x300
[   99.992426][ T1933]  __kvmalloc_node_noprof+0x128/0x300
[   99.992439][ T1933]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[   99.992453][ T1933]  ? __cfi_table_load+0x10/0x10
[   99.992468][ T1933]  ? __cfi_table_load+0x10/0x10
[   99.992481][ T1933]  ? __kasan_check_write+0x18/0x20
[   99.992497][ T1933]  dm_ctl_ioctl+0x46f/0xde0
[   99.992511][ T1933]  ? __cfi_table_load+0x10/0x10
[   99.992524][ T1933]  ? selinux_file_ioctl+0x732/0x1480
[   99.992540][ T1933]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   99.992556][ T1933]  ? __fget_files+0x2bc/0x330
[   99.992567][ T1933]  ? bpf_lsm_file_ioctl+0xd/0x20
[   99.992579][ T1933]  ? security_file_ioctl+0x3e/0x110
[   99.992593][ T1933]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   99.992607][ T1933]  __se_sys_ioctl+0x126/0x1b0
[   99.992618][ T1933]  __x64_sys_ioctl+0x7f/0xa0
[   99.992629][ T1933]  x64_sys_call+0x1878/0x2ee0
[   99.992640][ T1933]  do_syscall_64+0x57/0xf0
[   99.992652][ T1933]  ? clear_bhb_loop+0x50/0xa0
[   99.992667][ T1933]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   99.992681][ T1933] RIP: 0033:0x7f6e581a94d9
[   99.992692][ T1933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.992701][ T1933] RSP: 002b:00007f6e58fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.992714][ T1933] RAX: ffffffffffffffda RBX: 00007f6e58425fa0 RCX: 00007f6e581a94d9
[   99.992722][ T1933] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003
[   99.992730][ T1933] RBP: 00007f6e58fc9090 R08: 0000000000000000 R09: 0000000000000000
[   99.992737][ T1933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.992744][ T1933] R13: 00007f6e58426038 R14: 00007f6e58425fa0 R15: 00007ffc69b88e18
[   99.992753][ T1933]  </TASK>
[  100.454158][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.470305][ T1943] syzkaller1: entered promiscuous mode
[  100.475881][ T1943] syzkaller1: entered allmulticast mode
[  100.495665][ T1945] syzkaller0: entered promiscuous mode
[  100.507799][ T1945] syzkaller0: entered allmulticast mode
[  100.515748][   T36] audit: type=1400 audit(1794505603.530:488): avc:  denied  { mounton } for  pid=1912 comm="syz.0.572" path="/138/sys_mnt" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  100.541210][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.555452][ T1950] netlink: 'syz.2.585': attribute type 49 has an invalid length.
[  100.564341][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.574596][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.583870][ T1950] team_slave_1: entered promiscuous mode
[  100.592162][ T1950] team_slave_1: entered allmulticast mode
[  100.597973][   T36] audit: type=1400 audit(1794505603.630:489): avc:  denied  { write } for  pid=1946 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.619136][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.674533][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.716786][   T36] audit: type=1400 audit(1794505603.630:490): avc:  denied  { ioctl } for  pid=1946 comm="syz.2.585" path="socket:[24601]" dev="sockfs" ino=24601 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.751588][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.773664][ T1966] FAULT_INJECTION: forcing a failure.
