last executing test programs: 15.163369613s ago: executing program 2 (id=81): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100, 0x0, 0x1000000}) (fail_nth: 1) 14.666971506s ago: executing program 2 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001880)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f00000000c0)) setuid(0x0) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xfffffffffffffff8, 0x7, 0x1, 0x3e, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0x3, 0x40000000000007, 0x100005, 0x79, 0x3, 0x2, 0xfffffffffffffffd], 0x3332d000, 0x11000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@arm64={0x6, 0x3, 0x8, '\x00', 0x7fffffff}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x46, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x1, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x10000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.549663669s ago: executing program 2 (id=87): r0 = syz_usb_connect$cdc_ncm(0x5, 0xce, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x2, 0x1, 0x5, 0x30, 0xdc}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x9, 0x2, 0x8, 0x8}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe5dc72ee8d8eee2, 0x81, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "37d5c87a8d7dcfde62307820d7609678"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42d}}, {0x68, &(0x7f0000000340)=@string={0x68, 0x3, "08e46219a0ae3f76fb440f88cd6c8d317941b4ea86c4199f85720fa0dfbe1a9d67467c2123cd4af54850413697f5535457c70c0b6fed47433440fe82b77d0d490167679cc9b598cbc89febffcf24f887cfb9fb1b32c3a794a2c60000231b83d9494c7f29ca9f"}}, {0x4, &(0x7f00000008c0)=@string={0x0, 0x3, "634a1c91b81f97ce168539bc10519f2ce22106653b661bb64c2e85a70ed9269482bc189d1c42d025d30178e5d7a07bebe6fa0352f2256e1d7a593b3686f4cb796c771707f7f1ea32df1e6a5abeb7be6e9e7676cb32aa97bd22dd1eae743e8353ab272f4f9e666e87787f06a3388a7e65470018eb0f62f95a6853291289bf8eef390be492c277c3af0acb0ba38b7690e87263a9d603d744060dc5679cd0707f259f8d45143f"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x22, 0x10, {0x10, 0x23, "5a6c921cfb2f6704390185107193"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x0, 0xc, 0x4f, "17e9e2d5c0660c31bcd43c1605f95d273ed2f61b81f28fc5a04ee76be92a02e6e3fa2eb5ced8480880dd49d63fbabbc84c5dc510e3568d79a9c775df4700e51d82d8c184485c39c4f78825f7726d9b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0xffff, 0x8, 0x80000000, 0x3000, 0x8, 0x9, 0x9f, 0x1, 0x8, 0x8, 0x4, 0x1}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xf}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0x200000e, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540500001e000701fefffffffcdbdf25017c0000040045803c0501"], 0x554}, 0x1, 0x0, 0x0, 0xc004}, 0xc044) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x4a, 0x2, 0x70bd2a, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 12.640432587s ago: executing program 2 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d04, &(0x7f0000000900)) (fail_nth: 1) 12.624661758s ago: executing program 2 (id=95): unshare(0x60000600) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d04, &(0x7f0000000900)) 12.53607684s ago: executing program 2 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001880)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f00000000c0)) setuid(0x0) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xfffffffffffffff8, 0x7, 0x1, 0x3e, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0x3, 0x40000000000007, 0x100005, 0x79, 0x3, 0x2, 0xfffffffffffffffd], 0x3332d000, 0x11000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@arm64={0x6, 0x3, 0x8, '\x00', 0x7fffffff}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x46, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x1, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x10000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.804654071s ago: executing program 3 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1, 0x1, 0xacd294f27ffa9b17, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}]}]}, 0x20}}, 0x0) 7.750745542s ago: executing program 3 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1, 0x1, 0xacd294f27ffa9b17, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}]}]}, 0x20}}, 0x0) (fail_nth: 1) 7.539783897s ago: executing program 3 (id=121): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = eventfd(0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0x34, 0x7}}], 0x18}, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x40, 0x0, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x9, 0x6, {0x8, 0x25, 0x1, 0x3, 0x0, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x30, 0x7f, 0x2, 0x1, {0x8, 0x25, 0x1, 0x0, 0xc, 0x81, 0x2f5}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x11, &(0x7f0000000280)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0xffff, 0x0, 0xfffa}]}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x12}) syz_usb_connect(0x0, 0x25a, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x60, 0x1c, 0xbf, 0x10, 0x59b, 0x1, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x248, 0x2, 0x0, 0x8e, 0x10, 0x2d, "", [{{0x9, 0x4, 0x93, 0x4, 0x9, 0x42, 0x3, 0x98, 0xf7, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x6, 0x0, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x4, 0xf5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x9, 0xc, 0x0, 0xc, 0x30, 0x50}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x1, 0x4, 0x25}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x40, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x81, 0x10, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x1, 0x1, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4b, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x8, 0x6, 0x5, [@generic={0xf4, 0x34, "2506d6ccef45a521e839ace4535408b05ded0271b8f40d79ccef0f47d86b5e6c098c16ac9a93d25e3a03487de44d096b9d8f154b915c55f2db8ef79153f9cade3a3ffa4db46aa5750ab884d0353f91aacfef8642114ff83807d24e821019aa53770896cee60f7ef9d0ef3c9c001e5ae225f968ba5867eb6aaea75015799c62352852ec9ae5c2112bc2de6bfb147e23f8dfb35e46bba434648ca0d4b9e9b56d89b768bb2470decd0b2418c61aeb783c2d3ab29982f593e1b99b474ea6cefd37b37dca8ab521817d9afc493ddd6725d8728416958eff3028c19a367d91bdf3f11658e505e6799ff9a52881f403ace45a50555e"}, @generic={0x6a, 0x21, "c44945b04983f3d3f0cbac13d99360fdd4c70d294d4bd09211af46393c70367b1869ef38b651f59ccd9c00b7a8bd847055f52505cbf56b8fbc1d2fb475817061b3b421fedb4ed6437d78a65c979089c65aca674f8a2ba67356f9970e5edcd6ebc2c1dbd00b405eaa"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x6, 0xf8, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xbe, 0x3}]}}]}}, {{0x9, 0x4, 0xc6, 0xfe, 0x2, 0x6e, 0x38, 0xcb, 0x10, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x2d}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x5, 0x5, 0x5}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0xd0, "d7c624"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x3, "c489"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x1, 0x3, 0x8}]}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0xd5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd124}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8e, 0x57}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xf6, 0x8, 0xe5}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0x26, 0x10, 0x1, 0x10, 0xeb}, 0x2a, &(0x7f0000000780)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x53, 0x5e7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x3, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0x0, 0xb}]}, 0x3, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42a}}, {0x6c, &(0x7f0000000840)=ANY=[@ANYBLOB="6c039ea5d42de7b44ea83224b41ab882265aadecfd4c1a206ce54a79365d01477aebd8f48ea6d0bf6bf4959d46a517da2043432c867f01ad66c22eecbe4dcc357705fafd1d77eac11d0389af54446963a35b82cd1f69a2efd20f17b71afd3f157aa69569316999cd7cb521b9"]}]}) 6.314391818s ago: executing program 0 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.167656302s ago: executing program 0 (id=135): syz_usb_connect(0x1, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001eeef3508c40709a10958bb6d0104030109021200019a06060f09048003009016"], &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000001280)=@string={0x2}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000062000000", @ANYRES32, @ANYBLOB="18001280140001"], 0x38}], 0x1}, 0x0) unshare(0x62020600) unshare(0x8040800) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff0100320001000000000007fdd411efc408000400"/57, 0x39}], 0x1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f00000002c0)={r0, 0xfffffff3}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') getpeername$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 4.503198755s ago: executing program 3 (id=138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff99) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}}}, 0x10) r4 = gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x18, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x10) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r7, 0x1, &(0x7f0000000040), 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000140)={{&(0x7f000000e000/0x1000)=nil, 0x1000}}) ioctl$TCXONC(r1, 0x540a, 0x3) listen(r3, 0x8f) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) 3.584138488s ago: executing program 3 (id=139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000640)=0x2) (fail_nth: 1) 3.1180643s ago: executing program 0 (id=140): r0 = socket(0xb, 0x2, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000740)={'#! ', './sys'}, 0x9) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='#/*.&\x00', 0x210001, &(0x7f00000000c0)={@align=0x2c77be2e, {0x0, 0x2, 0x7, 0x5}}, 0x55d, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000280)={0x60, 0x2, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x69, &(0x7f0000000240), 0x0, 0x200, 0x2, 0x8, 0x1, 0x20}) write(r0, &(0x7f00000008c0)="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", 0xfc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40800, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xba, 0x10, 0xe3, 0x8, 0x1b1c, 0x1ab5, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x80, 0x30, 0x8, "", [{{0x9, 0x4, 0x3e, 0x7f, 0x0, 0xff, 0x1, 0x23, 0xf0}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000380)="b805000000b9997622f10f01c1c4c33d4a674751660f71e0da66baf80cb8920ac18cef66bafc0cecc4e17572d30fc4c32d46ab004000000cc4c1fc10270f22020f1ceb0f01c5", 0x46}], 0x1, 0x30, &(0x7f0000000440), 0x0) 2.534450285s ago: executing program 1 (id=141): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000500)={0x7, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x6, [{{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e21, @multicast1}}]}, 0x390) (async) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000400)="33050be6a4556ac75a40cb2db5a48a096de8f49d81d5b9db3c0fe558d3ad5d00040ea6095c4f45473f4f935237ac1a8586c40e8a6c9d6b06503fcf717dd95e8e75449b8c729875b82dbedd92b0d71561dce90e2ddf55bd0e9cb64264f2e4d8e4df5156471a981f699606aac4c8a835fb96d97dbc9aa35749e0b9638ff5f77fbdfff738689f3792b13b7f0753e23540748dc1ac7045ad4b445ee19bb87b5f94b6e333b5acbde4c8c18647d3d011de22d2826fbf2dfa411c9dfe3f304d1fc8e1089b2d9b7793514c091f057fc577a65d", 0xcf, r0) 2.435782708s ago: executing program 1 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x1c4, 0x0, 0x3}]}) (fail_nth: 1) 2.057628557s ago: executing program 3 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x11, 0x9, 0x400, 0x14, 0x604, 0x823c, 0xc, 0x8001, 0x8, 0x4, 0xe4, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x1c4, 0x0, 0x3}]}) 2.009349168s ago: executing program 1 (id=144): execve(0x0, 0x0, &(0x7f00000003c0)={[&(0x7f0000000380)='system.posix_acl_access\x00']}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.766875195s ago: executing program 1 (id=145): execve(0x0, 0x0, &(0x7f00000003c0)={[&(0x7f0000000380)='system.posix_acl_access\x00']}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xea9}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xa97, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x4, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fc4, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x1e8}}], 0x1, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 1.424123154s ago: executing program 1 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000010ffffffffffff3865333ff81e88a854008100340086dd"], 0x121) 1.411419714s ago: executing program 1 (id=147): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="2008280000000000000000cb4fdca0560f920d54f365c5b1d43ee4"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000040)=[{0x200}]}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='sub:*', 0x5) sendmmsg$unix(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x11, 0x6, "c864ac3b0bc8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x0, 0xb, 0x11, "001ce856d80fa0948bf921f18c86117b84"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd8}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x83, 0x1, "cf"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, "b7"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "1fc23e"}}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x20, 0x23, 0xa8, {0xa8, 0xf, "ad50a9644d39e651a5d3658e7fdef25fcf808719e721c35bc4998cf1a412a97a3a6bad8b9e477386ff7549ded1f8795d41d3e2dcddd1aa95e6ed34559a9ee07def3d0f0a599817ce06a44a227b0282df9ae0c42d78cc28457804f14871d077f784ab016fa1358ceff66df966f149167897c58167ec853eafec290bbb6bb477c152ba0e5e9a709672403d49387bdc87d56e4141f2a6ebd808f301d080a84b069fad952f37245b"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x0, 0xd, 0xe8, "6f602c96e67b8d90334577c28b921e7d6318536783d73137ff1f145d9089aa8b7cb131325ccf0251ae1435ab0109e3fd55433e8c432d894291fdfe209017770c6c8d371b56c61425274ad307aa0bf1b1b6d5037a28043ec5192fad5aca0e85b99b69aaced4065eb8d25ccd017efd406e963ad3971089cc18b06d12a82649c5b5cced1e9fc9493c3502ff8d0006b80aecf355a118a56245b25d869bb0ac6101b905ade6493c6b3a265ee4c8c0c9bb694b4af45832e4f34d1c603d94face8d17843d29c49263b22606301bb0bea662f5ddd492bbcb5c26cd034ad2681b970cd2c7374f0f599fafd383"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x4, 0xfa17, 0xfa0, 0x80, 0x8, 0x6, 0x37, 0x9, 0xb3d9, 0x4386, 0x94f5, 0x7}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0x62a}, &(0x7f0000000680)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x89, 0x2, 0x1}}) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 91.944958ms ago: executing program 0 (id=148): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000012026bd700000000000100000000c00000000000000000000000d002e"], 0x30}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x0, 0x6}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[@out_dx={0x6a, 0x28, {0x517f, 0x3, 0x4}}, @wrmsr={0x65, 0x20, {0x3a2, 0x7}}, @wrmsr={0x65, 0x20, {0x996, 0x7}}, @uexit={0x0, 0x18, 0xc8}, @out_dx={0x6a, 0x28, {0x38b6, 0x3, 0x1}}], 0xa8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 121.04µs ago: executing program 0 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) 0s ago: executing program 0 (id=150): pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='.