last executing test programs: 6.719554091s ago: executing program 2 (id=1680): r0 = socket$nl_route(0x10, 0x3, 0x0) fchown(r0, 0x0, 0xee01) inotify_init() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x28, 0x0, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) write$cgroup_pid(r6, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000140), 0x4) read$FUSE(r6, &(0x7f0000004580)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sched_setscheduler(r7, 0x3, &(0x7f00000000c0)=0xd7) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.813508945s ago: executing program 2 (id=1702): r0 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80801) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1, 0x2, 0xb, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x4, 0x1, 0x0, 0x0, "7474d306102ee6ad"}}, 0x48}}, 0x4048840) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f3, 0x400, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvlan0\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0x8f, './file0\x00'}}) 5.761689457s ago: executing program 2 (id=1703): r0 = socket$unix(0x1, 0x1, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) getgroups(0x2, &(0x7f0000005e00)=[0x0, 0x0]) setregid(r1, r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x9a3, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) fcntl$getownex(r4, 0x10, &(0x7f0000000380)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) futex(&(0x7f0000000000), 0x10b, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x0) listen(r2, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 5.761533217s ago: executing program 2 (id=1704): openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='gretap0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 2.733675816s ago: executing program 2 (id=1726): pipe(&(0x7f0000000900)) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x1000, @remote}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8993, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) 2.733420847s ago: executing program 2 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x24c0, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201008300000020532b240040000102030109026900030104007f080b0100010a20020904000000010120000924010700060900b209040100000102200009040101010102200009050109000206998008250101181e000009040200000102200009040201"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x33, 0xfffff800}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x50, &(0x7f00000002c0)={{{@in6=@remote, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, 0x0) 1.21927437s ago: executing program 3 (id=1753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c0, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x62}, 0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x160}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x9, 0x1}, &(0x7f00000001c0)) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x5, 0x0, [{0x1, 0x5, 0x99, 0x3, 0x8001}, {0x40000001, 0x9, 0x4, 0x9, 0x4}, {0x80000000, 0x9, 0x5, 0x5, 0x6}, {0x4, 0x4, 0xfff, 0x3, 0xf1}, {0x80000008, 0xf, 0xa, 0x3}]}) 1.116253716s ago: executing program 3 (id=1754): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) sendmmsg$unix(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="82f585", 0x3}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20008010}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 'none\x00', 0x20, 0x8ea3, 0x39}, {@multicast2, 0x4e23, 0x2000, 0xb, 0x2, 0x4}}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000000180)=0xffffffff00000000, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r9, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x8010) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x7, 0x3, 0x1, {r5, r6/1000+10000}, {r7, r8/1000+60000}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x2}, 0x5, 0x1, 0x0, 0x0, "193a3f989cb015a7"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x4000010) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x10000006}], 0x1, 0x40, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000680)="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", 0x1000) 1.009650541s ago: executing program 1 (id=1755): syz_usb_connect(0x2, 0x2d, &(0x7f0000002800)=ANY=[@ANYBLOB="1201000041dc3208570b8d6a74330102030109021b00010000000009046003010301020009058803"], 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x81) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x110, r1, 0x2be93000) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1.009558271s ago: executing program 3 (id=1756): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x187143) ioctl$LOOP_CONFIGURE(r0, 0x1260, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) 492.458176ms ago: executing program 1 (id=1762): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000380)="610a5db2842be22b2c9c799761cf0df39232e16c7cd3d7377fededd498e8ede126c3f054d546ec3a035bb0f9d3dda68a6841913b2dbf3aee356689d5c7709237dcb7ab818265e6e58b6b2681bc5522cff87f00d12c127ec719db4a5ba7f1884ccb5d207d946302239d92d5403fddc6d6bef24d51a687462079dded8e7cca608fc9e6b902bcfd44308d1bd3ee73f9f470a59a6c5a270ff639ad297696ed5872e88b46da5511dd517af23971a0f8ae", 0xae}, {&(0x7f0000000840)="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", 0x106}, {&(0x7f0000000100)="a512a25a8bddaf061afd9dc7c4234a462c726a1539d34f9e63f8787c9fb31a25500de9", 0x44}, {&(0x7f0000000700)="3a0000000000ffff00007fbd76e6328e2a9b00cc0dfe23577433cb52ad1100678e7f5fbc9dcdcead6506f6820ac9451c2bd0e22de2fd7dc4322352c1b5593bb48332", 0x42}], 0x4}, 0x4000880) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 472.572467ms ago: executing program 1 (id=1763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x160}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x9, 0x1}, &(0x7f00000001c0)) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x5, 0x0, [{0x1, 0x5, 0x99, 0x3, 0x8001}, {0x40000001, 0x9, 0x4, 0x9, 0x4}, {0x80000000, 0x9, 0x5, 0x5, 0x6}, {0x4, 0x4, 0xfff, 0x3, 0xf1}, {0x80000008, 0xf, 0xa, 0x3}]}) 421.74457ms ago: executing program 1 (id=1764): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@arm64={0xf, 0x3, 0xc, '\x00', 0xcb06}) 421.64444ms ago: executing program 1 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 421.35719ms ago: executing program 1 (id=1766): prlimit64(0x0, 0xe, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7f7d, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 166.040252ms ago: executing program 3 (id=1767): ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="2755ea1f2e14eff60b4ac4f93faee124f232396dc5d979679ab57470f30c805d720300000000000000be52661e954e3027c00836fa063d94b4f0c545f02589bd049a59e5acd9d463618a4f66ded32c25cd978a363052100852cd4900175fd2716edd102840f1c66f9a719d54dbe0b819f964735465267e3d3910768a3e423198d4a6f47adddb277d6f") ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x6c}) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x7f, 0x100000000, 0x2}}}, 0x28) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x10, 0x14, 0x67, 0x0, 0x91, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x3fc) shutdown(0xffffffffffffffff, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000240)={0x2, 0x81, 0xff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x486, 0x0, 0xffffffffffffffff}]}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x10000, 0x0, "fe941600"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) dup2(r8, r9) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x80007, 0x2, 0x5, 0x2, 0x6, "c14d2c466f9f7135e23bf0b50f7724aac10ad1"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) r10 = socket(0x80000000000000a, 0x2, 0x0) getsockname$tipc(r10, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x38}}, 0x20000000) 95.727076ms ago: executing program 3 (id=1768): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x0, 0xd9}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000e40)={@val={0x0, 0x8863}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@generic={0x88fb}}}}, 0x1a) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENT(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000daffff6330"], 0x10) 29.668529ms ago: executing program 0 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x100000000, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x500) 29.562889ms ago: executing program 0 (id=1770): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) io_setup(0x10007, &(0x7f0000000040)) r1 = socket(0x400000000010, 0x3, 0x0) read(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x3, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) 29.266719ms ago: executing program 0 (id=1771): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x20200) (async) r1 = syz_clone(0x11011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xf, r1, 0x20000000002, &(0x7f0000000040)) (async) ptrace$cont(0x9, r1, 0x7ff, 0x3) (async) unshare(0x2000400) (async) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r5) (async) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) (async) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xb8, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_generic(r8, 0x0, 0x40816) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, 0x0, 0x50) (async) vmsplice(r8, 0x0, 0x0, 0xa) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1cdc4c7b7a0c30a924be628f7c000000", @ANYRES16=r9, @ANYBLOB="19072cbd7000fddbdf250100000008000300", @ANYRES32, @ANYBLOB="c2d169bdc4afa91855ef8c7f2c87217abdf6"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) (async) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r6, &(0x7f0000000280)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x0, @private2, 0x2, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 29.198189ms ago: executing program 0 (id=1772): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x280f821, &(0x7f0000000380)={[{@uuid_off}], [{@hash}, {@fsname={'fsname', 0x3d, 'incremental-fs\x00\x8f\xbd\xf2W\xd6\xe4\xa4\xcd&\xf5\x1f\x0eMG\xfc\xb0\xa6L\x12G;\x00P\\@\xdb\xc8\xd3\xce&\x9b\xab#(aL[\xd6\xf2\x82 \xd1=n\xd3\x8e\x12%\xd8\x8b\x84\xde/\r\n\xad\xe4\xdc^zj\xd3\xa1jJ?H\xb3\x91T0~H\x10\xda\xfc\vL\xcewwC{PD@\xc57\xfcx\xaa3\xf58\x9cm\x7f-;\xa2\xe7\x8f\xb8\xbb\x8d!.\xf2\xaa\x13\xbc~F|7n\xb6u\x8d\x06\x80\x05`\x86BM\xa8 2[\xe4\xa8-\x8e\x82\xde!\x98\x87'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) 24.106269ms ago: executing program 3 (id=1773): sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x24, 0x6, @broadcast}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x810, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="a7"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2440c2, 0x8c) lseek(r3, 0xc, 0x0) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) getdents64(r3, &(0x7f0000000680)=""/4096, 0x1000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$UHID_DESTROY(r5, &(0x7f0000000200), 0x7) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) 22.127169ms ago: executing program 0 (id=1774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@set_irq_handler={0xc8, 0x20, {0xa3, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x83, {"b9640800000f32c4c281981e48b889800000000000000f23d80f21f835800000300f23f80f20c035100000000f22c0646567ef3e400f78153dd70000b9800000c00f3235000100000f303e2e400f01cbc744240026000000c744240223000000ff1c2466baf80cb87b00b487ef66bafc0cec"}}], 0xb3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, 0x0) 0s ago: executing program 0 (id=1775): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x40802, 0x0) write(r1, &(0x7f0000000100)="97", 0x1) syz_usb_connect$uac2(0x3, 0xa3, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010002000000101e04df30400001020500000091000301050069080b0101010320940904000000010120000924010200052100050c2403060503090201d907010c2403010203090409ff8509090401000001022000090401010101022000102401030200040000000100000000f6090501094000010306082501003fff219d090402000001022000090402010101022000090582094000030009082501800c050100"], 0x0) kernel console output (not intermixed with test programs): d to attach handler leds to device input17, error: -6 [ 104.808723][ T31] usb 4-1: device descriptor read/8, error -71 [ 104.816211][ T590] usb 3-1: USB disconnect, device number 38 [ 104.929561][ T63] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 104.940580][ T63] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.054923][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 105.075925][ T31] usb 4-1: device descriptor read/8, error -71 [ 105.162717][ T2883] fuse: Bad value for 'user_id' [ 105.167664][ T2883] fuse: Bad value for 'user_id' [ 105.209887][ T31] usb 4-1: device descriptor read/8, error -71 [ 105.280826][ T2899] netlink: 140 bytes leftover after parsing attributes in process `syz.0.930'. [ 105.301699][ T2901] netlink: 528 bytes leftover after parsing attributes in process `syz.0.931'. [ 105.325178][ T31] usb usb4-port1: unable to enumerate USB device [ 105.343154][ T2903] syz.0.932: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 105.358715][ T2903] CPU: 0 UID: 0 PID: 2903 Comm: syz.0.932 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 105.358749][ T2903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.358762][ T2903] Call Trace: [ 105.358769][ T2903] [ 105.358778][ T2903] __dump_stack+0x21/0x30 [ 105.358813][ T2903] dump_stack_lvl+0x140/0x1c0 [ 105.358837][ T2903] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.358861][ T2903] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 105.358888][ T2903] dump_stack+0x19/0x20 [ 105.358909][ T2903] warn_alloc+0x1e7/0x2c0 [ 105.358931][ T2903] ? stack_depot_save_flags+0x38/0x800 [ 105.358956][ T2903] ? __cfi_warn_alloc+0x10/0x10 [ 105.358976][ T2903] ? kasan_save_track+0x3e/0x80 [ 105.358997][ T2903] ? kasan_save_alloc_info+0x40/0x50 [ 105.359016][ T2903] ? xsk_init_queue+0xb2/0x120 [ 105.359037][ T2903] ? xsk_setsockopt+0x42c/0x760 [ 105.359057][ T2903] ? do_sock_setsockopt+0x27f/0x410 [ 105.359077][ T2903] ? __x64_sys_setsockopt+0x1b7/0x250 [ 105.359096][ T2903] ? x64_sys_call+0x2adc/0x2ee0 [ 105.359120][ T2903] ? do_syscall_64+0x57/0xf0 [ 105.359141][ T2903] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.359156][ T2903] __vmalloc_node_range_noprof+0x132/0x1480 [ 105.359171][ T2903] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 105.359183][ T2903] ? kasan_save_alloc_info+0x40/0x50 [ 105.359195][ T2903] ? __kasan_kmalloc+0x96/0xb0 [ 105.359205][ T2903] ? __kmalloc_cache_noprof+0x23c/0x470 [ 105.359229][ T2903] vmalloc_user_noprof+0x77/0x90 [ 105.359242][ T2903] ? xskq_create+0xdb/0x290 [ 105.359258][ T2903] xskq_create+0xdb/0x290 [ 105.359274][ T2903] xsk_init_queue+0xb2/0x120 [ 105.359290][ T2903] xsk_setsockopt+0x42c/0x760 [ 105.359306][ T2903] ? __cfi_xsk_setsockopt+0x10/0x10 [ 105.359322][ T2903] ? do_futex+0x32a/0x510 [ 105.359334][ T2903] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 105.359350][ T2903] ? security_socket_setsockopt+0x3d/0x100 [ 105.359361][ T2903] ? __cfi_xsk_setsockopt+0x10/0x10 [ 105.359374][ T2903] do_sock_setsockopt+0x27f/0x410 [ 105.359386][ T2903] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 105.359398][ T2903] ? xfd_validate_state+0x68/0x140 [ 105.359411][ T2903] ? __kasan_check_read+0x15/0x20 [ 105.359426][ T2903] __x64_sys_setsockopt+0x1b7/0x250 [ 105.359440][ T2903] x64_sys_call+0x2adc/0x2ee0 [ 105.359456][ T2903] do_syscall_64+0x57/0xf0 [ 105.359471][ T2903] ? clear_bhb_loop+0x50/0xa0 [ 105.359484][ T2903] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.359496][ T2903] RIP: 0033:0x7efd8bd9c799 [ 105.359507][ T2903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.359516][ T2903] RSP: 002b:00007efd8cb79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.359529][ T2903] RAX: ffffffffffffffda RBX: 00007efd8c015fa0 RCX: 00007efd8bd9c799 [ 105.359537][ T2903] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 105.359544][ T2903] RBP: 00007efd8be32c99 R08: 0000000000000004 R09: 0000000000000000 [ 105.359551][ T2903] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 105.359559][ T2903] R13: 00007efd8c016038 R14: 00007efd8c015fa0 R15: 00007ffc01d15138 [ 105.359567][ T2903] [ 105.359655][ T2903] Mem-Info: [ 105.385088][ T2905] fuse: Bad value for 'fd' [ 105.387845][ T2903] active_anon:7376 inactive_anon:4 isolated_anon:0 [ 105.387845][ T2903] active_file:18242 inactive_file:2583 isolated_file:0 [ 105.387845][ T2903] unevictable:0 dirty:329 writeback:0 [ 105.387845][ T2903] slab_reclaimable:4851 slab_unreclaimable:71812 [ 105.387845][ T2903] mapped:25149 shmem:168 pagetables:973 [ 105.387845][ T2903] sec_pagetables:0 bounce:0 [ 105.387845][ T2903] kernel_misc_reclaimable:0 [ 105.387845][ T2903] free:1525070 free_pcp:2662 free_cma:0 [ 105.429611][ T2909] 9pnet_fd: p9_fd_create_unix (2909): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.432193][ T2903] Node 0 active_anon:29508kB inactive_anon:16kB active_file:72968kB inactive_file:10332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100596kB dirty:1316kB writeback:0kB shmem:672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5600kB pagetables:3868kB sec_pagetables:0kB all_unreclaimable? no [ 105.684853][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 105.727984][ T2903] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963360kB mlocked:0kB bounce:0kB free_pcp:5196kB local_pcp:68kB free_cma:0kB [ 105.889789][ T2903] lowmem_reserve[]: 0 3921 3921 [ 105.894703][ T2903] Normal free:3141928kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29508kB inactive_anon:16kB active_file:72968kB inactive_file:10332kB unevictable:0kB writepending:1316kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:6316kB local_pcp:3568kB free_cma:0kB [ 105.926949][ T2903] lowmem_reserve[]: 0 0 0 [ 105.931355][ T2903] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 105.947057][ T2903] Normal: 35*4kB (UME) 141*8kB (UME) 173*16kB (UE) 478*32kB (UME) 504*64kB (UME) 73*128kB (UME) 37*256kB (UME) 43*512kB (UME) 42*1024kB (UME) 22*2048kB (UM) 723*4096kB (UME) = 3141892kB [ 105.965866][ T2903] 20993 total pagecache pages [ 105.970562][ T2903] 4 pages in swap cache [ 105.975039][ T2903] Free swap = 124620kB [ 105.979249][ T2903] Total swap = 124996kB [ 105.983407][ T2903] 2097051 pages RAM [ 105.987531][ T2903] 0 pages HighMem/MovableOnly [ 105.992206][ T2903] 352245 pages reserved [ 105.996406][ T2903] 0 pages cma reserved [ 106.001733][ T2903] Memory allocations: [ 106.004814][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 106.005776][ T2903] 0 B 0 init/main.c:1477 func:do_initcalls [ 106.012699][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.018290][ T2903] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 106.027295][ T31] usb 3-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 106.034374][ T2903] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 106.044982][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.052367][ T2903] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 106.062995][ T31] usb 3-1: New USB device found, idVendor=103d, idProduct=c000, bcdDevice= 0.98 [ 106.069665][ T2903] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 106.078771][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.087105][ T2903] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 106.094597][ T31] usb 3-1: Product: syz [ 106.103237][ T2903] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 106.107556][ T31] usb 3-1: Manufacturer: syz [ 106.115694][ T2903] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 106.120299][ T31] usb 3-1: SerialNumber: syz [ 106.128789][ T2903] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 106.141511][ T2903] 0 B 0 init/initramfs.c:101 func:find_link [ 106.195800][ T2915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.204447][ T2915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.347459][ T31] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 106.357740][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.369932][ T31] usb 3-1: USB disconnect, device number 39 [ 106.378303][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.725046][ T2923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.733895][ T2923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.742995][ T2923] input: syz0 as /devices/virtual/input/input18 [ 106.749603][ T2923] input: failed to attach handler leds to device input18, error: -6 [ 106.868238][ T2926] fuse: Bad value for 'fd' [ 106.965201][ T341] usb 2-1: USB disconnect, device number 16 [ 107.005186][ T36] audit: type=1326 audit(1773832378.049:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.029705][ T36] audit: type=1326 audit(1773832378.049:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.053018][ T36] audit: type=1326 audit(1773832378.049:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.076760][ T36] audit: type=1326 audit(1773832378.049:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.100587][ T36] audit: type=1326 audit(1773832378.049:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.125718][ T36] audit: type=1326 audit(1773832378.049:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.149098][ T36] audit: type=1326 audit(1773832378.049:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.173290][ T36] audit: type=1326 audit(1773832378.049:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.198522][ T36] audit: type=1326 audit(1773832378.049:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.221827][ T36] audit: type=1326 audit(1773832378.049:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2929 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7428d9c799 code=0x7fc00000 [ 107.341673][ T2945] fuse: Bad value for 'fd' [ 107.401577][ T293] tipc: Subscription rejected, illegal request [ 107.419932][ T2958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.429696][ T2958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.443425][ T2958] input: syz0 as /devices/virtual/input/input19 [ 107.444630][ T2960] FAULT_INJECTION: forcing a failure. [ 107.444630][ T2960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.463189][ T2960] CPU: 1 UID: 0 PID: 2960 Comm: syz.3.958 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 107.463224][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.463236][ T2960] Call Trace: [ 107.463243][ T2960] [ 107.463250][ T2960] __dump_stack+0x21/0x30 [ 107.463280][ T2960] dump_stack_lvl+0x140/0x1c0 [ 107.463301][ T2960] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.463322][ T2960] ? vsnprintf+0x7b4/0x1ad0 [ 107.463344][ T2960] ? check_stack_object+0x106/0x150 [ 107.463368][ T2960] dump_stack+0x19/0x20 [ 107.463389][ T2960] should_fail_ex+0x3d7/0x530 [ 107.463409][ T2960] should_fail+0xf/0x20 [ 107.463427][ T2960] should_fail_usercopy+0x1e/0x30 [ 107.463448][ T2960] _copy_from_user+0x20/0xa0 [ 107.463473][ T2960] kstrtouint_from_user+0xde/0x170 [ 107.463494][ T2960] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 107.463514][ T2960] ? selinux_file_permission+0x318/0xb60 [ 107.463538][ T2960] ? __cfi_selinux_file_permission+0x10/0x10 [ 107.463560][ T2960] proc_fail_nth_write+0x8f/0x220 [ 107.463582][ T2960] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 107.463602][ T2960] ? bpf_lsm_file_permission+0xd/0x20 [ 107.463623][ T2960] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 107.463642][ T2960] vfs_write+0x3c5/0xf90 [ 107.463668][ T2960] ? __cfi_vfs_write+0x10/0x10 [ 107.463689][ T2960] ? __kasan_check_write+0x18/0x20 [ 107.463712][ T2960] ? mutex_lock+0x97/0x1d0 [ 107.463736][ T2960] ? __cfi_mutex_lock+0x10/0x10 [ 107.463760][ T2960] ? __fget_files+0x2c5/0x340 [ 107.463787][ T2960] ksys_write+0x145/0x260 [ 107.463807][ T2960] ? __cfi_ksys_write+0x10/0x10 [ 107.463829][ T2960] ? __kasan_check_read+0x15/0x20 [ 107.463852][ T2960] __x64_sys_write+0x7f/0x90 [ 107.463874][ T2960] x64_sys_call+0x271c/0x2ee0 [ 107.463898][ T2960] do_syscall_64+0x57/0xf0 [ 107.463918][ T2960] ? clear_bhb_loop+0x50/0xa0 [ 107.463941][ T2960] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.463963][ T2960] RIP: 0033:0x7fd91fb5cfce [ 107.463980][ T2960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.464004][ T2960] RSP: 002b:00007fd920b02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.464027][ T2960] RAX: ffffffffffffffda RBX: 00007fd920b036c0 RCX: 00007fd91fb5cfce [ 107.464042][ T2960] RDX: 0000000000000001 RSI: 00007fd920b030a0 RDI: 0000000000000004 [ 107.464055][ T2960] RBP: 00007fd920b03090 R08: 0000000000000000 R09: 0000000000000000 [ 107.464068][ T2960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.464080][ T2960] R13: 00007fd91fe16038 R14: 00007fd91fe15fa0 R15: 00007fff4a2cdf38 [ 107.464097][ T2960] [ 107.464498][ T2958] input: failed to attach handler leds to device input19, error: -6 [ 107.917542][ T2980] fuse: Bad value for 'fd' [ 108.224845][ T63] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 108.268132][ T3006] fuse: Bad value for 'fd' [ 108.377721][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.390722][ T63] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 108.402956][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.414857][ T63] usb 2-1: config 0 descriptor?? [ 108.825500][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.832530][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.841378][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.848422][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.856060][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.863055][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.870072][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.877078][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.884070][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.891121][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.898230][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.905761][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.912742][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.919847][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.926890][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.934135][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.941132][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.948154][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.955350][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.962457][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.969672][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.976838][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.983822][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.991546][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 