[  100.773664][ T1966] name failslab, interval 1, probability 0, space 0, times 0
[  100.787923][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.811512][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.827693][ T1966] CPU: 0 UID: 0 PID: 1966 Comm: syz.2.589 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[  100.827719][ T1966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  100.827727][ T1966] Call Trace:
[  100.827731][ T1966]  <TASK>
[  100.827736][ T1966]  __dump_stack+0x21/0x30
[  100.827753][ T1966]  dump_stack_lvl+0x140/0x1c0
[  100.827763][ T1966]  ? __cfi_dump_stack_lvl+0x10/0x10
[  100.827774][ T1966]  dump_stack+0x19/0x20
[  100.827784][ T1966]  should_fail_ex+0x3c2/0x510
[  100.827795][ T1966]  should_failslab+0xac/0x100
[  100.827807][ T1966]  __kmalloc_cache_node_noprof+0x46/0x430
[  100.827823][ T1966]  ? __get_vm_area_node+0x150/0x390
[  100.827837][ T1966]  ? kasan_save_alloc_info+0x3a/0x50
[  100.827851][ T1966]  ? __kasan_slab_alloc+0x73/0x90
[  100.827862][ T1966]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[  100.827877][ T1966]  __get_vm_area_node+0x150/0x390
[  100.827890][ T1966]  __vmalloc_node_range_noprof+0x340/0x1300
[  100.827904][ T1966]  ? copy_process+0x579/0x33a0
[  100.827921][ T1966]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  100.827935][ T1966]  ? kasan_save_alloc_info+0x3a/0x50
[  100.827948][ T1966]  ? __kasan_slab_alloc+0x73/0x90
[  100.827959][ T1966]  ? arch_dup_task_struct+0x5b/0xe0
[  100.827970][ T1966]  ? __asan_memcpy+0x5a/0x80
[  100.827984][ T1966]  dup_task_struct+0x5d6/0xd80
[  100.827998][ T1966]  ? copy_process+0x579/0x33a0
[  100.828012][ T1966]  ? _raw_spin_lock_irq+0x93/0x120
[  100.828024][ T1966]  ? copy_process+0x33a0/0x33a0
[  100.828038][ T1966]  ? __kasan_check_write+0x18/0x20
[  100.828052][ T1966]  copy_process+0x579/0x33a0
[  100.828074][ T1966]  ? kasan_save_alloc_info+0x3a/0x50
[  100.828088][ T1966]  ? __cfi_copy_process+0x10/0x10
[  100.828101][ T1966]  ? __kmalloc_cache_noprof+0x23c/0x470
[  100.828116][ T1966]  ? __kasan_check_write+0x18/0x20
[  100.828130][ T1966]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  100.828146][ T1966]  vhost_task_create+0x1f7/0x3f0
[  100.828159][ T1966]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  100.828173][ T1966]  ? __cfi_vhost_task_create+0x10/0x10
[  100.828186][ T1966]  ? __cfi_vhost_task_fn+0x10/0x10
[  100.828198][ T1966]  ? __kasan_check_write+0x18/0x20
[  100.828212][ T1966]  ? mutex_lock+0x97/0x1d0
[  100.828225][ T1966]  ? __cfi_mutex_lock+0x10/0x10
[  100.828239][ T1966]  kvm_mmu_post_init_vm+0x161/0x300
[  100.828250][ T1966]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  100.828265][ T1966]  ? _parse_integer_limit+0x195/0x1e0
[  100.828281][ T1966]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  100.828296][ T1966]  ? kstrtoull+0x13b/0x1e0
[  100.828310][ T1966]  ? kstrtouint+0x78/0xf0
[  100.828325][ T1966]  ? ioctl_has_perm+0x1bc/0x500
[  100.828335][ T1966]  ? __asan_memcpy+0x5a/0x80
[  100.828349][ T1966]  ? ioctl_has_perm+0x408/0x500
[  100.828359][ T1966]  ? has_cap_mac_admin+0xd0/0xd0
[  100.828368][ T1966]  ? __kasan_check_write+0x18/0x20
[  100.828382][ T1966]  ? mutex_lock_killable+0x97/0x1d0
[  100.828396][ T1966]  ? __cfi_mutex_lock_killable+0x10/0x10
[  100.828409][ T1966]  ? proc_fail_nth_write+0x184/0x220
[  100.828424][ T1966]  kvm_vcpu_ioctl+0xa43/0x1000
[  100.828437][ T1966]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  100.828448][ T1966]  ? hook_file_ioctl+0x1ef/0x590
[  100.828462][ T1966]  ? __cfi_vfs_write+0x10/0x10