\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.739530][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 14.739545][ T36] audit: type=1400 audit(1786034164.320:59): avc: denied { transition } for pid=234 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.744167][ T36] audit: type=1400 audit(1786034164.320:60): avc: denied { noatsecure } for pid=234 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.748603][ T36] audit: type=1400 audit(1786034164.320:61): avc: denied { write } for pid=234 comm="sh" path="pipe:[2357]" dev="pipefs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.752417][ T36] audit: type=1400 audit(1786034164.320:62): avc: denied { rlimitinh } for pid=234 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.755402][ T36] audit: type=1400 audit(1786034164.320:63): avc: denied { siginh } for pid=234 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.158' (ED25519) to the list of known hosts. [ 22.889882][ T36] audit: type=1400 audit(1786034172.470:64): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.893964][ T288] cgroup: Unknown subsys name 'net' [ 22.912530][ T36] audit: type=1400 audit(1786034172.470:65): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.939832][ T36] audit: type=1400 audit(1786034172.490:66): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.940257][ T288] cgroup: Unknown subsys name 'devices' [ 23.061489][ T288] cgroup: Unknown subsys name 'hugetlb' [ 23.067104][ T288] cgroup: Unknown subsys name 'rlimit' [ 23.161666][ T36] audit: type=1400 audit(1786034172.740:67): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.184853][ T36] audit: type=1400 audit(1786034172.740:68): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.209586][ T36] audit: type=1400 audit(1786034172.740:69): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.255773][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.264664][ T36] audit: type=1400 audit(1786034172.840:70): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 23.290152][ T36] audit: type=1400 audit(1786034172.840:71): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.324847][ T36] audit: type=1400 audit(1786034172.900:72): avc: denied { read } for pid=288 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.350444][ T36] audit: type=1400 audit(1786034172.900:73): avc: denied { open } for pid=288 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.351100][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.665136][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.672447][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.679579][ T296] bridge_slave_0: entered allmulticast mode [ 24.685804][ T296] bridge_slave_0: entered promiscuous mode [ 24.692390][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.699465][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.706561][ T296] bridge_slave_1: entered allmulticast mode [ 24.712876][ T296] bridge_slave_1: entered promiscuous mode [ 24.759449][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.766516][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.773594][ T295] bridge_slave_0: entered allmulticast mode [ 24.779814][ T295] bridge_slave_0: entered promiscuous mode [ 24.793913][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.801060][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.808118][ T295] bridge_slave_1: entered allmulticast mode [ 24.814467][ T295] bridge_slave_1: entered promiscuous mode [ 24.850760][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.857959][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.865062][ T298] bridge_slave_0: entered allmulticast mode [ 24.871356][ T298] bridge_slave_0: entered promiscuous mode [ 24.877509][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.884586][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.891678][ T297] bridge_slave_0: entered allmulticast mode [ 24.897914][ T297] bridge_slave_0: entered promiscuous mode [ 24.907197][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.914267][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.921345][ T297] bridge_slave_1: entered allmulticast mode [ 24.927548][ T297] bridge_slave_1: entered promiscuous mode [ 24.939685][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.946730][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.953839][ T298] bridge_slave_1: entered allmulticast mode [ 24.960016][ T298] bridge_slave_1: entered promiscuous mode [ 25.077501][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.084583][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.091893][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.098933][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.114902][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.121971][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.129234][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.136302][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.156673][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.163758][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.171069][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.178109][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.200334][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.207475][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.230235][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.238402][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.246221][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.253788][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.261083][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.293040][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.300115][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.308748][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.315828][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.323553][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.330618][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.338163][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.345251][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.381239][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.388317][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.396225][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.403270][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.424346][ T295] veth0_vlan: entered promiscuous mode [ 25.440430][ T298] veth0_vlan: entered promiscuous mode [ 25.458649][ T297] veth0_vlan: entered promiscuous mode [ 25.474056][ T295] veth1_macvtap: entered promiscuous mode [ 25.484903][ T298] veth1_macvtap: entered promiscuous mode [ 25.492237][ T296] veth0_vlan: entered promiscuous mode [ 25.517664][ T297] veth1_macvtap: entered promiscuous mode [ 25.526089][ T296] veth1_macvtap: entered promiscuous mode [ 25.558719][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.612059][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.649490][ T312] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2'. [ 25.673656][ T312] gretap0: entered promiscuous mode [ 25.690842][ T312] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2'. [ 25.699574][ T312] 0{X: renamed from gretap0 [ 25.705146][ T312] 0{X: left promiscuous mode [ 25.710731][ T312] 0{X: entered allmulticast mode [ 25.716590][ T312] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 25.734860][ T312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.748131][ T312] 9p: Unknown uid 00000000004294967295 [ 25.762364][ T325] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.863769][ T338] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.863794][ T338] rust_binder: Read failure Err(EFAULT) in pid:7 [ 25.932253][ T334] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.938824][ T334] rust_binder: Read failure Err(EFAULT) in pid:5 [ 25.947589][ T334] rust_binder: got new transaction with bad transaction stack [ 25.956229][ T334] rust_binder: 333:334 transaction call to 333:0 failed EINVAL, code 0 size 0-24 [ 25.974442][ T10] rust_binder: 333: undelivered TRANSACTION_COMPLETE [ 25.981228][ T10] rust_binder: 333: undelivered TRANSACTION_ERROR: 29201 [ 26.007474][ T330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=330 comm=syz.2.7 [ 26.073940][ T356] input: syz1 as /devices/virtual/input/input4 [ 26.339435][ T88] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.349348][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.479370][ T45] usb 2-1: device descriptor read/64, error -71 [ 26.490615][ T88] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.497296][ T88] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 26.506633][ T88] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.522624][ T88] usb 4-1: config 0 descriptor?? [ 26.671702][ T382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 26.681680][ T382] mmap: syz.2.26 (382) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.719351][ T45] usb 2-1: device descriptor read/64, error -71 [ 26.861299][ T387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.870028][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 26.938701][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x1 [ 26.945834][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 26.952764][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 26.959709][ T45] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.967438][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 26.974417][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 26.981348][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 26.988287][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 26.995493][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 27.002590][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 27.009506][ T88] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 27.016695][ T88] wacom 0003:056A:00D0.0001: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 27.021328][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.033240][ T88] wacom 0003:056A:00D0.0001: hidraw0: USB HID v0.81 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 27.039416][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 27.047614][ T88] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0001/input/input5 [ 27.059671][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.089890][ T10] usb 1-1: config 0 descriptor?? [ 27.140513][ T9] usb 4-1: USB disconnect, device number 2 [ 27.149347][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.389330][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.499456][ T45] usb usb2-port1: attempt power cycle [ 27.505154][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x3 [ 27.513396][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x2 [ 27.520532][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.527584][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.534802][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.541812][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.548788][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.555916][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.563067][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.570132][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.577113][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.584137][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.591289][ T10] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 27.599630][ T10] elecom 0003:056E:00FC.0002: hidraw0: USB HID v0.c1 Device [HID 056e:00fc] on usb-dummy_hcd.0-1/input0 [ 27.672590][ T395] incfs: Options parsing error. -22 [ 27.677908][ T395] incfs: mount failed -22 [ 27.705504][ T372] netlink: 'syz.0.23': attribute type 15 has an invalid length. [ 27.713204][ T372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 27.724433][ T88] usb 1-1: USB disconnect, device number 2 [ 27.839360][ T45] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 27.860421][ T45] usb 2-1: device descriptor read/8, error -71 [ 27.929348][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.939345][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.990463][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.069446][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.079342][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 28.085507][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 28.093655][ T9] usb 4-1: config 0 has no interface number 0 [ 28.101297][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 