last executing test programs: 42.716723324s ago: executing program 3 (id=374): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) 42.485373215s ago: executing program 3 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0xfe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}]}}) 42.485168845s ago: executing program 3 (id=377): syz_clone3(&(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = eventfd(0x8) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000280)={{r1}, "4bbf05364b33dd0895efa8716955a4d2729dcc5e132b46d6ad1e0dbb365d70701dc148f327a05e7d3541a933d5b5f86cafa32a1b239cbcc82c762e547801844fa49c8d39b7aef14aec16882685bbb8ef3808429a0a1d0592acc7d4172679b5c3ef0770fc9fd9b16b95aa42911177adf856b1d531976293f53c0b8dca60ac134c5f48d875283ba1f3f6f299c13863abab269a942ece7ffc4117957d72aabaa8096574d460b5307643b6ebfe79922d774604511c462e43dbaf5003068cb9945d1f86766f92b133c97006c5083db6d52cba08a53a82d3a28d7dde8ec883871311e70b3f1c0474c3c737c3cb03a3f8c987f82bc0cf4481ad2d2f6392e21a864fe1d3e76e3596205ea1db9faba0ddd1d2d4a43981a67e9b6848ebc0217a8c06eaf8d77885ce860ef4a159aadb6061edd5cbdfee9cde0086fbea21c965230e5fdd45d05c146188c32c3bc150cde1087207d0231b94d6e4ae4536eb67acfa912dad4249268ddbb26473ef4f46df7cc1b33e53f7ac877afdc17015f255ca1f8479f3991bef018a9038ad44b4065bec3420e987237957717c6613eb1cfb4ea59503b32bb34861720206d92127cb8e376bd645a90f99350ae9b9c63cd7affbfe673c037fd2ec41b63b06b822b045d042ac8db0e9883387afa3867f9729fd3564fc41bc43d77eacf3e0a2bbfbca3c14e7a48d82caa386cc661cf7d33baa4a7d92753004cb891179036deea3b0ed38d4ffee8ec50158680b360bf29e5b6260493dca19538742e3d46cde189647684ee2429a96d3afd0ba4138d0d41e91d46b3bc7078d56f2de11175267cdf50394affaf6f06d9ec1a289b80a1d36dd6044dd1e4b283388cd1ce221cb21188b4dcbda0f1d63e6d17fb5e6f2ecefddab499c6e549bb31f23ae70b9f57aa29e1fed4b34fefef439716048be191dae2df575712a35b06536a4392bbf0691292a585dd73284742b50bca364bb8bfb7c1f0b6cceef9fa65ee58c0898170931a9c26b31d282f28d0fdeeafbd584c1734e9e9aad5fbcd39aa359a0fd49d10cfdd8de28738d1c97f79c5fed68697212dac15f9ffc125fb987915f368c2f185b2d1b4d6d17f29548f725a3a74ad0db2ec031b1ca5201f03e61b982ebe587cfd79de83fbc0e62286887f3a0460e90e81e573f81a61426f61666caaea7bbba0fd646ad939c56559f6fdebfd0144e1e9fe05cd314fb24672691157c404e72a810bf4e2b7bd7b8fff07efb1dfb082d079d89a0668a60770eed559c234edfa9f83bb578fae37f05f377ceb58988eb039d0d97f6019d8841b6b0580c5dd27e41bc5d20a2e0da68b6c63e0c3d226d07c855c096ea3f6e6043c4832c16a2d89305c9f1973e60f00f5bb2ae6b61599c3883b5209106f31ad85e879da17606027805ead70f51acfce24eb3bba808ba8ce1c476a1438863ebc9446fdcc22cfa508ba0b0cbe415e09b81c6c8a197245dd6084625642245e7e28a45c7ed94b03328237a36119169c7e9d37b98d233ebee6a6c74190f7e7a2368d6e50c978c65c9afe31e8c3cdbfefafb7d71503bdebaf34c794b428776f33d81cf46a1d332e50fc39c9e6097a24e4b77c4e95d3c2680a34241a7dab347cb41c9d73a19492d491570834b11dc0967b8fdd2c9c5f12ff033f7fdb0643a74854d197454712f3fd643df7bca14b55fffc4f6a11df1b1a7497afb9321cb74683dd8bd3bad94e5893571ab3b23ab778bb802cbbc2b1ed4a090fd745849ecbcdd861c0b3aabca07491f817d4ba93dab9b33a413072393859b96b07763c0c404f4bd7ea1715379e96b0e3f5fc50d847c326cb2bc49a177f350ed7db6f3ef5c3cc66134ec074fb66748f60ae9dfa15d2e96cc0853145cc7b97aa38e1d24f8fff885e007619732376b6cd7458f68b646250c56594cdb6402a38e29c5b6174d909f179d5e99f88fd00ac26f1a2ad8a8639db49240ab98c1dceaca5888b70e6c798e57d4ff15cac6da9c9de0038f27c976b2512f0afdd7396282d120e95b7e14332f3349e95f11f8bfdb57f99fdbb2b8c03b802119ea6fcaf4e00efea7582d996af4113313c01b084483c72389c86d3c318ac393b9b0763b9d13e1a6317ad842c13417f1426342cb187470c4dfdc1e5084a135d8699c102d2399bdd3a76c81e9b7d4a19dd12d54bed4eb92f8682fb91f1de4a7d498e758389285278d7b46281bcd1a6772db13000e24a309f3c610bbbde1f37b26514348bafd22c9a293426d94c2ef348ae6e0b19bfa683081a607230fcf0e4a31dceab04bede07427632653de5889ad704123904b40c4cf897a5057c81874b4f838df60c031682e1f462370fd0d85e29c75cbf15faf709afe81ac31457e0bf71ebed39162980e878b4a6f0440d8f42d7497e1e3e3d0efe89ad0cd790b510e2d2d4466d062339e964b461826f43f362ebda2e930119d27c61dc243f78d300d425caad8a978456a036a65cb7048f07856045c90eb9084cb5cf617b4c5e91fcb9cd0ee142c08bc4865a4bbdd8d828bf82783f1def1815d626f00b22236959e16d46594724a45707b350cf4fc50849485228092d395ec1d1bbb9839b66ad39259d26a3e983f1fe2c43406671f59a879be7997318bef12c147414a1fdfecaa3f5e23d99dee04452195fee0f909c7e714c4ccc9d24e3d2a3459eeb3872934d85b8af6602d8bc4073e91b24c3f6d40b305dfd5e8e4402e1628795e380925c5ce2ca452eaef8928b8192914291ba5a4303d03ecff805506c8ce05e5cd1bb2264a66e54a87c17346e6875f19ad50e71a0aaa68ab8bc73df6a16cf60eb0751ec18991f4c96f693aab0cfb677f4fd4d1b0711c88e14272749e8314e24b06fa8d94e6fb41a8600234ca4e1255ec455296c9f8195214852f000dece31342047f6d954ebd0b19416d61a8e5626b611659e0bca18ab04ae725af7b8ec8389fbed56239820f5719db30090e33fffec2ec1311f92b07a94b14cd81635893538814e38570dd49ae96e23442b913ab7e1ae9b7a0c8a37fe1fbf407f1add931b38e6710b229e5cbbb9864b02b87cfb05be76afaaf4502f2c3fdd2742d99e8ab4884795dfb2a21a68005262c2dfa2c38f11bf27b76ba88bd612e38cba125222149abba303eb5743f8835c9e930a0f3a9422d49f46f917ed313568caa51be86ab56e893fea8b0337e5e61e46b27fd27099a1654d4e61cce0f74913e3a5a9a5a7c956600fb06162e7d14a69f1504d737919c6e9576fece6dda28b63f42e6189a3dfaefbc12cca11a07468059ecff62408a795e881da561d584ecc9bb2a9d72460c2888245a506eecaecc0cf4c0cf28c1f9cca3058945aa29fa665c766c1c9993fe5cf5daa0d8fb18f6a4793a29fa8920a1f8f744f17107fbd6713188c125c316751b7fcd0bee3666ba53468f6751371e5566c083646037bd6bed3b2b384617a4eb6bf420216483d75bc52d3b6bb34c7bade04fec99b7a3a4e0201837b21c40bc73793c3bd16821fae6e13acb27d0e746b8202aa4c4f826c9380c510718275bd44d98f6b4732847ed09ca7483186f59fd185da328003e5bb51254474625993d25a168d31f7a99b44872615f81c76213b38490bf81a6a0365432691427f41bcca53c766a89489c49345225b077b388cc9ffa56a840a42dd64c83b3d24796e2a0ce37992ad4a7de2ff3c94e5b32f6d5a96dae8c775df50bc18a748f0f7f695f523da344d29d931e2ba66aa2c65fab366aabe8eaa1487069d1146b0b29a93a36e66c33e3fd76b186bfc507efb29ee9690b2581d731d8aec88fc016043b6c3fe3e00056f42595e59de2471584c96c35477917a3ae5707321b908b81a6dafbbccf0ce0ce36f433710994ed5277034c796b2feb3b8e63f3dc990ca0dbe1d541bdd4a918fa47883a57edddf284d17002329ff70b303402f064b82a39b0069ce8b1b15805459cd700242b5f0236187b747320c67616bd5a4f96352272aaa09a2b23ed8534fc2f4befc05b1576dc6733fd58950f76e869c05ff8d91a1c48a9b25bc9710f77f6e2e9a6e9546155aae4983e6e930aaa694deeffbac4ac3f685b8c968d90302603148c73630b3a3e9f1b2f24834096e4da12da489c618b06ce20e20945c4d0a8a6d8a7b4151284d85bec6516a89c7771e6926c1a1c135c44b1d0abdc3c5baf184e09fb8c291db43d8d23f9fb3b67a4daccf9faaeda90c6ddad72fa3588ceda78739888f8df2d33872ffbe103f545efadd8c57ae5a479056b5e84ffc4723c81a506bb5c6fe21300c6f322713d93f4f2fe7ebacaec9b8fab48dfbffda9484a43e37624542455e88f86ffdd42079cfd2c06e5958870b7c8cf40234e4f2d90b3dc39f053f92bb8b7300853e46cc1fb0a343d5527d410e7e6244d822d6f4b25b3695c0ede1e338840c623e7bc2ccaca226e27d5990beae5440a73aaf22abdd7acb9ac123d6d69996f0d1ea1c8dc54f9a044b4b6c29632139a606ca8b342244050e6d25b449c22e5e596de2c7f9795911163cafe4e194be2ec5f078c2e33fbf8496bae0a116614f84b0725920d03a2b2e6c85ea4c667f197eaa829cd9ca3635a8ea5471f9e968dcd0636308074d1a56bf27ac36315e1f962b1429f9258a41b39dcb22391d53c2c6c643f0c5a1123e82d7d62027c38940a3771d317cb2e8fb02074f449f2a350af897dd6c0cca92c32f1c262e791ce2b873fe573112dd9d9ffd6a8ddfb3cdac8fa7a4cb522b7269bc898bf9f18c85347d5c5c4580be929262996a4222e84dd612bfec5d9a91ff330a2ea1dbe999011cf83ebb37a762a83a5dd7b2328b4c3ac992f164547408c25669edd9d22d0696d8d039ebbe2b7bf3cf3ff417ed541e402b1568e28113cd4dbb19ab94fc6cf3c1ba494fbff02de87deda6106a0885aade8f5029f43420aeb246ca28f03f3d4fbf81021d8a58b70811fa49133e30ccb723139cafcd2294744fdc127a4f1727f5af9e733ef580d0551627d16693c9b219c0acaf60ce68a9d8bf76e4cb8b04d98b5fdf05840c8a9f0dc06ee6043dd95b10c78c5bd28ebaf613bc42aca18c44ec042ed522b404f5b8432c7deb401cb3ad67f19c60bb4736ca20c0eddce45c655b6c1b7c06d737fb714a7b6ea0d051965a6d424c229e8c58a4c2e5a66ba1d89a2a1e94ec9fcbaa90db8691d9d79ed2e0035bde535246b7b3979546c8b41dba8290e494c1d51f7e6856a8edb53f751bad71223629945bbcec3369c2bfdee0975bc2b68b812993db276936a4327d64d22acd5ad5b4e2cd4c223e99bb4a9a48475c85df4b8d3da47aab7ecfc16e1444e49af06126862a990e5c42c385d739d327798c38e08634d645d3ed2fa872101788bc4cdc4f61ccd1886363984e9f80f28cd07996fb655ade36bee16ccbff36796245f58a91c12e8a448ee3cfee0a8a1460c3c3a7873695da8d0147dfede288459bd0c6e5fd97b1f317680dbf9036c49a77c8f9dec611328bcf713fffbb02a16abf7e9e68cfde42dd2b28b1225ca9e188b681ce2de682ff99bbcdc557abd0b872e12d2954439fe537a9169d96195508e3b4f159103e96c750ade8c67532d6b61eab9a365e81246979dad083c902aa4ebb7f1d3a0656b385f0a13daad5fc35494932ba44008c9e4105e165b96879ae511f30cbc3de67dde3adf4e394d6c419225c7ac298b0a8de8e91f8fea431263b4bfe2711918739f6c0064729c83682b5cb51c07b87cc53f5ff275759912aeab21da513f5a00e9688b18cc1a65bd185e4affb0b128b48264b9f5f02576d93b3862836a89f85a51b93dea8d30b86f5ba271db8452d8ae6b"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0xa0202, 0xc4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0xbfbb, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0xffffff7f, @loopback, 0x6}, 0x1c) sendfile(r2, r2, 0x0, 0x2) 42.294080594s ago: executing program 3 (id=380): prctl$PR_SET_TSC(0x1a, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0xffffffff, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x0, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x7ff, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x5, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x5], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x8, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x10, 0xfffffffc, 0x0, 0x0, "810000cc2b000000000000facc1fff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r5, 0x100, 0x4) fstat(r1, &(0x7f0000000780)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./bus\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) read(r0, &(0x7f0000000040)=""/59, 0x3b) pipe2$9p(&(0x7f0000000080), 0x800) 41.493005121s ago: executing program 3 (id=386): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a0000000000007299000000000000020000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 41.276505442s ago: executing program 3 (id=387): syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x6b, {0x6b, 0xe, "cab6eb4b69219d8ae2ded3cccf838db123de2341d276952f952cb4c092bdb2aa107f7b10d051d913c355719fbbe343227dc4c62be9775264027023a74af11efa3b57156dd58e39264277f32a1a7874bec633de26f9ac8b33040a408b640905129643e81a4f1c7d884e"}}, &(0x7f0000000080)={0x0, 0x3, 0x11, @string={0x11, 0x3, "f3edfe2ace4269e61e3c2704f96dc5"}}}, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0x6, 0x44, "7834b0398666777261fb0f0609e1e21470b530fbbde3f1d17af6024aa9e7b9ffa5dc86e8d2f390c1cdc6885be92591c46b398b617a0ece9dd2457ac72640e7d5ef8aea41"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0xc0, 0x5, 0x6, "97d20a1a594b"}, &(0x7f0000000240)={0x40, 0x5, 0x1, "9d"}}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 41.189168376s ago: executing program 32 (id=387): syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x6b, {0x6b, 0xe, "cab6eb4b69219d8ae2ded3cccf838db123de2341d276952f952cb4c092bdb2aa107f7b10d051d913c355719fbbe343227dc4c62be9775264027023a74af11efa3b57156dd58e39264277f32a1a7874bec633de26f9ac8b33040a408b640905129643e81a4f1c7d884e"}}, &(0x7f0000000080)={0x0, 0x3, 0x11, @string={0x11, 0x3, "f3edfe2ace4269e61e3c2704f96dc5"}}}, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0x6, 0x44, "7834b0398666777261fb0f0609e1e21470b530fbbde3f1d17af6024aa9e7b9ffa5dc86e8d2f390c1cdc6885be92591c46b398b617a0ece9dd2457ac72640e7d5ef8aea41"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0xc0, 0x5, 0x6, "97d20a1a594b"}, &(0x7f0000000240)={0x40, 0x5, 0x1, "9d"}}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 16.583125822s ago: executing program 2 (id=621): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") (fail_nth: 7) 16.293577275s ago: executing program 2 (id=622): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001fe80000000000000000000000000000f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a0000000000007299000000000000020000000000000801000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 16.162280951s ago: executing program 2 (id=626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="f26e66b810000f00d8c443616c0cc84836650f01d1c74424007a000000c744240200000000ff2c2466ba2100b800780000ef2e66400f3a0b31020f015f8f8108f900000066baf80cb8e48eac84ef66bafc0ced", 0x53}], 0x1, 0x49, &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 15.735282851s ago: executing program 2 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x1, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002240)=""/4112, 0x1010}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000001980)=""/285, 0x11d}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000080)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) read$FUSE(r5, &(0x7f0000003280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r6, {0x7, 0x29, 0x81, 0x800006, 0xfffc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x100, 0x78a}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000540)="6414db45d5", 0x5}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'veth0_to_hsr\x00'}) 14.803467605s ago: executing program 2 (id=638): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") (fail_nth: 8) 14.597290875s ago: executing program 2 (id=640): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) pipe(&(0x7f0000000040)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x5, {0x5, 0xd, "cfaf36"}}, 0x0}, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)={0x0, 0x30, 0xd, "6e9875115cabea0bda77ee6dc0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) pipe(&(0x7f0000000040)) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x5, {0x5, 0xd, "cfaf36"}}, 0x0}, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)={0x0, 0x30, 0xd, "6e9875115cabea0bda77ee6dc0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 14.48628528s ago: executing program 33 (id=640): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) pipe(&(0x7f0000000040)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x5, {0x5, 0xd, "cfaf36"}}, 0x0}, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)={0x0, 0x30, 0xd, "6e9875115cabea0bda77ee6dc0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) pipe(&(0x7f0000000040)) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x5, {0x5, 0xd, "cfaf36"}}, 0x0}, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)={0x0, 0x30, 0xd, "6e9875115cabea0bda77ee6dc0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 6.164226141s ago: executing program 1 (id=732): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a0000000000007299000000000000020000000000000801000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 6.077169265s ago: executing program 1 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x20, 0x70bd2c, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [{0x2, 0x2, r6}, {0x2, 0x1, r8}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x0, r7}, {0x8, 0x2, r9}]}, 0x4c, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}]}}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 6.050045806s ago: executing program 1 (id=734): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c000000080004"], 0x20}}, 0x20008080) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 5.868987124s ago: executing program 0 (id=736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x3ffffd, 0x0, {0x26, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}}, 0x4c}}, 0x20000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x7, 0x9, 0x3, 0x8}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x10, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0x1, 0x5, 0x5, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0xeeee0000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x9, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0xdddd1000, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x4, 0x4, 0xff, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xadd8}, {0xfffff000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.858973665s ago: executing program 1 (id=737): r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b2404010159555932"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="20061a00090000401c782c9658b56df55e4db78d122a7b000000000000000000"], 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x97a}, 0x0, 0x0, 0x0}) 5.75987422s ago: executing program 0 (id=738): syz_usb_connect(0x3, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1100201628332080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593208001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e020000070581059c"], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="280000001400190100000000000000022865d1519e"], 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x7, 0x9, 0xf, 0x8}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x10, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0x1, 0x5, 0x5, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0xeeee0000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x88, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0xaef27a8ab1eb5ccd, 0x8000000, 0x0, 0xd, 0x9, 0x2d, 0xfd, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0xdddd1000, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x1}, {0xa000, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x4, 0x4, 0xff, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xadd8}, {0xfffff000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) recvfrom(r4, 0x0, 0x0, 0x40010061, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0x1}}, 0x80) syz_usb_connect$uac1(0x0, 0xc8, &(0x7f0000000440)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x499, 0x103d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0xc, 0x70, 0x52, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x10, 0x2, 0x14, 0xab, 'VM'}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x37, 0x75, 0xf, 'B'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0xb6, 0x7, 'DI', "ceda"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0x6, "c291382f43c8377aea"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x1, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x8, 0x9, {0x7, 0x25, 0x1, 