[  100.828477][ T1966]  ? __cfi_hook_file_ioctl+0x10/0x10
[  100.828491][ T1966]  ? __kasan_check_write+0x18/0x20
[  100.828505][ T1966]  ? mutex_unlock+0x90/0x240
[  100.828518][ T1966]  ? __cfi_mutex_unlock+0x10/0x10
[  100.828532][ T1966]  ? __fget_files+0x2bc/0x330
[  100.828543][ T1966]  ? bpf_lsm_file_ioctl+0xd/0x20
[  100.828555][ T1966]  ? security_file_ioctl+0x3e/0x110
[  100.828570][ T1966]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  100.828581][ T1966]  __se_sys_ioctl+0x126/0x1b0
[  100.828592][ T1966]  __x64_sys_ioctl+0x7f/0xa0
[  100.828604][ T1966]  x64_sys_call+0x1878/0x2ee0
[  100.828615][ T1966]  do_syscall_64+0x57/0xf0
[  100.828626][ T1966]  ? clear_bhb_loop+0x50/0xa0
[  100.828640][ T1966]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.828654][ T1966] RIP: 0033:0x7fc0cf7a94d9
[  100.828664][ T1966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.828673][ T1966] RSP: 002b:00007fc0d0624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.828686][ T1966] RAX: ffffffffffffffda RBX: 00007fc0cfa25fa0 RCX: 00007fc0cf7a94d9
[  100.828694][ T1966] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  100.828701][ T1966] RBP: 00007fc0d0624090 R08: 0000000000000000 R09: 0000000000000000
[  100.828709][ T1966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.828716][ T1966] R13: 00007fc0cfa26038 R14: 00007fc0cfa25fa0 R15: 00007ffdf23a31e8
[  100.828725][ T1966]  </TASK>
[  100.828765][ T1966] syz.2.589: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  101.291492][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.461101][  T384] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  101.472489][ T1980] FAULT_INJECTION: forcing a failure.
[  101.472489][ T1980] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  101.501299][ T1980] CPU: 0 UID: 0 PID: 1980 Comm: syz.4.591 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[  101.501322][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  101.501331][ T1980] Call Trace:
[  101.501334][ T1980]  <TASK>
[  101.501339][ T1980]  __dump_stack+0x21/0x30
[  101.501354][ T1980]  dump_stack_lvl+0x140/0x1c0
[  101.501367][ T1980]  ? __cfi_dump_stack_lvl+0x10/0x10
[  101.501378][ T1980]  dump_stack+0x19/0x20
[  101.501387][ T1980]  should_fail_ex+0x3c2/0x510
[  101.501398][ T1980]  should_fail_alloc_page+0xec/0x110
[  101.501410][ T1980]  __alloc_pages_noprof+0x1c0/0x7e0
[  101.501424][ T1980]  ? kernel_text_address+0xa9/0xe0
[  101.501441][ T1980]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  101.501454][ T1980]  ? unwind_get_return_address+0x51/0x90
[  101.501469][ T1980]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  101.501481][ T1980]  get_free_pages_noprof+0x14/0x40
[  101.501494][ T1980]  kasan_populate_vmalloc_pte+0x4c/0x170
[  101.501511][ T1980]  __apply_to_page_range+0x7bf/0xd00
[  101.501522][ T1980]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[  101.501537][ T1980]  ? __x64_sys_ioctl+0x7f/0xa0
[  101.501549][ T1980]  ? apply_to_page_range+0x60/0x60
[  101.501559][ T1980]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[  101.501574][ T1980]  apply_to_page_range+0x3f/0x60
[  101.501584][ T1980]  kasan_populate_vmalloc+0x64/0x80
[  101.501598][ T1980]  alloc_vmap_area+0x1e8e/0x26f0
[  101.501613][ T1980]  ? kasan_save_alloc_info+0x3a/0x50
[  101.501626][ T1980]  ? vm_map_ram+0xdd0/0xdd0
[  101.501639][ T1980]  ? __kmalloc_cache_node_noprof+0x225/0x430
[  101.501655][ T1980]  ? __get_vm_area_node+0x150/0x390
[  101.501668][ T1980]  __get_vm_area_node+0x1f8/0x390
[  101.501681][ T1980]  __vmalloc_node_range_noprof+0x340/0x1300