108.998691][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.006013][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.013134][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.020384][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.029840][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.037161][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.044240][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.051504][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.058658][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.066001][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.073087][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.081707][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.088888][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.096060][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.103305][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.110527][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.118265][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.125939][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.133121][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.140403][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.147689][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.154969][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.161968][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.169189][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.176452][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.183427][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.190824][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.198021][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.205276][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.212268][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.219552][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.227129][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.234550][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x4 [ 109.241819][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.249447][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.256593][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.263635][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.271024][ T63] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 109.278225][ T63] lg-g15 0003:046D:C22E.0011: item fetching failed at offset 70/235 [ 109.286673][ T63] lg-g15 0003:046D:C22E.0011: probe with driver lg-g15 failed with error -22 [ 109.301727][ T63] usb 2-1: USB disconnect, device number 17 [ 109.804846][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 109.956289][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.965249][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.975751][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.986216][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 109.995462][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.003901][ T31] usb 2-1: Product: syz [ 110.008513][ T31] usb 2-1: Manufacturer: syz [ 110.013229][ T31] usb 2-1: SerialNumber: syz [ 110.025580][ T31] usb 2-1: selecting invalid altsetting 1 [ 110.032141][ T31] usb 2-1: unit 6 not found! [ 110.458662][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 110.473497][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.152897][ T3022] incfs: Can't find or create .index dir in ./cgroup [ 111.160248][ T3022] incfs: mount failed -22 [ 111.238206][ T341] usb 2-1: USB disconnect, device number 18 [ 111.265847][ T3029] fuse: Bad value for 'fd' [ 111.284951][ T3031] netlink: 164 bytes leftover after parsing attributes in process `syz.1.985'. [ 111.434840][ T31] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 111.484906][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 111.495112][ T3039] syzkaller0: entered promiscuous mode [ 111.500765][ T3039] syzkaller0: entered allmulticast mode [ 111.605259][ T31] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 111.613908][ T31] usb 3-1: config 0 has no interfaces? [ 111.620149][ T31] usb 3-1: config 0 has no interfaces? [ 111.626402][ T31] usb 3-1: config 0 has no interfaces? [ 111.632668][ T31] usb 3-1: config 0 has no interfaces? [ 111.639104][ T31] usb 3-1: config 0 has no interfaces? [ 111.645294][ T10] usb 4-1: device descriptor read/64, error -71 [ 111.652111][ T31] usb 3-1: config 0 has no interfaces? [ 111.659200][ T31] usb 3-1: config 0 has no interfaces? [ 111.665566][ T31] usb 3-1: config 0 has no interfaces? [ 111.672660][ T31] usb 3-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 1.00 [ 111.681863][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.689905][ T31] usb 3-1: Product: syz [ 111.694084][ T31] usb 3-1: Manufacturer: syz [ 111.698795][ T31] usb 3-1: SerialNumber: syz [ 111.704064][ T31] usb 3-1: config 0 descriptor?? [ 111.834880][ T341] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 111.884834][ T10] usb 4-1: device descriptor read/64, error -71 [ 111.911742][ T3024] input: syz0 as /devices/virtual/input/input20 [ 111.918155][ T3024] input: failed to attach handler leds to device input20, error: -6 [ 111.929522][ T31] usb 3-1: USB disconnect, device number 40 [ 111.984869][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 111.991478][ T341] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.001823][ T341] usb 2-1: config 0 has no interfaces? [ 112.007491][ T341] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.016672][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.026061][ T341] usb 2-1: config 0 descriptor?? [ 112.125167][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 112.237390][ T341] usb 2-1: USB disconnect, device number 19 [ 112.255128][ T10] usb 4-1: device descriptor read/64, error -71 [ 112.437785][ T3053] fuse: Invalid rootmode [ 112.494851][ T10] usb 4-1: device descriptor read/64, error -71 [ 112.565720][ T3064] FAULT_INJECTION: forcing a failure. [ 112.565720][ T3064] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.579178][ T3064] CPU: 0 UID: 0 PID: 3064 Comm: syz.2.999 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 112.579215][ T3064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.579226][ T3064] Call Trace: [ 112.579231][ T3064] [ 112.579237][ T3064] __dump_stack+0x21/0x30 [ 112.579264][ T3064] dump_stack_lvl+0x140/0x1c0 [ 112.579277][ T3064] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.579291][ T3064] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 112.579308][ T3064] dump_stack+0x19/0x20 [ 112.579320][ T3064] should_fail_ex+0x3d7/0x530 [ 112.579335][ T3064] should_fail_alloc_page+0xec/0x110 [ 112.579346][ T3064] __alloc_pages_noprof+0x1c0/0x7e0 [ 112.579358][ T3064] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 112.579370][ T3064] ? _parse_integer+0x2e/0x40 [ 112.579382][ T3064] ? fuse_do_ioctl+0x2a1/0x1ff0 [ 112.579398][ T3064] fuse_do_ioctl+0xedd/0x1ff0 [ 112.579412][ T3064] ? __cfi_fuse_do_ioctl+0x10/0x10 [ 112.579425][ T3064] ? has_cap_mac_admin+0xd0/0xd0 [ 112.579438][ T3064] ? proc_fail_nth_write+0x184/0x220 [ 112.579452][ T3064] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 112.579466][ T3064] ? __fget_files+0x2c5/0x340 [ 112.579482][ T3064] fuse_file_ioctl+0x177/0x190 [ 112.579495][ T3064] ? __cfi_fuse_file_ioctl+0x10/0x10 [ 112.579509][ T3064] __se_sys_ioctl+0x132/0x1b0 [ 112.579532][ T3064] __x64_sys_ioctl+0x7f/0xa0 [ 112.579547][ T3064] x64_sys_call+0x1878/0x2ee0 [ 112.579561][ T3064] do_syscall_64+0x57/0xf0 [ 112.579575][ T3064] ? clear_bhb_loop+0x50/0xa0 [ 112.579590][ T3064] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.579604][ T3064] RIP: 0033:0x7f7428d9c799 [ 112.579615][ T3064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.579625][ T3064] RSP: 002b:00007f74277f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.579639][ T3064] RAX: ffffffffffffffda RBX: 00007f7429015fa0 RCX: 00007f7428d9c799 [ 112.579648][ T3064] RDX: 0000000000000000 RSI: 00000000c0205865 RDI: 0000000000000003 [ 112.579656][ T3064] RBP: 00007f74277f7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.579663][ T3064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.579670][ T3064] R13: 00007f7429016038 R14: 00007f7429015fa0 R15: 00007ffec7795d38 [ 112.579680][ T3064] [ 112.814378][ T10] usb usb4-port1: attempt power cycle [ 112.972245][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 112.972262][ T36] audit: type=1400 audit(1773832384.009:434): avc: denied { load_policy } for pid=3074 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.983370][ T3075] SELinux: ebitmap: truncated map [ 113.009099][ T3075] SELinux: failed to load policy [ 113.019112][ T36] audit: type=1400 audit(1773832384.059:435): avc: denied { mount } for pid=3074 comm="syz.1.1002" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 113.115675][ T36] audit: type=1400 audit(1773832384.159:436): avc: denied { create } for pid=3078 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.126487][ T3079] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 113.154831][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 113.175748][ T10] usb 4-1: device descriptor read/8, error -71 [ 113.305736][ T10] usb 4-1: device descriptor read/8, error -71 [ 113.395355][ T3081] fuse: Invalid rootmode [ 113.544845][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 113.575959][ T10] usb 4-1: device descriptor read/8, error -71 [ 113.583266][ T36] audit: type=1400 audit(1773832384.619:437): avc: denied { write } for pid=3084 comm="syz.0.1007" name="ptype" dev="proc" ino=4026532309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 113.607561][ T3087] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1007'. [ 113.616758][ T3087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 113.626893][ T3087] tipc: Started in network mode [ 113.631817][ T3087] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 113.645217][ T3087] tipc: Enabling of bearer rejected, failed to enable media [ 113.705799][ T10] usb 4-1: device descriptor read/8, error -71 [ 113.816946][ T10] usb usb4-port1: unable to enumerate USB device [ 114.224456][ T3106] fuse: Invalid rootmode [ 114.284214][ T3118] incfs: Can't find or create .incomplete dir in ./cgroup [ 114.292069][ T3118] incfs: mount failed -22 [ 114.840625][ T3131] fuse: Bad value for 'rootmode' [ 114.901224][ T3143] FAULT_INJECTION: forcing a failure. [ 114.901224][ T3143] name failslab, interval 1, probability 0, space 0, times 0 [ 114.914079][ T3143] CPU: 0 UID: 0 PID: 3143 Comm: syz.0.1032 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 114.914103][ T3143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.914111][ T3143] Call Trace: [ 114.914117][ T3143] [ 114.914122][ T3143] __dump_stack+0x21/0x30 [ 114.914144][ T3143] dump_stack_lvl+0x140/0x1c0 [ 114.914161][ T3143] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.914175][ T3143] dump_stack+0x19/0x20 [ 114.914187][ T3143] should_fail_ex+0x3d7/0x530 [ 114.914202][ T3143] should_failslab+0xac/0x100 [ 114.914249][ T3143] __kmalloc_cache_noprof+0x41/0x470 [ 114.914264][ T3143] ? kasan_save_alloc_info+0x40/0x50 [ 114.914276][ T3143] ? ovl_init_fs_context+0xbc/0x710 [ 114.914291][ T3143] ovl_init_fs_context+0xbc/0x710 [ 114.914305][ T3143] alloc_fs_context+0x5f0/0x820 [ 114.914317][ T3143] fs_context_for_mount+0x26/0x40 [ 114.914327][ T3143] do_new_mount+0x116/0xb30 [ 114.914341][ T3143] ? security_capable+0x44/0x130 [ 114.914356][ T3143] path_mount+0x682/0x1010 [ 114.914369][ T3143] __se_sys_mount+0x2bf/0x480 [ 114.914383][ T3143] ? __x64_sys_mount+0xf0/0xf0 [ 114.914396][ T3143] ? handle_softirqs+0x54d/0x630 [ 114.914411][ T3143] __x64_sys_mount+0xc3/0xf0 [ 114.914424][ T3143] x64_sys_call+0x2021/0x2ee0 [ 114.914438][ T3143] do_syscall_64+0x57/0xf0 [ 114.914453][ T3143] ? clear_bhb_loop+0x50/0xa0 [ 114.914471][ T3143] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.914489][ T3143] RIP: 0033:0x7efd8bd9c799 [ 114.914500][ T3143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.914510][ T3143] RSP: 002b:00007efd8cb79028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.914524][ T3143] RAX: ffffffffffffffda RBX: 00007efd8c015fa0 RCX: 00007efd8bd9c799 [ 114.914533][ T3143] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 114.914541][ T3143] RBP: 00007efd8cb79090 R08: 0000200000000000 R09: 0000000000000000 [ 114.914551][ T3143] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.914563][ T3143] R13: 00007efd8c016038 R14: 00007efd8c015fa0 R15: 00007ffc01d15138 [ 114.914578][ T3143] [ 115.218530][ T3152] fuse: Bad value for 'rootmode' [ 115.236917][ T3154] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1037'. [ 115.312336][ T3166] FAULT_INJECTION: forcing a failure. [ 115.312336][ T3166] name failslab, interval 1, probability 0, space 0, times 0 [ 115.325643][ T3166] CPU: 1 UID: 0 PID: 3166 Comm: syz.0.1043 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 115.325675][ T3166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.325686][ T3166] Call Trace: [ 115.325693][ T3166] [ 115.325703][ T3166] __dump_stack+0x21/0x30 [ 115.325731][ T3166] dump_stack_lvl+0x140/0x1c0 [ 115.325753][ T3166] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.325776][ T3166] dump_stack+0x19/0x20 [ 115.325792][ T3166] should_fail_ex+0x3d7/0x530 [ 115.325804][ T3166] should_failslab+0xac/0x100 [ 115.325815][ T3166] kmem_cache_alloc_noprof+0x42/0x410 [ 115.325829][ T3166] ? security_inode_alloc+0x51/0x230 [ 115.325845][ T3166] security_inode_alloc+0x51/0x230 [ 115.325868][ T3166] inode_init_always_gfp+0x756/0x9e0 [ 115.325895][ T3166] alloc_inode+0xc5/0x270 [ 115.325913][ T3166] new_inode_pseudo+0x19/0x40 [ 115.325930][ T3166] alloc_anon_inode+0x22/0x350 [ 115.325941][ T3166] ? anon_inode_make_secure_inode+0x6e/0x150 [ 115.325955][ T3166] anon_inode_make_secure_inode+0x76/0x150 [ 115.325965][ T3166] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 115.325977][ T3166] __anon_inode_getfile+0xd1/0x200 [ 115.325988][ T3166] anon_inode_create_getfile+0x3f/0x50 [ 115.326006][ T3166] new_userfaultfd+0x1fa/0x400 [ 115.326030][ T3166] ? __cfi_userfaultfd_dev_ioctl+0x10/0x10 [ 115.326052][ T3166] userfaultfd_dev_ioctl+0x38/0x60 [ 115.326074][ T3166] __se_sys_ioctl+0x132/0x1b0 [ 115.326090][ T3166] __x64_sys_ioctl+0x7f/0xa0 [ 115.326104][ T3166] x64_sys_call+0x1878/0x2ee0 [ 115.326118][ T3166] do_syscall_64+0x57/0xf0 [ 115.326131][ T3166] ? clear_bhb_loop+0x50/0xa0 [ 115.326151][ T3166] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.326182][ T3166] RIP: 0033:0x7efd8bd9c799 [ 115.326199][ T3166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.326215][ T3166] RSP: 002b:00007efd8cb79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.326229][ T3166] RAX: ffffffffffffffda RBX: 00007efd8c015fa0 RCX: 00007efd8bd9c799 [ 115.326238][ T3166] RDX: 0000000000000000 RSI: 000000000000aa00 RDI: 0000000000000003 [ 115.326246][ T3166] RBP: 00007efd8cb79090 R08: 0000000000000000 R09: 0000000000000000 [ 115.326253][ T3166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.326260][ T3166] R13: 00007efd8c016038 R14: 00007efd8c015fa0 R15: 00007ffc01d15138 [ 115.326269][ T3166] [ 115.408101][ T3170] fuse: Bad value for 'rootmode' [ 115.425056][ T36] audit: type=1400 audit(1773832386.459:438): avc: denied { map } for pid=3167 comm="syz.0.1044" path="socket:[22600]" dev="sockfs" ino=22600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 115.510446][ T3182] incfs: Can't find or create .index dir in ./cgroup [ 115.525445][ T36] audit: type=1400 audit(1773832386.459:439): avc: denied { watch watch_reads } for pid=3167 comm="syz.0.1044" path="/341/file1" dev="tmpfs" ino=1906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.636346][ T3182] incfs: mount failed -22 [ 115.671443][ T3186] fuse: Unknown parameter 'use00000000000000000000' [ 115.675517][ T3188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1053'. [ 115.709989][ T36] audit: type=1400 audit(1773832386.749:440): avc: denied { bind } for pid=3190 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.783000][ T3207] IPv6: A: Disabled Multicast RS [ 115.829039][ T3215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3215 comm=syz.1.1067 [ 115.830423][ T3214] FAULT_INJECTION: forcing a failure. [ 115.830423][ T3214] name failslab, interval 1, probability 0, space 0, times 0 [ 115.857615][ T3214] CPU: 0 UID: 0 PID: 3214 Comm: syz.3.1066 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 115.857649][ T3214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.857662][ T3214] Call Trace: [ 115.857669][ T3214] [ 115.857676][ T3214] __dump_stack+0x21/0x30 [ 115.857703][ T3214] dump_stack_lvl+0x140/0x1c0 [ 115.857727][ T3214] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.857748][ T3214] ? __kasan_check_write+0x18/0x20 [ 115.857772][ T3214] ? __set_page_owner+0x3fe/0x600 [ 115.857791][ T3214] dump_stack+0x19/0x20 [ 115.857818][ T3214] should_fail_ex+0x3d7/0x530 [ 115.857839][ T3214] should_failslab+0xac/0x100 [ 115.857857][ T3214] __kmalloc_cache_node_noprof+0x46/0x430 [ 115.857880][ T3214] ? __get_vm_area_node+0x14d/0x3d0 [ 115.857901][ T3214] ? is_bpf_text_address+0x17b/0x1a0 [ 115.857924][ T3214] __get_vm_area_node+0x14d/0x3d0 [ 115.857944][ T3214] ? __kernel_text_address+0x11/0x40 [ 115.857966][ T3214] __vmalloc_node_range_noprof+0x30e/0x1480 [ 115.857987][ T3214] ? __vcalloc_noprof+0x3a/0x50 [ 115.858012][ T3214] ? stack_trace_save+0xaa/0x100 [ 115.858030][ T3214] ? stack_depot_save_flags+0x38/0x800 [ 115.858053][ T3214] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 115.858074][ T3214] ? kasan_save_alloc_info+0x40/0x50 [ 115.858091][ T3214] ? __kasan_kmalloc+0x96/0xb0 [ 115.858104][ T3214] ? __kmalloc_cache_noprof+0x23c/0x470 [ 115.858133][ T3214] ? __kvm_set_memory_region+0x6ca/0xb80 [ 115.858157][ T3214] ? kvm_set_memory_region+0x2f/0x50 [ 115.858180][ T3214] ? kvm_vm_ioctl+0xb1b/0xc60 [ 115.858203][ T3214] ? __se_sys_ioctl+0x132/0x1b0 [ 115.858228][ T3214] ? __x64_sys_ioctl+0x7f/0xa0 [ 115.858253][ T3214] ? x64_sys_call+0x1878/0x2ee0 [ 115.858277][ T3214] ? do_syscall_64+0x57/0xf0 [ 115.858299][ T3214] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.858322][ T3214] ? __vcalloc_noprof+0x3a/0x50 [ 115.858345][ T3214] __vmalloc_noprof+0x104/0x1d0 [ 115.858365][ T3214] ? __vcalloc_noprof+0x3a/0x50 [ 115.858387][ T3214] ? __cfi___vmalloc_noprof+0x10/0x10 [ 115.858408][ T3214] __vcalloc_noprof+0x3a/0x50 [ 115.858429][ T3214] kvm_arch_prepare_memory_region+0x2b0/0xf30 [ 115.858455][ T3214] ? __cfi_mutex_lock+0x10/0x10 [ 115.858482][ T3214] kvm_set_memslot+0x594/0x13f0 [ 115.858505][ T3214] ? __kmalloc_cache_noprof+0x23c/0x470 [ 115.858529][ T3214] ? __kvm_set_memory_region+0x6ca/0xb80 [ 115.858553][ T3214] __kvm_set_memory_region+0x825/0xb80 [ 115.858578][ T3214] kvm_set_memory_region+0x2f/0x50 [ 115.858603][ T3214] kvm_vm_ioctl+0xb1b/0xc60 [ 115.858624][ T3214] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 115.858647][ T3214] ? ioctl_has_perm+0x1bc/0x500 [ 115.858669][ T3214] ? __asan_memcpy+0x5a/0x80 [ 115.858692][ T3214] ? ioctl_has_perm+0x408/0x500 [ 115.858716][ T3214] ? selinux_file_ioctl+0x732/0x1480 [ 115.858738][ T3214] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 115.858759][ T3214] ? __cfi_handle_mm_fault+0x10/0x10 [ 115.858780][ T3214] ? lock_vma_under_rcu+0x4d1/0x590 [ 115.858805][ T3214] ? __fget_files+0x2c5/0x340 [ 115.858831][ T3214] ? bpf_lsm_file_ioctl+0xd/0x20 [ 115.858850][ T3214] ? security_file_ioctl+0x3e/0x110 [ 115.858870][ T3214] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 115.858891][ T3214] __se_sys_ioctl+0x132/0x1b0 [ 115.858917][ T3214] __x64_sys_ioctl+0x7f/0xa0 [ 115.858942][ T3214] x64_sys_call+0x1878/0x2ee0 [ 115.858965][ T3214] do_syscall_64+0x57/0xf0 [ 115.858987][ T3214] ? clear_bhb_loop+0x50/0xa0 [ 115.859010][ T3214] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.859032][ T3214] RIP: 0033:0x7fd91fb9c42b [ 115.859055][ T3214] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 115.859071][ T3214] RSP: 002b:00007fd920b01450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.859094][ T3214] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fd91fb9c42b [ 115.859110][ T3214] RDX: 00007fd920b01bd0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 115.859129][ T3214] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000039 [ 115.859142][ T3214] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000 [ 115.859155][ T3214] R13: 00007fd920b01bd0 R14: 0000200000001000 R15: 0000000000000001 [ 115.859171][ T3214] [ 115.859246][ T3214] syz.3.1066: vmalloc error: size 4, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 115.956391][ T3222] netlink: 'syz.1.1067': attribute type 27 has an invalid length. [ 115.959561][ T3214] ,cpuset=syz3,mems_allowed=0 [ 116.297047][ T590] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 116.301815][ T3214] CPU: 1 UID: 0 PID: 3214 Comm: syz.3.1066 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 116.301844][ T3214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.301856][ T3214] Call Trace: [ 116.301863][ T3214] [ 116.301872][ T3214] __dump_stack+0x21/0x30 [ 116.301898][ T3214] dump_stack_lvl+0x140/0x1c0 [ 116.301919][ T3214] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.301942][ T3214] dump_stack+0x19/0x20 [ 116.301962][ T3214] warn_alloc+0x1e7/0x2c0 [ 116.301981][ T3214] ? __kasan_kmalloc+0x28/0xb0 [ 116.301999][ T3214] ? __cfi_warn_alloc+0x10/0x10 [ 116.302018][ T3214] ? __get_vm_area_node+0x3bd/0x3d0 [ 116.302038][ T3214] __vmalloc_node_range_noprof+0x333/0x1480 [ 116.302060][ T3214] ? stack_trace_save+0xaa/0x100 [ 116.302078][ T3214] ? stack_depot_save_flags+0x38/0x800 [ 116.302101][ T3214] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 116.302121][ T3214] ? kasan_save_alloc_info+0x40/0x50 [ 116.302142][ T3214] ? __kasan_kmalloc+0x96/0xb0 [ 116.302157][ T3214] ? __kmalloc_cache_noprof+0x23c/0x470 [ 116.302179][ T3214] ? __kvm_set_memory_region+0x6ca/0xb80 [ 116.302201][ T3214] ? kvm_set_memory_region+0x2f/0x50 [ 116.302224][ T3214] ? kvm_vm_ioctl+0xb1b/0xc60 [ 116.302244][ T3214] ? __se_sys_ioctl+0x132/0x1b0 [ 116.302268][ T3214] ? __x64_sys_ioctl+0x7f/0xa0 [ 116.302291][ T3214] ? x64_sys_call+0x1878/0x2ee0 [ 116.302313][ T3214] ? do_syscall_64+0x57/0xf0 [ 116.302338][ T3214] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.302361][ T3214] ? __vcalloc_noprof+0x3a/0x50 [ 116.302383][ T3214] __vmalloc_noprof+0x104/0x1d0 [ 116.302403][ T3214] ? __vcalloc_noprof+0x3a/0x50 [ 116.302424][ T3214] ? __cfi___vmalloc_noprof+0x10/0x10 [ 116.302452][ T3214] __vcalloc_noprof+0x3a/0x50 [ 116.302473][ T3214] kvm_arch_prepare_memory_region+0x2b0/0xf30 [ 116.302498][ T3214] ? __cfi_mutex_lock+0x10/0x10 [ 116.302524][ T3214] kvm_set_memslot+0x594/0x13f0 [ 116.302546][ T3214] ? __kmalloc_cache_noprof+0x23c/0x470 [ 116.302568][ T3214] ? __kvm_set_memory_region+0x6ca/0xb80 [ 116.302591][ T3214] __kvm_set_memory_region+0x825/0xb80 [ 116.302616][ T3214] kvm_set_memory_region+0x2f/0x50 [ 116.302638][ T3214] kvm_vm_ioctl+0xb1b/0xc60 [ 116.302659][ T3214] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 116.302680][ T3214] ? ioctl_has_perm+0x1bc/0x500 [ 116.302700][ T3214] ? __asan_memcpy+0x5a/0x80 [ 116.302721][ T3214] ? ioctl_has_perm+0x408/0x500 [ 116.302744][ T3214] ? selinux_file_ioctl+0x732/0x1480 [ 116.302764][ T3214] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 116.302791][ T3214] ? __cfi_handle_mm_fault+0x10/0x10 [ 116.302819][ T3214] ? lock_vma_under_rcu+0x4d1/0x590 [ 116.302845][ T3214] ? __fget_files+0x2c5/0x340 [ 116.302870][ T3214] ? bpf_lsm_file_ioctl+0xd/0x20 [ 116.302887][ T3214] ? security_file_ioctl+0x3e/0x110 [ 116.302907][ T3214] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 116.302927][ T3214] __se_sys_ioctl+0x132/0x1b0 [ 116.302951][ T3214] __x64_sys_ioctl+0x7f/0xa0 [ 116.302974][ T3214] x64_sys_call+0x1878/0x2ee0 [ 116.302997][ T3214] do_syscall_64+0x57/0xf0 [ 116.303017][ T3214] ? clear_bhb_loop+0x50/0xa0 [ 116.303038][ T3214] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.303058][ T3214] RIP: 0033:0x7fd91fb9c42b [ 116.303074][ T3214] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 116.303090][ T3214] RSP: 002b:00007fd920b01450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.303113][ T3214] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fd91fb9c42b [ 116.303128][ T3214] RDX: 00007fd920b01bd0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 116.303140][ T3214] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000039 [ 116.303153][ T3214] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000 [ 116.303165][ T3214] R13: 00007fd920b01bd0 R14: 0000200000001000 R15: 0000000000000001 [ 116.303180][ T3214] [ 116.303278][ T3214] Mem-Info: [ 116.476247][ T590] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 116.496856][ T3214] active_anon:7356 inactive_anon:5 isolated_anon:0 [ 116.496856][ T3214] active_file:18242 inactive_file:2587 isolated_file:0 [ 116.496856][ T3214] unevictable:0 dirty:402 writeback:0 [ 116.496856][ T3214] slab_reclaimable:4916 slab_unreclaimable:71897 [ 116.496856][ T3214] mapped:25146 shmem:167 pagetables:978 [ 116.496856][ T3214] sec_pagetables:0 bounce:0 [ 116.496856][ T3214] kernel_misc_reclaimable:0 [ 116.496856][ T3214] free:1525509 free_pcp:1787 free_cma:0 [ 116.504130][ T590] usb 3-1: config 0 has no interface number 0 [ 116.515094][ T3214] Node 0 active_anon:29424kB inactive_anon:20kB active_file:72968kB inactive_file:10348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100584kB dirty:1608kB writeback:0kB shmem:668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5568kB pagetables:3912kB sec_pagetables:0kB all_unreclaimable? no [ 116.520138][ T590] usb 3-1: config 0 interface 41 has no altsetting 0 [ 116.529534][ T3214] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963360kB mlocked:0kB bounce:0kB free_pcp:5196kB local_pcp:5128kB free_cma:0kB [ 116.537038][ T590] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 116.539645][ T3214] lowmem_reserve[]: [ 116.544309][ T590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.549199][ T3214] 0 3921 3921 [ 116.549230][ T3214] Normal free:3146088kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29424kB inactive_anon:20kB active_file:72968kB inactive_file:10348kB unevictable:0kB writepending:1608kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:516kB local_pcp:292kB free_cma:0kB [ 116.555100][ T590] usb 3-1: Product: syz [ 116.560448][ T3214] lowmem_reserve[]: [ 116.566591][ T590] usb 3-1: Manufacturer: syz [ 116.582070][ T3229] incfs: Can't find or create .incomplete dir in ./cgroup [ 116.586405][ T590] usb 3-1: SerialNumber: syz [ 116.593432][ T3229] incfs: mount failed -22 [ 116.597776][ T590] usb 3-1: config 0 descriptor?? [ 116.611718][ T3214] 0 [ 116.716376][ T3239] syz.1.1077 uses obsolete (PF_INET,SOCK_PACKET) [ 116.755211][ T3214] 0 0 [ 116.932986][ T3214] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 116.949494][ T3214] Normal: 317*4kB (UME) 434*8kB (UE) 454*16kB (UME) 441*32kB (UME) 392*64kB (UME) 80*128kB (UME) 39*256kB (UME) 44*512kB (UME) 41*1024kB (UME) 22*2048kB (UM) 723*4096kB (UME) = 3142404kB [ 116.968426][ T3214] 20998 total pagecache pages [ 116.973499][ T3214] 6 pages in swap cache [ 116.979927][ T3214] Free swap = 124492kB [ 116.984249][ T3214] Total swap = 124996kB [ 116.994569][ T3214] 2097051 pages RAM [ 116.999054][ T3214] 0 pages HighMem/MovableOnly [ 117.004162][ T3214] 352245 pages reserved [ 117.011506][ T3214] 0 pages cma reserved [ 117.015587][ T3249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3249 comm=syz.0.1082 [ 117.030076][ T3214] Memory allocations: [ 117.034116][ T3214] 0 B 0 init/main.c:1477 func:do_initcalls [ 117.041499][ T3214] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 117.049841][ T3214] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 117.057575][ T3214] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 117.065766][ T3214] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 117.073734][ T3214] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 117.082914][ T3214] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 117.091394][ T3214] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 117.101906][ T3261] netlink: 'syz.0.1082': attribute type 27 has an invalid length. [ 117.107420][ T3214] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 117.117816][ T3214] 0 B 0 init/initramfs.c:101 func:find_link [ 117.184053][ T3281] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 117.193148][ T3281] overlayfs: missing 'lowerdir' [ 117.209399][ T3283] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 117.216506][ T3283] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 117.219343][ T590] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 117.223786][ T3283] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 117.283252][ T3295] netlink: 'syz.3.1102': attribute type 16 has an invalid length. [ 117.294051][ T3295] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1102'. [ 117.363731][ T3302] cgroup: fork rejected by pids controller in /syz1 [ 117.430136][ T31] usb 3-1: USB disconnect, device number 41 [ 117.460021][ T3346] netlink: 'syz.1.1110': attribute type 46 has an invalid length. [ 117.564847][ T341] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 117.716174][ T341] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 117.730005][ T341] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.739201][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.747590][ T341] usb 4-1: SerialNumber: syz [ 117.754949][ T341] cdc_ether 4-1:1.0: skipping garbage [ 117.760667][ T341] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 117.956194][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.965016][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.006529][ T3372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3372 comm=syz.2.1121 [ 118.029051][ T3374] incfs: mount failed -22 [ 118.034359][ T36] audit: type=1400 audit(1773832389.069:441): avc: denied { write } for pid=3373 comm="syz.0.1122" name=".index" dev="incremental-fs" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.065148][ T3376] incfs: Backing dir is not set, filesystem can't be mounted. [ 118.072833][ T3376] incfs: mount failed -2 [ 118.084389][ T3377] netlink: 'syz.2.1121': attribute type 27 has an invalid length. [ 118.092869][ T3377] 0{X: left allmulticast mode [ 118.099866][ T3377] veth1: left promiscuous mode [ 118.119642][ T36] audit: type=1400 audit(1773832389.159:442): avc: denied { getopt } for pid=3378 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.204535][ T3381] FAULT_INJECTION: forcing a failure. [ 118.204535][ T3381] name failslab, interval 1, probability 0, space 0, times 0 [ 118.217409][ T3381] CPU: 1 UID: 0 PID: 3381 Comm: syz.0.1125 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 118.217448][ T3381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.217461][ T3381] Call Trace: [ 118.217468][ T3381] [ 118.217477][ T3381] __dump_stack+0x21/0x30 [ 118.217505][ T3381] dump_stack_lvl+0x140/0x1c0 [ 118.217525][ T3381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.217546][ T3381] dump_stack+0x19/0x20 [ 118.217565][ T3381] should_fail_ex+0x3d7/0x530 [ 118.217587][ T3381] should_failslab+0xac/0x100 [ 118.217605][ T3381] kmem_cache_alloc_node_noprof+0x45/0x420 [ 118.217627][ T3381] ? __alloc_skb+0x108/0x370 [ 118.217644][ T3381] __alloc_skb+0x108/0x370 [ 118.217660][ T3381] alloc_uevent_skb+0x85/0x240 [ 118.217683][ T3381] kobject_uevent_net_broadcast+0x1b1/0x5e0 [ 118.217705][ T3381] kobject_uevent_env+0x551/0x7e0 [ 118.217727][ T3381] kobject_uevent+0x21/0x40 [ 118.217747][ T3381] __kobject_del+0xd7/0x2f0 [ 118.217766][ T3381] kobject_put+0x1ff/0x2a0 [ 118.217785][ T3381] net_rx_queue_update_kobjects+0x52e/0x5a0 [ 118.217808][ T3381] netdev_unregister_kobject+0x103/0x250 [ 118.217828][ T3381] unregister_netdevice_many_notify+0x16c6/0x1c30 [ 118.217847][ T3381] ? __asan_memcpy+0x5a/0x80 [ 118.217867][ T3381] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 118.217885][ T3381] ? cred_has_capability+0x296/0x3a0 [ 118.217903][ T3381] ? arch_stack_walk+0x10a/0x170 [ 118.217925][ T3381] ? selinux_perf_event_alloc+0x110/0x110 [ 118.217945][ T3381] ? __kasan_check_read+0x15/0x20 [ 118.217965][ T3381] unregister_netdevice_queue+0x341/0x390 [ 118.217988][ T3381] ? selinux_capable+0x38/0x50 [ 118.218011][ T3381] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 118.218033][ T3381] ? ns_capable+0x90/0xf0 [ 118.218055][ T3381] ip6gre_tunnel_siocdevprivate+0x393/0x870 [ 118.218079][ T3381] ? __cfi_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 118.218100][ T3381] ? proc_fail_nth_write+0x184/0x220 [ 118.218130][ T3381] ? full_name_hash+0xa1/0xf0 [ 118.218155][ T3381] dev_ifsioc+0x94e/0xc10 [ 118.218174][ T3381] dev_ioctl+0xa62/0x1000 [ 118.218191][ T3381] sock_ioctl+0x75a/0x7f0 [ 118.218214][ T3381] ? __cfi_sock_ioctl+0x10/0x10 [ 118.218234][ T3381] ? bpf_lsm_file_ioctl+0xd/0x20 [ 118.218253][ T3381] ? security_file_ioctl+0x3e/0x110 [ 118.218271][ T3381] ? __cfi_sock_ioctl+0x10/0x10 [ 118.218291][ T3381] __se_sys_ioctl+0x132/0x1b0 [ 118.218314][ T3381] __x64_sys_ioctl+0x7f/0xa0 [ 118.218336][ T3381] x64_sys_call+0x1878/0x2ee0 [ 118.218357][ T3381] do_syscall_64+0x57/0xf0 [ 118.218376][ T3381] ? clear_bhb_loop+0x50/0xa0 [ 118.218399][ T3381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.218418][ T3381] RIP: 0033:0x7efd8bd9c799 [ 118.218434][ T3381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.218448][ T3381] RSP: 002b:00007efd8cb79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.218469][ T3381] RAX: ffffffffffffffda RBX: 00007efd8c015fa0 RCX: 00007efd8bd9c799 [ 118.218482][ T3381] RDX: 0000200000000600 RSI: 00000000000089f2 RDI: 0000000000000003 [ 118.218493][ T3381] RBP: 00007efd8cb79090 R08: 0000000000000000 R09: 0000000000000000 [ 118.218505][ T3381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.218517][ T3381] R13: 00007efd8c016038 R14: 00007efd8c015fa0 R15: 00007ffc01d15138 [ 118.218533][ T3381] [ 118.433262][ T3383] fuse: Bad value for 'user_id' [ 118.563862][ T3383] fuse: Bad value for 'user_id' [ 118.617547][ T3392] fuse: Unknown parameter 'user_i00000000000000000000' [ 118.648466][ T36] audit: type=1400 audit(1773832389.689:443): avc: denied { nlmsg_write } for pid=3395 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.712310][ T3398] incfs: Backing dir is not set, filesystem can't be mounted. [ 118.719988][ T3398] incfs: mount failed -2 [ 118.747126][ T3400] fuse: Unknown parameter '1844674407370955161518446744073709551615' [ 118.779252][ T3406] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1136'. [ 118.788383][ T3406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 118.847856][ T3410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 118.855203][ T3410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 118.862323][ T3410] rust_binder: 511: no such ref 3 [ 118.877972][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.897338][ T3414] fuse: Unknown parameter 'user_i00000000000000000000' [ 118.996836][ T3416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.005494][ T3416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.056990][ T3419] incfs: Backing dir is not set, filesystem can't be mounted. [ 119.064875][ T3419] incfs: mount failed -2 [ 119.086077][ T3421] FAULT_INJECTION: forcing a failure. [ 119.086077][ T3421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.099416][ T3421] CPU: 1 UID: 0 PID: 3421 Comm: syz.0.1142 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 119.099449][ T3421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.099460][ T3421] Call Trace: [ 119.099466][ T3421] [ 119.099474][ T3421] __dump_stack+0x21/0x30 [ 119.099503][ T3421] dump_stack_lvl+0x140/0x1c0 [ 119.099522][ T3421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.099543][ T3421] ? check_stack_object+0x12b/0x150 [ 119.099567][ T3421] dump_stack+0x19/0x20 [ 119.099586][ T3421] should_fail_ex+0x3d7/0x530 [ 119.099608][ T3421] should_fail+0xf/0x20 [ 119.099626][ T3421] should_fail_usercopy+0x1e/0x30 [ 119.099647][ T3421] _copy_to_user+0x24/0xa0 [ 119.099671][ T3421] simple_read_from_buffer+0xed/0x160 [ 119.099691][ T3421] proc_fail_nth_read+0x1aa/0x220 [ 119.099713][ T3421] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 119.099731][ T3421] ? bpf_lsm_file_permission+0xd/0x20 [ 119.099743][ T3421] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 119.099754][ T3421] vfs_read+0x289/0xcb0 [ 119.099772][ T3421] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 119.099796][ T3421] ? __cfi_vfs_read+0x10/0x10 [ 119.099818][ T3421] ? __kasan_check_write+0x18/0x20 [ 119.099842][ T3421] ? mutex_lock+0x97/0x1d0 [ 119.099861][ T3421] ? __cfi_mutex_lock+0x10/0x10 [ 119.099875][ T3421] ? __fget_files+0x2c5/0x340 [ 119.099891][ T3421] ksys_read+0x145/0x260 [ 119.099904][ T3421] ? __cfi_ksys_read+0x10/0x10 [ 119.099923][ T3421] ? __kasan_check_read+0x15/0x20 [ 119.099947][ T3421] __x64_sys_read+0x7f/0x90 [ 119.099969][ T3421] x64_sys_call+0x2638/0x2ee0 [ 119.099993][ T3421] do_syscall_64+0x57/0xf0 [ 119.100006][ T3421] ? clear_bhb_loop+0x50/0xa0 [ 119.100023][ T3421] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.100036][ T3421] RIP: 0033:0x7efd8bd5cfce [ 119.100046][ T3421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.100058][ T3421] RSP: 002b:00007efd8cb78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.100080][ T3421] RAX: ffffffffffffffda RBX: 00007efd8cb796c0 RCX: 00007efd8bd5cfce [ 119.100095][ T3421] RDX: 000000000000000f RSI: 00007efd8cb790a0 RDI: 0000000000000004 [ 119.100106][ T3421] RBP: 00007efd8cb79090 R08: 0000000000000000 R09: 0000000000000000 [ 119.100228][ T3421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.100236][ T3421] R13: 00007efd8c016038 R14: 00007efd8c015fa0 R15: 00007ffc01d15138 [ 119.100248][ T3421] [ 119.122339][ T3425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.359384][ T3425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.372378][ T3425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.380978][ T3425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.927504][ T3431] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.939156][ T36] audit: type=1326 audit(1773832390.979:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3432 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 119.963298][ T36] audit: type=1326 audit(1773832390.979:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3432 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 119.986876][ T36] audit: type=1326 audit(1773832390.979:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3432 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 120.012501][ T36] audit: type=1326 audit(1773832390.979:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3432 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 120.036748][ T36] audit: type=1326 audit(1773832390.979:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3432 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 120.060394][ T36] audit: type=1326 audit(1773832390.979:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3432 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 120.084016][ T36] audit: type=1326 audit(1773832390.979:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3432 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 120.324597][ T341] usb 4-1: USB disconnect, device number 40 [ 120.436520][ T3454] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 120.443626][ T3454] rust_binder: 544: no such ref 3 [ 120.618742][ T3481] fuse: Bad value for 'fd' [ 120.784848][ T341] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 120.914853][ T341] usb 4-1: device descriptor read/64, error -71 [ 120.914875][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.927432][ T1209] Bluetooth: hci0: command 0x1003 tx timeout [ 120.964055][ T3498] rust_binder: 519: no such ref 3 [ 120.987976][ T3502] fuse: Bad value for 'fd' [ 121.028185][ T3504] FAULT_INJECTION: forcing a failure. [ 121.028185][ T3504] name failslab, interval 1, probability 0, space 0, times 0 [ 121.041162][ T3504] CPU: 0 UID: 0 PID: 3504 Comm: syz.2.1178 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 