0x8, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xfb, 0x1, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x9, 0x3, "5dc7", "94bd39"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0x9, 0x3, {0x7, 0x25, 0x1, 0xc, 0x6, 0x7}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x8, 0x2, 0x48, 0x10, 0x8}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}}) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r7 = socket(0x1e, 0x805, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x309000, 0x138, 0x20}, 0x18) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) fremovexattr(r3, &(0x7f0000000000)=@known='trusted.syz\x00') quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000201, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') exit(0x3) read$FUSE(r9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.704871362s ago: executing program 4 (id=739): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x40, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x4}}}}}]}}]}}, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) (async, rerun: 32) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780), 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="0031280000002805832aaff7efb930f0187ff0478fa22a61a5"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0x7, {0x7, 0x0, "0000000500"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x442) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000480)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b0009000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee000000000000000002000000000a81f2a8", 0x58}], 0x1) (async) setuid(0xee01) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) 4.455869831s ago: executing program 5 (id=757): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x4800) bind$netlink(r3, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 4.381348654s ago: executing program 5 (id=758): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 4.367817196s ago: executing program 5 (id=759): r0 = getpgid(0x0) r1 = syz_clone(0x800000, &(0x7f0000000000)="896c65e71c5078f8da6b22fa4dae23a96e06b8af2bba2d8fd87d8f4953df8e6eb5cca26e539d5e4e9e16c5032bb3785ecc14c438e96c2102f647a19f2af862bab9399c5254f34f1b27f0a4feb6604bf0231b29ecdf8800ae04a38c28e477cac630fa0e159269a5e6e529208b011bfcc88e000e35731e12bdffe370dc3a0ed99caf4f7e4763a62904cc9874815b53e902", 0x90, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="f64874e33e0a35490dc9d829a96c93ff852036c55361a8d49702b0ef6c6fb669c3543a4cf25c217434d7fad35ddb77976439779055d421b90236bfe8154ed7e190d23372010a16") r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) kcmp(r0, r1, 0x5, r2, 0xffffffffffffffff) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000200)=[@nested_load_code={0x12e, 0x84, {0x2, "66ba6100b875170000efb9800000c00f3235004000000f30b9800000c00f3235001000000f30470feaf866b862000f00d8b9130900000f32c744240078000000c744240200200000ff1c24440f01c548b8d9000000000000000f23d00f21f835000000030f23f8440fc75bc2"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0xbc}}, @nested_load_code={0x12e, 0x79, {0x1, "66410fd7d7c443c548560903b9d8020000b800080000ba000000000f3026400f0139c48281f781a5000000b94f020000b800180000ba000000000f3066baf80cb832555b8cef66bafc0c66ed0fc7aa00000000640f090f20e035200000000f22e0"}}, @in_dx={0x69, 0x20, {0xde67, 0x2}}, @code={0xa, 0x4e, {"2e4b0fc76fd1ddea66baf80cb8de822989ef66bafc0c66edf30f0966b836000f00d866bad104b0e8eec44100167e0c26640f005422e064420f30f65500"}}, @code={0xa, 0x56, {"b9800000c00f3235008000000f30f30f0667450f01c90f0fc496420f7831479b0f01cb66baf80cb84da5fc81ef66bafc0cb037ee666766410f3880383e0fc79ca1af230000"}}, @wr_drn={0x68, 0x20}, @nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8}, @rdmsr={0x66, 0x18, {0xb2e}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @cpuid={0x64, 0x18, {0xfffffff1, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x66, {0x1, "c4c27d783b66b8f7000f00d8f3460f2ad53e0f122d0d0000006636d9f966baf80cb80da0a58bef66bafc0cb04fee36660f73d30066470f3a0f3eaab805000000b9000001000f01d9f264410f01df"}}, @in_dx={0x69, 0x20, {0x4c6b, 0x1}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x3fd4, 0x0, 0x8}}], 0x367}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000640)=0x8) prlimit64(r1, 0x8, &(0x7f0000000680)={0x9, 0x2}, &(0x7f00000006c0)) syz_clone3(&(0x7f00000009c0)={0x0, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780), {0x32}, &(0x7f00000007c0)=""/209, 0xd1, &(0x7f00000008c0)=""/158, &(0x7f0000000980)=[r0, r0], 0x2}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) ppoll(&(0x7f0000000a40)=[{r2, 0x8421}, {r2, 0x8}, {r3, 0x8108}], 0x3, &(0x7f0000000a80)={0x0, 0x3938700}, &(0x7f0000000ac0)={[0xa01]}, 0x8) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000b00)={0x2710, 0x6, 0x30000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000b40), 0x8c000, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000b80)) r7 = syz_io_uring_setup(0x34c3, &(0x7f0000000c40)={0x0, 0x837f, 0x1, 0x0, 0x378}, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) r8 = syz_ublk_setup_io_uring(0x4a84, &(0x7f0000000d80)={0x0, 0xd065, 0x8000, 0x1, 0x370}, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)) r9 = syz_ublk_setup_io_uring(0x8cc, &(0x7f0000000ec0)={0x0, 0x9e1, 0xd2529870acf10bda, 0x0, 0x1ae}, &(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x0, 0xaadd, 0x200, 0x2, 0x240}, &(0x7f0000001300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd0fe, 0x10, 0x1, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa764, 0x40, 0x0, 0x2a0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70b0, 0x8000, 0x3, 0x2eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4ed, 0x440, 0x2, 0x309}}], 0x4, &(0x7f0000002580)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x2, 0xf63, 0x0, &(0x7f0000001580)=@buf_512="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"}}, &(0x7f0000002600)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x0, 0x6418, 0x800, 0x0, 0x2f8}, &(0x7f0000001000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x340c, 0x400, 0x3, 0x192, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49f0, 0x0, 0x2, 0x3ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3934, 0x10, 0x3, 0x179, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6fb4, 0x100, 0x0, 0x3a1, 0x0, r9}}], 0x4, &(0x7f0000003640)={0x2e, 0x1e, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x9c6, 0x0, &(0x7f0000002640)=@buf_4k="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"}}, &(0x7f00000036c0)) fcntl$getownex(r7, 0x10, &(0x7f0000003700)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000003740)={'\x00', 0x4, 0x6, 0x8a71, 0x5ba9, 0x0, r4}) tgkill(r12, r13, 0xa) r14 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000037c0)={0x0, 0x0}, &(0x7f0000003800)=0xc) setsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000003840)={r13, r15, 0xffffffffffffffff}, 0xc) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f0000003b40)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003b00)={&(0x7f00000038c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x48, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x312e93ad}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5801f379}]}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "26fcb873258d090f76804dceb2a779b481b8bd165cc386df2471c8d771364cbcb0c0f01118b9889bceae6ad4a3e20cb51b9c40c0a3ee14a48a87fcd256a7a8e75b9f6d429e11a7713a0d6c44d684b4a0e9521bf7086457575447b41400a18c339d371f6a019dd15547175542398bb7c901320738d41ffd06dc5b1b6c22be6513650e984995"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x21c}, 0x1, 0x0, 0x0, 0x42}, 0x24000081) fcntl$F_SET_RW_HINT(r11, 0x40c, &(0x7f0000003b80)=0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000003c00)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 4.204909263s ago: executing program 5 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r3, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) write(r3, &(0x7f0000000000)="01", 0x1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xfec00000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x7, 0x9, 0x3, 0x8}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x10, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0x1, 0x5, 0x5, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0xeeee0000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0xd, 0x2d, 0x6, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0xdddd1000, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x6, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x4, 0x4, 0xe, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xadd8}, {0xfffff000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100080001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r7, 0x1) flock(r7, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="64360f09c744240000080000c7442402809b0000c7442406000000000f011c24f20f594912f30fc7b1a90f0000647e00f30fc7741064660f3829c4b95e0200000f32c4c28945501966b856000f00d8", 0x4f}], 0x1, 0x8, &(0x7f00000001c0)=[@cstype0={0x4, 0x5}], 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000000)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.133867276s ago: executing program 5 (id=761): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.832696287s ago: executing program 1 (id=762): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc83b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, 0x0, 0xffffffcd) pipe2(0x0, 0xc0000) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) openat(r0, &(0x7f0000000080)='./bus\x00', 0x40002, 0x20) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.701294163s ago: executing program 0 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}]}}) 2.701147594s ago: executing program 0 (id=764): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff0400000000000000020000000002000000e6ffe4200091ad07000000000000000000008000000000ffff0f800000000003efff00000000000400000200000000130000000000000003000000b86b6e"], 0xd4}}, 0x0) 2.699700723s ago: executing program 0 (id=765): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) r0 = open$dir(&(0x7f0000000100)='./dev\x00', 0x101000, 0x4) statx(r0, &(0x7f0000000140)='./sys\x00', 0x0, 0x200, &(0x7f0000000300)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="15ca60ac578d2cb1450146d54d12bd3bbd03abf70f876dc30cd4b49e6692", 0x1e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) chdir(&(0x7f00000000c0)='./sys\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) mount(0x0, &(0x7f0000044440)='./dev\x00', &(0x7f0000044480)='devtmpfs\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x109181, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, [@sadb_key={0x10, 0x8, 0x3c0, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d620000000000000000"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xd0}, 0x1, 0x7}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x2000000000000004) ioctl$sock_bt_hci(r5, 0x800448d3, &(0x7f0000000440)="9ad36a0a") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x1}, {0x806, 0x0, 0x0, 0x7ffffcb9}]}) 2.667705195s ago: executing program 4 (id=766): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd80ffffff00ff010000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 2.55167232s ago: executing program 4 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="f26e66b810000f00d8c443616c0cc84836650f01d1c74424007a000000c744240200000000ff2c2466ba2100b800780000ef2e66400f3a0b31020f015f8f8108f900000066baf80cb8e48eac84ef66bafc0ced", 0x53}], 0x1, 0x49, &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 2.177663398s ago: executing program 4 (id=768): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400003000000000000000006e0100003801000001") 2.105256821s ago: executing program 4 (id=769): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x1, 0xf, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006c6f00000000000000000000000000001c000380"], 0x48}}, 0x0) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) 1.300010879s ago: executing program 4 (id=770): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x9, 0xc5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x30, 0x2a, 0x2}}}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x16) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) syz_open_procfs(0x0, 0x0) r8 = epoll_create1(0x0) epoll_pwait2(r8, &(0x7f0000000140)=[{}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) nanosleep(&(0x7f0000000080)={0x1}, 0x0) write(r6, &(0x7f0000000300)="aaaaaaaaaa3eaaaaaaaaaa3c4305400f3200aaaaaaaaaa3effffffffffffaaaaaaaaaa3c08060001080006040001aaaaaaaaaa3c0a0000010000000000000a000002", 0x42) dup(r0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r1, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 154.221173ms ago: executing program 1 (id=771): r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b2404010159555932"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="20061a00090000401c782c9658b56df55e4db78d122a7b000000000000000000"], 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x97a}, 0x0, 0x0, 0x0}) 6.52087ms ago: executing program 5 (id=772): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000014000000000000000000000002000000bb0000000000000040000000000000000000000007000000862400000001"], 0x70}}], 0x1, 0x24008890) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040), 0x4) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) 0s ago: executing program 0 (id=773): syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') close(r0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') (async) socket(0x10, 0x3, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) preadv(r4, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53a8, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 71.112165][ T1694] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 71.112196][ T1694] ? _parse_integer_limit+0x195/0x1e0 [ 71.112223][ T1694] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.112255][ T1694] ? kstrtoull+0x13b/0x1e0 [ 71.112278][ T1694] ? kstrtouint+0x78/0xf0 [ 71.112303][ T1694] ? ioctl_has_perm+0x1bc/0x500 [ 71.112327][ T1694] ? __asan_memcpy+0x5a/0x80 [ 71.112351][ T1694] ? ioctl_has_perm+0x408/0x500 [ 71.112375][ T1694] ? has_cap_mac_admin+0xd0/0xd0 [ 71.112399][ T1694] ? __kasan_check_write+0x18/0x20 [ 71.112422][ T1694] ? mutex_lock_killable+0x97/0x1d0 [ 71.112450][ T1694] ? __cfi_mutex_lock_killable+0x10/0x10 [ 71.112476][ T1694] ? proc_fail_nth_write+0x184/0x220 [ 71.112510][ T1694] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 71.112544][ T1694] kvm_vcpu_ioctl+0xa43/0x1000 [ 71.112567][ T1694] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.112589][ T1694] ? __cfi_vfs_write+0x10/0x10 [ 71.112614][ T1694] ? __kasan_check_write+0x18/0x20 [ 71.112636][ T1694] ? mutex_unlock+0x90/0x240 [ 71.112661][ T1694] ? __cfi_mutex_unlock+0x10/0x10 [ 71.112690][ T1694] ? __fget_files+0x2bc/0x330 [ 71.112718][ T1694] ? bpf_lsm_file_ioctl+0xd/0x20 [ 71.112747][ T1694] ? security_file_ioctl+0x3e/0x110 [ 71.112770][ T1694] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.112792][ T1694] __se_sys_ioctl+0x126/0x1b0 [ 71.112819][ T1694] __x64_sys_ioctl+0x7f/0xa0 [ 71.112847][ T1694] x64_sys_call+0x1878/0x2ee0 [ 71.112869][ T1694] do_syscall_64+0x57/0xf0 [ 71.112889][ T1694] ? clear_bhb_loop+0x50/0xa0 [ 71.112917][ T1694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.112942][ T1694] RIP: 0033:0x7f01c059e159 [ 71.112962][ T1694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.112980][ T1694] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.113004][ T1694] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 71.113020][ T1694] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.113032][ T1694] RBP: 00007f01c1423090 R08: 0000000000000000 R09: 0000000000000000 [ 71.113046][ T1694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.113059][ T1694] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 71.113078][ T1694] [ 71.716014][ T65] usb 5-1: device descriptor read/8, error -71 [ 71.863187][ T65] usb 5-1: device descriptor read/8, error -71 [ 71.934369][ T1704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.943250][ T1704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.055897][ T1708] FAULT_INJECTION: forcing a failure. [ 72.055897][ T1708] name failslab, interval 1, probability 0, space 0, times 0 [ 72.068891][ T1708] CPU: 1 UID: 0 PID: 1708 Comm: syz.1.478 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 72.068925][ T1708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.068939][ T1708] Call Trace: [ 72.068947][ T1708] [ 72.068955][ T1708] __dump_stack+0x21/0x30 [ 72.068998][ T1708] dump_stack_lvl+0x140/0x1c0 [ 72.069026][ T1708] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.069060][ T1708] dump_stack+0x19/0x20 [ 72.069089][ T1708] should_fail_ex+0x3c2/0x510 [ 72.069120][ T1708] should_failslab+0xac/0x100 [ 72.069148][ T1708] kmem_cache_alloc_noprof+0x42/0x410 [ 72.069171][ T1708] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 72.069206][ T1708] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 72.069239][ T1708] ? folio_mark_accessed+0x34b/0x620 [ 72.069268][ T1708] kvm_mmu_topup_memory_cache+0x24/0x30 [ 72.069301][ T1708] kvm_mmu_load+0xa1/0x2900 [ 72.069329][ T1708] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 72.069362][ T1708] ? kvm_release_page_clean+0x10a/0x150 [ 72.069385][ T1708] ? kvm_apic_has_interrupt+0x4e2/0x790 [ 72.069417][ T1708] vcpu_run+0x4d72/0x7830 [ 72.069447][ T1708] ? kvm_sched_clock_read+0x15/0x30 [ 72.069487][ T1708] ? signal_pending+0xc0/0xc0 [ 72.069515][ T1708] ? __kasan_check_write+0x18/0x20 [ 72.069536][ T1708] ? xfd_validate_state+0x68/0x140 [ 72.069566][ T1708] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 72.069591][ T1708] ? __kasan_check_write+0x18/0x20 [ 72.069613][ T1708] ? fpregs_mark_activate+0x68/0x160 [ 72.069638][ T1708] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 72.069663][ T1708] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 72.069688][ T1708] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 72.069717][ T1708] ? _parse_integer_limit+0x195/0x1e0 [ 72.069744][ T1708] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 72.069774][ T1708] ? kstrtoull+0x13b/0x1e0 [ 72.069798][ T1708] ? kstrtouint+0x78/0xf0 [ 72.069820][ T1708] ? ioctl_has_perm+0x1bc/0x500 [ 72.069843][ T1708] ? __asan_memcpy+0x5a/0x80 [ 72.069865][ T1708] ? ioctl_has_perm+0x408/0x500 [ 72.069887][ T1708] ? has_cap_mac_admin+0xd0/0xd0 [ 72.069910][ T1708] ? __kasan_check_write+0x18/0x20 [ 72.069931][ T1708] ? mutex_lock_killable+0x97/0x1d0 [ 72.069955][ T1708] ? __cfi_mutex_lock_killable+0x10/0x10 [ 72.069990][ T1708] ? proc_fail_nth_write+0x184/0x220 [ 72.070015][ T1708] kvm_vcpu_ioctl+0xa43/0x1000 [ 72.070059][ T1708] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 72.070080][ T1708] ? __cfi_vfs_write+0x10/0x10 [ 72.070101][ T1708] ? __kasan_check_write+0x18/0x20 [ 72.070126][ T1708] ? mutex_unlock+0x90/0x240 [ 72.070144][ T1708] ? __cfi_mutex_unlock+0x10/0x10 [ 72.070163][ T1708] ? __fget_files+0x2bc/0x330 [ 72.070201][ T1708] ? bpf_lsm_file_ioctl+0xd/0x20 [ 72.070229][ T1708] ? security_file_ioctl+0x3e/0x110 [ 72.070249][ T1708] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 72.070274][ T1708] __se_sys_ioctl+0x126/0x1b0 [ 72.070294][ T1708] __x64_sys_ioctl+0x7f/0xa0 [ 72.070313][ T1708] x64_sys_call+0x1878/0x2ee0 [ 72.070341][ T1708] do_syscall_64+0x57/0xf0 [ 72.070361][ T1708] ? clear_bhb_loop+0x50/0xa0 [ 72.070386][ T1708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.070410][ T1708] RIP: 0033:0x7f01c059e159 [ 72.070431][ T1708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.070444][ T1708] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.070461][ T1708] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 72.070473][ T1708] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 72.070501][ T1708] RBP: 00007f01c1423090 R08: 0000000000000000 R09: 0000000000000000 [ 72.070515][ T1708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.070528][ T1708] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 72.070545][ T1708] [ 72.447532][ T65] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 72.472076][ T65] usb 5-1: device descriptor read/8, error -71 [ 72.480614][ T1711] device-mapper: ioctl: populate_table: no targets specified [ 72.513200][ T1714] netlink: 'syz.4.480': attribute type 13 has an invalid length. [ 72.515556][ T1715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1715 comm=syz.4.480 [ 72.543960][ T1714] erspan0: refused to change device tx_queue_len [ 72.622016][ T65] usb 5-1: device descriptor read/8, error -71 [ 72.651084][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 72.651102][ T36] audit: type=1400 audit(1789466231.650:17162): avc: denied { cmd } for pid=1721 comm="iou-wrk-1722" path="socket:[21705]" dev="sockfs" ino=21705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.681964][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 72.694013][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 72.711569][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 72.731721][ T65] usb usb5-port1: unable to enumerate USB device [ 72.760365][ T1722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 72.917063][ T1738] device-mapper: ioctl: populate_table: no targets specified [ 72.946829][ T1741] SELinux: failed to load policy [ 72.966826][ T1743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.490'. [ 72.990828][ T36] audit: type=1400 audit(1789466231.990:17163): avc: denied { ioctl } for pid=1744 comm="syz.1.491" path="socket:[21815]" dev="sockfs" ino=21815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.059018][ T1747] warn_alloc: 1 callbacks suppressed [ 73.059048][ T1747] syz.1.492: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 73.080483][ T1747] CPU: 1 UID: 0 PID: 1747 Comm: syz.1.492 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 73.080517][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.080531][ T1747] Call Trace: [ 73.080539][ T1747] [ 73.080548][ T1747] __dump_stack+0x21/0x30 [ 73.080588][ T1747] dump_stack_lvl+0x140/0x1c0 [ 73.080618][ T1747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.080656][ T1747] dump_stack+0x19/0x20 [ 73.080676][ T1747] warn_alloc+0x1e7/0x2c0 [ 73.080700][ T1747] ? __cfi_warn_alloc+0x10/0x10 [ 73.080745][ T1747] ? __kmalloc_node_noprof+0x252/0x500 [ 73.080768][ T1747] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 73.080807][ T1747] __vmalloc_node_range_noprof+0x100b/0x1300 [ 73.080835][ T1747] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 73.080875][ T1747] ? kasan_save_alloc_info+0x3a/0x50 [ 73.080904][ T1747] ? __kasan_slab_alloc+0x73/0x90 [ 73.080929][ T1747] ? arch_dup_task_struct+0x5b/0xe0 [ 73.080964][ T1747] ? __asan_memcpy+0x5a/0x80 [ 73.080980][ T1747] dup_task_struct+0x5d6/0xd80 [ 73.081000][ T1747] ? copy_process+0x57c/0x3350 [ 73.081039][ T1747] ? _raw_spin_lock_irq+0x93/0x120 [ 73.081060][ T1747] ? copy_process+0x3350/0x3350 [ 73.081087][ T1747] ? __kasan_check_write+0x18/0x20 [ 73.081112][ T1747] copy_process+0x57c/0x3350 [ 73.081134][ T1747] ? kasan_save_alloc_info+0x3a/0x50 [ 73.081149][ T1747] ? __cfi_copy_process+0x10/0x10 [ 73.081187][ T1747] ? __kmalloc_cache_noprof+0x23c/0x470 [ 73.081210][ T1747] ? __kasan_check_write+0x18/0x20 [ 73.081232][ T1747] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 73.081260][ T1747] vhost_task_create+0x1f7/0x3f0 [ 73.081282][ T1747] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 73.081307][ T1747] ? __cfi_vhost_task_create+0x10/0x10 [ 73.081334][ T1747] ? __cfi_vhost_task_fn+0x10/0x10 [ 73.081355][ T1747] ? __kasan_check_write+0x18/0x20 [ 73.081374][ T1747] ? mutex_lock+0x97/0x1d0 [ 73.081409][ T1747] ? __cfi_mutex_lock+0x10/0x10 [ 73.081426][ T1747] ? kernel_text_address+0xa9/0xe0 [ 73.081466][ T1747] kvm_mmu_post_init_vm+0x161/0x300 [ 73.081501][ T1747] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 73.081530][ T1747] ? _parse_integer_limit+0x195/0x1e0 [ 73.081554][ T1747] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 73.081582][ T1747] ? kstrtoull+0x13b/0x1e0 [ 73.081604][ T1747] ? kstrtouint+0x78/0xf0 [ 73.081627][ T1747] ? ioctl_has_perm+0x1bc/0x500 [ 73.081649][ T1747] ? __asan_memcpy+0x5a/0x80 [ 73.081671][ T1747] ? ioctl_has_perm+0x408/0x500 [ 73.081692][ T1747] ? has_cap_mac_admin+0xd0/0xd0 [ 73.081715][ T1747] ? __kasan_check_write+0x18/0x20 [ 73.081735][ T1747] ? mutex_lock_killable+0x97/0x1d0 [ 73.081763][ T1747] ? __cfi_mutex_lock_killable+0x10/0x10 [ 73.081789][ T1747] ? proc_fail_nth_write+0x184/0x220 [ 73.081821][ T1747] kvm_vcpu_ioctl+0xa43/0x1000 [ 73.081843][ T1747] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 73.081863][ T1747] ? __cfi_vfs_write+0x10/0x10 [ 73.081947][ T1747] ? __kasan_check_write+0x18/0x20 [ 73.081971][ T1747] ? mutex_unlock+0x90/0x240 [ 73.081995][ T1747] ? __cfi_mutex_unlock+0x10/0x10 [ 73.082015][ T1747] ? __fget_files+0x2bc/0x330 [ 73.082050][ T1747] ? bpf_lsm_file_ioctl+0xd/0x20 [ 73.082079][ T1747] ? security_file_ioctl+0x3e/0x110 [ 73.082099][ T1747] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 73.082118][ T1747] __se_sys_ioctl+0x126/0x1b0 [ 73.082147][ T1747] __x64_sys_ioctl+0x7f/0xa0 [ 73.082166][ T1747] x64_sys_call+0x1878/0x2ee0 [ 73.082181][ T1747] do_syscall_64+0x57/0xf0 [ 73.082211][ T1747] ? clear_bhb_loop+0x50/0xa0 [ 73.082238][ T1747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.082262][ T1747] RIP: 0033:0x7f01c059e159 [ 73.082285][ T1747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.082299][ T1747] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.082332][ T1747] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 73.082350][ T1747] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.082363][ T1747] RBP: 00007f01c1423090 R08: 0000000000000000 R09: 0000000000000000 [ 73.082377][ T1747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.082389][ T1747] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 73.082407][ T1747] [ 73.301662][ T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.304431][ T1747] Mem-Info: [ 73.461614][ T65] usb 5-1: device descriptor read/64, error -71 [ 73.472167][ T1747] active_anon:23222 inactive_anon:0 isolated_anon:0 [ 73.472167][ T1747] active_file:18806 inactive_file:2312 isolated_file:0 [ 73.472167][ T1747] unevictable:0 dirty:160 writeback:0 [ 73.472167][ T1747] slab_reclaimable:6221 slab_unreclaimable:69274 [ 73.472167][ T1747] mapped:25447 shmem:16619 pagetables:884 [ 73.472167][ T1747] sec_pagetables:0 bounce:0 [ 73.472167][ T1747] kernel_misc_reclaimable:0 [ 73.472167][ T1747] free:1512985 free_pcp:2026 free_cma:0 [ 73.538386][ T1688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.573409][ T1747] Node 0 active_anon:92888kB inactive_anon:0kB active_file:75224kB inactive_file:9248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101788kB dirty:640kB writeback:0kB shmem:66476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4696kB pagetables:3536kB sec_pagetables:0kB all_unreclaimable? no [ 73.585335][ T1688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.610880][ T1747] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:5140kB free_cma:0kB [ 73.647881][ T1747] lowmem_reserve[]: 0 3921 3921 [ 73.652922][ T1747] Normal free:3092072kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92888kB inactive_anon:0kB active_file:75224kB inactive_file:9248kB unevictable:0kB writepending:640kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4620kB local_pcp:2492kB free_cma:0kB [ 73.684259][ T1747] lowmem_reserve[]: 0 0 0 [ 73.688656][ T1747] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 73.704220][ T1747] Normal: 2*4kB (UE) 101*8kB (UME) 306*16kB (UME) 288*32kB (UME) 303*64kB (UM) 80*128kB (UME) 58*256kB (UME) 31*512kB (UME) 12*1024kB (UME) 7*2048kB (UM) 730*4096kB (UM) = 3091984kB [ 73.722420][ T1747] 37733 total pagecache pages [ 73.727139][ T1747] 0 pages in swap cache [ 73.731333][ T1747] Free swap = 124728kB [ 73.735566][ T1747] Total swap = 124996kB [ 73.739754][ T1747] 2097051 pages RAM [ 73.743659][ T1747] 0 pages HighMem/MovableOnly [ 73.748360][ T1747] 352242 pages reserved [ 73.751712][ T65] usb 5-1: device descriptor read/64, error -71 [ 73.752609][ T1747] 0 pages cma reserved [ 73.765433][ T1747] Memory allocations: [ 73.769465][ T1747] 0 B 0 init/main.c:1477 func:do_initcalls [ 73.776726][ T1747] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 73.784856][ T1747] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 73.792806][ T1747] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 73.800791][ T1747] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 73.808793][ T1747] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 73.810315][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 73.817450][ T1747] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 73.817473][ T1747] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 73.842483][ T1747] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 73.850546][ T1747] 0 B 0 init/initramfs.c:101 func:find_link [ 73.966609][ T1749] SELinux: failed to load policy [ 73.991572][ T65] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.007761][ T1753] rust_binder: 1752:1753 no such ref 0 [ 74.131586][ T65] usb 5-1: device descriptor read/64, error -71 [ 74.295662][ T36] audit: type=1400 audit(1789466233.300:17164): avc: denied { append } for pid=1756 comm="syz.1.497" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 74.350429][ T36] audit: type=1400 audit(1789466233.350:17165): avc: denied { setattr } for pid=1756 comm="syz.1.497" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.401582][ T65] usb 5-1: device descriptor read/64, error -71 [ 74.452133][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 74.463375][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 74.474370][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 74.485252][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 74.496304][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 74.507273][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 74.518268][ T65] usb usb5-port1: attempt power cycle [ 74.523793][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 74.535217][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 74.546284][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 74.557249][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 74.568221][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 74.579122][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 74.590176][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 74.601179][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 74.612428][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 74.623393][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 74.636067][ T10] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 72:a7:bf:49:4f:d8 [ 74.651298][ T10] usb 3-1: USB disconnect, device number 10 [ 74.657853][ T10] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 74.881593][ T65] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 74.902910][ T65] usb 5-1: device descriptor read/8, error -71 [ 75.032663][ T65] usb 5-1: device descriptor read/8, error -71 [ 75.272112][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 75.291156][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 75.312627][ T65] usb 5-1: device descriptor read/8, error -71 [ 75.343486][ T36] audit: type=1400 audit(1789466234.350:17166): avc: denied { setopt } for pid=1794 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.363118][ T36] audit: type=1400 audit(1789466234.350:17167): avc: denied { bind } for pid=1794 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.382660][ T36] audit: type=1400 audit(1789466234.350:17168): avc: denied { map } for pid=1794 comm="syz.0.501" path="socket:[21986]" dev="sockfs" ino=21986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.407941][ T36] audit: type=1400 audit(1789466234.350:17169): avc: denied { read write } for pid=1794 comm="syz.0.501" path="socket:[21986]" dev="sockfs" ino=21986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.453205][ T65] usb 5-1: device descriptor read/8, error -71 [ 75.501523][ T36] audit: type=1400 audit(1789466234.490:17170): avc: denied { write } for pid=1797 comm="syz.0.502" name="ip6_flowlabel" dev="proc" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.571665][ T65] usb usb5-port1: unable to enumerate USB device [ 75.604677][ T36] audit: type=1400 audit(1789466234.610:17171): avc: denied { read } for pid=1801 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.696254][ T1803] netlink: 68 bytes leftover after parsing attributes in process `syz.0.503'. [ 75.698588][ T1802] SELinux: failed to load policy [ 75.786269][ T1807] netlink: 72 bytes leftover after parsing attributes in process `syz.0.505'. [ 75.908527][ T1813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'. [ 75.974933][ T1821] FAULT_INJECTION: forcing a failure. [ 75.974933][ T1821] name failslab, interval 1, probability 0, space 0, times 0 [ 75.987740][ T1821] CPU: 1 UID: 0 PID: 1821 Comm: syz.0.511 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 75.987773][ T1821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.987787][ T1821] Call Trace: [ 75.987795][ T1821] [ 75.987803][ T1821] __dump_stack+0x21/0x30 [ 75.987839][ T1821] dump_stack_lvl+0x140/0x1c0 [ 75.987870][ T1821] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.987904][ T1821] dump_stack+0x19/0x20 [ 75.987934][ T1821] should_fail_ex+0x3c2/0x510 [ 75.987960][ T1821] should_failslab+0xac/0x100 [ 75.987987][ T1821] kmem_cache_alloc_noprof+0x42/0x410 [ 75.988011][ T1821] ? sk_prot_alloc+0x69/0x3a0 [ 75.988041][ T1821] ? security_inode_alloc+0x51/0x230 [ 75.988071][ T1821] sk_prot_alloc+0x69/0x3a0 [ 75.988097][ T1821] ? security_inode_alloc+0xc2/0x230 [ 75.988124][ T1821] sk_alloc+0x40/0x590 [ 75.988147][ T1821] ? inode_init_always_gfp+0x76e/0x9e0 [ 75.988176][ T1821] inet_create+0x5b7/0x1010 [ 75.988200][ T1821] __sock_create+0x3a5/0x810 [ 75.988226][ T1821] __sys_socket+0xe1/0x1c0 [ 75.988250][ T1821] __x64_sys_socket+0x7e/0x90 [ 75.988274][ T1821] x64_sys_call+0x2608/0x2ee0 [ 75.988294][ T1821] do_syscall_64+0x57/0xf0 [ 75.988315][ T1821] ? clear_bhb_loop+0x50/0xa0 [ 75.988342][ T1821] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.988367][ T1821] RIP: 0033:0x7f1cba39e159 [ 75.988386][ T1821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.988405][ T1821] RSP: 002b:00007f1cbb242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.988429][ T1821] RAX: ffffffffffffffda RBX: 00007f1cba625fa0 RCX: 00007f1cba39e159 [ 75.988445][ T1821] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 75.988458][ T1821] RBP: 00007f1cba43503b R08: 0000000000000000 R09: 0000000000000000 [ 75.988471][ T1821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.988484][ T1821] R13: 00007f1cba626038 R14: 00007f1cba625fa0 R15: 00007ffd678361d8 [ 75.988502][ T1821] [ 76.205058][ T1827] FAULT_INJECTION: forcing a failure. [ 76.205058][ T1827] name failslab, interval 1, probability 0, space 0, times 0 [ 76.217891][ T1827] CPU: 0 UID: 0 PID: 1827 Comm: syz.2.512 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 76.217929][ T1827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.217944][ T1827] Call Trace: [ 76.217952][ T1827] [ 76.217962][ T1827] __dump_stack+0x21/0x30 [ 76.217999][ T1827] dump_stack_lvl+0x140/0x1c0 [ 76.218030][ T1827] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.218075][ T1827] dump_stack+0x19/0x20 [ 76.218107][ T1827] should_fail_ex+0x3c2/0x510 [ 76.218137][ T1827] should_failslab+0xac/0x100 [ 76.218169][ T1827] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 76.218199][ T1827] ? __kasan_kmalloc+0x96/0xb0 [ 76.218230][ T1827] ? p9_client_create+0x32c/0x12d0 [ 76.218265][ T1827] kstrdup+0x4d/0x130 [ 76.218302][ T1827] p9_client_create+0x32c/0x12d0 [ 76.218334][ T1827] ? __cfi_p9_client_create+0x10/0x10 [ 76.218363][ T1827] ? __kasan_kmalloc+0x96/0xb0 [ 76.218392][ T1827] ? __kmalloc_cache_noprof+0x23c/0x470 [ 76.218419][ T1827] ? v9fs_mount+0xc1/0x9d0 [ 76.218448][ T1827] ? kasan_save_alloc_info+0x3a/0x50 [ 76.218480][ T1827] ? __kasan_kmalloc+0x96/0xb0 [ 76.218524][ T1827] ? kstrdup+0x7b/0x130 [ 76.218560][ T1827] ? __asan_memset+0x39/0x50 [ 76.218585][ T1827] v9fs_session_init+0x1c4/0x18a0 [ 76.218620][ T1827] ? __cfi_v9fs_session_init+0x10/0x10 [ 76.218645][ T1827] ? kasan_save_alloc_info+0x3a/0x50 [ 76.218668][ T1827] ? __kasan_kmalloc+0x96/0xb0 [ 76.218697][ T1827] ? __kmalloc_cache_noprof+0x23c/0x470 [ 76.218724][ T1827] ? v9fs_mount+0xc1/0x9d0 [ 76.218753][ T1827] v9fs_mount+0xdb/0x9d0 [ 76.218782][ T1827] ? __cfi_v9fs_mount+0x10/0x10 [ 76.218812][ T1827] ? selinux_capable+0x38/0x50 [ 76.218845][ T1827] legacy_get_tree+0x106/0x1b0 [ 76.218878][ T1827] ? __cfi_v9fs_mount+0x10/0x10 [ 76.218908][ T1827] vfs_get_tree+0x9e/0x290 [ 76.218932][ T1827] do_new_mount+0x251/0xb40 [ 76.218958][ T1827] ? security_capable+0x44/0x130 [ 76.218986][ T1827] path_mount+0x66a/0xff0 [ 76.219010][ T1827] ? putname+0x113/0x150 [ 76.219039][ T1827] __se_sys_mount+0x2bf/0x480 [ 76.219072][ T1827] ? ksys_write+0x1f3/0x260 [ 76.219098][ T1827] ? __x64_sys_mount+0xf0/0xf0 [ 76.219125][ T1827] __x64_sys_mount+0xc3/0xf0 [ 76.219152][ T1827] x64_sys_call+0x2021/0x2ee0 [ 76.219174][ T1827] do_syscall_64+0x57/0xf0 [ 76.219196][ T1827] ? clear_bhb_loop+0x50/0xa0 [ 76.219226][ T1827] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.219255][ T1827] RIP: 0033:0x7fee64f9e159 [ 76.219274][ T1827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.219295][ T1827] RSP: 002b:00007fee65dc3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.219320][ T1827] RAX: ffffffffffffffda RBX: 00007fee65225fa0 RCX: 00007fee64f9e159 [ 76.219338][ T1827] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000 [ 76.219355][ T1827] RBP: 00007fee65dc3090 R08: 00002000000000c0 R09: 0000000000000000 [ 76.219371][ T1827] R10: 0000000000010800 R11: 0000000000000246 R12: 0000000000000002 [ 76.219387][ T1827] R13: 00007fee65226038 R14: 00007fee65225fa0 R15: 00007ffd419eae68 [ 76.219407][ T1827] [ 76.564213][ T1829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.572846][ T1829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.581678][ T1829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.590932][ T1829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.613426][ T1836] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 76.626133][ T1836] SELinux: failed to load policy [ 76.632139][ T1836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.516'. [ 76.680304][ T1834] SELinux: failed to load policy [ 76.887580][ T1849] virtio-fs: tag not found [ 76.947973][ T1853] FAULT_INJECTION: forcing a failure. [ 76.947973][ T1853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.962596][ T1853] CPU: 0 UID: 0 PID: 1853 Comm: syz.2.523 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 76.962629][ T1853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.962643][ T1853] Call Trace: [ 76.962649][ T1853] [ 76.962657][ T1853] __dump_stack+0x21/0x30 [ 76.962691][ T1853] dump_stack_lvl+0x140/0x1c0 [ 76.962718][ T1853] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.962749][ T1853] dump_stack+0x19/0x20 [ 76.962775][ T1853] should_fail_ex+0x3c2/0x510 [ 76.962800][ T1853] should_fail+0xf/0x20 [ 76.962822][ T1853] should_fail_usercopy+0x1e/0x30 [ 76.962848][ T1853] _copy_from_user+0x20/0xa0 [ 76.962876][ T1853] dm_ctl_ioctl+0x151/0xde0 [ 76.962898][ T1853] ? selinux_file_ioctl+0x732/0x1480 [ 76.962919][ T1853] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 76.962948][ T1853] ? __fget_files+0x2bc/0x330 [ 76.962973][ T1853] ? bpf_lsm_file_ioctl+0xd/0x20 [ 76.962999][ T1853] ? security_file_ioctl+0x3e/0x110 [ 76.963019][ T1853] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 76.963039][ T1853] __se_sys_ioctl+0x126/0x1b0 [ 76.963065][ T1853] __x64_sys_ioctl+0x7f/0xa0 [ 76.963089][ T1853] x64_sys_call+0x1878/0x2ee0 [ 76.963108][ T1853] do_syscall_64+0x57/0xf0 [ 76.963126][ T1853] ? clear_bhb_loop+0x50/0xa0 [ 76.963151][ T1853] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.963175][ T1853] RIP: 0033:0x7fee64f9e159 [ 76.963192][ T1853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.963209][ T1853] RSP: 002b:00007fee65dc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.963230][ T1853] RAX: ffffffffffffffda RBX: 00007fee65225fa0 RCX: 00007fee64f9e159 [ 76.963246][ T1853] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 76.963260][ T1853] RBP: 00007fee65dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 76.963274][ T1853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.963286][ T1853] R13: 00007fee65226038 R14: 00007fee65225fa0 R15: 00007ffd419eae68 [ 76.963304][ T1853] [ 77.240296][ T1859] SELinux: failed to load policy [ 77.311566][ T311] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 77.319497][ T1865] FAULT_INJECTION: forcing a failure. [ 77.319497][ T1865] name failslab, interval 1, probability 0, space 0, times 0 [ 77.332520][ T1865] CPU: 0 UID: 0 PID: 1865 Comm: syz.1.528 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 77.332555][ T1865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.332569][ T1865] Call Trace: [ 77.332576][ T1865] [ 77.332584][ T1865] __dump_stack+0x21/0x30 [ 77.332629][ T1865] dump_stack_lvl+0x140/0x1c0 [ 77.332659][ T1865] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.332691][ T1865] ? stack_depot_save_flags+0x38/0x800 [ 77.332719][ T1865] dump_stack+0x19/0x20 [ 77.332748][ T1865] should_fail_ex+0x3c2/0x510 [ 77.332774][ T1865] should_failslab+0xac/0x100 [ 77.332801][ T1865] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 77.332826][ T1865] ? __x64_sys_mount+0xc3/0xf0 [ 77.332849][ T1865] ? do_syscall_64+0x57/0xf0 [ 77.332870][ T1865] ? parse_opts+0x189/0x5d0 [ 77.332891][ T1865] kstrdup+0x4d/0x130 [ 77.332922][ T1865] parse_opts+0x189/0x5d0 [ 77.332943][ T1865] ? p9_fd_show_options+0x1c0/0x1c0 [ 77.332967][ T1865] p9_fd_create+0x39/0x4c0 [ 77.332989][ T1865] p9_client_create+0x89a/0x12d0 [ 77.333026][ T1865] ? __cfi_p9_client_create+0x10/0x10 [ 77.333052][ T1865] ? __kasan_kmalloc+0x96/0xb0 [ 77.333079][ T1865] ? __kmalloc_cache_noprof+0x23c/0x470 [ 77.333101][ T1865] ? v9fs_mount+0xc1/0x9d0 [ 77.333129][ T1865] ? kasan_save_alloc_info+0x3a/0x50 [ 77.333149][ T1865] ? __kasan_kmalloc+0x96/0xb0 [ 77.333175][ T1865] ? kstrdup+0x7b/0x130 [ 77.333205][ T1865] ? __asan_memset+0x39/0x50 [ 77.333227][ T1865] v9fs_session_init+0x1c4/0x18a0 [ 77.333251][ T1865] ? __cfi_v9fs_session_init+0x10/0x10 [ 77.333273][ T1865] ? kasan_save_alloc_info+0x3a/0x50 [ 77.333293][ T1865] ? __kasan_kmalloc+0x96/0xb0 [ 77.333319][ T1865] ? __kmalloc_cache_noprof+0x23c/0x470 [ 77.333342][ T1865] ? v9fs_mount+0xc1/0x9d0 [ 77.333369][ T1865] v9fs_mount+0xdb/0x9d0 [ 77.333394][ T1865] ? __cfi_v9fs_mount+0x10/0x10 [ 77.333421][ T1865] ? selinux_capable+0x38/0x50 [ 77.333451][ T1865] legacy_get_tree+0x106/0x1b0 [ 77.333479][ T1865] ? __cfi_v9fs_mount+0x10/0x10 [ 77.333506][ T1865] vfs_get_tree+0x9e/0x290 [ 77.333528][ T1865] do_new_mount+0x251/0xb40 [ 77.333551][ T1865] ? security_capable+0x44/0x130 [ 77.333577][ T1865] path_mount+0x66a/0xff0 [ 77.333599][ T1865] ? putname+0x113/0x150 [ 77.333633][ T1865] __se_sys_mount+0x2bf/0x480 [ 77.333656][ T1865] ? ksys_write+0x1f3/0x260 [ 77.333678][ T1865] ? __x64_sys_mount+0xf0/0xf0 [ 77.333703][ T1865] __x64_sys_mount+0xc3/0xf0 [ 77.333726][ T1865] x64_sys_call+0x2021/0x2ee0 [ 77.333746][ T1865] do_syscall_64+0x57/0xf0 [ 77.333764][ T1865] ? clear_bhb_loop+0x50/0xa0 [ 77.333792][ T1865] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.333816][ T1865] RIP: 0033:0x7f01c059e159 [ 77.333834][ T1865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.333853][ T1865] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.333878][ T1865] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 77.333894][ T1865] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000 [ 77.333909][ T1865] RBP: 00007f01c1423090 R08: 00002000000000c0 R09: 0000000000000000 [ 77.333923][ T1865] R10: 0000000000010800 R11: 0000000000000246 R12: 0000000000000002 [ 77.333937][ T1865] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 77.333953][ T1865] [ 77.692271][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 77.692291][ T36] audit: type=1400 audit(1789466236.700:17182): avc: denied { map } for pid=1868 comm="syz.1.529" path="/154/dev/sda" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.762778][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.776389][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.788469][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.805882][ T311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.825372][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.838811][ T311] usb 3-1: config 0 descriptor?? [ 77.862268][ T1876] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 77.885919][ T1876] SELinux: failed to load policy [ 77.959337][ T65] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 78.083628][ T1878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.532'. [ 78.111528][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 78.118246][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.132246][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.151553][ T65] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.172994][ T65] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 78.191573][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.199625][ T65] usb 5-1: Product: syz [ 78.211531][ T65] usb 5-1: Manufacturer: syz [ 78.216265][ T65] usb 5-1: SerialNumber: syz [ 78.259923][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.274292][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.282254][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.289815][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.299933][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.307756][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.315540][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.323387][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.330911][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.338915][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.346712][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.356167][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.364124][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.380883][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.390148][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.398092][ T311] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 78.414361][ T311] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 78.429276][ T1861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.439974][ T1861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.470992][ T1884] SELinux: failed to load policy [ 78.513827][ T36] audit: type=1400 audit(1789466237.520:17183): avc: denied { create } for pid=1889 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 78.540317][ T65] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.550245][ T10] usb 3-1: USB disconnect, device number 11 [ 78.561992][ T65] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 78.588932][ T65] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 78.599612][ T65] usb 5-1: USB disconnect, device number 11 [ 78.613252][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.704283][ T36] audit: type=1400 audit(1789466237.710:17184): avc: denied { bind } for pid=1895 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.871592][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 78.892075][ T1900] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 78.900893][ T1900] overlayfs: failed to resolve 'fowner<00000000000000000000': -2 [ 78.941577][ T311] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 79.022992][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.036972][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.046108][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.054276][ T10] usb 3-1: SerialNumber: syz [ 79.071613][ T311] usb 2-1: device descriptor read/64, error -71 [ 79.104817][ T1902] FAULT_INJECTION: forcing a failure. [ 79.104817][ T1902] name failslab, interval 1, probability 0, space 0, times 0 [ 79.117635][ T1902] CPU: 0 UID: 0 PID: 1902 Comm: syz.4.540 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 79.117673][ T1902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.117688][ T1902] Call Trace: [ 79.117696][ T1902] [ 79.117706][ T1902] __dump_stack+0x21/0x30 [ 79.117743][ T1902] dump_stack_lvl+0x140/0x1c0 [ 79.117769][ T1902] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.117793][ T1902] dump_stack+0x19/0x20 [ 79.117814][ T1902] should_fail_ex+0x3c2/0x510 [ 79.117835][ T1902] ? x509_fabricate_name+0x61b/0xcb0 [ 79.117850][ T1902] should_failslab+0xac/0x100 [ 79.117870][ T1902] __kmalloc_noprof+0x69/0x510 [ 79.117887][ T1902] ? x509_fabricate_name+0x61b/0xcb0 [ 79.117904][ T1902] ? x509_note_OID+0x12a/0x190 [ 79.117928][ T1902] x509_fabricate_name+0x61b/0xcb0 [ 79.117944][ T1902] x509_note_subject+0x8b/0xc0 [ 79.117959][ T1902] asn1_ber_decoder+0x1974/0x1ff0 [ 79.117984][ T1902] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 79.118007][ T1902] ? kasan_save_alloc_info+0x3a/0x50 [ 79.118022][ T1902] ? __kasan_kmalloc+0x96/0xb0 [ 79.118042][ T1902] ? remove_memory_blocks_and_altmaps+0x30/0x140 [ 79.118060][ T1902] x509_cert_parse+0x1e3/0xbd0 [ 79.118084][ T1902] x509_key_preparse+0x6a/0x880 [ 79.118100][ T1902] ? __cfi_down_read+0x10/0x10 [ 79.118120][ T1902] asymmetric_key_preparse+0xb6/0x100 [ 79.118142][ T1902] __key_create_or_update+0x430/0xa90 [ 79.118167][ T1902] ? security_key_permission+0x3d/0x100 [ 79.118184][ T1902] ? key_create_or_update+0x70/0x70 [ 79.118208][ T1902] ? __kasan_kmalloc+0x96/0xb0 [ 79.118242][ T1902] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 79.118274][ T1902] key_create_or_update+0x47/0x70 [ 79.118300][ T1902] __se_sys_add_key+0x355/0x4b0 [ 79.118319][ T1902] ? __x64_sys_add_key+0xf0/0xf0 [ 79.118337][ T1902] ? __kasan_check_write+0x18/0x20 [ 79.118353][ T1902] ? fpregs_restore_userregs+0x11c/0x260 [ 79.118375][ T1902] __x64_sys_add_key+0xc3/0xf0 [ 79.118398][ T1902] x64_sys_call+0x195f/0x2ee0 [ 79.118413][ T1902] do_syscall_64+0x57/0xf0 [ 79.118427][ T1902] ? clear_bhb_loop+0x50/0xa0 [ 79.118447][ T1902] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.118466][ T1902] RIP: 0033:0x7f511bd9e159 [ 79.118480][ T1902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.118493][ T1902] RSP: 002b:00007f511cc27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 79.118511][ T1902] RAX: ffffffffffffffda RBX: 00007f511c025fa0 RCX: 00007f511bd9e159 [ 79.118523][ T1902] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 79.118534][ T1902] RBP: 00007f511be3503b R08: ffffffffffffffff R09: 0000000000000000 [ 79.118548][ T1902] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 79.118558][ T1902] R13: 00007f511c026038 R14: 00007f511c025fa0 R15: 00007ffd03bef668 [ 79.118572][ T1902] [ 79.311795][ T311] usb 2-1: device descriptor read/64, error -71 [ 79.457790][ T36] audit: type=1400 audit(1789466238.460:17185): avc: denied { read } for pid=1904 comm="syz.4.541" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.544878][ T36] audit: type=1400 audit(1789466238.550:17186): avc: denied { write } for pid=1907 comm="syz.4.542" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.567388][ T1856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.577189][ T1856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.585764][ T36] audit: type=1400 audit(1789466238.590:17187): avc: denied { listen } for pid=1855 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.605476][ T36] audit: type=1400 audit(1789466238.590:17188): avc: denied { connect } for pid=1855 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.606281][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 79.636800][ T10] usb 3-1: USB disconnect, device number 12 [ 79.651591][ T311] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 79.783001][ T1913] SELinux: failed to load policy [ 79.791565][ T1689] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 79.801629][ T311] usb 2-1: device descriptor read/64, error -71 [ 79.866230][ T1917] SELinux: failed to load policy [ 79.886981][ T1919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.547'. [ 79.941567][ T1689] usb 5-1: Using ep0 maxpacket: 32 [ 79.948663][ T1689] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.957857][ T1689] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 79.971158][ T1689] usb 5-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 79.980723][ T1689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.989052][ T1689] usb 5-1: Product: syz [ 79.993662][ T1689] usb 5-1: Manufacturer: syz [ 79.998396][ T1689] usb 5-1: SerialNumber: syz [ 80.041548][ T311] usb 2-1: device descriptor read/64, error -71 [ 80.135462][ T1924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 80.151671][ T311] usb usb2-port1: attempt power cycle [ 80.217383][ T1689] usb 5-1: USB disconnect, device number 12 [ 80.242735][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.329251][ T1926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.337961][ T1926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.381597][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 80.501593][ T311] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 80.522584][ T311] usb 2-1: device descriptor read/8, error -71 [ 80.533904][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 80.543243][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.551308][ T10] usb 3-1: Product: syz [ 80.555616][ T10] usb 3-1: Manufacturer: syz [ 80.560248][ T10] usb 3-1: SerialNumber: syz [ 80.652798][ T311] usb 2-1: device descriptor read/8, error -71 [ 80.770177][ T10] usb 3-1: Fast Track Pro switching to config #2 [ 80.779087][ T10] usb 3-1: USB disconnect, device number 13 [ 80.891670][ T311] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 80.926869][ T1933] SELinux: failed to load