[  101.501695][ T1980]  ? copy_process+0x579/0x33a0
[  101.501711][ T1980]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  101.501725][ T1980]  ? kasan_save_alloc_info+0x3a/0x50
[  101.501738][ T1980]  ? __kasan_slab_alloc+0x73/0x90
[  101.501749][ T1980]  ? arch_dup_task_struct+0x5b/0xe0
[  101.501760][ T1980]  ? __asan_memcpy+0x5a/0x80
[  101.501774][ T1980]  dup_task_struct+0x5d6/0xd80
[  101.501787][ T1980]  ? copy_process+0x579/0x33a0
[  101.501801][ T1980]  ? _raw_spin_lock_irq+0x93/0x120
[  101.501813][ T1980]  ? copy_process+0x33a0/0x33a0
[  101.501826][ T1980]  ? __kasan_check_write+0x18/0x20
[  101.501841][ T1980]  copy_process+0x579/0x33a0
[  101.501856][ T1980]  ? kasan_save_alloc_info+0x3a/0x50
[  101.501869][ T1980]  ? __cfi_copy_process+0x10/0x10
[  101.501897][ T1980]  ? __kmalloc_cache_noprof+0x23c/0x470
[  101.501912][ T1980]  ? __kasan_check_write+0x18/0x20
[  101.501926][ T1980]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  101.501941][ T1980]  vhost_task_create+0x1f7/0x3f0
[  101.501954][ T1980]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  101.501968][ T1980]  ? __cfi_vhost_task_create+0x10/0x10
[  101.501981][ T1980]  ? __cfi_vhost_task_fn+0x10/0x10
[  101.501993][ T1980]  ? __kasan_check_write+0x18/0x20
[  101.502006][ T1980]  ? mutex_lock+0x97/0x1d0
[  101.502019][ T1980]  ? __cfi_mutex_lock+0x10/0x10
[  101.502032][ T1980]  ? kernel_text_address+0xa9/0xe0
[  101.502047][ T1980]  kvm_mmu_post_init_vm+0x161/0x300
[  101.502058][ T1980]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  101.502074][ T1980]  ? _parse_integer_limit+0x195/0x1e0
[  101.502090][ T1980]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  101.502105][ T1980]  ? kstrtoull+0x13b/0x1e0
[  101.502119][ T1980]  ? kstrtouint+0x78/0xf0
[  101.502133][ T1980]  ? ioctl_has_perm+0x1bc/0x500
[  101.502143][ T1980]  ? __asan_memcpy+0x5a/0x80
[  101.502157][ T1980]  ? ioctl_has_perm+0x408/0x500
[  101.502166][ T1980]  ? has_cap_mac_admin+0xd0/0xd0
[  101.502176][ T1980]  ? __kasan_check_write+0x18/0x20
[  101.502190][ T1980]  ? mutex_lock_killable+0x97/0x1d0
[  101.502203][ T1980]  ? __cfi_mutex_lock_killable+0x10/0x10
[  101.502216][ T1980]  ? proc_fail_nth_write+0x184/0x220
[  101.502231][ T1980]  kvm_vcpu_ioctl+0xa43/0x1000
[  101.502243][ T1980]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  101.502254][ T1980]  ? hook_file_ioctl+0x1ef/0x590
[  101.502268][ T1980]  ? __cfi_vfs_write+0x10/0x10
[  101.502283][ T1980]  ? __cfi_hook_file_ioctl+0x10/0x10
[  101.502295][ T1980]  ? __kasan_check_write+0x18/0x20
[  101.502310][ T1980]  ? mutex_unlock+0x90/0x240
[  101.502322][ T1980]  ? __cfi_mutex_unlock+0x10/0x10
[  101.502336][ T1980]  ? __fget_files+0x2bc/0x330
[  101.502347][ T1980]  ? bpf_lsm_file_ioctl+0xd/0x20
[  101.502365][ T1980]  ? security_file_ioctl+0x3e/0x110
[  101.502380][ T1980]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  101.502392][ T1980]  __se_sys_ioctl+0x126/0x1b0
[  101.502403][ T1980]  __x64_sys_ioctl+0x7f/0xa0
[  101.502413][ T1980]  x64_sys_call+0x1878/0x2ee0
[  101.502425][ T1980]  do_syscall_64+0x57/0xf0
[  101.502436][ T1980]  ? clear_bhb_loop+0x50/0xa0
[  101.502451][ T1980]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  101.502465][ T1980] RIP: 0033:0x7f0df5ba94d9
[  101.502476][ T1980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.502485][ T1980] RSP: 002b:00007f0df45d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  101.502498][ T1980] RAX: ffffffffffffffda RBX: 00007f0df5e26180 RCX: 00007f0df5ba94d9