28.110415][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.118442][ T9] usb 4-1: Product: syz [ 28.122924][ T9] usb 4-1: Manufacturer: syz [ 28.127525][ T9] usb 4-1: SerialNumber: syz [ 28.132780][ T9] usb 4-1: config 0 descriptor?? [ 28.138600][ T9] smsc95xx v2.0.0 [ 28.229341][ T45] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 28.250442][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.309363][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.390052][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.465024][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 28.465042][ T36] audit: type=1400 audit(1786034178.040:158): avc: denied { execute } for pid=404 comm="syz.0.35" path=2F6D656D66643A2F6465762F6E65742F74756E202864656C6574656429 dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.499409][ T45] usb usb2-port1: unable to enumerate USB device [ 28.539676][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 28.550562][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.559697][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.709350][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.949359][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.969099][ T36] audit: type=1400 audit(1786034178.540:159): avc: denied { getopt } for pid=396 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.004043][ T397] input: syz1 as /devices/virtual/input/input8 [ 29.059421][ T10] usb usb3-port1: attempt power cycle [ 29.140880][ T36] audit: type=1400 audit(1786034178.720:160): avc: denied { create } for pid=414 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.167337][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 29.178281][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 29.186520][ T36] audit: type=1400 audit(1786034178.740:161): avc: denied { write } for pid=414 comm="syz.1.37" path="socket:[4383]" dev="sockfs" ino=4383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.210547][ T9] usb 4-1: USB disconnect, device number 3 [ 29.232595][ T417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.293240][ T36] audit: type=1400 audit(1786034178.870:162): avc: denied { read write } for pid=419 comm="syz.1.39" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.300259][ T420] fuse: Bad value for 'user_id' [ 29.316506][ T36] audit: type=1400 audit(1786034178.870:163): avc: denied { open } for pid=419 comm="syz.1.39" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.321727][ T420] fuse: Bad value for 'user_id' [ 29.345841][ T36] audit: type=1400 audit(1786034178.870:164): avc: denied { mounton } for pid=419 comm="syz.1.39" path="/9/file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.382124][ T36] audit: type=1400 audit(1786034178.960:165): avc: denied { create } for pid=421 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 29.401850][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.430349][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.488082][ T36] audit: type=1400 audit(1786034179.060:166): avc: denied { map } for pid=425 comm="syz.1.41" path="socket:[3991]" dev="sockfs" ino=3991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.511779][ T36] audit: type=1400 audit(1786034179.060:167): avc: denied { read } for pid=425 comm="syz.1.41" path="socket:[3991]" dev="sockfs" ino=3991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.570409][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.644118][ T441] rust_binder: Write failure EFAULT in pid:29 [ 29.682496][ T445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.809348][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.830432][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.961141][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.979389][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.019333][ T390] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.069723][ T10] usb usb3-port1: unable to enumerate USB device [ 30.130604][ T45] usb 1-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 30.139664][ T45] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 30.149681][ T390] usb 4-1: device descriptor read/64, error -71 [ 30.150421][ T45] usb 1-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 30.166798][ T45] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 30.175906][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.184015][ T45] usb 1-1: Product: syz [ 30.188182][ T45] usb 1-1: Manufacturer: syz [ 30.192860][ T45] usb 1-1: SerialNumber: syz [ 30.389332][ T390] usb 4-1: device descriptor read/64, error -71 [ 30.422697][ T452] process 'syz.0.51' launched './file0' with NULL argv: empty string added [ 30.434260][ T45] usb 1-1: 0:1 : does not exist [ 30.439705][ T45] usb 1-1: unit 80 not found! [ 30.446371][ T45] usb 1-1: USB disconnect, device number 3 [ 30.470984][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:24.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.569353][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.629364][ T390] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.719429][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 30.725871][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.736057][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.747281][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.756851][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.767451][ T390] usb 4-1: device descriptor read/64, error -71 [ 30.773801][ T10] usb 2-1: Product: syz [ 30.781211][ T10] usb 2-1: Manufacturer: syz [ 30.785834][ T10] usb 2-1: SerialNumber: syz [ 30.992961][ T475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.004746][ T10] usb 2-1: 0:2 : does not exist [ 31.009683][ T390] usb 4-1: device descriptor read/64, error -71 [ 31.018016][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 31.030157][ T10] usb 2-1: USB disconnect, device number 6 [ 31.038744][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.119436][ T390] usb usb4-port1: attempt power cycle [ 31.219367][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.329351][ T361] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.370467][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.381413][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.391191][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.404142][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.413476][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.422254][ T45] usb 1-1: config 0 descriptor?? [ 31.459344][ T390] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.480587][ T390] usb 4-1: device descriptor read/8, error -71 [ 31.489316][ T361] usb 3-1: Using ep0 maxpacket: 16 [ 31.497136][ T361] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 31.506315][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.514445][ T361] usb 3-1: Product: syz [ 31.518655][ T361] usb 3-1: Manufacturer: syz [ 31.526285][ T361] usb 3-1: SerialNumber: syz [ 31.611817][ T390] usb 4-1: device descriptor read/8, error -71 [ 31.829474][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.836959][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.844383][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.851829][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.859235][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.859464][ T390] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.866722][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.881553][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.888946][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.896433][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.901394][ T390] usb 4-1: device descriptor read/8, error -71 [ 31.903959][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.917485][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.924946][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.932399][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.939869][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.947793][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 31.955546][ T45] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 31.965214][ T45] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.019338][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.040356][ T390] usb 4-1: device descriptor read/8, error -71 [ 32.149483][ T390] usb usb4-port1: unable to enumerate USB device [ 32.169330][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 32.176852][ T10] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 32.186088][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.194162][ T10] usb 2-1: Product: syz [ 32.198346][ T10] usb 2-1: Manufacturer: syz [ 32.203353][ T10] usb 2-1: SerialNumber: syz [ 32.348418][ T361] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 32.358610][ T361] usb 3-1: USB disconnect, device number 6 [ 32.417135][ T10] usb 2-1: USB disconnect, device number 7 [ 32.431676][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.909588][ T500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.975910][ T508] FAULT_INJECTION: forcing a failure. [ 32.975910][ T508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.994236][ T508] CPU: 0 UID: 0 PID: 508 Comm: syz.1.72 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 32.994269][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.994289][ T508] Call Trace: [ 32.994296][ T508] [ 32.994304][ T508] __dump_stack+0x21/0x30 [ 32.994339][ T508] dump_stack_lvl+0x140/0x1c0 [ 32.994383][ T508] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.994412][ T508] ? bpf_lsm_file_permission+0xd/0x20 [ 32.994441][ T508] ? check_stack_object+0x10f/0x150 [ 32.994476][ T508] dump_stack+0x19/0x20 [ 32.994503][ T508] should_fail_ex+0x3c2/0x510 [ 32.994527][ T508] should_fail+0xf/0x20 [ 32.994549][ T508] should_fail_usercopy+0x1e/0x30 [ 32.994573][ T508] _copy_from_user+0x20/0xa0 [ 32.994601][ T508] __sys_bind+0x1f4/0x430 [ 32.994630][ T508] ? __cfi___sys_bind+0x10/0x10 [ 32.994661][ T508] ? __kasan_check_read+0x15/0x20 [ 32.994682][ T508] __x64_sys_bind+0x7e/0x90 [ 32.994718][ T508] x64_sys_call+0x1ffd/0x2ee0 [ 32.994736][ T508] do_syscall_64+0x57/0xf0 [ 32.994759][ T508] ? clear_bhb_loop+0x50/0xa0 [ 32.994786][ T508] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.994812][ T508] RIP: 0033:0x7f1b7af9e0d9 [ 32.994829][ T508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.994846][ T508] RSP: 002b:00007f1b7bded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 32.994872][ T508] RAX: ffffffffffffffda RBX: 00007f1b7b225fa0 RCX: 00007f1b7af9e0d9 [ 32.994886][ T508] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000004 [ 32.994898][ T508] RBP: 00007f1b7bded090 R08: 0000000000000000 R09: 0000000000000000 [ 32.994910][ T508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.994922][ T508] R13: 00007f1b7b226038 R14: 00007f1b7b225fa0 R15: 00007ffce2db6678 [ 32.994938][ T508] [ 33.216069][ T517] FAULT_INJECTION: forcing a failure. [ 33.216069][ T517] name failslab, interval 1, probability 0, space 0, times 1 [ 33.229353][ T517] CPU: 1 UID: 0 PID: 517 Comm: syz.3.76 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 33.229383][ T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.229395][ T517] Call Trace: [ 33.229401][ T517] [ 33.229408][ T517] __dump_stack+0x21/0x30 [ 33.229439][ T517] dump_stack_lvl+0x140/0x1c0 [ 33.229464][ T517] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.229492][ T517] dump_stack+0x19/0x20 [ 33.229516][ T517] should_fail_ex+0x3c2/0x510 [ 33.229538][ T517] should_failslab+0xac/0x100 [ 33.229566][ T517] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 33.229587][ T517] ? __kasan_check_write+0x18/0x20 [ 33.229606][ T517] ? _raw_spin_lock+0x92/0x120 [ 33.229626][ T517] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x469/0x1a60 [ 33.229662][ T517] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.229683][ T517] krealloc_noprof+0x8d/0x130 [ 33.229703][ T517] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x469/0x1a60 [ 33.229740][ T517] ? __cfi_selinux_file_open+0x10/0x10 [ 33.229762][ T517] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 33.229794][ T517] ? avc_has_extended_perms+0x7fb/0xe60 [ 33.229816][ T517] ? __asan_memcpy+0x5a/0x80 [ 33.229835][ T517] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x3a9/0x3fe0 [ 33.229860][ T517] ? __asan_set_shadow_00+0x12/0x20 [ 33.229883][ T517] ? do_vfs_ioctl+0x182d/0x2010 [ 33.229903][ T517] ? arch_stack_walk+0x10a/0x170 [ 33.229920][ T517] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 33.229941][ T517] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 33.229965][ T517] ? _parse_integer+0x2e/0x40 [ 33.230001][ T517] ? ioctl_has_perm+0x39a/0x500 [ 33.230018][ T517] ? has_cap_mac_admin+0xd0/0xd0 [ 33.230035][ T517] ? proc_fail_nth_write+0x184/0x220 [ 33.230061][ T517] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 33.230087][ T517] ? selinux_file_ioctl+0x732/0x1480 [ 33.230103][ T517] ? vfs_write+0xbcf/0xfd0 [ 33.230121][ T517] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 33.230138][ T517] ? __cfi_vfs_write+0x10/0x10 [ 33.230156][ T517] ? __kasan_check_write+0x18/0x20 [ 33.230173][ T517] ? mutex_unlock+0x90/0x240 [ 33.230196][ T517] ? __cfi_mutex_unlock+0x10/0x10 [ 33.230225][ T517] ? bpf_lsm_file_ioctl+0xd/0x20 [ 33.230247][ T517] ? security_file_ioctl+0x3e/0x110 [ 33.230273][ T517] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 33.230298][ T517] __se_sys_ioctl+0x135/0x1b0 [ 33.230320][ T517] __x64_sys_ioctl+0x7f/0xa0 [ 33.230340][ T517] x64_sys_call+0x1878/0x2ee0 [ 33.230356][ T517] do_syscall_64+0x57/0xf0 [ 33.230375][ T517] ? clear_bhb_loop+0x50/0xa0 [ 33.230400][ T517] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.230422][ T517] RIP: 0033:0x7f2a2ad9e0d9 [ 33.230437][ T517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.230451][ T517] RSP: 002b:00007f2a2bbe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.230470][ T517] RAX: ffffffffffffffda RBX: 00007f2a2b025fa0 RCX: 00007f2a2ad9e0d9 [ 33.230483][ T517] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000003 [ 33.230494][ T517] RBP: 00007f2a2bbe8090 R08: 0000000000000000 R09: 0000000000000000 [ 33.230505][ T517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.230516][ T517] R13: 00007f2a2b026038 R14: 00007f2a2b025fa0 R15: 00007ffd5dc96de8 [ 33.230531][ T517] [ 33.418980][ T526] FAULT_INJECTION: forcing a failure. [ 33.418980][ T526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.419048][ T526] CPU: 0 UID: 0 PID: 526 Comm: syz.2.81 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 33.419158][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.419210][ T526] Call Trace: [ 33.419233][ T526] [ 33.419258][ T526] __dump_stack+0x21/0x30 [ 33.419342][ T526] dump_stack_lvl+0x140/0x1c0 [ 33.419400][ T526] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.419467][ T526] dump_stack+0x19/0x20 [ 33.419530][ T526] should_fail_ex+0x3c2/0x510 [ 33.419584][ T526] should_fail+0xf/0x20 [ 33.419630][ T526] should_fail_usercopy+0x1e/0x30 [ 33.419685][ T526] _copy_from_user+0x20/0xa0 [ 33.419737][ T526] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x18ca/0x3fe0 [ 33.419812][ T526] ? __asan_set_shadow_00+0x12/0x20 [ 33.419875][ T526] ? do_vfs_ioctl+0x182d/0x2010 [ 33.419937][ T526] ? arch_stack_walk+0x10a/0x170 [ 33.419986][ T526] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 33.420049][ T526] ? _parse_integer+0x2e/0x40 [ 33.420097][ T526] ? ioctl_has_perm+0x39a/0x500 [ 33.420161][ T526] ? has_cap_mac_admin+0xd0/0xd0 [ 33.420232][ T526] ? proc_fail_nth_write+0x184/0x220 [ 33.420308][ T526] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 33.420384][ T526] ? selinux_file_ioctl+0x732/0x1480 [ 33.420456][ T526] ? vfs_write+0xbcf/0xfd0 [ 33.420496][ T526] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 33.420559][ T526] ? __cfi_vfs_write+0x10/0x10 [ 33.420623][ T526] ? __kasan_check_write+0x18/0x20 [ 33.420669][ T526] ? mutex_unlock+0x90/0x240 [ 33.420726][ T526] ? __cfi_mutex_unlock+0x10/0x10 [ 33.420796][ T526] ? bpf_lsm_file_ioctl+0xd/0x20 [ 33.420858][ T526] ? security_file_ioctl+0x3e/0x110 [ 33.420924][ T526] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 33.420987][ T526] __se_sys_ioctl+0x135/0x1b0 [ 33.421047][ T526] __x64_sys_ioctl+0x7f/0xa0 [ 33.421101][ T526] x64_sys_call+0x1878/0x2ee0 [ 33.421145][ T526] do_syscall_64+0x57/0xf0 [ 33.421195][ T526] ? clear_bhb_loop+0x50/0xa0 [ 33.421271][ T526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.421339][ T526] RIP: 0033:0x7f22e599e0d9 [ 33.421384][ T526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.421422][ T526] RSP: 002b:00007f22e68a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.421491][ T526] RAX: ffffffffffffffda RBX: 00007f22e5c25fa0 RCX: 00007f22e599e0d9 [ 33.421523][ T526] RDX: 0000200000000140 RSI: 000000004018620d RDI: 0000000000000003 [ 33.421547][ T526] RBP: 00007f22e68a8090 R08: 0000000000000000 R09: 0000000000000000 [ 33.421595][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.421640][ T526] R13: 00007f22e5c26038 R14: 00007f22e5c25fa0 R15: 00007ffeee058338 [ 33.421661][ T526] [ 33.905602][ T528] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.926913][ T534] sit0: entered promiscuous mode [ 33.933640][ T534] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 33.940849][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 33.940898][ T36] audit: type=1400 audit(1786034183.500:189): avc: denied { unlink } for pid=532 comm="syz.3.84" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.942763][ T534] netlink: 1 bytes leftover after parsing attributes in process `syz.3.84'. [ 34.013446][ T540] FAULT_INJECTION: forcing a failure. [ 34.013446][ T540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.026569][ T540] CPU: 0 UID: 0 PID: 540 Comm: syz.3.86 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 34.026600][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.026618][ T540] Call Trace: [ 34.026624][ T540] [ 34.026632][ T540] __dump_stack+0x21/0x30 [ 34.026665][ T540] dump_stack_lvl+0x140/0x1c0 [ 34.026691][ T540] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.026719][ T540] ? lock_sock_nested+0x216/0x2a0 [ 34.026744][ T540] dump_stack+0x19/0x20 [ 34.026769][ T540] should_fail_ex+0x3c2/0x510 [ 34.026791][ T540] should_fail+0xf/0x20 [ 34.026811][ T540] should_fail_usercopy+0x1e/0x30 [ 34.026834][ T540] _copy_from_user+0x20/0xa0 [ 34.026861][ T540] rfcomm_sock_setsockopt+0x310/0x720 [ 34.026886][ T540] ? __cfi_rfcomm_sock_setsockopt+0x10/0x10 [ 34.026910][ T540] ? file_open_name+0x70/0x1c0 [ 34.026938][ T540] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 34.026960][ T540] ? security_socket_setsockopt+0x3d/0x100 [ 34.026987][ T540] ? __cfi_rfcomm_sock_setsockopt+0x10/0x10 [ 34.027011][ T540] do_sock_setsockopt+0x27f/0x410 [ 34.027042][ T540] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 34.027060][ T540] ? __fget_files+0x2bc/0x330 [ 34.027085][ T540] __x64_sys_setsockopt+0x1b7/0x250 [ 34.027116][ T540] x64_sys_call+0x2adc/0x2ee0 [ 34.027131][ T540] do_syscall_64+0x57/0xf0 [ 34.027150][ T540] ? clear_bhb_loop+0x50/0xa0 [ 34.027172][ T540] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.027194][ T540] RIP: 0033:0x7f2a2ad9e0d9 [ 34.027208][ T540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.027222][ T540] RSP: 002b:00007f2a2bbe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 34.027239][ T540] RAX: ffffffffffffffda RBX: 00007f2a2b025fa0 RCX: 00007f2a2ad9e0d9 [ 34.027252][ T540] RDX: 0000000000000003 RSI: 0000000000000012 RDI: 0000000000000004 [ 34.027262][ T540] RBP: 00007f2a2bbe8090 R08: 0000000000000004 R09: 0000000000000000 [ 34.027272][ T540] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.027283][ T540] R13: 00007f2a2b026038 R14: 00007f2a2b025fa0 R15: 00007ffd5dc96de8 [ 34.027297][ T540] [ 34.247529][ T390] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.263171][ T36] audit: type=1400 audit(1786034183.840:190): avc: denied { create } for pid=541 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.282317][ T36] audit: type=1400 audit(1786034183.840:191): avc: denied { setopt } for pid=541 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.301688][ T36] audit: type=1400 audit(1786034183.860:192): avc: denied { bind } for pid=541 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.320687][ T36] audit: type=1400 audit(1786034183.860:193): avc: denied { read } for pid=541 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.349485][ T544] FAULT_INJECTION: forcing a failure. [ 34.349485][ T544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.362649][ T544] CPU: 1 UID: 0 PID: 544 Comm: syz.3.89 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 34.362677][ T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.362688][ T544] Call Trace: [ 34.362695][ T544] [ 34.362702][ T544] __dump_stack+0x21/0x30 [ 34.362738][ T544] dump_stack_lvl+0x140/0x1c0 [ 34.362758][ T544] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.362778][ T544] ? vmx_vcpu_load_vmcs+0x478/0x6f0 [ 34.362791][ T544] dump_stack+0x19/0x20 [ 34.362809][ T544] should_fail_ex+0x3c2/0x510 [ 34.362825][ T544] should_fail+0xf/0x20 [ 34.362838][ T544] should_fail_usercopy+0x1e/0x30 [ 34.362853][ T544] _copy_from_user+0x20/0xa0 [ 34.362871][ T544] msr_io+0xa1/0x2b0 [ 34.362883][ T544] ? __cfi_kvm_arch_vcpu_load+0x10/0x10 [ 34.362896][ T544] ? __cfi_do_get_msr+0x10/0x10 [ 34.362908][ T544] ? kvm_arch_dev_ioctl+0x990/0x990 [ 34.362921][ T544] kvm_arch_vcpu_ioctl+0x9e8/0x3120 [ 34.362934][ T544] ? __cfi_avc_has_perm+0x10/0x10 [ 34.362950][ T544] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 34.362964][ T544] ? selinux_file_open+0x46c/0x630 [ 34.362977][ T544] ? __cfi_selinux_file_open+0x10/0x10 [ 34.362993][ T544] ? is_bpf_text_address+0x17b/0x1a0 [ 34.363013][ T544] ? kernel_text_address+0xa9/0xe0 [ 34.363031][ T544] ? __kernel_text_address+0x11/0x40 [ 34.363049][ T544] ? __asan_set_shadow_00+0x12/0x20 [ 34.363069][ T544] ? do_vfs_ioctl+0x182d/0x2010 [ 34.363085][ T544] ? arch_stack_walk+0x10a/0x170 [ 34.363098][ T544] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 34.363131][ T544] ? _parse_integer_limit+0x195/0x1e0 [ 34.363145][ T544] ? _parse_integer+0x2e/0x40 [ 34.363157][ T544] ? kstrtoull+0x13b/0x1e0 [ 34.363170][ T544] ? kstrtouint+0x78/0xf0 [ 34.363183][ T544] ? ioctl_has_perm+0x1bc/0x500 [ 34.363195][ T544] ? __asan_memcpy+0x5a/0x80 [ 34.363209][ T544] ? ioctl_has_perm+0x408/0x500 [ 34.363221][ T544] ? has_cap_mac_admin+0xd0/0xd0 [ 34.363233][ T544] ? __kasan_check_write+0x18/0x20 [ 34.363246][ T544] ? mutex_lock_killable+0x97/0x1d0 [ 34.363266][ T544] ? __cfi_mutex_lock_killable+0x10/0x10 [ 34.363285][ T544] ? proc_fail_nth_write+0x184/0x220 [ 34.363304][ T544] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 34.363324][ T544] kvm_vcpu_ioctl+0x7da/0x1000 [ 34.363337][ T544] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.363350][ T544] ? __cfi_vfs_write+0x10/0x10 [ 34.363363][ T544] ? __kasan_check_write+0x18/0x20 [ 34.363376][ T544] ? mutex_unlock+0x90/0x240 [ 34.363393][ T544] ? __cfi_mutex_unlock+0x10/0x10 [ 34.363413][ T544] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.363431][ T544] ? security_file_ioctl+0x3e/0x110 [ 34.363450][ T544] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.363462][ T544] __se_sys_ioctl+0x135/0x1b0 [ 34.363478][ T544] __x64_sys_ioctl+0x7f/0xa0 [ 34.363494][ T544] x64_sys_call+0x1878/0x2ee0 [ 34.363506][ T544] do_syscall_64+0x57/0xf0 [ 34.363520][ T544] ? clear_bhb_loop+0x50/0xa0 [ 34.363538][ T544] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.363556][ T544] RIP: 0033:0x7f2a2ad9e0d9 [ 34.363567][ T544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.363578][ T544] RSP: 002b:00007f2a2bbe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.363592][ T544] RAX: ffffffffffffffda RBX: 00007f2a2b025fa0 RCX: 00007f2a2ad9e0d9 [ 34.363602][ T544] RDX: 0000200000000080 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 34.363611][ T544] RBP: 00007f2a2bbe8090 R08: 0000000000000000 R09: 0000000000000000 [ 34.363619][ T544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.363627][ T544] R13: 00007f2a2b026038 R14: 00007f2a2b025fa0 R15: 00007ffd5dc96de8 [ 34.363638][ T544] [ 34.489586][ T390] usb 2-1: Using ep0 maxpacket: 16 [ 34.491072][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.511060][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.659371][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 34.663797][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.687055][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.692076][ T390] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.713590][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.725230][ T9] usb 1-1: USB disconnect, device number 4 [ 34.732760][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.778078][ T390] usb 2-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 34.794853][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.826281][ T390] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 34.853505][ T390] usb 2-1: Product: syz [ 34.858090][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.862877][ T547] SELinux: Context system_u: is not valid (left unmapped). [ 34.873586][ T36] audit: type=1400 audit(1786034184.430:194): avc: denied { setopt } for pid=545 comm="syz.0.90" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.897814][ T36] audit: type=1400 audit(1786034184.470:195): avc: denied { relabelto } for pid=545 comm="syz.0.90" name="15" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 34.903128][ T45] usb 3-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 34.921808][ T390] usb 2-1: config 0 descriptor?? [ 34.938417][ T45] usb 3-1: SerialNumber: syz [ 34.947338][ T36] audit: type=1400 audit(1786034184.470:196): avc: denied { associate } for pid=545 comm="syz.0.90" name="15" dev="tmpfs" ino=95 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 34.972682][ T36] audit: type=1400 audit(1786034184.470:197): avc: denied { write } for pid=545 comm="syz.0.90" name="15" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 34.996118][ T36] audit: type=1400 audit(1786034184.470:198): avc: denied { add_name } for pid=545 comm="syz.0.90" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 35.179039][ T390] hid-generic 0003:045E:10DA.0004: ignoring exceeding usage max [ 35.181055][ T45] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 35.191386][ T390] hid-generic 0003:045E:10DA.0004: ignoring exceeding usage max [ 35.194295][ T45] cdc_ncm 3-1:1.0: bind() failure [ 35.206865][ T390] hid-generic 0003:045E:10DA.0004: unknown main item tag 0x0 [ 35.214428][ T390] hid-generic 0003:045E:10DA.0004: unknown main item tag 0x0 [ 35.221866][ T390] hid-generic 0003:045E:10DA.0004: unbalanced collection at end of report description [ 35.231681][ T390] hid-generic 0003:045E:10DA.0004: probe with driver hid-generic failed with error -22 [ 35.241368][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 35.339355][ T489] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.379352][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.389701][ T538] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 35.398113][ T408] usb 3-1: USB disconnect, device number 7 [ 35.491918][ T489] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 35.501153][ T489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.509171][ T489] usb 4-1: Product: syz [ 35.513399][ T489] usb 4-1: Manufacturer: syz [ 35.518051][ T489] usb 4-1: SerialNumber: syz [ 