policy [ 80.933696][ T311] usb 2-1: device descriptor read/8, error -71 [ 81.006294][ T1938] SELinux: failed to load policy [ 81.026353][ T36] audit: type=1400 audit(1789466240.030:17189): avc: denied { write } for pid=1934 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.072721][ T311] usb 2-1: device descriptor read/8, error -71 [ 81.181679][ T311] usb usb2-port1: unable to enumerate USB device [ 81.532192][ T1953] FAULT_INJECTION: forcing a failure. [ 81.532192][ T1953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.545625][ T1953] CPU: 0 UID: 0 PID: 1953 Comm: syz.2.559 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 81.545671][ T1953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.545691][ T1953] Call Trace: [ 81.545700][ T1953] [ 81.545711][ T1953] __dump_stack+0x21/0x30 [ 81.545757][ T1953] dump_stack_lvl+0x140/0x1c0 [ 81.545794][ T1953] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.545841][ T1953] dump_stack+0x19/0x20 [ 81.545879][ T1953] should_fail_ex+0x3c2/0x510 [ 81.545912][ T1953] ? __cfi_table_load+0x10/0x10 [ 81.545946][ T1953] should_fail+0xf/0x20 [ 81.545980][ T1953] should_fail_usercopy+0x1e/0x30 [ 81.546017][ T1953] _copy_from_user+0x20/0xa0 [ 81.546060][ T1953] dm_ctl_ioctl+0x38c/0xde0 [ 81.546107][ T1953] ? selinux_file_ioctl+0x732/0x1480 [ 81.546141][ T1953] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 81.546178][ T1953] ? __fget_files+0x2bc/0x330 [ 81.546215][ T1953] ? bpf_lsm_file_ioctl+0xd/0x20 [ 81.546265][ T1953] ? security_file_ioctl+0x3e/0x110 [ 81.546296][ T1953] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 81.546323][ T1953] __se_sys_ioctl+0x126/0x1b0 [ 81.546361][ T1953] __x64_sys_ioctl+0x7f/0xa0 [ 81.546397][ T1953] x64_sys_call+0x1878/0x2ee0 [ 81.546427][ T1953] do_syscall_64+0x57/0xf0 [ 81.546454][ T1953] ? clear_bhb_loop+0x50/0xa0 [ 81.546490][ T1953] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.546523][ T1953] RIP: 0033:0x7fee64f9e159 [ 81.546549][ T1953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.546579][ T1953] RSP: 002b:00007fee65dc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.546609][ T1953] RAX: ffffffffffffffda RBX: 00007fee65225fa0 RCX: 00007fee64f9e159 [ 81.546634][ T1953] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 81.546651][ T1953] RBP: 00007fee65dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 81.546674][ T1953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.546690][ T1953] R13: 00007fee65226038 R14: 00007fee65225fa0 R15: 00007ffd419eae68 [ 81.546718][ T1953] [ 81.794169][ T1956] device-mapper: table: 252:1: too large device [ 81.800528][ T1956] device-mapper: ioctl: error adding target to table [ 81.943255][ T1962] device-mapper: table: 252:1: too large device [ 81.962309][ T1964] SELinux: failed to load policy [ 81.964410][ T1962] device-mapper: ioctl: error adding target to table [ 81.987573][ T36] audit: type=1400 audit(1789466240.980:17190): avc: denied { watch_reads } for pid=1965 comm="syz.0.564" path="/129" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.071523][ T341] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 82.203089][ T341] usb 3-1: device descriptor read/64, error -71 [ 82.291576][ T539] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 82.349407][ T1975] netlink: 80 bytes leftover after parsing attributes in process `syz.0.566'. [ 82.358917][ T36] audit: type=1400 audit(1789466241.370:17191): avc: denied { append } for pid=1974 comm="syz.0.566" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.435195][ T1977] SELinux: failed to load policy [ 82.442162][ T1977] netlink: 160 bytes leftover after parsing attributes in process `syz.0.567'. [ 82.451572][ T341] usb 3-1: device descriptor read/64, error -71 [ 82.461524][ T539] usb 5-1: Using ep0 maxpacket: 32 [ 82.468688][ T539] usb 5-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 82.480824][ T539] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 82.490038][ T539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.498246][ T539] usb 5-1: Product: syz [ 82.502570][ T539] usb 5-1: Manufacturer: syz [ 82.507255][ T539] usb 5-1: SerialNumber: syz [ 82.514633][ T539] usb 5-1: config 0 descriptor?? [ 82.691633][ T341] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 82.721177][ T1972] 9pnet_fd: Insufficient options for proto=fd [ 82.733333][ T539] usb 5-1: USB disconnect, device number 13 [ 82.823573][ T341] usb 3-1: device descriptor read/64, error -71 [ 82.940297][ T1992] SELinux: failed to load policy [ 83.061544][ T341] usb 3-1: device descriptor read/64, error -71 [ 83.134227][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 83.134244][ T36] audit: type=1400 audit(1789466242.140:17194): avc: denied { mounton } for pid=2002 comm="syz.0.577" path="/141/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.135214][ T2003] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.171723][ T341] usb usb3-port1: attempt power cycle [ 83.175461][ T2003] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.185316][ T2003] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 83.285231][ T2007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.294967][ T2007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.304170][ T2007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.314586][ T2007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.357062][ T2010] SELinux: failed to load policy [ 83.386384][ T2012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.580'. [ 83.511622][ T341] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 83.533065][ T341] usb 3-1: device descriptor read/8, error -71 [ 83.661674][ T311] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 83.670474][ T341] usb 3-1: device descriptor read/8, error -71 [ 83.811564][ T311] usb 5-1: Using ep0 maxpacket: 8 [ 83.818237][ T311] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 83.826699][ T311] usb 5-1: config 0 has no interface number 0 [ 83.832847][ T311] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 83.844611][ T311] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid maxpacket 14129, setting to 64 [ 83.855942][ T311] usb 5-1: config 0 interface 200 has no altsetting 0 [ 83.864646][ T311] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 83.873789][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.881839][ T311] usb 5-1: Product: syz [ 83.886026][ T311] usb 5-1: Manufacturer: syz [ 83.890867][ T311] usb 5-1: SerialNumber: syz [ 83.896333][ T311] usb 5-1: config 0 descriptor?? [ 83.921546][ T341] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 83.953297][ T341] usb 3-1: device descriptor read/8, error -71 [ 83.965190][ T2016] SELinux: failed to load policy [ 83.972371][ T2016] netlink: 68 bytes leftover after parsing attributes in process `syz.0.582'. [ 83.996176][ T2018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.004751][ T2018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.015715][ T36] audit: type=1400 audit(1789466243.020:17195): avc: denied { map } for pid=2017 comm="syz.0.583" path="pipe:[1650]" dev="pipefs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 84.102913][ T341] usb 3-1: device descriptor read/8, error -71 [ 84.111044][ T2014] rust_binder: 2013:2014 inc_ref_done called when no active inc_refs [ 84.122779][ T311] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input8 [ 84.140939][ T311] usb 5-1: USB disconnect, device number 14 [ 84.221753][ T341] usb usb3-port1: unable to enumerate USB device [ 84.805601][ T2034] SELinux: failed to load policy [ 84.812746][ T2034] netlink: 232 bytes leftover after parsing attributes in process `syz.0.584'. [ 84.900898][ T2045] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(12292.0.0), cmd(9) [ 84.980506][ T2053] syz_tun: entered allmulticast mode [ 84.999472][ T2056] netlink: 68 bytes leftover after parsing attributes in process `syz.4.591'. [ 85.013818][ T36] audit: type=1400 audit(1789466244.020:17196): avc: denied { listen } for pid=2052 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.050044][ T2057] FAULT_INJECTION: forcing a failure. [ 85.050044][ T2057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.055071][ T36] audit: type=1400 audit(1789466244.020:17197): avc: denied { write } for pid=2052 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.068578][ T2057] CPU: 1 UID: 0 PID: 2057 Comm: syz.1.593 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 85.068671][ T2057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.068703][ T2057] Call Trace: [ 85.068723][ T2057] [ 85.068745][ T2057] __dump_stack+0x21/0x30 [ 85.068841][ T2057] dump_stack_lvl+0x140/0x1c0 [ 85.068904][ T2057] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.068986][ T2057] ? __kmalloc_node_noprof+0x252/0x500 [ 85.069049][ T2057] ? __kvmalloc_node_noprof+0x128/0x300 [ 85.069102][ T2057] ? check_stack_object+0x81/0x150 [ 85.069190][ T2057] ? __virt_addr_valid+0x2a1/0x370 [ 85.069269][ T2057] dump_stack+0x19/0x20 [ 85.069341][ T2057] should_fail_ex+0x3c2/0x510 [ 85.069421][ T2057] should_fail+0xf/0x20 [ 85.069485][ T2057] should_fail_usercopy+0x1e/0x30 [ 85.069558][ T2057] _copy_from_user+0x20/0xa0 [ 85.069636][ T2057] dm_ctl_ioctl+0x513/0xde0 [ 85.069697][ T2057] ? __cfi_table_load+0x10/0x10 [ 85.069759][ T2057] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 85.069832][ T2057] ? __fget_files+0x2bc/0x330 [ 85.069892][ T2057] ? bpf_lsm_file_ioctl+0xd/0x20 [ 85.069965][ T2057] ? security_file_ioctl+0x3e/0x110 [ 85.070019][ T2057] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 85.070079][ T2057] __se_sys_ioctl+0x126/0x1b0 [ 85.070146][ T2057] __x64_sys_ioctl+0x7f/0xa0 [ 85.070217][ T2057] x64_sys_call+0x1878/0x2ee0 [ 85.070269][ T2057] do_syscall_64+0x57/0xf0 [ 85.070321][ T2057] ? clear_bhb_loop+0x50/0xa0 [ 85.070402][ T2057] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.070465][ T2057] RIP: 0033:0x7f01c059e159 [ 85.070524][ T2057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.070560][ T2057] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.070638][ T2057] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 85.070689][ T2057] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 85.070728][ T2057] RBP: 00007f01c1423090 R08: 0000000000000000 R09: 0000000000000000 [ 85.070762][ T2057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.070801][ T2057] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 85.070846][ T2057] [ 85.075553][ T2049] SELinux: failed to load policy [ 85.110904][ T36] audit: type=1400 audit(1789466244.020:17198): avc: denied { accept } for pid=2052 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.338078][ T36] audit: type=1400 audit(1789466244.050:17199): avc: denied { wake_alarm } for pid=2050 comm="syz.0.590" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.359522][ T36] audit: type=1400 audit(1789466244.150:17200): avc: denied { ioctl } for pid=2052 comm="syz.2.592" path="socket:[26765]" dev="sockfs" ino=26765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.394259][ T36] audit: type=1400 audit(1789466244.400:17201): avc: denied { connect } for pid=2062 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.462049][ T341] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 85.551388][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.558688][ T2072] netlink: 212 bytes leftover after parsing attributes in process `syz.2.596'. [ 85.572455][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.587999][ T2066] SELinux: failed to load policy [ 85.652635][ T341] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.661978][ T341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.681038][ T341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.697730][ T341] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.723016][ T341] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 85.734020][ T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.743781][ T341] usb 5-1: Product: syz [ 85.748076][ T341] usb 5-1: Manufacturer: syz [ 85.755355][ T341] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 85.767856][ T341] usb 5-1: No streaming interface found for terminal 2. [ 86.172465][ T2083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.183769][ T2083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.265954][ T2085] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(3145732.0.0), cmd(9) [ 86.327189][ T2088] SELinux: failed to load policy [ 86.334221][ T2088] netlink: 68 bytes leftover after parsing attributes in process `syz.1.603'. [ 86.376573][ T2091] FAULT_INJECTION: forcing a failure. [ 86.376573][ T2091] name failslab, interval 1, probability 0, space 0, times 0 [ 86.389443][ T2091] CPU: 0 UID: 0 PID: 2091 Comm: syz.1.604 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 86.389481][ T2091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.389497][ T2091] Call Trace: [ 86.389506][ T2091] [ 86.389515][ T2091] __dump_stack+0x21/0x30 [ 86.389552][ T2091] dump_stack_lvl+0x140/0x1c0 [ 86.389575][ T2091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.389600][ T2091] dump_stack+0x19/0x20 [ 86.389622][ T2091] should_fail_ex+0x3c2/0x510 [ 86.389643][ T2091] ? x509_fabricate_name+0x61b/0xcb0 [ 86.389658][ T2091] should_failslab+0xac/0x100 [ 86.389679][ T2091] __kmalloc_noprof+0x69/0x510 [ 86.389696][ T2091] ? x509_fabricate_name+0x61b/0xcb0 [ 86.389711][ T2091] ? x509_note_OID+0x12a/0x190 [ 86.389737][ T2091] x509_fabricate_name+0x61b/0xcb0 [ 86.389753][ T2091] x509_note_subject+0x8b/0xc0 [ 86.389771][ T2091] asn1_ber_decoder+0x1974/0x1ff0 [ 86.389796][ T2091] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 86.389819][ T2091] ? kasan_save_alloc_info+0x3a/0x50 [ 86.389835][ T2091] ? __kasan_kmalloc+0x96/0xb0 [ 86.389855][ T2091] ? remove_memory_blocks_and_altmaps+0x30/0x140 [ 86.389873][ T2091] x509_cert_parse+0x1e3/0xbd0 [ 86.389898][ T2091] x509_key_preparse+0x6a/0x880 [ 86.389914][ T2091] ? __cfi_down_read+0x10/0x10 [ 86.389935][ T2091] asymmetric_key_preparse+0xb6/0x100 [ 86.389957][ T2091] __key_create_or_update+0x430/0xa90 [ 86.389982][ T2091] ? security_key_permission+0x3d/0x100 [ 86.390000][ T2091] ? key_create_or_update+0x70/0x70 [ 86.390024][ T2091] ? __kasan_kmalloc+0x96/0xb0 [ 86.390046][ T2091] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 86.390070][ T2091] key_create_or_update+0x47/0x70 [ 86.390094][ T2091] __se_sys_add_key+0x355/0x4b0 [ 86.390113][ T2091] ? __x64_sys_add_key+0xf0/0xf0 [ 86.390131][ T2091] ? __kasan_check_write+0x18/0x20 [ 86.390147][ T2091] ? fpregs_restore_userregs+0x11c/0x260 [ 86.390169][ T2091] __x64_sys_add_key+0xc3/0xf0 [ 86.390187][ T2091] x64_sys_call+0x195f/0x2ee0 [ 86.390202][ T2091] do_syscall_64+0x57/0xf0 [ 86.390216][ T2091] ? clear_bhb_loop+0x50/0xa0 [ 86.390236][ T2091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.390262][ T2091] RIP: 0033:0x7f01c059e159 [ 86.390277][ T2091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.390290][ T2091] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 86.390308][ T2091] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 86.390321][ T2091] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 86.390332][ T2091] RBP: 00007f01c063503b R08: ffffffffffffffff R09: 0000000000000000 [ 86.390343][ T2091] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 86.390355][ T2091] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 86.390370][ T2091] [ 86.678427][ T2093] FAULT_INJECTION: forcing a failure. [ 86.678427][ T2093] name failslab, interval 1, probability 0, space 0, times 0 [ 86.693671][ T2093] CPU: 0 UID: 0 PID: 2093 Comm: syz.2.605 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 86.693708][ T2093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.693725][ T2093] Call Trace: [ 86.693734][ T2093] [ 86.693743][ T2093] __dump_stack+0x21/0x30 [ 86.693782][ T2093] dump_stack_lvl+0x140/0x1c0 [ 86.693816][ T2093] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.693854][ T2093] dump_stack+0x19/0x20 [ 86.693887][ T2093] should_fail_ex+0x3c2/0x510 [ 86.693918][ T2093] should_failslab+0xac/0x100 [ 86.693950][ T2093] __kmalloc_cache_noprof+0x41/0x470 [ 86.693978][ T2093] ? dm_table_create+0x94/0x530 [ 86.694010][ T2093] dm_table_create+0x94/0x530 [ 86.694040][ T2093] ? __kasan_check_write+0x18/0x20 [ 86.694065][ T2093] table_load+0x15a/0x7d0 [ 86.694093][ T2093] ? __cfi_table_load+0x10/0x10 [ 86.694120][ T2093] ? __kasan_check_write+0x18/0x20 [ 86.694146][ T2093] ? __cfi_table_load+0x10/0x10 [ 86.694173][ T2093] dm_ctl_ioctl+0x8f0/0xde0 [ 86.694201][ T2093] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 86.694233][ T2093] ? __fget_files+0x2bc/0x330 [ 86.694263][ T2093] ? bpf_lsm_file_ioctl+0xd/0x20 [ 86.694295][ T2093] ? security_file_ioctl+0x3e/0x110 [ 86.694320][ T2093] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 86.694346][ T2093] __se_sys_ioctl+0x126/0x1b0 [ 86.694377][ T2093] __x64_sys_ioctl+0x7f/0xa0 [ 86.694408][ T2093] x64_sys_call+0x1878/0x2ee0 [ 86.694430][ T2093] do_syscall_64+0x57/0xf0 [ 86.694455][ T2093] ? clear_bhb_loop+0x50/0xa0 [ 86.694485][ T2093] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.694515][ T2093] RIP: 0033:0x7fee64f9e159 [ 86.694536][ T2093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.694556][ T2093] RSP: 002b:00007fee65dc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.694582][ T2093] RAX: ffffffffffffffda RBX: 00007fee65225fa0 RCX: 00007fee64f9e159 [ 86.694600][ T2093] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 86.694617][ T2093] RBP: 00007fee65dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 86.694633][ T2093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.694648][ T2093] R13: 00007fee65226038 R14: 00007fee65225fa0 R15: 00007ffd419eae68 [ 86.694678][ T2093] [ 86.967255][ T2099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 87.071099][ T2105] SELinux: failed to load policy [ 87.077925][ T2105] netlink: 160 bytes leftover after parsing attributes in process `syz.2.610'. [ 87.138750][ T2114] SELinux: failed to load policy [ 87.200701][ T2116] SELinux: failed to load policy [ 87.244010][ T36] audit: type=1400 audit(1789466246.250:17202): avc: denied { create } for pid=2117 comm="syz.2.614" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.264942][ T36] audit: type=1400 audit(1789466246.260:17203): avc: denied { read } for pid=2117 comm="syz.2.614" name="file2" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.296711][ T2121] tmpfs: Unknown parameter 'no' [ 87.340022][ T2126] FAULT_INJECTION: forcing a failure. [ 87.340022][ T2126] name failslab, interval 1, probability 0, space 0, times 0 [ 87.354246][ T2126] CPU: 1 UID: 0 PID: 2126 Comm: syz.0.616 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 87.354283][ T2126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.354296][ T2126] Call Trace: [ 87.354303][ T2126] [ 87.354311][ T2126] __dump_stack+0x21/0x30 [ 87.354344][ T2126] dump_stack_lvl+0x140/0x1c0 [ 87.354371][ T2126] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.354402][ T2126] dump_stack+0x19/0x20 [ 87.354428][ T2126] should_fail_ex+0x3c2/0x510 [ 87.354451][ T2126] ? x509_fabricate_name+0x61b/0xcb0 [ 87.354469][ T2126] should_failslab+0xac/0x100 [ 87.354494][ T2126] __kmalloc_noprof+0x69/0x510 [ 87.354514][ T2126] ? x509_fabricate_name+0x61b/0xcb0 [ 87.354531][ T2126] ? x509_note_OID+0x12a/0x190 [ 87.354559][ T2126] x509_fabricate_name+0x61b/0xcb0 [ 87.354578][ T2126] x509_note_subject+0x8b/0xc0 [ 87.354596][ T2126] asn1_ber_decoder+0x1974/0x1ff0 [ 87.354628][ T2126] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 87.354654][ T2126] ? kasan_save_alloc_info+0x3a/0x50 [ 87.354672][ T2126] ? __kasan_kmalloc+0x96/0xb0 [ 87.354696][ T2126] ? remove_memory_blocks_and_altmaps+0x30/0x140 [ 87.354718][ T2126] x509_cert_parse+0x1e3/0xbd0 [ 87.354746][ T2126] x509_key_preparse+0x6a/0x880 [ 87.354764][ T2126] ? __cfi_down_read+0x10/0x10 [ 87.354790][ T2126] asymmetric_key_preparse+0xb6/0x100 [ 87.354816][ T2126] __key_create_or_update+0x430/0xa90 [ 87.354848][ T2126] ? security_key_permission+0x3d/0x100 [ 87.354870][ T2126] ? key_create_or_update+0x70/0x70 [ 87.354898][ T2126] ? __kasan_kmalloc+0x96/0xb0 [ 87.354930][ T2126] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 87.354960][ T2126] key_create_or_update+0x47/0x70 [ 87.354989][ T2126] __se_sys_add_key+0x355/0x4b0 [ 87.355012][ T2126] ? __x64_sys_add_key+0xf0/0xf0 [ 87.355035][ T2126] ? __kasan_check_write+0x18/0x20 [ 87.355055][ T2126] ? fpregs_restore_userregs+0x11c/0x260 [ 87.355081][ T2126] __x64_sys_add_key+0xc3/0xf0 [ 87.355111][ T2126] x64_sys_call+0x195f/0x2ee0 [ 87.355130][ T2126] do_syscall_64+0x57/0xf0 [ 87.355148][ T2126] ? clear_bhb_loop+0x50/0xa0 [ 87.355172][ T2126] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.355195][ T2126] RIP: 0033:0x7f1cba39e159 [ 87.355212][ T2126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.355228][ T2126] RSP: 002b:00007f1cbb242028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 87.355249][ T2126] RAX: ffffffffffffffda RBX: 00007f1cba625fa0 RCX: 00007f1cba39e159 [ 87.355263][ T2126] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 87.355276][ T2126] RBP: 00007f1cba43503b R08: ffffffffffffffff R09: 0000000000000000 [ 87.355290][ T2126] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 87.355302][ T2126] R13: 00007f1cba626038 R14: 00007f1cba625fa0 R15: 00007ffd678361d8 [ 87.355319][ T2126] [ 87.692206][ T2130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.701782][ T2130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.142048][ T2142] device-mapper: table: 252:1: too large device [ 88.148369][ T2142] device-mapper: ioctl: error adding target to table [ 88.186384][ T2145] FAULT_INJECTION: forcing a failure. [ 88.186384][ T2145] name failslab, interval 1, probability 0, space 0, times 0 [ 88.199125][ T2145] CPU: 0 UID: 0 PID: 2145 Comm: syz.2.621 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 88.199152][ T2145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.199164][ T2145] Call Trace: [ 88.199170][ T2145] [ 88.199178][ T2145] __dump_stack+0x21/0x30 [ 88.199205][ T2145] dump_stack_lvl+0x140/0x1c0 [ 88.199228][ T2145] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.199252][ T2145] dump_stack+0x19/0x20 [ 88.199274][ T2145] should_fail_ex+0x3c2/0x510 [ 88.199294][ T2145] should_failslab+0xac/0x100 [ 88.199315][ T2145] __kmalloc_node_noprof+0x69/0x500 [ 88.199334][ T2145] ? __kvmalloc_node_noprof+0x128/0x300 [ 88.199350][ T2145] __kvmalloc_node_noprof+0x128/0x300 [ 88.199365][ T2145] ? __kasan_kmalloc+0x96/0xb0 [ 88.199385][ T2145] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 88.199401][ T2145] ? __asan_memset+0x39/0x50 [ 88.199417][ T2145] dm_table_create+0x15b/0x530 [ 88.199437][ T2145] ? __kasan_check_write+0x18/0x20 [ 88.199454][ T2145] table_load+0x15a/0x7d0 [ 88.199472][ T2145] ? __cfi_table_load+0x10/0x10 [ 88.199489][ T2145] ? __kasan_check_write+0x18/0x20 [ 88.199505][ T2145] ? __cfi_table_load+0x10/0x10 [ 88.199521][ T2145] dm_ctl_ioctl+0x8f0/0xde0 [ 88.199539][ T2145] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 88.199559][ T2145] ? __fget_files+0x2bc/0x330 [ 88.199580][ T2145] ? bpf_lsm_file_ioctl+0xd/0x20 [ 88.199608][ T2145] ? security_file_ioctl+0x3e/0x110 [ 88.199625][ T2145] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 88.199640][ T2145] __se_sys_ioctl+0x126/0x1b0 [ 88.199661][ T2145] __x64_sys_ioctl+0x7f/0xa0 [ 88.199681][ T2145] x64_sys_call+0x1878/0x2ee0 [ 88.199696][ T2145] do_syscall_64+0x57/0xf0 [ 88.199732][ T2145] ? clear_bhb_loop+0x50/0xa0 [ 88.199761][ T2145] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.199788][ T2145] RIP: 0033:0x7fee64f9e159 [ 88.199808][ T2145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.199831][ T2145] RSP: 002b:00007fee65dc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.199848][ T2145] RAX: ffffffffffffffda RBX: 00007fee65225fa0 RCX: 00007fee64f9e159 [ 88.199860][ T2145] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 88.199871][ T2145] RBP: 00007fee65dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 88.199882][ T2145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.199893][ T2145] R13: 00007fee65226038 R14: 00007fee65225fa0 R15: 00007ffd419eae68 [ 88.199907][ T2145] [ 88.472763][ T2151] __nla_validate_parse: 1 callbacks suppressed [ 88.472784][ T2151] netlink: 35 bytes leftover after parsing attributes in process `syz.0.623'. [ 88.481744][ T2150] kernel profiling enabled (shift: 5) [ 88.532747][ T2154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.624'. [ 88.557692][ T2148] SELinux: failed to load policy [ 88.565041][ T2148] netlink: 68 bytes leftover after parsing attributes in process `syz.2.622'. [ 88.576338][ T2157] 9pnet_fd: Insufficient options for proto=fd [ 88.633616][ T2159] FAULT_INJECTION: forcing a failure. [ 88.633616][ T2159] name failslab, interval 1, probability 0, space 0, times 0 [ 88.646570][ T2159] CPU: 0 UID: 0 PID: 2159 Comm: syz.2.626 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 88.646610][ T2159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.646626][ T2159] Call Trace: [ 88.646635][ T2159] [ 88.646644][ T2159] __dump_stack+0x21/0x30 [ 88.646684][ T2159] dump_stack_lvl+0x140/0x1c0 [ 88.646717][ T2159] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.646752][ T2159] dump_stack+0x19/0x20 [ 88.646783][ T2159] should_fail_ex+0x3c2/0x510 [ 88.646812][ T2159] ? x509_fabricate_name+0x61b/0xcb0 [ 88.646833][ T2159] should_failslab+0xac/0x100 [ 88.646863][ T2159] __kmalloc_noprof+0x69/0x510 [ 88.646889][ T2159] ? x509_fabricate_name+0x61b/0xcb0 [ 88.646911][ T2159] ? x509_note_OID+0x12a/0x190 [ 88.646958][ T2159] x509_fabricate_name+0x61b/0xcb0 [ 88.646981][ T2159] x509_note_subject+0x8b/0xc0 [ 88.647003][ T2159] asn1_ber_decoder+0x1974/0x1ff0 [ 88.647041][ T2159] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 88.647075][ T2159] ? kasan_save_alloc_info+0x3a/0x50 [ 88.647098][ T2159] ? __kasan_kmalloc+0x96/0xb0 [ 88.647127][ T2159] ? remove_memory_blocks_and_altmaps+0x30/0x140 [ 88.647153][ T2159] x509_cert_parse+0x1e3/0xbd0 [ 88.647188][ T2159] x509_key_preparse+0x6a/0x880 [ 88.647211][ T2159] ? __cfi_down_read+0x10/0x10 [ 88.647241][ T2159] asymmetric_key_preparse+0xb6/0x100 [ 88.647273][ T2159] __key_create_or_update+0x430/0xa90 [ 88.647308][ T2159] ? security_key_permission+0x3d/0x100 [ 88.647332][ T2159] ? key_create_or_update+0x70/0x70 [ 88.647367][ T2159] ? __kasan_kmalloc+0x96/0xb0 [ 88.647399][ T2159] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 88.647434][ T2159] key_create_or_update+0x47/0x70 [ 88.647469][ T2159] __se_sys_add_key+0x355/0x4b0 [ 88.647496][ T2159] ? __x64_sys_add_key+0xf0/0xf0 [ 88.647523][ T2159] ? __kasan_check_write+0x18/0x20 [ 88.647547][ T2159] ? fpregs_restore_userregs+0x11c/0x260 [ 88.647577][ T2159] __x64_sys_add_key+0xc3/0xf0 [ 88.647603][ T2159] x64_sys_call+0x195f/0x2ee0 [ 88.647625][ T2159] do_syscall_64+0x57/0xf0 [ 88.647646][ T2159] ? clear_bhb_loop+0x50/0xa0 [ 88.647675][ T2159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.647702][ T2159] RIP: 0033:0x7fee64f9e159 [ 88.647723][ T2159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.647743][ T2159] RSP: 002b:00007fee65dc3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 88.647770][ T2159] RAX: ffffffffffffffda RBX: 00007fee65225fa0 RCX: 00007fee64f9e159 [ 88.647788][ T2159] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 88.647804][ T2159] RBP: 00007fee6503503b R08: ffffffffffffffff R09: 0000000000000000 [ 88.647821][ T2159] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 88.647835][ T2159] R13: 00007fee65226038 R14: 00007fee65225fa0 R15: 00007ffd419eae68 [ 88.647855][ T2159] [ 88.816162][ T2169] netlink: 232 bytes leftover after parsing attributes in process `syz.0.629'. [ 88.941318][ T2166] SELinux: failed to load policy [ 88.980835][ T2171] SELinux: failed to load policy [ 88.982736][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 88.982791][ T36] audit: type=1400 audit(1789466247.980:17207): avc: denied { getopt } for pid=2170 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.024094][ T2174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.035291][ T2174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.091672][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 89.243595][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.252222][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.262483][ T311] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.274371][ T311] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 89.283600][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.291826][ T311] usb 2-1: Product: syz [ 89.296169][ T311] usb 2-1: Manufacturer: syz [ 89.300990][ T311] usb 2-1: SerialNumber: syz [ 89.510120][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 89.523647][ T311] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 89.539009][ T311] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 89.550542][ T2179] netlink: 68 bytes leftover after parsing attributes in process `syz.4.634'. [ 89.555178][ T2178] SELinux: failed to load policy [ 89.560116][ T311] usb 2-1: USB disconnect, device number 12 [ 89.573520][ T10] usb 5-1: USB disconnect, device number 15 [ 89.595422][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.642116][ T2184] device-mapper: table: 252:1: too large device [ 89.648701][ T2184] device-mapper: ioctl: error adding target to table [ 89.945391][ T36] audit: type=1400 audit(1789466248.950:17208): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.002813][ T2140] syz_tun (unregistering): left allmulticast mode [ 90.162758][ T2027] bridge_slave_1: left allmulticast mode [ 90.168514][ T2027] bridge_slave_1: left promiscuous mode [ 90.191631][ T2027] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.202226][ T2027] bridge_slave_0: left allmulticast mode [ 90.207945][ T2027] bridge_slave_0: left promiscuous mode [ 90.221585][ T2027] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.291572][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 90.373346][ T2027] tipc: Disabling bearer [ 90.379010][ T2027] tipc: Left network mode [ 90.390479][ T2027] veth1_macvtap: left promiscuous mode [ 90.401569][ T2027] veth0_vlan: left promiscuous mode [ 90.464125][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.475710][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.489820][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 90.499012][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.603834][ T2195] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.610975][ T2195] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.618460][ T2195] bridge_slave_0: entered allmulticast mode [ 90.625466][ T2195] bridge_slave_0: entered promiscuous mode [ 90.632903][ T2195] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.640002][ T2195] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.647426][ T2195] bridge_slave_1: entered allmulticast mode [ 90.654002][ T2255] netlink: 68 bytes leftover after parsing attributes in process `syz.0.644'. [ 90.663573][ T2195] bridge_slave_1: entered promiscuous mode [ 90.690882][ T2251] SELinux: failed to load policy [ 90.755416][ T2195] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.762551][ T2195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.770055][ T2195] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.771859][ T539] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 90.777437][ T2195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.820045][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.827730][ T2200] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.843074][ T2201] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.850205][ T2201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.858331][ T2201] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.865527][ T2201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.902144][ T2195] veth0_vlan: entered promiscuous mode [ 90.920031][ T2195] veth1_macvtap: entered promiscuous mode [ 90.933617][ T539] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.942480][ T539] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.954723][ T539] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.971980][ T539] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.988554][ T539] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 90.992361][ T36] audit: type=1400 audit(1789466249.990:17209): avc: denied { mount } for pid=2195 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.999921][ T539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 91.028956][ T539] usb 5-1: Product: syz [ 91.033315][ T539] usb 5-1: Manufacturer: syz [ 91.047021][ T539] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 91.056674][ T539] usb 5-1: No streaming interface found for terminal 2. [ 91.065941][ T2264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.641'. [ 91.308528][ T2270] SELinux: failed to load policy [ 91.350023][ T2273] netlink: 16 bytes leftover after parsing attributes in process `syz.5.650'. [ 91.359793][ T2273] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 91.369721][ T2273] SELinux: failed to load policy [ 91.402412][ T36] audit: type=1400 audit(1789466250.410:17210): avc: denied { map } for pid=2274 comm="syz.5.651" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.430635][ T2275] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.721556][ T1689] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 91.731430][ T2279] SELinux: failed to load policy [ 91.738431][ T2279] netlink: 68 bytes leftover after parsing attributes in process `syz.0.652'. [ 91.762678][ T2281] device-mapper: table: 252:1: too large device [ 91.768966][ T2281] device-mapper: ioctl: error adding target to table [ 91.852678][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 91.863896][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 91.875206][ T1689] usb 6-1: Using ep0 maxpacket: 16 [ 91.885404][ T1689] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 91.894823][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 91.912452][ T1689] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 91.921806][ T1689] usb 6-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 91.930430][ T1689] usb 6-1: Product: syz [ 91.934691][ T1689] usb 6-1: Manufacturer: syz [ 91.943785][ T1689] r8152-cfgselector 6-1: Unknown version 0x0000 [ 91.950536][ T1689] r8152-cfgselector 6-1: config 0 descriptor?? [ 91.958342][ T1689] cdc_acm 6-1:0.0: Zero length descriptor references [ 91.965269][ T1689] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 92.058975][ T2294] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 92.114132][ T2300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.660'. [ 92.164494][ T1689] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 92.197375][ T2302] SELinux: failed to load policy [ 92.325543][ T2307] SELinux: failed to load policy [ 92.397793][ T2309] SELinux: failed to load policy [ 92.620088][ T2316] device-mapper: table: 252:1: too large device [ 92.626637][ T2316] device-mapper: ioctl: error adding target to table [ 92.652568][ T2319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.661246][ T2319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.670255][ T2319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.679063][ T2319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.771676][ T2327] SELinux: failed to load policy [ 92.843317][ T36] audit: type=1400 audit(1789466251.850:17211): avc: denied { read write } for pid=2332 comm="syz.5.672" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.867219][ T2334] overlayfs: conflicting options: userxattr,redirect_dir=on [ 92.877959][ T36] audit: type=1400 audit(1789466251.850:17212): avc: denied { open } for pid=2332 comm="syz.5.672" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.902508][ T36] audit: type=1400 audit(1789466251.850:17213): avc: denied { map } for pid=2332 comm="syz.5.672" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.192067][ T36] audit: type=1326 audit(1789466252.200:17214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2335 