[  101.502507][ T1980] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  101.502514][ T1980] RBP: 00007f0df45d6090 R08: 0000000000000000 R09: 0000000000000000
[  101.502521][ T1980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.502529][ T1980] R13: 00007f0df5e26218 R14: 00007f0df5e26180 R15: 00007ffdb1f5f048
[  101.502538][ T1980]  </TASK>
[  102.056520][ T1966] ,cpuset=syz2,mems_allowed=0
[  102.061292][ T1966] CPU: 0 UID: 0 PID: 1966 Comm: syz.2.589 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a
[  102.061311][ T1966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  102.061319][ T1966] Call Trace:
[  102.061324][ T1966]  <TASK>
[  102.061328][ T1966]  __dump_stack+0x21/0x30
[  102.061345][ T1966]  dump_stack_lvl+0x140/0x1c0
[  102.061355][ T1966]  ? __cfi_dump_stack_lvl+0x10/0x10
[  102.061365][ T1966]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  102.061381][ T1966]  dump_stack+0x19/0x20
[  102.061390][ T1966]  warn_alloc+0x1e7/0x2c0
[  102.061403][ T1966]  ? __kasan_kmalloc+0x28/0xb0
[  102.061416][ T1966]  ? __cfi_warn_alloc+0x10/0x10
[  102.061427][ T1966]  ? __get_vm_area_node+0x150/0x390
[  102.061441][ T1966]  ? kasan_save_alloc_info+0x3a/0x50
[  102.061455][ T1966]  ? __get_vm_area_node+0x382/0x390
[  102.061469][ T1966]  __vmalloc_node_range_noprof+0x365/0x1300
[  102.061485][ T1966]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  102.061498][ T1966]  ? kasan_save_alloc_info+0x3a/0x50
[  102.061512][ T1966]  ? __kasan_slab_alloc+0x73/0x90
[  102.061523][ T1966]  ? arch_dup_task_struct+0x5b/0xe0
[  102.061534][ T1966]  ? __asan_memcpy+0x5a/0x80
[  102.061548][ T1966]  dup_task_struct+0x5d6/0xd80
[  102.061563][ T1966]  ? copy_process+0x579/0x33a0
[  102.061577][ T1966]  ? _raw_spin_lock_irq+0x93/0x120
[  102.061588][ T1966]  ? copy_process+0x33a0/0x33a0
[  102.061602][ T1966]  ? __kasan_check_write+0x18/0x20
[  102.061616][ T1966]  copy_process+0x579/0x33a0
[  102.061632][ T1966]  ? kasan_save_alloc_info+0x3a/0x50
[  102.061645][ T1966]  ? __cfi_copy_process+0x10/0x10
[  102.061659][ T1966]  ? __kmalloc_cache_noprof+0x23c/0x470
[  102.061675][ T1966]  ? __kasan_check_write+0x18/0x20
[  102.061690][ T1966]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  102.061704][ T1966]  vhost_task_create+0x1f7/0x3f0
[  102.061716][ T1966]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  102.061731][ T1966]  ? __cfi_vhost_task_create+0x10/0x10
[  102.061744][ T1966]  ? __cfi_vhost_task_fn+0x10/0x10
[  102.061756][ T1966]  ? __kasan_check_write+0x18/0x20
[  102.061770][ T1966]  ? mutex_lock+0x97/0x1d0
[  102.061782][ T1966]  ? __cfi_mutex_lock+0x10/0x10
[  102.061796][ T1966]  kvm_mmu_post_init_vm+0x161/0x300
[  102.061807][ T1966]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  102.061822][ T1966]  ? _parse_integer_limit+0x195/0x1e0
[  102.061838][ T1966]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  102.061853][ T1966]  ? kstrtoull+0x13b/0x1e0
[  102.061867][ T1966]  ? kstrtouint+0x78/0xf0
[  102.061881][ T1966]  ? ioctl_has_perm+0x1bc/0x500
[  102.061890][ T1966]  ? __asan_memcpy+0x5a/0x80
[  102.061904][ T1966]  ? ioctl_has_perm+0x408/0x500
[  102.061922][ T1966]  ? has_cap_mac_admin+0xd0/0xd0
[  102.061931][ T1966]  ? __kasan_check_write+0x18/0x20
[  102.061945][ T1966]  ? mutex_lock_killable+0x97/0x1d0
[  102.061959][ T1966]  ? __cfi_mutex_lock_killable+0x10/0x10
[  102.061972][ T1966]  ? proc_fail_nth_write+0x184/0x220
[  102.061986][ T1966]  kvm_vcpu_ioctl+0xa43/0x1000
[  102.061999][ T1966]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  102.062010][ T1966]  ? hook_file_ioctl+0x1ef/0x590