35.619332][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.725857][ T553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.734857][ T524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.738106][ T489] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.745617][ T553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.753495][ T489] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 35.759460][ T524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.773193][ T489] usb 4-1: USB disconnect, device number 8 [ 35.785745][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.869332][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 35.919633][ T555] MTRR 1 not used [ 35.952665][ T557] MTRR 1 not used [ 35.999336][ T9] usb 1-1: device descriptor read/64, error -71 [ 36.239355][ T9] usb 1-1: device descriptor read/64, error -71 [ 36.249829][ T560] can: request_module (can-proto-0) failed. [ 36.291184][ T562] MTRR 1 not used [ 36.359391][ T9] usb usb1-port1: attempt power cycle [ 36.709354][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 36.750406][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.800916][ T408] usb 2-1: USB disconnect, device number 8 [ 36.816483][ T567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 36.830690][ T567] bridge_slave_1: left allmulticast mode [ 36.836377][ T567] bridge_slave_1: left promiscuous mode [ 36.842390][ T567] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.854914][ T567] bridge_slave_0: left allmulticast mode [ 36.866976][ T567] bridge_slave_0: left promiscuous mode [ 36.876713][ T567] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.891163][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.899536][ T569] FAULT_INJECTION: forcing a failure. [ 36.899536][ T569] name failslab, interval 1, probability 0, space 0, times 0 [ 36.913520][ T569] CPU: 0 UID: 0 PID: 569 Comm: syz.3.101 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 36.913553][ T569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.913567][ T569] Call Trace: [ 36.913575][ T569] [ 36.913584][ T569] __dump_stack+0x21/0x30 [ 36.913621][ T569] dump_stack_lvl+0x140/0x1c0 [ 36.913654][ T569] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.913697][ T569] ? avc_has_perm+0x155/0x240 [ 36.913731][ T569] ? __cfi_avc_has_perm+0x10/0x10 [ 36.913754][ T569] dump_stack+0x19/0x20 [ 36.913780][ T569] should_fail_ex+0x3c2/0x510 [ 36.913803][ T569] should_failslab+0xac/0x100 [ 36.913827][ T569] __kmalloc_cache_noprof+0x41/0x470 [ 36.913848][ T569] ? vhost_task_create+0x12c/0x3f0 [ 36.913870][ T569] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 36.913895][ T569] vhost_task_create+0x12c/0x3f0 [ 36.913916][ T569] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 36.913940][ T569] ? __cfi_vhost_task_create+0x10/0x10 [ 36.913962][ T569] ? __cfi_vhost_task_fn+0x10/0x10 [ 36.913983][ T569] ? __kasan_check_write+0x18/0x20 [ 36.914003][ T569] ? mutex_lock+0x97/0x1d0 [ 36.914027][ T569] ? __cfi_mutex_lock+0x10/0x10 [ 36.914054][ T569] ? kernel_text_address+0xa9/0xe0 [ 36.914082][ T569] kvm_mmu_post_init_vm+0x161/0x300 [ 36.914111][ T569] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 36.914139][ T569] ? _parse_integer_limit+0x195/0x1e0 [ 36.914161][ T569] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 36.914188][ T569] ? kstrtoull+0x13b/0x1e0 [ 36.914208][ T569] ? kstrtouint+0x78/0xf0 [ 36.914227][ T569] ? ioctl_has_perm+0x1bc/0x500 [ 36.914246][ T569] ? __asan_memcpy+0x5a/0x80 [ 36.914266][ T569] ? ioctl_has_perm+0x408/0x500 [ 36.914283][ T569] ? has_cap_mac_admin+0xd0/0xd0 [ 36.914302][ T569] ? __kasan_check_write+0x18/0x20 [ 36.914328][ T569] ? mutex_lock_killable+0x97/0x1d0 [ 36.914357][ T569] ? __cfi_mutex_lock_killable+0x10/0x10 [ 36.914385][ T569] ? proc_fail_nth_write+0x184/0x220 [ 36.914415][ T569] kvm_vcpu_ioctl+0xa43/0x1000 [ 36.914436][ T569] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 36.914455][ T569] ? __cfi_vfs_write+0x10/0x10 [ 36.914476][ T569] ? __kasan_check_write+0x18/0x20 [ 36.914495][ T569] ? mutex_unlock+0x90/0x240 [ 36.914522][ T569] ? __cfi_mutex_unlock+0x10/0x10 [ 36.914552][ T569] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.914576][ T569] ? security_file_ioctl+0x3e/0x110 [ 36.914605][ T569] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 36.914624][ T569] __se_sys_ioctl+0x135/0x1b0 [ 36.914648][ T569] __x64_sys_ioctl+0x7f/0xa0 [ 36.914672][ T569] x64_sys_call+0x1878/0x2ee0 [ 36.914690][ T569] do_syscall_64+0x57/0xf0 [ 36.914712][ T569] ? clear_bhb_loop+0x50/0xa0 [ 36.914739][ T569] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.914765][ T569] RIP: 0033:0x7f2a2ad9e0d9 [ 36.914782][ T569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.914797][ T569] RSP: 002b:00007f2a2bbe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.914818][ T569] RAX: ffffffffffffffda RBX: 00007f2a2b025fa0 RCX: 00007f2a2ad9e0d9 [ 36.914833][ T569] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 36.914845][ T569] RBP: 00007f2a2bbe8090 R08: 0000000000000000 R09: 0000000000000000 [ 36.914857][ T569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.914869][ T569] R13: 00007f2a2b026038 R14: 00007f2a2b025fa0 R15: 00007ffd5dc96de8 [ 36.914887][ T569] [ 37.389439][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 37.452228][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.509750][ T576] netlink: 'syz.3.103': attribute type 16 has an invalid length. [ 37.589346][ T408] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 37.598034][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.709464][ T9] usb usb1-port1: unable to enumerate USB device [ 37.739320][ T408] usb 2-1: Using ep0 maxpacket: 32 [ 37.746040][ T408] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.749400][ T45] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 37.755409][ T408] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.771535][ T408] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.790434][ T408] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 37.799685][ T408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.807763][ T408] usb 2-1: Product: syz [ 37.812147][ T408] usb 2-1: Manufacturer: syz [ 37.816815][ T408] usb 2-1: SerialNumber: syz [ 37.861946][ T578] FAULT_INJECTION: forcing a failure. [ 37.861946][ T578] name failslab, interval 1, probability 0, space 0, times 0 [ 37.874622][ T578] CPU: 1 UID: 0 PID: 578 Comm: syz.0.104 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 37.874652][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.874664][ T578] Call Trace: [ 37.874670][ T578] [ 37.874677][ T578] __dump_stack+0x21/0x30 [ 37.874709][ T578] dump_stack_lvl+0x140/0x1c0 [ 37.874737][ T578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.874766][ T578] dump_stack+0x19/0x20 [ 37.874792][ T578] should_fail_ex+0x3c2/0x510 [ 37.874814][ T578] should_failslab+0xac/0x100 [ 37.874840][ T578] __kmalloc_node_noprof+0x69/0x500 [ 37.874860][ T578] ? __kvmalloc_node_noprof+0x128/0x300 [ 37.874891][ T578] ? is_bpf_text_address+0x17b/0x1a0 [ 37.874921][ T578] __kvmalloc_node_noprof+0x128/0x300 [ 37.874949][ T578] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 37.874979][ T578] ? unwind_get_return_address+0x51/0x90 [ 37.875004][ T578] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 37.875029][ T578] traverse+0xfe/0x700 [ 37.875052][ T578] ? mutex_lock+0x97/0x1d0 [ 37.875079][ T578] ? __cfi_mutex_lock+0x10/0x10 [ 37.875107][ T578] seq_read_iter+0xdbd/0xf30 [ 37.875132][ T578] ? __asan_memset+0x39/0x50 [ 37.875152][ T578] ? iov_iter_init+0xc0/0x180 [ 37.875178][ T578] seq_read+0x368/0x490 [ 37.875203][ T578] ? __cfi_seq_read+0x10/0x10 [ 37.875234][ T578] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 37.875264][ T578] ? bpf_lsm_file_permission+0xd/0x20 [ 37.875289][ T578] ? __cfi_seq_read+0x10/0x10 [ 37.875312][ T578] vfs_read+0x288/0xc70 [ 37.875333][ T578] ? __cfi_vfs_read+0x10/0x10 [ 37.875353][ T578] ? __fget_files+0x2bc/0x330 [ 37.875378][ T578] ksys_pread64+0x170/0x270 [ 37.875398][ T578] ? __cfi_ksys_pread64+0x10/0x10 [ 37.875421][ T578] __x64_sys_pread64+0x9f/0xb0 [ 37.875442][ T578] x64_sys_call+0x2a34/0x2ee0 [ 37.875460][ T578] do_syscall_64+0x57/0xf0 [ 37.875482][ T578] ? clear_bhb_loop+0x50/0xa0 [ 37.875508][ T578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.875533][ T578] RIP: 0033:0x7fec81b9e0d9 [ 37.875549][ T578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.875565][ T578] RSP: 002b:00007fec82a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 37.875586][ T578] RAX: ffffffffffffffda RBX: 00007fec81e25fa0 RCX: 00007fec81b9e0d9 [ 37.875601][ T578] RDX: 000000000000000b RSI: 0000200000000080 RDI: 0000000000000004 [ 37.875614][ T578] RBP: 00007fec82a36090 R08: 0000000000000000 R09: 0000000000000000 [ 37.875626][ T578] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 37.875638][ T578] R13: 00007fec81e26038 R14: 00007fec81e25fa0 R15: 00007ffc404d01a8 [ 37.875654][ T578] [ 38.050840][ T408] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.059735][ T45] usb 4-1: device descriptor read/64, error -71 [ 38.085620][ T408] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 38.206592][ T408] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 38.228747][ T408] usb 2-1: USB disconnect, device number 9 [ 38.251516][ T491] udevd[491]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.282400][ T584] netlink: 'syz.0.106': attribute type 29 has an invalid length. [ 38.293699][ T584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=584 comm=syz.0.106 [ 38.329362][ T45] usb 4-1: device descriptor read/64, error -71 [ 38.539340][ T361] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 38.579368][ T45] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 38.665110][ T589] FAULT_INJECTION: forcing a failure. [ 38.665110][ T589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.678396][ T589] CPU: 1 UID: 0 PID: 589 Comm: syz.1.108 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 38.678430][ T589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.678445][ T589] Call Trace: [ 38.678452][ T589] [ 38.678461][ T589] __dump_stack+0x21/0x30 [ 38.678502][ T589] dump_stack_lvl+0x140/0x1c0 [ 38.678534][ T589] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.678565][ T589] ? __kasan_check_write+0x18/0x20 [ 38.678589][ T589] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 38.678613][ T589] dump_stack+0x19/0x20 [ 38.678644][ T589] should_fail_ex+0x3c2/0x510 [ 38.678698][ T589] should_fail+0xf/0x20 [ 38.678722][ T589] should_fail_usercopy+0x1e/0x30 [ 38.678750][ T589] _copy_from_user+0x20/0xa0 [ 38.678782][ T589] kvm_arch_vcpu_ioctl+0xb95/0x3120 [ 38.678805][ T589] ? avc_has_perm+0x155/0x240 [ 38.678833][ T589] ? __cfi_avc_has_perm+0x10/0x10 [ 38.678857][ T589] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 38.678883][ T589] ? selinux_file_open+0x46c/0x630 [ 38.678906][ T589] ? __cfi_selinux_file_open+0x10/0x10 [ 38.678934][ T589] ? is_bpf_text_address+0x17b/0x1a0 [ 38.678970][ T589] ? kernel_text_address+0xa9/0xe0 [ 38.679002][ T589] ? __kernel_text_address+0x11/0x40 [ 38.679033][ T589] ? __asan_set_shadow_00+0x12/0x20 [ 38.679066][ T589] ? do_vfs_ioctl+0x182d/0x2010 [ 38.679094][ T589] ? arch_stack_walk+0x10a/0x170 [ 38.679128][ T589] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 38.679168][ T589] ? _parse_integer_limit+0x195/0x1e0 [ 38.679191][ T589] ? _parse_integer+0x2e/0x40 [ 38.679212][ T589] ? kstrtoull+0x13b/0x1e0 [ 38.679230][ T589] ? kstrtouint+0x78/0xf0 [ 38.679252][ T589] ? ioctl_has_perm+0x408/0x500 [ 38.679273][ T589] ? has_cap_mac_admin+0xd0/0xd0 [ 38.679292][ T589] ? __kasan_check_write+0x18/0x20 [ 38.679312][ T589] ? mutex_lock_killable+0x97/0x1d0 [ 38.679343][ T589] ? __cfi_mutex_lock_killable+0x10/0x10 [ 38.679373][ T589] ? proc_fail_nth_write+0x184/0x220 [ 38.679404][ T589] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 38.679435][ T589] kvm_vcpu_ioctl+0x7da/0x1000 [ 38.679457][ T589] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 38.679488][ T589] ? __cfi_vfs_write+0x10/0x10 [ 38.679508][ T589] ? __kasan_check_write+0x18/0x20 [ 38.679528][ T589] ? mutex_unlock+0x90/0x240 [ 38.679553][ T589] ? __cfi_mutex_unlock+0x10/0x10 [ 38.679582][ T589] ? bpf_lsm_file_ioctl+0xd/0x20 [ 38.679607][ T589] ? security_file_ioctl+0x3e/0x110 [ 38.679637][ T589] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 38.679656][ T589] __se_sys_ioctl+0x135/0x1b0 [ 38.679686][ T589] __x64_sys_ioctl+0x7f/0xa0 [ 38.679709][ T589] x64_sys_call+0x1878/0x2ee0 [ 38.679728][ T589] do_syscall_64+0x57/0xf0 [ 38.679750][ T589] ? clear_bhb_loop+0x50/0xa0 [ 38.679778][ T589] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.679803][ T589] RIP: 0033:0x7f1b7af9e0d9 [ 38.679820][ T589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.679834][ T589] RSP: 002b:00007f1b7bded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.679855][ T589] RAX: ffffffffffffffda RBX: 00007f1b7b225fa0 RCX: 00007f1b7af9e0d9 [ 38.679870][ T589] RDX: 0000200000000080 RSI: 000000004068aea3 RDI: 0000000000000005 [ 38.679883][ T589] RBP: 00007f1b7bded090 R08: 0000000000000000 R09: 0000000000000000 [ 38.679896][ T589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.679908][ T589] R13: 00007f1b7b226038 R14: 00007f1b7b225fa0 R15: 00007ffce2db6678 [ 38.679925][ T589] [ 39.027036][ T45] usb 4-1: device descriptor read/64, error -71 [ 39.060792][ T361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.069306][ T361] usb 1-1: config index 0 descriptor too short (expected 35, got 18) [ 39.077453][ T361] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 39.087705][ T361] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 39.099204][ T361] usb 1-1: string descriptor 0 read error: -22 [ 39.105524][ T361] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 