comm="syz.5.673" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb0559e159 code=0x0 [ 93.266674][ T2343] netlink: 'syz.0.675': attribute type 11 has an invalid length. [ 93.275268][ T2343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2343 comm=syz.0.675 [ 93.404831][ T2347] SELinux: failed to load policy [ 93.510054][ T2351] SELinux: failed to load policy [ 93.517913][ T2351] __nla_validate_parse: 4 callbacks suppressed [ 93.517931][ T2351] netlink: 68 bytes leftover after parsing attributes in process `syz.0.679'. [ 93.542050][ T1689] usb 5-1: USB disconnect, device number 16 [ 93.578232][ T36] audit: type=1400 audit(1789466252.580:17215): avc: denied { search } for pid=2354 comm="syz.4.680" name="/" dev="configfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.614703][ T2355] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 93.625398][ T36] audit: type=1400 audit(1789466252.580:17216): avc: denied { write } for pid=2354 comm="syz.4.680" name="usb_gadget" dev="configfs" ino=2425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.649163][ T2355] SELinux: failed to load policy [ 93.654853][ T2355] netlink: 68 bytes leftover after parsing attributes in process `syz.4.680'. [ 93.685413][ T2359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.682'. [ 93.699832][ T2359] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 93.734316][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 93.745369][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 93.756443][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 93.767691][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 93.779887][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 93.795022][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 93.806113][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 93.806747][ T2361] device-mapper: table: 252:1: too large device [ 93.817361][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 93.824547][ T2361] device-mapper: ioctl: error adding target to table [ 93.835732][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 93.852041][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 93.863699][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 93.875404][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 93.887566][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 93.899093][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 93.910514][ T10] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 93.924038][ T10] ax88179_178a 2-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 4a:17:09:60:43:10 [ 93.942403][ T10] usb 2-1: USB disconnect, device number 13 [ 93.959148][ T10] ax88179_178a 2-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 94.014403][ T2364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.026056][ T2364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.400859][ T2410] SELinux: failed to load policy [ 94.409443][ T2410] netlink: 68 bytes leftover after parsing attributes in process `syz.1.690'. [ 94.440999][ T2413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 94.551518][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 94.642015][ T2424] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1802923268.1684370991.47), cmd(9) [ 94.700642][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 94.700662][ T36] audit: type=1400 audit(1789466253.700:17223): avc: denied { create } for pid=2428 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 94.743076][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.751638][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.762483][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.771404][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.798166][ T46] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 94.807479][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.815545][ T46] usb 5-1: Product: syz [ 94.819834][ T46] usb 5-1: Manufacturer: syz [ 94.831328][ T46] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 94.838144][ T46] usb 5-1: No streaming interface found for terminal 2. [ 94.863405][ T2436] netlink: 68 bytes leftover after parsing attributes in process `syz.0.699'. [ 94.916194][ T2443] FAULT_INJECTION: forcing a failure. [ 94.916194][ T2443] name failslab, interval 1, probability 0, space 0, times 0 [ 94.928968][ T2443] CPU: 0 UID: 0 PID: 2443 Comm: syz.0.703 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 94.929007][ T2443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.929023][ T2443] Call Trace: [ 94.929031][ T2443] [ 94.929041][ T2443] __dump_stack+0x21/0x30 [ 94.929081][ T2443] dump_stack_lvl+0x140/0x1c0 [ 94.929113][ T2443] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.929147][ T2443] dump_stack+0x19/0x20 [ 94.929177][ T2443] should_fail_ex+0x3c2/0x510 [ 94.929207][ T2443] should_failslab+0xac/0x100 [ 94.929237][ T2443] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 94.929264][ T2443] ? kstrdup_const+0x45/0x60 [ 94.929285][ T2443] ? __kasan_check_write+0x18/0x20 [ 94.929308][ T2443] ? _raw_spin_lock+0x92/0x120 [ 94.929331][ T2443] kstrdup+0x4d/0x130 [ 94.929366][ T2443] ? kstrdup_const+0x3a/0x60 [ 94.929387][ T2443] kstrdup_const+0x45/0x60 [ 94.929396][ T2445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.704'. [ 94.929408][ T2443] __kernfs_new_node+0xaa/0x740 [ 94.929510][ T2443] ? kernfs_new_node+0x280/0x280 [ 94.929635][ T2443] ? snprintf+0xe9/0x140 [ 94.929731][ T2443] kernfs_new_node+0x154/0x280 [ 94.929808][ T2443] __kernfs_create_file+0x52/0x280 [ 94.929901][ T2443] cgroup_addrm_files+0x775/0xac0 [ 94.930000][ T2443] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 94.930083][ T2443] ? delete_node+0x3df/0xa60 [ 94.930146][ T2443] ? __radix_tree_replace+0x27c/0x310 [ 94.930217][ T2443] ? __cfi_idr_replace+0x10/0x10 [ 94.930293][ T2443] ? __kasan_check_write+0x18/0x20 [ 94.930363][ T2443] css_populate_dir+0x12d/0x3d0 [ 94.930437][ T2443] cgroup_apply_control_enable+0x62f/0xce0 [ 94.930529][ T2443] cgroup_mkdir+0x1274/0x1600 [ 94.930603][ T2443] ? __cfi_cgroup_mkdir+0x10/0x10 [ 94.930684][ T2443] kernfs_iop_mkdir+0x1bb/0x2d0 [ 94.930761][ T2443] vfs_mkdir+0x58e/0x810 [ 94.930852][ T2443] do_mkdirat+0x240/0x530 [ 94.930929][ T2443] ? __cfi_do_mkdirat+0x10/0x10 [ 94.930973][ T2443] ? __kasan_check_write+0x18/0x20 [ 94.931056][ T2443] ? getname_flags+0x203/0x6b0 [ 94.931129][ T2443] ? __kasan_check_write+0x18/0x20 [ 94.931193][ T2443] __x64_sys_mkdirat+0x8b/0xa0 [ 94.931277][ T2443] x64_sys_call+0x2ba8/0x2ee0 [ 94.931385][ T2443] do_syscall_64+0x57/0xf0 [ 94.931464][ T2443] ? clear_bhb_loop+0x50/0xa0 [ 94.931546][ T2443] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.931620][ T2443] RIP: 0033:0x7f1cba39e159 [ 94.931680][ T2443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.931733][ T2443] RSP: 002b:00007f1cbb242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 94.931805][ T2443] RAX: ffffffffffffffda RBX: 00007f1cba625fa0 RCX: 00007f1cba39e159 [ 94.931849][ T2443] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 94.931890][ T2443] RBP: 00007f1cba43503b R08: 0000000000000000 R09: 0000000000000000 [ 94.931926][ T2443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.931968][ T2443] R13: 00007f1cba626038 R14: 00007f1cba625fa0 R15: 00007ffd678361d8 [ 94.932023][ T2443] [ 94.933910][ T2443] cgroup: cgroup_addrm_files: failed to add prio.class, err=-12 [ 95.271531][ T2452] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 95.281378][ T36] audit: type=1400 audit(1789466254.280:17224): avc: denied { relabelto } for pid=2451 comm="syz.1.706" name="cgroup" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 95.283202][ T2452] netlink: 172 bytes leftover after parsing attributes in process `syz.1.706'. [ 95.309261][ T36] audit: type=1400 audit(1789466254.290:17225): avc: denied { associate } for pid=2451 comm="syz.1.706" name="cgroup" dev="tmpfs" ino=1016 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 95.348243][ T36] audit: type=1400 audit(1789466254.350:17226): avc: denied { unlink } for pid=293 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 95.375621][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.532667][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.542994][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.556043][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 95.565143][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.587486][ T36] audit: type=1400 audit(1789466254.590:17227): avc: denied { create } for pid=2454 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.862831][ T2464] device-mapper: table: 252:1: too large device [ 95.869221][ T2464] device-mapper: ioctl: error adding target to table [ 95.889914][ T2467] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 95.901142][ T36] audit: type=1400 audit(1789466254.900:17228): avc: denied { write } for pid=2466 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.901259][ T2467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.711'. [ 95.921687][ T36] audit: type=1400 audit(1789466254.900:17229): avc: denied { nlmsg_write } for pid=2466 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.983826][ T36] audit: type=1400 audit(1789466254.990:17230): avc: denied { accept } for pid=2470 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.081358][ T36] audit: type=1400 audit(1789466255.080:17231): avc: denied { connect } for pid=2473 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.102513][ T36] audit: type=1400 audit(1789466255.090:17232): avc: denied { setopt } for pid=2473 comm="syz.0.714" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.193569][ T2480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 96.202637][ T2480] bridge_slave_1: left allmulticast mode [ 96.208511][ T2480] bridge_slave_1: left promiscuous mode [ 96.214413][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.222661][ T2480] bridge_slave_0: left allmulticast mode [ 96.228524][ T2480] bridge_slave_0: left promiscuous mode [ 96.234452][ T2480] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.289302][ T2481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.298339][ T2481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.747930][ T2489] sel_write_load: 5 callbacks suppressed [ 96.747948][ T2489] SELinux: failed to load policy [ 96.811005][ T2492] SELinux: failed to load policy [ 96.843079][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.852400][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.861421][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.870305][ T2494] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1701064452.1986735990.109), cmd(9) [ 96.870330][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.891976][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 96.904243][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 96.916315][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 96.928503][ T2499] device-mapper: table: 252:1: too large device [ 96.934886][ T2499] device-mapper: ioctl: error adding target to table [ 96.956270][ T2502] FAULT_INJECTION: forcing a failure. [ 96.956270][ T2502] name failslab, interval 1, probability 0, space 0, times 0 [ 96.969035][ T2502] CPU: 0 UID: 0 PID: 2502 Comm: syz.1.725 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 96.969070][ T2502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.969085][ T2502] Call Trace: [ 96.969093][ T2502] [ 96.969105][ T2502] __dump_stack+0x21/0x30 [ 96.969145][ T2502] dump_stack_lvl+0x140/0x1c0 [ 96.969180][ T2502] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.969204][ T2502] dump_stack+0x19/0x20 [ 96.969228][ T2502] should_fail_ex+0x3c2/0x510 [ 96.969249][ T2502] should_failslab+0xac/0x100 [ 96.969269][ T2502] kmem_cache_alloc_noprof+0x42/0x410 [ 96.969287][ T2502] ? alloc_uid+0x15a/0x6d0 [ 96.969303][ T2502] ? security_prepare_creds+0xd4/0x260 [ 96.969321][ T2502] alloc_uid+0x15a/0x6d0 [ 96.969337][ T2502] __sys_setresuid+0x6c1/0xd90 [ 96.969359][ T2502] __x64_sys_setresuid+0x7e/0x90 [ 96.969379][ T2502] x64_sys_call+0x2728/0x2ee0 [ 96.969394][ T2502] do_syscall_64+0x57/0xf0 [ 96.969409][ T2502] ? clear_bhb_loop+0x50/0xa0 [ 96.969428][ T2502] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.969448][ T2502] RIP: 0033:0x7f01c059e159 [ 96.969462][ T2502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.969477][ T2502] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 96.969495][ T2502] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 96.969507][ T2502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 96.969518][ T2502] RBP: 00007f01c063503b R08: 0000000000000000 R09: 0000000000000000 [ 96.969528][ T2502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.969539][ T2502] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 96.969553][ T2502] [ 97.156961][ T2503] SELinux: policydb magic number 0x6c657337 does not match expected magic number 0xf97cff8c [ 97.167954][ T2503] SELinux: failed to load policy [ 97.307177][ T539] usb 5-1: USB disconnect, device number 17 [ 98.183226][ T2519] FAULT_INJECTION: forcing a failure. [ 98.183226][ T2519] name failslab, interval 1, probability 0, space 0, times 0 [ 98.196198][ T2519] CPU: 1 UID: 0 PID: 2519 Comm: syz.1.730 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 98.196236][ T2519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.196250][ T2519] Call Trace: [ 98.196258][ T2519] [ 98.196268][ T2519] __dump_stack+0x21/0x30 [ 98.196307][ T2519] dump_stack_lvl+0x140/0x1c0 [ 98.196342][ T2519] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.196375][ T2519] dump_stack+0x19/0x20 [ 98.196432][ T2519] should_fail_ex+0x3c2/0x510 [ 98.196463][ T2519] ? x509_fabricate_name+0x61b/0xcb0 [ 98.196485][ T2519] should_failslab+0xac/0x100 [ 98.196529][ T2519] __kmalloc_noprof+0x69/0x510 [ 98.196547][ T2519] ? __kmalloc_noprof+0x261/0x510 [ 98.196632][ T2519] ? x509_fabricate_name+0x61b/0xcb0 [ 98.196655][ T2519] ? asymmetric_key_generate_id+0xde/0x220 [ 98.196685][ T2519] x509_fabricate_name+0x61b/0xcb0 [ 98.196701][ T2519] x509_note_issuer+0xea/0x1c0 [ 98.196717][ T2519] asn1_ber_decoder+0x1974/0x1ff0 [ 98.196770][ T2519] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 98.196801][ T2519] ? kasan_save_alloc_info+0x3a/0x50 [ 98.196826][ T2519] ? __kasan_kmalloc+0x96/0xb0 [ 98.196846][ T2519] ? remove_memory_blocks_and_altmaps+0x30/0x140 [ 98.196865][ T2519] x509_cert_parse+0x1e3/0xbd0 [ 98.196914][ T2519] x509_key_preparse+0x6a/0x880 [ 98.196935][ T2519] ? __cfi_down_read+0x10/0x10 [ 98.196968][ T2519] asymmetric_key_preparse+0xb6/0x100 [ 98.196991][ T2519] __key_create_or_update+0x430/0xa90 [ 98.197035][ T2519] ? security_key_permission+0x3d/0x100 [ 98.197061][ T2519] ? key_create_or_update+0x70/0x70 [ 98.197094][ T2519] ? __kasan_kmalloc+0x96/0xb0 [ 98.197125][ T2519] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 98.197150][ T2519] key_create_or_update+0x47/0x70 [ 98.197193][ T2519] __se_sys_add_key+0x355/0x4b0 [ 98.197220][ T2519] ? __x64_sys_add_key+0xf0/0xf0 [ 98.197246][ T2519] ? __kasan_check_write+0x18/0x20 [ 98.197272][ T2519] ? fpregs_restore_userregs+0x11c/0x260 [ 98.197294][ T2519] __x64_sys_add_key+0xc3/0xf0 [ 98.197313][ T2519] x64_sys_call+0x195f/0x2ee0 [ 98.197347][ T2519] do_syscall_64+0x57/0xf0 [ 98.197367][ T2519] ? clear_bhb_loop+0x50/0xa0 [ 98.197393][ T2519] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.197423][ T2519] RIP: 0033:0x7f01c059e159 [ 98.197437][ T2519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.197452][ T2519] RSP: 002b:00007f01c1423028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 98.197483][ T2519] RAX: ffffffffffffffda RBX: 00007f01c0825fa0 RCX: 00007f01c059e159 [ 98.197503][ T2519] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 98.197519][ T2519] RBP: 00007f01c063503b R08: ffffffffffffffff R09: 0000000000000000 [ 98.197535][ T2519] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 98.197549][ T2519] R13: 00007f01c0826038 R14: 00007f01c0825fa0 R15: 00007ffff91187f8 [ 98.197576][ T2519] [ 98.560001][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 98.572066][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 98.591580][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 98.602747][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 98.605757][ T2524] __nla_validate_parse: 2 callbacks suppressed [ 98.605818][ T2524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.732'. [ 98.623110][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 98.639043][ T2523] SELinux: failed to load policy [ 98.640653][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 98.659072][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 98.671778][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.686376][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 98.698494][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.705754][ T2528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 98.710835][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 98.731578][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.742947][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 98.754310][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.765467][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 98.776797][ T10] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 98.797775][ T10] ax88179_178a 6-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, c6:1f:30:ea:90:95 [ 98.838959][ T10] usb 6-1: USB disconnect, device number 3 [ 98.845041][ T2528] SELinux: failed to load policy [ 98.855573][ T10] ax88179_178a 6-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 98.954359][ T2548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.963921][ T2548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.974340][ T2548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2548 comm=syz.0.738 [ 99.014434][ T2548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.025584][ T2548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.141519][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 