[  102.062024][ T1966]  ? __cfi_vfs_write+0x10/0x10
[  102.062039][ T1966]  ? __cfi_hook_file_ioctl+0x10/0x10
[  102.062052][ T1966]  ? __kasan_check_write+0x18/0x20
[  102.062066][ T1966]  ? mutex_unlock+0x90/0x240
[  102.062078][ T1966]  ? __cfi_mutex_unlock+0x10/0x10
[  102.062092][ T1966]  ? __fget_files+0x2bc/0x330
[  102.062104][ T1966]  ? bpf_lsm_file_ioctl+0xd/0x20
[  102.062115][ T1966]  ? security_file_ioctl+0x3e/0x110
[  102.062130][ T1966]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  102.062141][ T1966]  __se_sys_ioctl+0x126/0x1b0
[  102.062153][ T1966]  __x64_sys_ioctl+0x7f/0xa0
[  102.062163][ T1966]  x64_sys_call+0x1878/0x2ee0
[  102.062175][ T1966]  do_syscall_64+0x57/0xf0
[  102.062186][ T1966]  ? clear_bhb_loop+0x50/0xa0
[  102.062201][ T1966]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.062218][ T1966] RIP: 0033:0x7fc0cf7a94d9
[  102.062229][ T1966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.062238][ T1966] RSP: 002b:00007fc0d0624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  102.062251][ T1966] RAX: ffffffffffffffda RBX: 00007fc0cfa25fa0 RCX: 00007fc0cf7a94d9
[  102.062259][ T1966] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  102.062267][ T1966] RBP: 00007fc0d0624090 R08: 0000000000000000 R09: 0000000000000000
[  102.062274][ T1966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.062281][ T1966] R13: 00007fc0cfa26038 R14: 00007fc0cfa25fa0 R15: 00007ffdf23a31e8
[  102.062290][ T1966]  </TASK>
[  102.062303][ T1966] Mem-Info:
[  102.508820][ T1966] active_anon:15133 inactive_anon:0 isolated_anon:0
[  102.508820][ T1966]  active_file:14739 inactive_file:2726 isolated_file:0
[  102.508820][ T1966]  unevictable:0 dirty:77 writeback:0
[  102.508820][ T1966]  slab_reclaimable:4835 slab_unreclaimable:72340
[  102.508820][ T1966]  mapped:33042 shmem:9285 pagetables:915
[  102.508820][ T1966]  sec_pagetables:0 bounce:0
[  102.508820][ T1966]  kernel_misc_reclaimable:0
[  102.508820][ T1966]  free:1517995 free_pcp:1256 free_cma:0
[  102.554258][ T1966] Node 0 active_anon:60532kB inactive_anon:0kB active_file:58956kB inactive_file:10904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132168kB dirty:308kB writeback:0kB shmem:37140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5056kB pagetables:3660kB sec_pagetables:0kB all_unreclaimable? no
[  102.586649][ T1966] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:5024kB free_cma:0kB
[  102.625725][ T1966] lowmem_reserve[]: 0 3920 3920
[  102.630607][ T1966] Normal free:3120304kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60324kB inactive_anon:0kB active_file:58956kB inactive_file:10904kB unevictable:0kB writepending:308kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:1964kB local_pcp:1964kB free_cma:0kB
[  102.673109][ T1966] lowmem_reserve[]: 0 0 0
[  102.678977][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  102.678990][   T36] audit: type=1400 audit(1794505605.740:499): avc:  denied  { write } for  pid=1964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.708590][ T1966] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB
[  102.725411][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  102.741124][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  102.750343][ T1966] Normal: 12*4kB (UME) 32*8kB (ME) 2*16kB (UE) 169*32kB (UE) 225*64kB (UE) 50*128kB (UE) 98*256kB (UME) 34*512kB (UME) 22*1024kB (UME) 17*2048kB (UM) 731*4096kB (UM) = 3120560kB
[  102.768656][   T36] audit: type=1400 audit(1794505605.740:500): avc:  denied  { add_name } for  pid=1964 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.791775][ T1966] 26754 total pagecache pages