39.114681][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.210752][ T592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 39.299383][ T45] usb 4-1: device descriptor read/64, error -71 [ 39.337188][ T361] usb 1-1: USB disconnect, device number 9 [ 39.419422][ T45] usb usb4-port1: attempt power cycle [ 39.607860][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 39.607878][ T36] audit: type=1400 audit(1786034189.180:216): avc: denied { load_policy } for pid=601 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 39.666854][ T602] SELinux: failed to load policy [ 39.689589][ T604] FAULT_INJECTION: forcing a failure. [ 39.689589][ T604] name failslab, interval 1, probability 0, space 0, times 0 [ 39.702312][ T604] CPU: 0 UID: 0 PID: 604 Comm: syz.1.114 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 39.702341][ T604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.702354][ T604] Call Trace: [ 39.702360][ T604] [ 39.702367][ T604] __dump_stack+0x21/0x30 [ 39.702400][ T604] dump_stack_lvl+0x140/0x1c0 [ 39.702428][ T604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.702458][ T604] dump_stack+0x19/0x20 [ 39.702483][ T604] should_fail_ex+0x3c2/0x510 [ 39.702525][ T604] should_failslab+0xac/0x100 [ 39.702563][ T604] __kmalloc_cache_node_noprof+0x46/0x430 [ 39.702586][ T604] ? __get_vm_area_node+0x150/0x390 [ 39.702622][ T604] __get_vm_area_node+0x150/0x390 [ 39.702651][ T604] __vmalloc_node_range_noprof+0x340/0x1300 [ 39.702681][ T604] ? sel_write_load+0x1ce/0x600 [ 39.702701][ T604] ? kernel_text_address+0xa9/0xe0 [ 39.702729][ T604] ? unwind_get_return_address+0x51/0x90 [ 39.702756][ T604] ? _parse_integer_limit+0x195/0x1e0 [ 39.702777][ T604] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 39.702807][ T604] ? avc_has_perm_noaudit+0x26b/0x360 [ 39.702848][ T604] ? __asan_memcpy+0x5a/0x80 [ 39.702869][ T604] ? avc_has_perm_noaudit+0x289/0x360 [ 39.702894][ T604] ? sel_write_load+0x1ce/0x600 [ 39.702914][ T604] vmalloc_noprof+0x103/0x1d0 [ 39.702945][ T604] ? sel_write_load+0x1ce/0x600 [ 39.702963][ T604] ? __cfi_avc_has_perm+0x10/0x10 [ 39.702986][ T604] ? selinux_file_permission+0x318/0xb60 [ 39.703007][ T604] ? __cfi_vmalloc_noprof+0x10/0x10 [ 39.703039][ T604] sel_write_load+0x1ce/0x600 [ 39.703061][ T604] ? __cfi_sel_write_load+0x10/0x10 [ 39.703083][ T604] ? bpf_lsm_file_permission+0xd/0x20 [ 39.703111][ T604] ? __cfi_sel_write_load+0x10/0x10 [ 39.703132][ T604] vfs_write+0x3c1/0xfd0 [ 39.703154][ T604] ? __cfi_vfs_write+0x10/0x10 [ 39.703175][ T604] ? __kasan_check_write+0x18/0x20 [ 39.703196][ T604] ? mutex_lock+0x97/0x1d0 [ 39.703225][ T604] ? __cfi_mutex_lock+0x10/0x10 [ 39.703255][ T604] ksys_write+0x145/0x260 [ 39.703276][ T604] ? __cfi_ksys_write+0x10/0x10 [ 39.703299][ T604] ? __kasan_check_read+0x15/0x20 [ 39.703319][ T604] __x64_sys_write+0x7f/0x90 [ 39.703341][ T604] x64_sys_call+0x271c/0x2ee0 [ 39.703361][ T604] do_syscall_64+0x57/0xf0 [ 39.703384][ T604] ? clear_bhb_loop+0x50/0xa0 [ 39.703413][ T604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.703441][ T604] RIP: 0033:0x7f1b7af9e0d9 [ 39.703458][ T604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.703476][ T604] RSP: 002b:00007f1b7bded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.703498][ T604] RAX: ffffffffffffffda RBX: 00007f1b7b225fa0 RCX: 00007f1b7af9e0d9 [ 39.703514][ T604] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003 [ 39.703528][ T604] RBP: 00007f1b7bded090 R08: 0000000000000000 R09: 0000000000000000 [ 39.703542][ T604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.703553][ T604] R13: 00007f1b7b226038 R14: 00007f1b7b225fa0 R15: 00007ffce2db6678 [ 39.703571][ T604] [ 39.703611][ T604] syz.1.114: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 39.769405][ T45] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 39.770432][ T604] ,cpuset= [ 39.810655][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.814058][ T604] syz1,mems_allowed=0 [ 40.053414][ T604] CPU: 0 UID: 0 PID: 604 Comm: syz.1.114 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 40.053441][ T604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.053452][ T604] Call Trace: [ 40.053459][ T604] [ 40.053466][ T604] __dump_stack+0x21/0x30 [ 40.053498][ T604] dump_stack_lvl+0x140/0x1c0 [ 40.053526][ T604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.053555][ T604] dump_stack+0x19/0x20 [ 40.053588][ T604] warn_alloc+0x1e7/0x2c0 [ 40.053615][ T604] ? __kasan_kmalloc+0x28/0xb0 [ 40.053640][ T604] ? __cfi_warn_alloc+0x10/0x10 [ 40.053666][ T604] ? __get_vm_area_node+0x150/0x390 [ 40.053695][ T604] ? __get_vm_area_node+0x382/0x390 [ 40.053742][ T604] __vmalloc_node_range_noprof+0x365/0x1300 [ 40.053773][ T604] ? kernel_text_address+0xa9/0xe0 [ 40.053803][ T604] ? unwind_get_return_address+0x51/0x90 [ 40.053832][ T604] ? _parse_integer_limit+0x195/0x1e0 [ 40.053855][ T604] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 40.053887][ T604] ? avc_has_perm_noaudit+0x26b/0x360 [ 40.053912][ T604] ? __asan_memcpy+0x5a/0x80 [ 40.053933][ T604] ? avc_has_perm_noaudit+0x289/0x360 [ 40.053958][ T604] ? sel_write_load+0x1ce/0x600 [ 40.053980][ T604] vmalloc_noprof+0x103/0x1d0 [ 40.054010][ T604] ? sel_write_load+0x1ce/0x600 [ 40.054030][ T604] ? __cfi_avc_has_perm+0x10/0x10 [ 40.054053][ T604] ? selinux_file_permission+0x318/0xb60 [ 40.054073][ T604] ? __cfi_vmalloc_noprof+0x10/0x10 [ 40.054105][ T604] sel_write_load+0x1ce/0x600 [ 40.054126][ T604] ? __cfi_sel_write_load+0x10/0x10 [ 40.054148][ T604] ? bpf_lsm_file_permission+0xd/0x20 [ 40.054176][ T604] ? __cfi_sel_write_load+0x10/0x10 [ 40.054196][ T604] vfs_write+0x3c1/0xfd0 [ 40.054219][ T604] ? __cfi_vfs_write+0x10/0x10 [ 40.054240][ T604] ? __kasan_check_write+0x18/0x20 [ 40.054261][ T604] ? mutex_lock+0x97/0x1d0 [ 40.054289][ T604] ? __cfi_mutex_lock+0x10/0x10 [ 40.054321][ T604] ksys_write+0x145/0x260 [ 40.054342][ T604] ? __cfi_ksys_write+0x10/0x10 [ 40.054363][ T604] ? __kasan_check_read+0x15/0x20 [ 40.054384][ T604] __x64_sys_write+0x7f/0x90 [ 40.054406][ T604] x64_sys_call+0x271c/0x2ee0 [ 40.054425][ T604] do_syscall_64+0x57/0xf0 [ 40.054448][ T604] ? clear_bhb_loop+0x50/0xa0 [ 40.054480][ T604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.054508][ T604] RIP: 0033:0x7f1b7af9e0d9 [ 40.054525][ T604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.054542][ T604] RSP: 002b:00007f1b7bded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.054564][ T604] RAX: ffffffffffffffda RBX: 00007f1b7b225fa0 RCX: 00007f1b7af9e0d9 [ 40.054587][ T604] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003 [ 40.054601][ T604] RBP: 00007f1b7bded090 R08: 0000000000000000 R09: 0000000000000000 [ 40.054614][ T604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.054626][ T604] R13: 00007f1b7b226038 R14: 00007f1b7b225fa0 R15: 00007ffce2db6678 [ 40.054643][ T604] [ 40.054706][ T604] Mem-Info: [ 40.290089][ T45] usb 4-1: device descriptor read/8, error -71 [ 40.329902][ T604] active_anon:6516 inactive_anon:0 isolated_anon:0 [ 40.329902][ T604] active_file:6191 inactive_file:2294 isolated_file:0 [ 40.329902][ T604] unevictable:0 dirty:132 writeback:0 [ 40.329902][ T604] slab_reclaimable:3618 slab_unreclaimable:76855 [ 40.329902][ T604] mapped:24519 shmem:163 pagetables:836 [ 40.329902][ T604] sec_pagetables:0 bounce:0 [ 40.329902][ T604] kernel_misc_reclaimable:0 [ 40.329902][ T604] free:1536148 free_pcp:1713 free_cma:0 [ 40.412716][ T604] Node 0 active_anon:26064kB inactive_anon:0kB active_file:24764kB inactive_file:9176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98076kB dirty:528kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4472kB pagetables:3144kB sec_pagetables:0kB all_unreclaimable? no [ 40.448087][ T604] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:68kB free_cma:0kB [ 40.478200][ T604] lowmem_reserve[]: 0 3921 3921 [ 40.483267][ T604] Normal free:3185696kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26164kB inactive_anon:0kB active_file:24764kB inactive_file:9176kB unevictable:0kB writepending:528kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2396kB local_pcp:2100kB free_cma:0kB [ 40.515323][ T604] lowmem_reserve[]: 0 0 0 [ 40.526848][ T604] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 40.544237][ T604] Normal: 66*4kB (UME) 489*8kB (UME) 609*16kB (UME) 72*32kB (UME) 107*64kB (UME) 91*128kB (UME) 51*256kB (UM) 42*512kB (UME) 32*1024kB (UME) 22*2048kB (M) 742*4096kB (UM) = 3186336kB [ 40.562819][ T604] 8645 total pagecache pages [ 40.567693][ T604] 0 pages in swap cache [ 40.572704][ T604] Free swap = 124716kB [ 40.577013][ T609] netlink: 'syz.3.116': attribute type 4 has an invalid length. [ 40.584919][ T609] netlink: 'syz.3.116': attribute type 5 has an invalid length. [ 40.592978][ T609] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 40.600948][ T604] Total swap = 124996kB [ 40.605159][ T604] 2097051 pages RAM [ 40.609006][ T604] 0 pages HighMem/MovableOnly [ 40.614180][ T604] 352233 pages reserved [ 40.618473][ T604] 0 pages cma reserved [ 40.631685][ T604] Memory allocations: [ 40.645880][ T604] 0 B 0 init/main.c:1477 func:do_initcalls [ 40.655960][ T604] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 40.671113][ T609] SELinux: failed to load policy [ 40.676135][ T604] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 40.684051][ T604] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 40.692145][ T604] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 40.700229][ T604] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 40.708895][ T604] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 40.717088][ T604] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 40.725167][ T604] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 40.739322][ T604] 0 B 0 init/initramfs.c:101 func:find_link [ 40.772960][ T36] audit: type=1400 audit(1786034190.350:217): avc: denied { ioctl } for pid=613 comm="syz.1.118" path="socket:[7198]" dev="sockfs" ino=7198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.823803][ T36] audit: type=1400 audit(1786034190.400:218): avc: denied { create } for pid=618 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.830196][ T619] input: syz1 as /devices/virtual/input/input9 [ 40.854778][ T621] FAULT_INJECTION: forcing a failure. [ 40.854778][ T621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.873505][ T36] audit: type=1400 audit(1786034190.450:219): avc: denied { ioctl } for pid=618 comm="syz.1.120" path="socket:[6435]" dev="sockfs" ino=6435 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.894235][ T621] CPU: 1 UID: 0 PID: 621 Comm: syz.3.119 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 40.894323][ T621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.894363][ T621] Call Trace: [ 40.894383][ T621] [ 40.894404][ T621] __dump_stack+0x21/0x30 [ 40.894524][ T621] dump_stack_lvl+0x140/0x1c0 [ 40.894646][ T621] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.894741][ T621] ? _parse_integer+0x2e/0x40 [ 40.894812][ T621] ? kstrtoull+0x13b/0x1e0 [ 40.894872][ T621] dump_stack+0x19/0x20 [ 40.894956][ T621] should_fail_ex+0x3c2/0x510 [ 40.895005][ T621] should_fail+0xf/0x20 [ 40.895065][ T621] should_fail_usercopy+0x1e/0x30 [ 40.895137][ T621] _copy_from_user+0x20/0xa0 [ 40.895208][ T621] ___sys_sendmsg+0x1c7/0x370 [ 40.895280][ T621] ? __sys_sendmsg+0x2a0/0x2a0 [ 40.895333][ T621] ? proc_fail_nth_write+0x184/0x220 [ 40.895407][ T621] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 40.895510][ T621] ? __fget_files+0x2bc/0x330 [ 40.895583][ T621] __x64_sys_sendmsg+0x206/0x2e0 [ 40.895643][ T621] ? fput+0x1a4/0x230 [ 40.895694][ T621] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 40.895756][ T621] ? ksys_write+0x1f3/0x260 [ 40.895816][ T621] ? __kasan_check_read+0x15/0x20 [ 40.895892][ T621] x64_sys_call+0x2a4c/0x2ee0 [ 40.895957][ T621] do_syscall_64+0x57/0xf0 [ 40.896021][ T621] ? clear_bhb_loop+0x50/0xa0 [ 40.896093][ T621] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.896164][ T621] RIP: 0033:0x7f2a2ad9e0d9 [ 40.896208][ T621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.896252][ T621] RSP: 002b:00007f2a2bbe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.896320][ T621] RAX: ffffffffffffffda RBX: 00007f2a2b025fa0 RCX: 00007f2a2ad9e0d9 [ 40.896361][ T621] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 40.896401][ T621] RBP: 00007f2a2bbe8090 R08: 0000000000000000 R09: 0000000000000000 [ 40.896435][ T621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.896496][ T621] R13: 00007f2a2b026038 R14: 00007f2a2b025fa0 R15: 00007ffd5dc96de8 [ 40.896547][ T621] [ 41.119004][ T36] audit: type=1400 audit(1786034190.450:220): avc: denied { relabelfrom } for pid=618 comm="syz.1.120" name="" dev="pipefs" ino=6441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 41.253903][ T36] audit: type=1400 audit(1786034190.830:221): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 41.282396][ T36] audit: type=1400 audit(1786034190.860:222): avc: denied { mount } for pid=626 comm="syz.0.122" name="/" dev="overlay" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.312286][ T36] audit: type=1400 audit(1786034190.890:223): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.339704][ T36] audit: type=1400 audit(1786034190.920:224): avc: denied { read write } for pid=628 comm="syz.0.123" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.364715][ T36] audit: type=1400 audit(1786034190.920:225): avc: denied { open } for pid=628 comm="syz.0.123" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.400999][ T631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 41.410212][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 41.419070][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 41.428082][ T631] netlink: 128 bytes leftover after