99.179186][ T2575] netlink: 68 bytes leftover after parsing attributes in process `syz.5.741'. [ 99.183881][ T2570] SELinux: failed to load policy [ 99.223124][ T2579] netlink: 20 bytes leftover after parsing attributes in process `syz.5.743'. [ 99.291610][ T311] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 99.314973][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 99.326952][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.338427][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 99.347695][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.355901][ T9] usb 2-1: Product: syz [ 99.360205][ T9] usb 2-1: Manufacturer: syz [ 99.367301][ T9] uvcvideo 2-1:1.1: Unknown video format 32595559-0000-0000-0000-000000000000 [ 99.376719][ T9] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 99.383205][ T9] uvcvideo 2-1:1.1: No supported video formats found. [ 99.390180][ T9] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 99.426169][ T2584] SELinux: failed to load policy [ 99.445609][ T311] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.458762][ T311] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.462860][ T2587] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(3145732.0.0), cmd(9) [ 99.465989][ T311] usb 5-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00 [ 99.485408][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.495274][ T311] usb 5-1: config 0 descriptor?? [ 99.602480][ T2598] SELinux: failed to load policy [ 99.670683][ T2600] SELinux: failed to load policy [ 99.677893][ T2600] netlink: 68 bytes leftover after parsing attributes in process `syz.5.751'. [ 99.703374][ T2602] program syz.5.752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.715078][ T311] hid (null): usage index exceeded [ 99.722006][ T311] hid-generic 0003:18D1:5022.0004: ignoring exceeding usage max [ 99.733157][ T311] hid-generic 0003:18D1:5022.0004: ignoring exceeding usage max [ 99.741380][ T311] hid-generic 0003:18D1:5022.0004: usage index exceeded [ 99.748722][ T311] hid-generic 0003:18D1:5022.0004: item 0 2 2 2 parsing failed [ 99.756789][ T311] hid-generic 0003:18D1:5022.0004: probe with driver hid-generic failed with error -22 [ 100.020756][ T2616] FAULT_INJECTION: forcing a failure. [ 100.020756][ T2616] name failslab, interval 1, probability 0, space 0, times 0 [ 100.033591][ T2616] CPU: 1 UID: 0 PID: 2616 Comm: syz.5.756 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 100.033627][ T2616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.033644][ T2616] Call Trace: [ 100.033658][ T2616] [ 100.033665][ T2616] __dump_stack+0x21/0x30 [ 100.033695][ T2616] dump_stack_lvl+0x140/0x1c0 [ 100.033718][ T2616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.033742][ T2616] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 100.033758][ T2616] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 100.033775][ T2616] dump_stack+0x19/0x20 [ 100.033796][ T2616] should_fail_ex+0x3c2/0x510 [ 100.033817][ T2616] should_failslab+0xac/0x100 [ 100.033839][ T2616] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 100.033857][ T2616] ? __sock_create+0x3a5/0x810 [ 100.033876][ T2616] ? __sys_socket+0xe1/0x1c0 [ 100.033894][ T2616] ? __d_alloc+0x42/0x8c0 [ 100.033909][ T2616] ? expand_files+0xda/0x6f0 [ 100.033934][ T2616] __d_alloc+0x42/0x8c0 [ 100.033950][ T2616] d_alloc_pseudo+0x23/0xc0 [ 100.033966][ T2616] alloc_file_pseudo+0xde/0x1f0 [ 100.033989][ T2616] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 100.034019][ T2616] ? _raw_spin_unlock+0x45/0x60 [ 100.034035][ T2616] sock_alloc_file+0xbe/0x2b0 [ 100.034052][ T2616] __sys_socket+0x14c/0x1c0 [ 100.034070][ T2616] __x64_sys_socket+0x7e/0x90 [ 100.034088][ T2616] x64_sys_call+0x2608/0x2ee0 [ 100.034104][ T2616] do_syscall_64+0x57/0xf0 [ 100.034118][ T2616] ? clear_bhb_loop+0x50/0xa0 [ 100.034139][ T2616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.034158][ T2616] RIP: 0033:0x7ffb0559e159 [ 100.034173][ T2616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.034188][ T2616] RSP: 002b:00007ffb063c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 100.034205][ T2616] RAX: ffffffffffffffda RBX: 00007ffb05825fa0 RCX: 00007ffb0559e159 [ 100.034218][ T2616] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 100.034229][ T2616] RBP: 00007ffb0563503b R08: 0000000000000000 R09: 0000000000000000 [ 100.034240][ T2616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.034250][ T2616] R13: 00007ffb05826038 R14: 00007ffb05825fa0 R15: 00007ffdb048da88 [ 100.034264][ T2616] [ 100.037264][ T2616] 9p: Unknown access argument ćient: -22 [ 100.339209][ T2620] SELinux: failed to load policy [ 100.346176][ T2620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=2620 comm=syz.5.757 [ 100.392827][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 100.392847][ T36] audit: type=1400 audit(1789466259.400:17240): avc: denied { checkpoint_restore } for pid=2623 comm="syz.5.759" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.527301][ T36] audit: type=1400 audit(1789466259.530:17241): avc: denied { bind } for pid=2627 comm="syz.5.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.547701][ T36] audit: type=1400 audit(1789466259.550:17242): avc: denied { setopt } for pid=2627 comm="syz.5.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.568002][ T2628] netlink: 'syz.5.760': attribute type 4 has an invalid length. [ 100.871628][ T539] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 101.022880][ T539] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.033103][ T539] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.046070][ T539] usb 6-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 101.055184][ T539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.907930][ T65] usb 2-1: USB disconnect, device number 14 [ 101.923276][ T36] audit: type=1400 audit(1789466260.930:17243): avc: denied { read } for pid=2632 comm="syz.1.762" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.946639][ T36] audit: type=1400 audit(1789466260.930:17244): avc: denied { open } for pid=2632 comm="syz.1.762" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.030671][ T2638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 102.060869][ T46] usb 5-1: USB disconnect, device number 18 [ 102.094218][ T36] audit: type=1400 audit(1789466261.100:17245): avc: denied { mounton } for pid=2639 comm="syz.0.765" path="/sys/dev" dev="proc" ino=31020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_dev_t tclass=dir permissive=1 [ 102.127232][ T36] audit: type=1400 audit(1789466261.130:17246): avc: denied { ioctl } for pid=2639 comm="syz.0.765" path="socket:[31024]" dev="sockfs" ino=31024 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.180477][ T2642] SELinux: failed to load policy [ 102.227878][ T2649] FAULT_INJECTION: forcing a failure. [ 102.227878][ T2649] name failslab, interval 1, probability 0, space 0, times 0 [ 102.240730][ T2649] CPU: 0 UID: 0 PID: 2649 Comm: syz.4.767 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 102.240771][ T2649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.240786][ T2649] Call Trace: [ 102.240804][ T2649] [ 102.240814][ T2649] __dump_stack+0x21/0x30 [ 102.240855][ T2649] dump_stack_lvl+0x140/0x1c0 [ 102.240887][ T2649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.240921][ T2649] ? __kasan_check_write+0x18/0x20 [ 102.240948][ T2649] ? rwsem_read_trylock+0x275/0x5a0 [ 102.240990][ T2649] dump_stack+0x19/0x20 [ 102.241027][ T2649] should_fail_ex+0x3c2/0x510 [ 102.241061][ T2649] should_failslab+0xac/0x100 [ 102.241092][ T2649] __kmalloc_node_noprof+0x69/0x500 [ 102.241125][ T2649] ? crypto_create_tfm_node+0xa0/0x4d0 [ 102.241145][ T2649] ? __kasan_check_write+0x18/0x20 [ 102.241164][ T2649] ? up_read+0x26/0x1c0 [ 102.241190][ T2649] crypto_create_tfm_node+0xa0/0x4d0 [ 102.241209][ T2649] crypto_alloc_tfm_node+0x166/0x350 [ 102.241228][ T2649] ? kmemdup_noprof+0x5b/0x80 [ 102.241246][ T2649] crypto_alloc_shash+0x34/0x40 [ 102.241273][ T2649] x509_get_sig_params+0x110/0x6a0 [ 102.241292][ T2649] x509_cert_parse+0x53e/0xbd0 [ 102.241331][ T2649] x509_key_preparse+0x6a/0x880 [ 102.241356][ T2649] ? __cfi_down_read+0x10/0x10 [ 102.241388][ T2649] asymmetric_key_preparse+0xb6/0x100 [ 102.241413][ T2649] __key_create_or_update+0x430/0xa90 [ 102.241442][ T2649] ? security_key_permission+0x3d/0x100 [ 102.241486][ T2649] ? key_create_or_update+0x70/0x70 [ 102.241525][ T2649] ? __kasan_kmalloc+0x96/0xb0 [ 102.241561][ T2649] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 102.241602][ T2649] key_create_or_update+0x47/0x70 [ 102.241630][ T2649] __se_sys_add_key+0x355/0x4b0 [ 102.241651][ T2649] ? __x64_sys_add_key+0xf0/0xf0 [ 102.241673][ T2649] ? __kasan_check_write+0x18/0x20 [ 102.241691][ T2649] ? fpregs_restore_userregs+0x11c/0x260 [ 102.241716][ T2649] __x64_sys_add_key+0xc3/0xf0 [ 102.241737][ T2649] x64_sys_call+0x195f/0x2ee0 [ 102.241754][ T2649] do_syscall_64+0x57/0xf0 [ 102.241770][ T2649] ? clear_bhb_loop+0x50/0xa0 [ 102.241793][ T2649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.241823][ T2649] RIP: 0033:0x7f511bd9e159 [ 102.241839][ T2649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.241856][ T2649] RSP: 002b:00007f511cc27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 102.241876][ T2649] RAX: ffffffffffffffda RBX: 00007f511c025fa0 RCX: 00007f511bd9e159 [ 102.241890][ T2649] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 102.241903][ T2649] RBP: 00007f511be3503b R08: ffffffffffffffff R09: 0000000000000000 [ 102.241916][ T2649] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 102.241927][ T2649] R13: 00007f511c026038 R14: 00007f511c025fa0 R15: 00007ffd03bef668 [ 102.241944][ T2649] [ 102.392438][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 102.537271][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 102.548035][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 102.579344][ T2652] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(805306372.0.0), cmd(9) [ 102.658852][ T2656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.769'. [ 103.691544][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 103.841554][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 103.849462][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 103.858897][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.867103][ T9] usb 5-1: Product: syz [ 103.871304][ T9] usb 5-1: Manufacturer: syz [ 103.876104][ T9] usb 5-1: SerialNumber: syz [ 104.140278][ T2660] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(33554706.134217728.2181239349), cmd(3) [ 104.152546][ T2660] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(33554706.134217728.2181239349), cmd(9) [ 104.165132][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 104.176262][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 104.187220][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 104.197923][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.204422][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 104.215477][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 104.226508][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 104.237510][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 104.248516][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.259512][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.270531][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.281577][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 104.292485][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.303499][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.314502][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.325482][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.336625][ T539] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.349355][ T539] ax88179_178a 6-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, e6:17:60:12:b6:0e [ 104.364696][ T539] usb 6-1: USB disconnect, device number 4 [ 104.376299][ T539] ax88179_178a 6-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 104.698880][ T2691] ------------[ cut here ]------------ [ 104.704489][ T2691] WARNING: CPU: 0 PID: 2691 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 104.714448][ T2691] Modules linked in: [ 104.718396][ T2691] CPU: 0 UID: 0 PID: 2691 Comm: syz.5.772 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 104.729973][ T2691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.740343][ T2691] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 104.746751][ T2691] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d c5 c7 0b 06 00 0f 85 c2 00 00 00 c6 05 b8 c7 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 104.766918][ T2691] RSP: 0018:ffffc9000d547640 EFLAGS: 00010246 [ 104.773155][ T2691] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 104.781200][ T2691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d5476f8 [ 104.789261][ T2691] RBP: ffffc9000d547780 R08: ffffc9000d5476f7 R09: 0000000000000000 [ 104.793053][ T36] audit: type=1400 audit(1789466263.790:17247): avc: denied { write } for pid=2692 comm="syz.0.773" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.797308][ T2691] R10: ffffc9000d5476e0 R11: fffff52001aa8edf R12: ffffc9000d547680 [ 104.828701][ T2691] R13: dffffc0000000000 R14: 1ffff92001aa8ecc R15: 0000000000000000 [ 104.836284][ T36] audit: type=1400 audit(1789466263.840:17248): avc: denied { execmem } for pid=2692 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 104.836903][ T2691] FS: 00007ffb063c26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 104.856896][ T539] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 104.865095][ T2691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.879257][ T2691] CR2: 000020000001a000 CR3: 000000010c252000 CR4: 00000000003526b0 [ 104.887339][ T2691] Call Trace: [ 104.890689][ T2691] [ 104.893721][ T2691] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 104.899526][ T2691] ? __kasan_slab_alloc+0x73/0x90 [ 104.904643][ T2691] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 104.910339][ T2691] ? hashtab_init+0xd6/0x1f0 [ 104.915057][ T2691] ___kmalloc_large_node+0x81/0x220 [ 104.920327][ T2691] ? hashtab_init+0xd6/0x1f0 [ 104.925043][ T2691] __kmalloc_large_node_noprof+0x1e/0xd0 [ 104.930741][ T2691] ? hashtab_init+0xd6/0x1f0 [ 104.935525][ T2691] __kmalloc_noprof+0x326/0x510 [ 104.940485][ T2691] ? __cfi_ebitmap_read+0x10/0x10 [ 104.945693][ T2691] hashtab_init+0xd6/0x1f0 [ 104.950244][ T2691] ? policydb_read+0x865/0x2860 [ 104.955198][ T2691] symtab_init+0x44/0x70 [ 104.959512][ T2691] policydb_read+0x8e1/0x2860 [ 104.964326][ T2691] ? __kasan_kmalloc+0x96/0xb0 [ 104.969161][ T2691] ? __cfi_policydb_read+0x10/0x10 [ 104.974372][ T2691] ? security_load_policy+0x130/0x12d0 [ 104.979938][ T2691] security_load_policy+0x16a/0x12d0 [ 104.985627][ T2691] ? irqentry_exit+0x4a/0x60 [ 104.990297][ T2691] ? __kasan_check_write+0x18/0x20 [ 104.995510][ T2691] ? mutex_lock+0x97/0x1d0 [ 105.000045][ T2691] ? __cfi_security_load_policy+0x10/0x10 [ 105.005893][ T2691] ? rep_movs_alternative+0x4a/0xa0 [ 105.011180][ T2691] sel_write_load+0x258/0x600 [ 105.015988][ T2691] ? __cfi_sel_write_load+0x10/0x10 [ 105.021255][ T2691] ? _raw_spin_lock_irq+0x93/0x120 [ 105.024388][ T539] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.026468][ T2691] ? bpf_lsm_file_permission+0xd/0x20 [ 105.036801][ T539] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.039535][ T2691] ? __cfi_sel_write_load+0x10/0x10 [ 105.052982][ T539] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 105.055188][ T2691] vfs_write+0x3c4/0xfd0 [ 105.065355][ T539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.068940][ T2691] ? __cfi_vfs_write+0x10/0x10 [ 105.078146][ T539] usb 2-1: Product: syz [ 105.081776][ T2691] ? __kasan_check_write+0x18/0x20 [ 105.086220][ T539] usb 2-1: Manufacturer: syz [ 105.091095][ T2691] ? mutex_lock+0x97/0x1d0 [ 105.091129][ T2691] ? __cfi_mutex_lock+0x10/0x10 [ 105.105079][ T2691] ksys_write+0x145/0x260 [ 105.106229][ T539] uvcvideo 2-1:1.1: Unknown video format 32595559-0000-0000-0000-000000000000 [ 105.109470][ T2691] ? xfd_validate_state+0x68/0x140 [ 105.123654][ T2691] ? __cfi_ksys_write+0x10/0x10 [ 105.128573][ T2691] ? __kasan_check_write+0x18/0x20 [ 105.129304][ T539] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 105.133768][ T2691] ? fpregs_restore_userregs+0x11c/0x260 [ 105.142383][ T539] uvcvideo 2-1:1.1: No supported video formats found. [ 105.145812][ T2691] __x64_sys_write+0x7f/0x90 [ 105.153469][ T539] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 105.157306][ T2691] x64_sys_call+0x271c/0x2ee0 [ 105.169331][ T2691] do_syscall_64+0x57/0xf0 [ 105.173836][ T2691] ? clear_bhb_loop+0x50/0xa0 [ 105.178588][ T2691] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.184574][ T2691] RIP: 0033:0x7ffb0559e159 [ 105.189057][ T2691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.208818][ T2691] RSP: 002b:00007ffb063c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.217335][ T2691] RAX: ffffffffffffffda RBX: 00007ffb05825fa0 RCX: 00007ffb0559e159 [ 105.225390][ T2691] RDX: 000000000001b000 RSI: 0000200000000000 RDI: 0000000000000003 [ 105.233870][ T2691] RBP: 00007ffb0563503b R08: 0000000000000000 R09: 0000000000000000 [ 105.242138][ T2691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.250177][ T2691] R13: 00007ffb05826038 R14: 00007ffb05825fa0 R15: 00007ffdb048da88 [ 105.258327][ T2691] [ 105.261396][ T2691] ---[ end trace 0000000000000000 ]--- [ 105.267384][ T2691] SELinux: failed to load policy [ 106.465812][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.472964][ T9] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 106.488094][ T9] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 106.497657][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.509690][ T9] usb 5-1: USB disconnect, device number 19 [ 106.583267][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.608346][ T9] usb 2-1: USB disconnect, device number 15