[  102.796431][ T1966] 3 pages in swap cache
[  102.800579][ T1966] Free swap  = 58640kB
[  102.808987][    T9] usb 1-1: USB disconnect, device number 22
[  102.817980][ T1966] Total swap = 124996kB
[  102.825079][   T36] audit: type=1400 audit(1794505605.740:501): avc:  denied  { create } for  pid=1964 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  102.851114][ T1966] 2097051 pages RAM
[  102.854936][ T1966] 0 pages HighMem/MovableOnly
[  102.859585][ T1966] 354592 pages reserved
[  102.864769][  T384] usb 2-1: Using ep0 maxpacket: 32
[  102.870741][ T1966] 0 pages cma reserved
[  102.876349][ T1966] Memory allocations:
[  102.880323][ T1966]          0 B        0 init/main.c:1477 func:do_initcalls
[  102.891241][   T36] audit: type=1400 audit(1794505605.740:502): avc:  denied  { write } for  pid=1964 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.team_slave_1.link" dev="tmpfs" ino=1945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  102.921117][ T1966]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  102.935222][ T1966]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  102.943327][ T1966]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  102.954126][   T36] audit: type=1400 audit(1794505605.740:503): avc:  denied  { append } for  pid=1964 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.link" dev="tmpfs" ino=1945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  102.978972][  T384] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  102.996667][ T1966]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  103.008037][  T384] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  103.020092][ T1966]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  103.032992][ T1993] veth1_to_bridge: entered allmulticast mode
[  103.039765][ T1966]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  103.047895][  T384] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  103.062488][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.070598][   T36] audit: type=1400 audit(1794505605.930:504): avc:  denied  { remove_name } for  pid=1988 comm="rm" name="resolv.conf.team_slave_1.link" dev="tmpfs" ino=1945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.096938][ T1966]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  103.113560][ T1966]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  103.131529][  T384] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  103.147944][  T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.156181][ T1966]          0 B        0 init/initramfs.c:101 func:find_link
[  103.167872][   T36] audit: type=1400 audit(1794505605.930:505): avc:  denied  { unlink } for  pid=1988 comm="rm" name="resolv.conf.team_slave_1.link" dev="tmpfs" ino=1945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  103.197307][  T384] usb 2-1: Product: syz
[  103.204814][  T384] usb 2-1: Manufacturer: ⟸煟䅨㟱銕끩カ냚ⱓ軯牚䴩⭹
[  103.220437][  T384] usb 2-1: SerialNumber: syz
[  103.227972][ T2002] printk: legacy console [ttyS0] disabled
[  103.245955][ T2004] FAULT_INJECTION: forcing a failure.
[  103.245955][ T2004] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  103.261267][ T1961] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  103.268418][ T1961] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  103.275837][   T36] audit: type=1400 audit(1794505606.200:506): avc:  denied  { read } for  pid=1995 comm="syz.0.594" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1