parsing attributes in process `syz.0.124'. [ 41.517721][ T636] FAULT_INJECTION: forcing a failure. [ 41.517721][ T636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.530945][ T636] CPU: 1 UID: 0 PID: 636 Comm: syz.0.126 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 41.530976][ T636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.530988][ T636] Call Trace: [ 41.530994][ T636] [ 41.531002][ T636] __dump_stack+0x21/0x30 [ 41.531030][ T636] dump_stack_lvl+0x140/0x1c0 [ 41.531054][ T636] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.531080][ T636] ? selinux_file_ioctl+0x732/0x1480 [ 41.531099][ T636] dump_stack+0x19/0x20 [ 41.531122][ T636] should_fail_ex+0x3c2/0x510 [ 41.531143][ T636] should_fail+0xf/0x20 [ 41.531161][ T636] should_fail_usercopy+0x1e/0x30 [ 41.531182][ T636] _copy_from_user+0x20/0xa0 [ 41.531206][ T636] vhost_vsock_dev_ioctl+0x19d/0xdc0 [ 41.531232][ T636] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 41.531260][ T636] ? bpf_lsm_file_ioctl+0xd/0x20 [ 41.531285][ T636] ? security_file_ioctl+0x3e/0x110 [ 41.531315][ T636] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 41.531342][ T636] __se_sys_ioctl+0x135/0x1b0 [ 41.531368][ T636] __x64_sys_ioctl+0x7f/0xa0 [ 41.531400][ T636] x64_sys_call+0x1878/0x2ee0 [ 41.531419][ T636] do_syscall_64+0x57/0xf0 [ 41.531441][ T636] ? clear_bhb_loop+0x50/0xa0 [ 41.531469][ T636] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.531495][ T636] RIP: 0033:0x7fec81b9e0d9 [ 41.531512][ T636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.531529][ T636] RSP: 002b:00007fec82a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.531551][ T636] RAX: ffffffffffffffda RBX: 00007fec81e25fa0 RCX: 00007fec81b9e0d9 [ 41.531567][ T636] RDX: 0000200000001500 RSI: 000000004008af60 RDI: 0000000000000003 [ 41.531581][ T636] RBP: 00007fec82a36090 R08: 0000000000000000 R09: 0000000000000000 [ 41.531594][ T636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.531607][ T636] R13: 00007fec81e26038 R14: 00007fec81e25fa0 R15: 00007ffc404d01a8 [ 41.531624][ T636] [ 41.744811][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 41.759556][ T638] FAULT_INJECTION: forcing a failure. [ 41.759556][ T638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.789310][ T638] CPU: 0 UID: 0 PID: 638 Comm: syz.0.127 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 41.789359][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.789373][ T638] Call Trace: [ 41.789380][ T638] [ 41.789389][ T638] __dump_stack+0x21/0x30 [ 41.789427][ T638] dump_stack_lvl+0x140/0x1c0 [ 41.789459][ T638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.789492][ T638] ? check_stack_object+0x138/0x150 [ 41.789517][ T638] dump_stack+0x19/0x20 [ 41.789548][ T638] should_fail_ex+0x3c2/0x510 [ 41.789574][ T638] should_fail+0xf/0x20 [ 41.789597][ T638] should_fail_usercopy+0x1e/0x30 [ 41.789624][ T638] _copy_to_user+0x24/0xa0 [ 41.789654][ T638] simple_read_from_buffer+0xed/0x160 [ 41.789686][ T638] proc_fail_nth_read+0x1aa/0x220 [ 41.789719][ T638] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 41.789752][ T638] ? bpf_lsm_file_permission+0xd/0x20 [ 41.789781][ T638] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 41.789813][ T638] vfs_read+0x288/0xc70 [ 41.789835][ T638] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 41.789857][ T638] ? __cfi_vfs_read+0x10/0x10 [ 41.789886][ T638] ? __kasan_check_write+0x18/0x20 [ 41.789908][ T638] ? mutex_lock+0x97/0x1d0 [ 41.789939][ T638] ? __cfi_mutex_lock+0x10/0x10 [ 41.789989][ T638] ksys_read+0x145/0x260 [ 41.790014][ T638] ? __cfi_ksys_read+0x10/0x10 [ 41.790038][ T638] ? __kasan_check_read+0x15/0x20 [ 41.790062][ T638] __x64_sys_read+0x7f/0x90 [ 41.790087][ T638] x64_sys_call+0x2638/0x2ee0 [ 41.790109][ T638] do_syscall_64+0x57/0xf0 [ 41.790136][ T638] ? clear_bhb_loop+0x50/0xa0 [ 41.790170][ T638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.790202][ T638] RIP: 0033:0x7fec81b5e90e [ 41.790223][ T638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.790244][ T638] RSP: 002b:00007fec82a35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.790270][ T638] RAX: ffffffffffffffda RBX: 00007fec82a366c0 RCX: 00007fec81b5e90e [ 41.790290][ T638] RDX: 000000000000000f RSI: 00007fec82a360a0 RDI: 0000000000000004 [ 41.790306][ T638] RBP: 00007fec82a36090 R08: 0000000000000000 R09: 0000000000000000 [ 41.790323][ T638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.790339][ T638] R13: 00007fec81e26038 R14: 00007fec81e25fa0 R15: 00007ffc404d01a8 [ 41.790361][ T638] [ 41.872986][ T45] usb 4-1: device descriptor read/8, error -71 [ 42.092495][ T646] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 42.111627][ T650] ======================================================= [ 42.111627][ T650] WARNING: The mand mount option has been deprecated and [ 42.111627][ T650] and is ignored by this kernel. Remove the mand [ 42.111627][ T650] option from the mount to silence this warning. [ 42.111627][ T650] ======================================================= [ 42.181428][ T45] usb 4-1: device descriptor read/8, error -71 [ 42.289495][ T45] usb usb4-port1: unable to enumerate USB device [ 42.341923][ T657] FAULT_INJECTION: forcing a failure. [ 42.341923][ T657] name failslab, interval 1, probability 0, space 0, times 0 [ 42.355571][ T657] CPU: 0 UID: 0 PID: 657 Comm: syz.1.134 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 42.355605][ T657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.355620][ T657] Call Trace: [ 42.355627][ T657] [ 42.355636][ T657] __dump_stack+0x21/0x30 [ 42.355682][ T657] dump_stack_lvl+0x140/0x1c0 [ 42.355712][ T657] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.355741][ T657] ? avc_has_perm+0x155/0x240 [ 42.355767][ T657] ? __cfi_avc_has_perm+0x10/0x10 [ 42.355792][ T657] dump_stack+0x19/0x20 [ 42.355828][ T657] should_fail_ex+0x3c2/0x510 [ 42.355852][ T657] should_failslab+0xac/0x100 [ 42.355878][ T657] __kmalloc_cache_noprof+0x41/0x470 [ 42.355901][ T657] ? vhost_task_create+0x12c/0x3f0 [ 42.355926][ T657] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 42.355951][ T657] vhost_task_create+0x12c/0x3f0 [ 42.355974][ T657] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 42.356000][ T657] ? __cfi_vhost_task_create+0x10/0x10 [ 42.356024][ T657] ? __cfi_vhost_task_fn+0x10/0x10 [ 42.356047][ T657] ? __kasan_check_write+0x18/0x20 [ 42.356068][ T657] ? mutex_lock+0x97/0x1d0 [ 42.356097][ T657] ? __cfi_mutex_lock+0x10/0x10 [ 42.356126][ T657] ? kernel_text_address+0xa9/0xe0 [ 42.356156][ T657] kvm_mmu_post_init_vm+0x161/0x300 [ 42.356188][ T657] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 42.356217][ T657] ? _parse_integer_limit+0x195/0x1e0 [ 42.356241][ T657] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 42.356271][ T657] ? kstrtoull+0x13b/0x1e0 [ 42.356310][ T657] ? kstrtouint+0x78/0xf0 [ 42.356333][ T657] ? ioctl_has_perm+0x1bc/0x500 [ 42.356355][ T657] ? __asan_memcpy+0x5a/0x80 [ 42.356378][ T657] ? ioctl_has_perm+0x408/0x500 [ 42.356400][ T657] ? has_cap_mac_admin+0xd0/0xd0 [ 42.356422][ T657] ? __kasan_check_write+0x18/0x20 [ 42.356444][ T657] ? mutex_lock_killable+0x97/0x1d0 [ 42.356477][ T657] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.356510][ T657] ? proc_fail_nth_write+0x184/0x220 [ 42.356556][ T657] kvm_vcpu_ioctl+0xa43/0x1000 [ 42.356578][ T657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 42.356599][ T657] ? __cfi_vfs_write+0x10/0x10 [ 42.356621][ T657] ? __kasan_check_write+0x18/0x20 [ 42.356642][ T657] ? mutex_unlock+0x90/0x240 [ 42.356671][ T657] ? __cfi_mutex_unlock+0x10/0x10 [ 42.356704][ T657] ? bpf_lsm_file_ioctl+0xd/0x20 [ 42.356731][ T657] ? security_file_ioctl+0x3e/0x110 [ 42.356764][ T657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 42.356784][ T657] __se_sys_ioctl+0x135/0x1b0 [ 42.356817][ T657] __x64_sys_ioctl+0x7f/0xa0 [ 42.356844][ T657] x64_sys_call+0x1878/0x2ee0 [ 42.356864][ T657] do_syscall_64+0x57/0xf0 [ 42.356887][ T657] ? clear_bhb_loop+0x50/0xa0 [ 42.356917][ T657] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.356945][ T657] RIP: 0033:0x7f1b7af9e0d9 [ 42.356963][ T657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.356982][ T657] RSP: 002b:00007f1b7bded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.357006][ T657] RAX: ffffffffffffffda RBX: 00007f1b7b225fa0 RCX: 00007f1b7af9e0d9 [ 42.357023][ T657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 42.357037][ T657] RBP: 00007f1b7bded090 R08: 0000000000000000 R09: 0000000000000000 [ 42.357052][ T657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.357065][ T657] R13: 00007f1b7b226038 R14: 00007f1b7b225fa0 R15: 00007ffce2db6678 [ 42.357085][ T657] [ 42.849345][ T45] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 43.020718][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 43.028407][ T45] usb 1-1: can't read configurations, error -61 [ 43.169344][ T45] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 43.199349][ T370] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.330839][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 43.338496][ T45] usb 1-1: can't read configurations, error -61 [ 43.345184][ T45] usb usb1-port1: attempt power cycle [ 43.359331][ T370] usb 2-1: Using ep0 maxpacket: 8 [ 43.365674][ T370] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 43.374084][ T370] usb 2-1: config 179 has no interface number 0 [ 43.380528][ T370] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 43.391936][ T370] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 43.403500][ T370] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 43.414930][ T370] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 43.425660][ T370] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 43.439225][ T370] usb 2-1: config 179 interface 65 has no altsetting 0 [ 43.446275][ T370] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 43.455526][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.468088][ T370] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 43.709365][ T45] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 43.723768][ T666] PM: Enabling pm_trace changes system date and time during resume. [ 43.723768][ T666] PM: Correct system time has to be restored manually after resume. [ 43.741511][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 43.749183][ T45] usb 1-1: can't read configurations, error -61 [ 43.899334][ T45] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 43.921144][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 43.928877][ T45] usb 1-1: can't read configurations, error -61 [ 43.935484][ T45] usb usb1-port1: unable to enumerate USB device [ 44.224100][ T670] Zero length message leads to an empty skb [ 45.450763][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 45.450782][ T36] audit: type=1400 audit(1786034195.030:236): avc: denied { create } for pid=677 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 45.478372][ T36] audit: type=1326 audit(1786034195.050:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=677 comm="syz.0.140" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec81b9e0d9 code=0x0 [ 45.762729][ T676] FAULT_INJECTION: forcing a failure. [ 45.762729][ T676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.775941][ T676] CPU: 1 UID: 0 PID: 676 Comm: syz.3.139 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 45.775972][ T676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.775984][ T676] Call Trace: [ 45.775991][ T676] [ 45.775998][ T676] __dump_stack+0x21/0x30 [ 45.776031][ T676] dump_stack_lvl+0x140/0x1c0 [ 45.776058][ T676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.776086][ T676] ? ioctl_has_perm+0x408/0x500 [ 45.776106][ T676] ? has_cap_mac_admin+0xd0/0xd0 [ 45.776125][ T676] dump_stack+0x19/0x20 [ 45.776151][ T676] should_fail_ex+0x3c2/0x510 [ 45.776174][ T676] should_fail+0xf/0x20 [ 45.776195][ T676] should_fail_usercopy+0x1e/0x30 [ 45.776219][ T676] _copy_from_user+0x20/0xa0 [ 45.776246][ T676] kvm_vcpu_ioctl+0x470/0x1000 [ 45.776267][ T676] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.776286][ T676] ? __cfi_vfs_write+0x10/0x10 [ 45.776307][ T676] ? __kasan_check_write+0x18/0x20 [ 45.776327][ T676] ? mutex_unlock+0x90/0x240 [ 45.776355][ T676] ? __cfi_mutex_unlock+0x10/0x10 [ 45.776385][ T676] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.776410][ T676] ? security_file_ioctl+0x3e/0x110 [ 45.776441][ T676] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.776460][ T676] __se_sys_ioctl+0x135/0x1b0 [ 45.776484][ T676] __x64_sys_ioctl+0x7f/0xa0 [ 45.776508][ T676] x64_sys_call+0x1878/0x2ee0 [ 45.776526][ T676] do_syscall_64+0x57/0xf0 [ 45.776549][ T676] ? clear_bhb_loop+0x50/0xa0 [ 45.776582][ T676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.776608][ T676] RIP: 0033:0x7f2a2ad9e0d9 [ 45.776625][ T676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.776660][ T676] RSP: 002b:00007f2a2bba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.776682][ T676] RAX: ffffffffffffffda RBX: 00007f2a2b026180 RCX: 00007f2a2ad9e0d9 [ 45.776699][ T676] RDX: 0000200000000640 RSI: 000000004004ae99 RDI: 0000000000000005 [ 45.776714][ T676] RBP: 00007f2a2bba5090 R08: 0000000000000000 R09: 0000000000000000 [ 45.776728][ T676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.776741][ T676] R13: 00007f2a2b026218 R14: 00007f2a2b026180 R15: 00007ffd5dc96de8 [ 45.776760][ T676] [ 46.023220][ T370] usb 2-1: USB disconnect, device number 10 [ 46.029706][ T370] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 46.041402][ T36] audit: type=1400 audit(1786034195.620:238): avc: denied { name_bind } for pid=679 comm="syz.1.141" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 46.090422][ T684] FAULT_INJECTION: forcing a failure. [ 46.090422][ T684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.103590][ T684] CPU: 0 UID: 0 PID: 684 Comm: syz.1.142 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 46.103620][ T684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.103633][ T684] Call Trace: [ 46.103639][ T684] [ 46.103647][ T684] __dump_stack+0x21/0x30 [ 46.103679][ T684] dump_stack_lvl+0x140/0x1c0 [ 46.103706][ T684] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.103734][ T684] ? __kasan_check_write+0x18/0x20 [ 46.103755][ T684] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 46.103776][ T684] dump_stack+0x19/0x20 [ 46.103801][ T684] should_fail_ex+0x3c2/0x510 [ 46.103825][ T684] should_fail+0xf/0x20 [ 46.103845][ T684] should_fail_usercopy+0x1e/0x30 [ 46.103869][ T684] _copy_from_user+0x20/0xa0 [ 46.103897][ T684] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 46.103917][ T684] ? avc_has_perm+0x155/0x240 [ 46.103940][ T684] ? __cfi_avc_has_perm+0x10/0x10 [ 46.103962][ T684] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 46.103984][ T684] ? selinux_file_open+0x46c/0x630 [ 46.104005][ T684] ? __cfi_selinux_file_open+0x10/0x10 [ 46.104035][ T684] ? is_bpf_text_address+0x17b/0x1a0 [ 46.104066][ T684] ? kernel_text_address+0xa9/0xe0 [ 46.104093][ T684] ? __kernel_text_address+0x11/0x40 [ 46.104120][ T684] ? __asan_set_shadow_00+0x12/0x20 [ 46.104148][ T684] ? do_vfs_ioctl+0x182d/0x2010 [ 46.104173][ T684] ? arch_stack_walk+0x10a/0x170 [ 46.104193][ T684] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 46.104218][ T684] ? _parse_integer_limit+0x195/0x1e0 [ 46.104240][ T684] ? _parse_integer+0x2e/0x40 [ 46.104259][ T684] ? kstrtoull+0x13b/0x1e0 [ 46.104278][ T684] ? kstrtouint+0x78/0xf0 [ 46.104298][ T684] ? ioctl_has_perm+0x1bc/0x500 [ 46.104334][ T684] ? __asan_memcpy+0x5a/0x80 [ 46.104355][ T684] ? ioctl_has_perm+0x408/0x500 [ 46.104375][ T684] ? has_cap_mac_admin+0xd0/0xd0 [ 46.104396][ T684] ? __kasan_check_write+0x18/0x20 [ 46.104416][ T684] ? mutex_lock_killable+0x97/0x1d0 [ 46.104448][ T684] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.104478][ T684] ? proc_fail_nth_write+0x184/0x220 [ 46.104510][ T684] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.104542][ T684] kvm_vcpu_ioctl+0x7da/0x1000 [ 46.104563][ T684] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.104584][ T684] ? __cfi_vfs_write+0x10/0x10 [ 46.104624][ T684] ? __kasan_check_write+0x18/0x20 [ 46.104646][ T684] ? mutex_unlock+0x90/0x240 [ 46.104677][ T684] ? __cfi_mutex_unlock+0x10/0x10 [ 46.104733][ T684] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.104780][ T684] ? security_file_ioctl+0x3e/0x110 [ 46.104815][ T684] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.104838][ T684] __se_sys_ioctl+0x135/0x1b0 [ 46.104867][ T684] __x64_sys_ioctl+0x7f/0xa0 [ 46.104895][ T684] x64_sys_call+0x1878/0x2ee0 [ 46.104917][ T684] do_syscall_64+0x57/0xf0 [ 46.104944][ T684] ? clear_bhb_loop+0x50/0xa0 [ 46.104976][ T684] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.105007][ T684] RIP: 0033:0x7f1b7af9e0d9 [ 46.105034][ T684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.105055][ T684] RSP: 002b:00007f1b7bded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.105081][ T684] RAX: ffffffffffffffda RBX: 00007f1b7b225fa0 RCX: 00007f1b7af9e0d9 [ 46.105099][ T684] RDX: 0000200000000280 RSI: 000000004008ae89 RDI: 0000000000000005 [ 46.105116][ T684] RBP: 00007f1b7bded090 R08: 0000000000000000 R09: 0000000000000000 [ 46.105131][ T684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.105146][ T684] R13: 00007f1b7b226038 R14: 00007f1b7b225fa0 R15: 00007ffce2db6678 [ 46.105167][ T684] [ 46.679664][ T688] kvm: pic: non byte write [ 46.760690][ T370] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 46.801469][ T36] audit: type=1400 audit(1786034196.380:239): avc: denied { cmd } for pid=690 comm="iou-wrk-691" path="socket:[7833]" dev="sockfs" ino=7833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.910407][ T370] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.929307][ T370] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.949327][ T370] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 46.965535][ T370] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.979335][ T370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.988055][ T370] usb 4-1: Product: syz [ 46.993689][ T370] usb 4-1: Manufacturer: syz [ 46.998387][ T370] usb 4-1: SerialNumber: syz [ 47.007011][ T686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.216968][ T686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.389360][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.540594][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 47.553642][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 47.563125][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.572093][ T9] usb 2-1: config 0 descriptor?? [ 47.825479][ T686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.982065][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 47.988983][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 47.997700][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.004656][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.011640][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.018554][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.025482][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.032471][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.039407][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.046348][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.053397][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.060408][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.067331][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.077115][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.084379][ T370] cdc_ncm 4-1:1.0: failed to get mac address [ 48.090548][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.094237][ T370] cdc_ncm 4-1:1.0: bind() failure [ 48.097587][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.110032][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.116968][ T370] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 48.121042][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.139701][ T370] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 48.145187][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.156412][ T370] usb 4-1: USB disconnect, device number 13 [ 48.179330][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.199035][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.210889][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.217866][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 48.225529][ T9] wacom 0003:056A:00B8.0005: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 48.243038][ T9] wacom 0003:056A:00B8.0005: hidraw0: USB HID v0.05 Device [HID 056a:00b8] on usb-dummy_hcd.1-1/input0 [ 48.255557][ T9] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B8.0005/input/input11 [ 48.267738][ T698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.283419][ T698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.297611][ T9] usb 2-1: USB disconnect, device number 11 [ 48.306476][ T36] audit: type=1400 audit(1786034197.870:240): avc: denied { accept } for pid=697 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.311414][ T700] fido_id[700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 48.345318][ T36] audit: type=1400 audit(1786034197.920:241): avc: denied { ioctl } for pid=97 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=494 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.482621][ T702] netlink: 'syz.0.148': attribute type 46 has an invalid length. [ 48.520711][ T296] ------------[ cut here ]------------ [ 48.526241][ T296] WARNING: CPU: 1 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 48.535625][ T296] Modules linked in: [ 48.539579][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 48.551452][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.561744][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 48.567419][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 48.587192][ T296] RSP: 0018:ffffc9000b6afb88 EFLAGS: 00010293 [ 48.593308][ T296] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff88812e0f2600 [ 48.601351][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.609380][ T296] RBP: ffffc9000b6afbb0 R08: ffff888110c85dbf R09: 1ffff11022190bb7 [ 48.617379][ T296] R10: dffffc0000000000 R11: ffffed1022190bb8 R12: 0000000000000000 [ 48.625424][ T296] R13: dffffc0000000000 R14: ffff888110c85d20 R15: ffff88811562a440 [ 48.633531][ T296] FS: 000055556d47e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.642570][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.649194][ T296] CR2: 00007ffc404cdcd0 CR3: 000000010234c000 CR4: 00000000003526b0 [ 48.657210][ T296] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 48.665241][ T296] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 48.673266][ T296] Call Trace: [ 48.676584][ T296] [ 48.679599][ T296] ovl_do_remove+0x824/0xd10 [ 48.684233][ T296] ? ovl_set_redirect+0x780/0x780 [ 48.689326][ T296] ? __cfi_down_write+0x10/0x10 [ 48.694286][ T296] ovl_rmdir+0x1e/0x30 [ 48.698395][ T296] vfs_rmdir+0x3de/0x560 [ 48.702716][ T296] incfs_kill_sb+0x102/0x220 [ 48.707340][ T296] deactivate_locked_super+0xd5/0x270 [ 48.712778][ T296] deactivate_super+0xb8/0xe0 [ 48.717484][ T296] cleanup_mnt+0x438/0x4d0 [ 48.721955][ T296] __cleanup_mnt+0x1d/0x40 [ 48.726400][ T296] task_work_run+0x1e8/0x260 [ 48.731045][ T296] ? __cfi_task_work_run+0x10/0x10 [ 48.736186][ T296] ? __x64_sys_umount+0x12e/0x180 [ 48.741266][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 48.746670][ T296] ? __kasan_check_read+0x15/0x20 [ 48.751780][ T296] resume_user_mode_work+0x35/0x50 [ 48.756913][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 48.762451][ T296] do_syscall_64+0x63/0xf0 [ 48.766905][ T296] ? clear_bhb_loop+0x50/0xa0 [ 48.771656][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.777583][ T296] RIP: 0033:0x7fec81b9f317 [ 48.782048][ T296] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 48.801746][ T296] RSP: 002b:00007ffc404ce328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 48.810221][ T296] RAX: 0000000000000000 RBX: 00007fec81c34474 RCX: 00007fec81b9f317 [ 48.818221][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc404ce3e0 [ 48.826258][ T296] RBP: 00007ffc404ce3e0 R08: 00007ffc404cf3e0 R09: 00000000ffffffff [ 48.834271][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc404cf4d0 [ 48.842337][ T296] R13: 00007fec81c34474 R14: 000000000000bd64 R15: 00007ffc404d05a0 [ 48.850361][ T296] [ 48.853397][ T296] ---[ end trace 0000000000000000 ]--- [ 48.859367][ T296] ------------[ cut here ]------------ [ 48.864843][ T296] WARNING: CPU: 1 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 48.874198][ T296] Modules linked in: [ 48.878114][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 48.891308][ T296] Tainted: [W]=WARN [ 48.895127][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.905242][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 48.910978][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 48.932742][ T296] RSP: 0018:ffffc9000b6afb88 EFLAGS: 00010293 [ 48.938854][ T296] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff88812e0f2600 [ 48.946907][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.954933][ T296] RBP: ffffc9000b6afbb0 R08: ffff888110c85dbf R09: 1ffff11022190bb7 [ 48.962975][ T296] R10: dffffc0000000000 R11: ffffed1022190bb8 R12: 0000000000000000 [ 48.971052][ T296] R13: dffffc0000000000 R14: ffff888110c85d20 R15: ffff88811562a440 [ 48.979063][ T296] FS: 000055556d47e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.988086][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.994739][ T296] CR2: 00007ffc404cdcd0 CR3: 000000010234c000 CR4: 00000000003526b0 [ 49.002783][ T296] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 49.010793][ T296] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 49.018795][ T296] Call Trace: [ 49.022135][ T296] [ 49.025085][ T296] ovl_do_remove+0x824/0xd10 [ 49.029759][ T296] ? ovl_set_redirect+0x780/0x780 [ 49.034846][ T296] ? __cfi_down_write+0x10/0x10 [ 49.039758][ T296] ovl_rmdir+0x1e/0x30 [ 49.043854][ T296] vfs_rmdir+0x3de/0x560 [ 49.048131][ T296] incfs_kill_sb+0x197/0x220 [ 49.052790][ T296] deactivate_locked_super+0xd5/0x270 [ 49.058196][ T296] deactivate_super+0xb8/0xe0 [ 49.062940][ T296] cleanup_mnt+0x438/0x4d0 [ 49.067379][ T296] __cleanup_mnt+0x1d/0x40 [ 49.071856][ T296] task_work_run+0x1e8/0x260 [ 49.076473][ T296] ? __cfi_task_work_run+0x10/0x10 [ 49.081660][ T296] ? __x64_sys_umount+0x12e/0x180 [ 49.086714][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.092141][ T296] ? __kasan_check_read+0x15/0x20 [ 49.097196][ T296] resume_user_mode_work+0x35/0x50 [ 49.102365][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 49.107850][ T296] do_syscall_64+0x63/0xf0 [ 49.112349][ T296] ? clear_bhb_loop+0x50/0xa0 [ 49.117070][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.123018][ T296] RIP: 0033:0x7fec81b9f317 [ 49.127448][ T296] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.147104][ T296] RSP: 002b:00007ffc404ce328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.155562][ T296] RAX: 0000000000000000 RBX: 00007fec81c34474 RCX: 00007fec81b9f317 [ 49.163619][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc404ce3e0 [ 49.171640][ T296] RBP: 00007ffc404ce3e0 R08: 00007ffc404cf3e0 R09: 00000000ffffffff [ 49.179661][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc404cf4d0 [ 49.187645][ T296] R13: 00007fec81c34474 R14: 000000000000bd64 R15: 00007ffc404d05a0 [ 49.195670][ T296] [ 49.198711][ T296] ---[ end trace 0000000000000000 ]---