121.041205][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.041222][ T3504] Call Trace: [ 121.041231][ T3504] [ 121.041237][ T3504] __dump_stack+0x21/0x30 [ 121.041259][ T3504] dump_stack_lvl+0x140/0x1c0 [ 121.041272][ T3504] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.041286][ T3504] dump_stack+0x19/0x20 [ 121.041297][ T3504] should_fail_ex+0x3d7/0x530 [ 121.041311][ T3504] should_failslab+0xac/0x100 [ 121.041321][ T3504] kmem_cache_alloc_node_noprof+0x45/0x420 [ 121.041337][ T3504] ? dup_task_struct+0xc1/0xd80 [ 121.041349][ T3504] ? kasan_save_alloc_info+0x40/0x50 [ 121.041362][ T3504] ? __kasan_kmalloc+0x96/0xb0 [ 121.041371][ T3504] ? __kmalloc_cache_noprof+0x23c/0x470 [ 121.041385][ T3504] dup_task_struct+0xc1/0xd80 [ 121.041396][ T3504] ? __kasan_check_write+0x18/0x20 [ 121.041409][ T3504] ? _raw_spin_lock_irq+0x93/0x120 [ 121.041423][ T3504] ? copy_process+0x3290/0x3290 [ 121.041434][ T3504] ? __kasan_check_write+0x18/0x20 [ 121.041447][ T3504] copy_process+0x55a/0x3290 [ 121.041460][ T3504] ? __cfi_copy_process+0x10/0x10 [ 121.041471][ T3504] ? __kmalloc_cache_noprof+0x23c/0x470 [ 121.041486][ T3504] ? __kasan_check_write+0x18/0x20 [ 121.041500][ T3504] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 121.041514][ T3504] vhost_task_create+0x1f7/0x400 [ 121.041531][ T3504] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 121.041542][ T3504] ? __cfi_vhost_task_create+0x10/0x10 [ 121.041557][ T3504] ? __cfi_vhost_task_fn+0x10/0x10 [ 121.041571][ T3504] ? __kasan_check_write+0x18/0x20 [ 121.041590][ T3504] ? mutex_lock+0x97/0x1d0 [ 121.041613][ T3504] ? __cfi_mutex_lock+0x10/0x10 [ 121.041633][ T3504] ? kernel_text_address+0xa9/0xe0 [ 121.041652][ T3504] kvm_mmu_post_init_vm+0x161/0x300 [ 121.041674][ T3504] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 121.041695][ T3504] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 121.041715][ T3504] ? kstrtoull+0x13b/0x1e0 [ 121.041733][ T3504] ? kstrtouint+0x78/0xf0 [ 121.041749][ T3504] ? ioctl_has_perm+0x1bc/0x500 [ 121.041769][ T3504] ? __asan_memcpy+0x5a/0x80 [ 121.041787][ T3504] ? ioctl_has_perm+0x408/0x500 [ 121.041805][ T3504] ? has_cap_mac_admin+0xd0/0xd0 [ 121.041823][ T3504] ? __kasan_check_write+0x18/0x20 [ 121.041842][ T3504] ? mutex_lock_killable+0x97/0x1d0 [ 121.041857][ T3504] ? __cfi_mutex_lock_killable+0x10/0x10 [ 121.041872][ T3504] ? proc_fail_nth_write+0x184/0x220 [ 121.041886][ T3504] kvm_vcpu_ioctl+0xa48/0x1000 [ 121.041911][ T3504] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 121.041932][ T3504] ? __cfi_vfs_write+0x10/0x10 [ 121.041954][ T3504] ? __kasan_check_write+0x18/0x20 [ 121.041968][ T3504] ? mutex_unlock+0x90/0x240 [ 121.041977][ T3504] ? __cfi_mutex_unlock+0x10/0x10 [ 121.042006][ T3504] ? __fget_files+0x2c5/0x340 [ 121.042030][ T3504] ? __fget_files+0x2c5/0x340 [ 121.042053][ T3504] ? bpf_lsm_file_ioctl+0xd/0x20 [ 121.042070][ T3504] ? security_file_ioctl+0x3e/0x110 [ 121.042089][ T3504] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 121.042111][ T3504] __se_sys_ioctl+0x132/0x1b0 [ 121.042136][ T3504] __x64_sys_ioctl+0x7f/0xa0 [ 121.042151][ T3504] x64_sys_call+0x1878/0x2ee0 [ 121.042166][ T3504] do_syscall_64+0x57/0xf0 [ 121.042179][ T3504] ? clear_bhb_loop+0x50/0xa0 [ 121.042194][ T3504] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.042207][ T3504] RIP: 0033:0x7f7428d9c799 [ 121.042219][ T3504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.042229][ T3504] RSP: 002b:00007f74277f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.042243][ T3504] RAX: ffffffffffffffda RBX: 00007f7429015fa0 RCX: 00007f7428d9c799 [ 121.042251][ T3504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 121.042259][ T3504] RBP: 00007f74277f7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.042266][ T3504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.042273][ T3504] R13: 00007f7429016038 R14: 00007f7429015fa0 R15: 00007ffec7795d38 [ 121.042282][ T3504] [ 121.204836][ T341] usb 4-1: device descriptor read/64, error -71 [ 121.551086][ T3521] fuse: Unknown parameter '0x0000000000000003' [ 121.577319][ T3525] fuse: Bad value for 'fd' [ 121.627216][ T3529] overlayfs: failed to clone lowerpath [ 121.704870][ T341] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 121.774871][ T390] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 121.834876][ T341] usb 4-1: device descriptor read/64, error -71 [ 121.904865][ T390] usb 3-1: device descriptor read/64, error -71 [ 122.078190][ T341] usb 4-1: device descriptor read/64, error -71 [ 122.144889][ T390] usb 3-1: device descriptor read/64, error -71 [ 122.184893][ T341] usb usb4-port1: attempt power cycle [ 122.340159][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 122.384826][ T390] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 122.514833][ T390] usb 3-1: device descriptor read/64, error -71 [ 122.524965][ T341] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 122.545879][ T341] usb 4-1: device descriptor read/8, error -71 [ 122.678308][ T341] usb 4-1: device descriptor read/8, error -71 [ 122.754813][ T390] usb 3-1: device descriptor read/64, error -71 [ 122.865011][ T390] usb usb3-port1: attempt power cycle [ 122.924839][ T341] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 122.945950][ T341] usb 4-1: device descriptor read/8, error -71 [ 123.076401][ T341] usb 4-1: device descriptor read/8, error -71 [ 123.184903][ T341] usb usb4-port1: unable to enumerate USB device [ 123.204841][ T390] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 123.226028][ T390] usb 3-1: device descriptor read/8, error -71 [ 123.327400][ T3578] netlink: 'syz.1.1212': attribute type 6 has an invalid length. [ 123.366045][ T390] usb 3-1: device descriptor read/8, error -71 [ 123.604853][ T390] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 123.626067][ T390] usb 3-1: device descriptor read/8, error -71 [ 123.756138][ T390] usb 3-1: device descriptor read/8, error -71 [ 123.847128][ T3584] fuse: Unknown parameter '0x0000000000000003' [ 123.864979][ T390] usb usb3-port1: unable to enumerate USB device [ 123.874820][ T341] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 123.921204][ T3598] overlayfs: failed to clone upperpath [ 123.943118][ T3600] overlayfs: failed to clone upperpath [ 123.961821][ T3602] netlink: 'syz.1.1223': attribute type 6 has an invalid length. [ 124.026377][ T341] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.034517][ T341] usb 4-1: not running at top speed; connect to a high speed hub [ 124.043326][ T341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.053535][ T341] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.064106][ T341] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.073199][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.081605][ T341] usb 4-1: Product: syz [ 124.086311][ T3604] fuse: Unknown parameter '0x0000000000000003' [ 124.086403][ T341] usb 4-1: Manufacturer: syz [ 124.097319][ T341] usb 4-1: SerialNumber: syz [ 124.358073][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 124.358093][ T36] audit: type=1326 audit(1773832395.399:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.3.1213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd91fb9c799 code=0x0 [ 124.497954][ T3624] fuse: Unknown parameter '0x0000000000000003' [ 125.056293][ T3639] netlink: 'syz.0.1240': attribute type 6 has an invalid length. [ 125.060146][ T3641] overlayfs: failed to clone lowerpath [ 125.111235][ T3647] fuse: Unknown parameter 'fd0x0000000000000003' [ 125.578620][ T3662] overlayfs: failed to clone lowerpath [ 125.601944][ T36] audit: type=1326 audit(1773832396.639:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd8bd9c799 code=0x0 [ 125.653919][ T36] audit: type=1326 audit(1773832396.689:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.678368][ T590] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 125.686442][ T36] audit: type=1326 audit(1773832396.689:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.710092][ T36] audit: type=1326 audit(1773832396.719:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.733898][ T36] audit: type=1326 audit(1773832396.719:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.757800][ T36] audit: type=1326 audit(1773832396.719:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.781247][ T36] audit: type=1326 audit(1773832396.719:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.804672][ T36] audit: type=1326 audit(1773832396.719:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.828824][ T36] audit: type=1326 audit(1773832396.719:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd9c799 code=0x7ffc0000 [ 125.865948][ T590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.877325][ T590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.887529][ T590] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.900754][ T590] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.910363][ T590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.919176][ T590] usb 3-1: config 0 descriptor?? [ 126.021007][ T3672] fuse: Unknown parameter 'fd0x0000000000000003' [ 126.089853][ T3682] netlink: 'syz.1.1258': attribute type 6 has an invalid length. [ 126.326530][ T590] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 126.338868][ T590] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 126.443371][ T3685] overlayfs: failed to clone lowerpath [ 126.472700][ T3689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'. [ 126.483138][ T3689] netlink: 'syz.0.1261': attribute type 27 has an invalid length. [ 126.502909][ T341] usb 4-1: 0:2 : does not exist [ 126.517225][ T341] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 126.534827][ T341] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 126.547135][ T341] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 126.560655][ T341] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 126.570764][ T341] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 126.582294][ T3703] overlayfs: failed to clone lowerpath [ 126.582897][ T341] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 126.599906][ T341] usb 4-1: 5:0: failed to get current value for ch 2 (-22) [ 126.621675][ T341] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 126.633196][ T341] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 126.646543][ T341] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 126.648086][ T3712] incfs: Backing dir is not set, filesystem can't be mounted. [ 126.658169][ T341] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 126.669580][ T3712] incfs: mount failed -2 [ 126.678124][ T341] usb 4-1: USB disconnect, device number 45 [ 126.694790][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.723098][ T3720] overlayfs: failed to clone lowerpath [ 126.740046][ T3724] netlink: 'syz.0.1278': attribute type 6 has an invalid length. [ 126.746488][ T3726] 9pnet_fd: Insufficient options for proto=fd [ 126.833682][ T3740] incfs: Backing dir is not set, filesystem can't be mounted. [ 126.841448][ T3740] incfs: mount failed -2 [ 126.856791][ T3742] overlayfs: failed to clone lowerpath [ 126.875851][ T3744] overlayfs: failed to clone upperpath [ 127.014858][ T341] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 127.165917][ T341] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 127.174117][ T341] usb 4-1: config 0 has no interface number 0 [ 127.180308][ T341] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 127.191392][ T341] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 127.201245][ T341] usb 4-1: config 0 interface 96 has no altsetting 0 [ 127.209525][ T341] usb 4-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 127.218619][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.226635][ T341] usb 4-1: Product: syz [ 127.230786][ T341] usb 4-1: Manufacturer: syz [ 127.236002][ T341] usb 4-1: SerialNumber: syz [ 127.241198][ T341] usb 4-1: config 0 descriptor?? [ 127.459669][ T341] usb 4-1: USB disconnect, device number 46 [ 127.476222][ T3761] incfs: Backing dir is not set, filesystem can't be mounted. [ 127.483732][ T3761] incfs: mount failed -2 [ 127.619585][ T3773] netlink: 'syz.1.1302': attribute type 6 has an invalid length. [ 127.838528][ T3775] overlayfs: failed to clone upperpath [ 127.878657][ T3782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3782 comm=syz.0.1306 [ 128.074077][ T3801] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 128.082731][ T3801] overlayfs: overlapping lowerdir path [ 128.152845][ T3804] overlayfs: failed to clone lowerpath [ 128.177503][ T3808] FAULT_INJECTION: forcing a failure. [ 128.177503][ T3808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.190997][ T3808] CPU: 0 UID: 0 PID: 3808 Comm: syz.2.1318 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 128.191030][ T3808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.191043][ T3808] Call Trace: [ 128.191049][ T3808] [ 128.191056][ T3808] __dump_stack+0x21/0x30 [ 128.191082][ T3808] dump_stack_lvl+0x140/0x1c0 [ 128.191103][ T3808] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.191127][ T3808] ? selinux_file_ioctl+0x732/0x1480 [ 128.191149][ T3808] dump_stack+0x19/0x20 [ 128.191170][ T3808] should_fail_ex+0x3d7/0x530 [ 128.191192][ T3808] should_fail+0xf/0x20 [ 128.191222][ T3808] should_fail_usercopy+0x1e/0x30 [ 128.191245][ T3808] _copy_from_user+0x20/0xa0 [ 128.191270][ T3808] vhost_vsock_dev_ioctl+0x1f0/0xe50 [ 128.191295][ T3808] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 128.191318][ T3808] ? __fget_files+0x2c5/0x340 [ 128.191344][ T3808] ? bpf_lsm_file_ioctl+0xd/0x20 [ 128.191363][ T3808] ? security_file_ioctl+0x3e/0x110 [ 128.191383][ T3808] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 128.191404][ T3808] __se_sys_ioctl+0x132/0x1b0 [ 128.191430][ T3808] __x64_sys_ioctl+0x7f/0xa0 [ 128.191455][ T3808] x64_sys_call+0x1878/0x2ee0 [ 128.191475][ T3808] do_syscall_64+0x57/0xf0 [ 128.191492][ T3808] ? clear_bhb_loop+0x50/0xa0 [ 128.191516][ T3808] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.191537][ T3808] RIP: 0033:0x7f7428d9c799 [ 128.191555][ T3808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.191570][ T3808] RSP: 002b:00007f74277f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.191592][ T3808] RAX: ffffffffffffffda RBX: 00007f7429015fa0 RCX: 00007f7428d9c799 [ 128.191607][ T3808] RDX: 0000200000000040 RSI: 000000004008af00 RDI: 0000000000000003 [ 128.191620][ T3808] RBP: 00007f74277f7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.191633][ T3808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.191646][ T3808] R13: 00007f7429016038 R14: 00007f7429015fa0 R15: 00007ffec7795d38 [ 128.191663][ T3808] [ 128.420291][ T341] usb 3-1: USB disconnect, device number 46 [ 128.456925][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 128.516490][ T3824] netlink: 'syz.1.1326': attribute type 6 has an invalid length. [ 128.625840][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.636969][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.647190][ T31] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 128.656627][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.669094][ T31] usb 4-1: config 0 descriptor?? [ 128.677038][ T31] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 128.709944][ T3851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=3851 comm=syz.2.1337 [ 128.755667][ T3853] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 128.765735][ T3853] SELinux: failed to load policy [ 128.879665][ T3801] 8021q: VLANs not supported on ip_vti0 [ 128.917753][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 128.923841][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 128.932677][ T31] usb 4-1: USB disconnect, device number 47 [ 129.024853][ T341] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 129.095470][ T3866] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1344'. [ 129.105116][ T3866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.174807][ T341] usb 3-1: Using ep0 maxpacket: 8 [ 129.181280][ T341] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 129.194444][ T341] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 129.203690][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.211914][ T341] usb 3-1: Product: syz [ 129.216283][ T341] usb 3-1: Manufacturer: syz [ 129.221114][ T341] usb 3-1: SerialNumber: syz [ 129.435618][ T3876] netlink: 'syz.3.1349': attribute type 6 has an invalid length. [ 129.688992][ T590] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 129.844808][ T590] usb 4-1: Using ep0 maxpacket: 32 [ 129.851605][ T590] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.860320][ T590] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.872480][ T590] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 129.881582][ T590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.889672][ T590] usb 4-1: Product: syz [ 129.893894][ T590] usb 4-1: Manufacturer: syz [ 129.898539][ T590] usb 4-1: SerialNumber: syz [ 130.525854][ T3916] fuse: Unknown parameter '0x0000000000000004' [ 131.332469][ T3937] /dev/loop0: Can't lookup blockdev [ 131.339968][ T3937] /dev/loop0: Can't lookup blockdev [ 131.345999][ T3937] /dev/loop0: Can't lookup blockdev [ 131.404089][ T3944] overlayfs: failed to clone upperpath [ 131.803015][ T341] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 131.816077][ T341] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 131.829942][ T341] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 131.841623][ T341] usb 3-1: USB disconnect, device number 47 [ 131.851052][ T1405] udevd[1405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.062467][ T36] kauditd_printk_skb: 558 callbacks suppressed [ 132.062484][ T36] audit: type=1400 audit(1773832403.099:1059): avc: denied { bind } for pid=3987 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.090681][ T36] audit: type=1400 audit(1773832403.099:1060): avc: denied { setopt } for pid=3987 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.098852][ T3988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 132.184818][ T341] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 132.336420][ T341] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.344520][ T341] usb 3-1: not running at top speed; connect to a high speed hub [ 132.353283][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.363805][ T341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.375440][ T341] usb 3-1: string descriptor 0 read error: -22 [ 132.381764][ T341] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.391049][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.403377][ T341] usb 3-1: 0:2 : does not exist [ 132.517813][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 132.693898][ T4019] overlayfs: failed to clone lowerpath [ 132.817291][ T4035] netlink: 'syz.1.1419': attribute type 1 has an invalid length. [ 132.825457][ T4035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'. [ 133.013205][ T341] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 133.025131][ T341] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 133.036133][ T341] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 133.048041][ T341] usb 3-1: USB disconnect, device number 48 [ 133.048482][ T590] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.065553][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.067708][ T590] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 133.095700][ T590] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 133.107541][ T590] usb 4-1: USB disconnect, device number 48 [ 133.119349][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.624884][ T341] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 133.744943][ T4061] FAULT_INJECTION: forcing a failure. [ 133.744943][ T4061] name failslab, interval 1, probability 0, space 0, times 0 [ 133.758027][ T4061] CPU: 0 UID: 0 PID: 4061 Comm: syz.2.1431 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 133.758056][ T4061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.758065][ T4061] Call Trace: [ 133.758070][ T4061] [ 133.758075][ T4061] __dump_stack+0x21/0x30 [ 133.758097][ T4061] dump_stack_lvl+0x140/0x1c0 [ 133.758110][ T4061] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.758125][ T4061] dump_stack+0x19/0x20 [ 133.758137][ T4061] should_fail_ex+0x3d7/0x530 [ 133.758153][ T4061] should_failslab+0xac/0x100 [ 133.758164][ T4061] kmem_cache_alloc_noprof+0x42/0x410 [ 133.758179][ T4061] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 133.758191][ T4061] ? alloc_empty_file+0xbf/0x270 [ 133.758202][ T4061] ? arch_stack_walk+0x10a/0x170 [ 133.758220][ T4061] alloc_empty_file+0xbf/0x270 [ 133.758230][ T4061] path_openat+0xfe/0x34f0 [ 133.758242][ T4061] ? stack_depot_save_flags+0x38/0x800 [ 133.758258][ T4061] ? kasan_save_track+0x3e/0x80 [ 133.758273][ T4061] ? kasan_save_alloc_info+0x40/0x50 [ 133.758285][ T4061] ? __kasan_slab_alloc+0x73/0x90 [ 133.758295][ T4061] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 133.758308][ T4061] ? getname+0x1b/0x30 [ 133.758321][ T4061] ? do_sys_openat2+0xda/0x1d0 [ 133.758333][ T4061] ? __x64_sys_openat+0x13a/0x170 [ 133.758344][ T4061] ? x64_sys_call+0xe69/0x2ee0 [ 133.758358][ T4061] ? do_syscall_64+0x57/0xf0 [ 133.758372][ T4061] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.758387][ T4061] ? do_filp_open+0x440/0x440 [ 133.758398][ T4061] do_filp_open+0x1f5/0x440 [ 133.758409][ T4061] ? __cfi_do_filp_open+0x10/0x10 [ 133.758421][ T4061] ? alloc_fd+0x4e6/0x5a0 [ 133.758437][ T4061] do_sys_openat2+0x134/0x1d0 [ 133.758448][ T4061] ? fput+0x1a4/0x240 [ 133.758458][ T4061] ? do_sys_open+0x100/0x100 [ 133.758474][ T4061] ? ksys_write+0x1f3/0x260 [ 133.758488][ T4061] ? __cfi_ksys_write+0x10/0x10 [ 133.758501][ T4061] __x64_sys_openat+0x13a/0x170 [ 133.758513][ T4061] x64_sys_call+0xe69/0x2ee0 [ 133.758527][ T4061] do_syscall_64+0x57/0xf0 [ 133.758539][ T4061] ? clear_bhb_loop+0x50/0xa0 [ 133.758553][ T4061] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.758566][ T4061] RIP: 0033:0x7f7428d9c799 [ 133.758578][ T4061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.758587][ T4061] RSP: 002b:00007f74277f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.758601][ T4061] RAX: ffffffffffffffda RBX: 00007f7429015fa0 RCX: 00007f7428d9c799 [ 133.758610][ T4061] RDX: 000000000000275a RSI: 0000200000000540 RDI: ffffffffffffff9c [ 133.758618][ T4061] RBP: 00007f74277f7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.758625][ T4061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.758633][ T4061] R13: 00007f7429016038 R14: 00007f7429015fa0 R15: 00007ffec7795d38 [ 133.758642][ T4061] [ 133.826119][ T341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.863572][ T4067] incfs: Options parsing error. -22 [ 133.864438][ T341] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 133.870159][ T4067] incfs: mount failed -22 [ 133.875358][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.974846][ T36] audit: type=1400 audit(1773832405.009:1061): avc: denied { read } for pid=4074 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.007799][ T341] usb 4-1: config 0 descriptor?? [ 134.128434][ T4083] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 134.532242][ T341] usbhid 4-1:0.0: can't add hid device: -71 [ 134.538507][ T341] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.549693][ T341] usb 4-1: USB disconnect, device number 49 [ 134.648328][ T4098] FAULT_INJECTION: forcing a failure. [ 134.648328][ T4098] name failslab, interval 1, probability 0, space 0, times 0 [ 134.661639][ T4098] CPU: 0 UID: 0 PID: 4098 Comm: syz.2.1448 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 134.661682][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.661694][ T4098] Call Trace: [ 134.661701][ T4098] [ 134.661709][ T4098] __dump_stack+0x21/0x30 [ 134.661739][ T4098] dump_stack_lvl+0x140/0x1c0 [ 134.661758][ T4098] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.661777][ T4098] ? __kasan_check_write+0x18/0x20 [ 134.661799][ T4098] ? copy_mm+0x2f7/0x1d70 [ 134.661817][ T4098] dump_stack+0x19/0x20 [ 134.661834][ T4098] should_fail_ex+0x3d7/0x530 [ 134.661855][ T4098] should_failslab+0xac/0x100 [ 134.661871][ T4098] kmem_cache_alloc_noprof+0x42/0x410 [ 134.661894][ T4098] ? alloc_pid+0xa5/0xba0 [ 134.661911][ T4098] ? __asan_memcpy+0x5a/0x80 [ 134.661933][ T4098] alloc_pid+0xa5/0xba0 [ 134.661948][ T4098] copy_process+0x1409/0x3290 [ 134.661967][ T4098] ? __cfi_copy_process+0x10/0x10 [ 134.661993][ T4098] ? __kmalloc_cache_noprof+0x23c/0x470 [ 134.662012][ T4098] ? __kasan_check_write+0x18/0x20 [ 134.662033][ T4098] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 134.662052][ T4098] vhost_task_create+0x1f7/0x400 [ 134.662076][ T4098] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 134.662095][ T4098] ? __cfi_vhost_task_create+0x10/0x10 [ 134.662119][ T4098] ? __cfi_vhost_task_fn+0x10/0x10 [ 134.662143][ T4098] ? __kasan_check_write+0x18/0x20 [ 134.662165][ T4098] ? mutex_lock+0x97/0x1d0 [ 134.662189][ T4098] ? __cfi_mutex_lock+0x10/0x10 [ 134.662213][ T4098] ? kernel_text_address+0xa9/0xe0 [ 134.662236][ T4098] kvm_mmu_post_init_vm+0x161/0x300 [ 134.662260][ T4098] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 134.662283][ T4098] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 134.662301][ T4098] ? kstrtoull+0x13b/0x1e0 [ 134.662320][ T4098] ? kstrtouint+0x78/0xf0 [ 134.662337][ T4098] ? ioctl_has_perm+0x1bc/0x500 [ 134.662358][ T4098] ? __asan_memcpy+0x5a/0x80 [ 134.662379][ T4098] ? ioctl_has_perm+0x408/0x500 [ 134.662400][ T4098] ? has_cap_mac_admin+0xd0/0xd0 [ 134.662419][ T4098] ? __kasan_check_write+0x18/0x20 [ 134.662441][ T4098] ? mutex_lock_killable+0x97/0x1d0 [ 134.662459][ T4098] ? __cfi_mutex_lock_killable+0x10/0x10 [ 134.662476][ T4098] ? proc_fail_nth_write+0x184/0x220 [ 134.662499][ T4098] kvm_vcpu_ioctl+0xa48/0x1000 [ 134.662524][ T4098] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 134.662549][ T4098] ? __cfi_vfs_write+0x10/0x10 [ 134.662572][ T4098] ? __kasan_check_write+0x18/0x20 [ 134.662594][ T4098] ? mutex_unlock+0x90/0x240 [ 134.662610][ T4098] ? __cfi_mutex_unlock+0x10/0x10 [ 134.662634][ T4098] ? __fget_files+0x2c5/0x340 [ 134.662661][ T4098] ? __fget_files+0x2c5/0x340 [ 134.662687][ T4098] ? bpf_lsm_file_ioctl+0xd/0x20 [ 134.662705][ T4098] ? security_file_ioctl+0x3e/0x110 [ 134.662726][ T4098] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 134.662749][ T4098] __se_sys_ioctl+0x132/0x1b0 [ 134.662776][ T4098] __x64_sys_ioctl+0x7f/0xa0 [ 134.662800][ T4098] x64_sys_call+0x1878/0x2ee0 [ 134.662825][ T4098] do_syscall_64+0x57/0xf0 [ 134.662848][ T4098] ? clear_bhb_loop+0x50/0xa0 [ 134.662872][ T4098] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.662893][ T4098] RIP: 0033:0x7f7428d9c799 [ 134.662912][ T4098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.662928][ T4098] RSP: 002b:00007f74277f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.662951][ T4098] RAX: ffffffffffffffda RBX: 00007f7429015fa0 RCX: 00007f7428d9c799 [ 134.662966][ T4098] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 134.662986][ T4098] RBP: 00007f74277f7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.662999][ T4098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.663013][ T4098] R13: 00007f7429016038 R14: 00007f7429015fa0 R15: 00007ffec7795d38 [ 134.663031][ T4098] [ 134.669603][ T4100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=4100 comm=syz.0.1449 [ 135.369062][ T4126] rust_binder: Error while translating object. [ 135.369096][ T4126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 135.375590][ T4126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:598 [ 135.407900][ T4128] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 135.442398][ T4130] SELinux: policydb version 2058465042 does not match my version range 15-33 [ 135.451704][ T4130] SELinux: failed to load policy [ 135.704818][ T341] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 135.856040][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.867551][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.877696][ T341] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 135.887111][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.895865][ T341] usb 4-1: config 0 descriptor?? [ 135.939058][ T4146] fuse: Bad value for 'group_id' [ 135.944133][ T4146] fuse: Bad value for 'group_id' [ 136.103162][ T4132] netlink: 'syz.3.1462': attribute type 13 has an invalid length. [ 136.111622][ T4132] erspan0: refused to change device tx_queue_len [ 136.304494][ T4169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'. [ 136.321511][ T341] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x4 [ 136.329256][ T341] hid-steam 0003:28DE:1102.0013: item fetching failed at offset 1/5 [ 136.341057][ T341] hid-steam 0003:28DE:1102.0013: steam_probe:parse of hid interface failed [ 136.350531][ T341] hid-steam 0003:28DE:1102.0013: probe with driver hid-steam failed with error -22 [ 136.464610][ T36] audit: type=1326 audit(1773832407.499:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 136.488521][ T36] audit: type=1326 audit(1773832407.499:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 136.512365][ T36] audit: type=1326 audit(1773832407.509:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84da95cfce code=0x7ffc0000 [ 136.536301][ T36] audit: type=1326 audit(1773832407.509:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84da95cfce code=0x7ffc0000 [ 136.539593][ T10] usb 4-1: USB disconnect, device number 50 [ 136.560113][ T36] audit: type=1326 audit(1773832407.509:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 136.589923][ T36] audit: type=1326 audit(1773832407.509:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 136.615217][ T36] audit: type=1326 audit(1773832407.509:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f84da99c799 code=0x7ffc0000 [ 136.784042][ T4193] overlayfs: failed to clone upperpath [ 136.840840][ T46] tipc: Subscription rejected, illegal request [ 137.737861][ T4225] 9pnet_fd: Insufficient options for proto=fd [ 138.294396][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 138.294412][ T36] audit: type=1400 audit(1773832409.329:1085): avc: denied { create } for pid=4230 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 138.323313][ T36] audit: type=1400 audit(1773832409.359:1086): avc: denied { write } for pid=4230 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 138.933418][ T4270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4270 comm=syz.1.1521 [ 138.945901][ T36] audit: type=1400 audit(1773832409.969:1087): avc: denied { create } for pid=4271 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 139.806121][ T36] audit: type=1400 audit(1773832410.849:1088): avc: denied { read } for pid=4297 comm="syz.1.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.249842][ T4327] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1542'. [ 140.644805][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 140.715944][ T4347] netlink: 'syz.1.1550': attribute type 12 has an invalid length. [ 140.724333][ T4347] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4347 comm=syz.1.1550 [ 140.796487][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.806779][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.821295][ T10] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 140.830732][ T10] usb 3-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 140.839138][ T10] usb 3-1: Product: syz [ 140.843396][ T10] usb 3-1: Manufacturer: syz [ 140.848039][ T10] usb 3-1: SerialNumber: syz [ 140.853186][ T10] usb 3-1: config 0 descriptor?? [ 140.859179][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 141.062278][ T4335] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 141.076758][ T4335] overlayfs: workdir and upperdir must be separate subtrees [ 141.084907][ T10] usb 3-1: USB disconnect, device number 49 [ 141.353639][ T4340] 9pnet_fd: p9_fd_create_tcp (4340): problem connecting socket to 127.0.0.1 [ 141.414355][ T4367] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 141.441217][ T4370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4370 comm=syz.3.1558 [ 141.510070][ T4370] netlink: 'syz.3.1558': attribute type 27 has an invalid length. [ 141.527380][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.534659][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.864817][ T10] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 141.994823][ T10] usb 4-1: device descriptor read/64, error -71 [ 142.208976][ T4404] fuse: Unknown parameter '#.w*;bNSnN%y|wt;Y4S!pZDA4QE҈'}LVD1Gօups#aSRL)|*а?gCU@)(T/]o]i3 r>g#x]K]+msvǤ;0x0000000000000004' [ 142.234814][ T10] usb 4-1: device descriptor read/64, error -71 [ 142.338805][ T4423] overlayfs: unescaped trailing colons in lowerdir mount option. [ 142.485165][ T10] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 142.615140][ T10] usb 4-1: device descriptor read/64, error -71 [ 142.854810][ T10] usb 4-1: device descriptor read/64, error -71 [ 142.890145][ T4427] fuse: Bad value for 'group_id' [ 142.895340][ T4427] fuse: Bad value for 'group_id' [ 142.976303][ T10] usb usb4-port1: attempt power cycle [ 143.228510][ T36] audit: type=1400 audit(1773832414.269:1089): avc: denied { rename } for pid=4445 comm="syz.0.1590" name="file0" dev="tmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.252409][ T36] audit: type=1400 audit(1773832414.289:1090): avc: denied { rename } for pid=4445 comm="syz.0.1590" name="file0" dev="tmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.304823][ T341] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 143.344851][ T10] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 143.368997][ T10] usb 4-1: device descriptor read/8, error -71 [ 143.454810][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 143.465814][ T341] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.475149][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.486931][ T341] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 143.488096][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 143.508451][ T341] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.524010][ T341] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1544, setting to 1024 [ 143.537312][ T341] usb 3-1: New USB device found, idVendor=0499, idProduct=1043, bcdDevice= 0.40 [ 143.545767][ T10] usb 4-1: device descriptor read/8, error -71 [ 143.548584][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.561183][ T341] usb 3-1: Product: syz [ 143.566979][ T341] usb 3-1: Manufacturer: syz [ 143.572035][ T341] usb 3-1: SerialNumber: syz [ 143.640526][ T4473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4473 comm=syz.0.1600 [ 143.653949][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 143.795068][ T10] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 143.815976][ T10] usb 4-1: device descriptor read/8, error -71 [ 143.945852][ T10] usb 4-1: device descriptor read/8, error -71 [ 144.054954][ T10] usb usb4-port1: unable to enumerate USB device [ 144.454665][ T36] audit: type=1400 audit(1773832415.489:1091): avc: denied { create } for pid=4478 comm="syz.1.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 145.024896][ T390] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 145.055978][ T36] audit: type=1400 audit(1773832416.099:1092): avc: denied { create } for pid=4514 comm="syz.0.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 145.082020][ T36] audit: type=1400 audit(1773832416.119:1093): avc: denied { associate } for pid=4517 comm="syz.0.1618" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 145.174839][ T390] usb 4-1: Using ep0 maxpacket: 8 [ 145.181937][ T390] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 145.193492][ T390] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.203127][ T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.211262][ T390] usb 4-1: Product: syz [ 145.215565][ T390] usb 4-1: Manufacturer: syz [ 145.220274][ T390] usb 4-1: SerialNumber: syz [ 145.427581][ T4497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.524399][ T4533] overlayfs: failed to clone lowerpath [ 145.738749][ T36] audit: type=1326 audit(1773832416.779:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91fb9c799 code=0x7ffc0000 [ 145.761390][ T4539] netlink: 'syz.3.1610': attribute type 16 has an invalid length. [ 145.762672][ T36] audit: type=1326 audit(1773832416.779:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91fb9c799 code=0x7ffc0000 [ 145.770489][ T4539] netlink: 'syz.3.1610': attribute type 2 has an invalid length. [ 145.794587][ T36] audit: type=1326 audit(1773832416.799:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd91fb9c799 code=0x7ffc0000 [ 145.802312][ T4539] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 145.833489][ T4539] netlink: 59982 bytes leftover after parsing attributes in process `syz.3.1610'. [ 145.844564][ T36] audit: type=1326 audit(1773832416.879:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91fb9c799 code=0x7ffc0000 [ 145.844716][ T4540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.869167][ T36] audit: type=1326 audit(1773832416.879:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91fb9c799 code=0x7ffc0000 [ 145.878063][ T4540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.018449][ T341] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 146.029510][ T341] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 146.047069][ T341] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 146.062658][ T341] usb 3-1: USB disconnect, device number 50 [ 146.073921][ T4325] udevd[4325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.394715][ T36] audit: type=1400 audit(1773832417.429:1099): avc: denied { setopt } for pid=4554 comm="syz.0.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.445314][ T36] audit: type=1400 audit(1773832417.489:1100): avc: denied { write } for pid=4557 comm="syz.0.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.983457][ T4560] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1636'. [ 147.009783][ T4562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4562 comm=syz.0.1637 [ 147.080560][ T4566] netlink: 'syz.0.1637': attribute type 27 has an invalid length. [ 147.246641][ T4573] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 147.514837][ T10] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 147.666137][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.676831][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 147.685948][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.689044][ T390] cdc_ncm 4-1:1.0: bind() failure [ 147.695204][ T10] usb 3-1: config 0 descriptor?? [ 147.712697][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 147.719867][ T390] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 147.728843][ T390] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 147.748727][ T4581] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 147.755057][ T390] usb 4-1: USB disconnect, device number 55 [ 147.935917][ T4577] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1643'. [ 147.947173][ T341] usb 3-1: USB disconnect, device number 51 [ 148.446160][ T4607] overlayfs: failed to clone lowerpath [ 148.582977][ T4628] overlayfs: failed to clone lowerpath [ 148.667852][ T4634] netlink: 'syz.0.1669': attribute type 16 has an invalid length. [ 149.179058][ T4647] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 149.207032][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 149.232525][ T4651] overlayfs: failed to clone lowerpath [ 149.297582][ T4657] tipc: Failed to remove unknown binding: 66,1,1/0:3349267840/3349267842 [ 149.769873][ T4670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4670 comm=syz.3.1684 [ 149.848072][ T4671] netlink: 'syz.3.1684': attribute type 27 has an invalid length. [ 149.886244][ T4677] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1687'. [ 149.961857][ T36] kauditd_printk_skb: 830 callbacks suppressed [ 149.961876][ T36] audit: type=1400 audit(1773832420.999:1931): avc: denied { setattr } for pid=4688 comm="syz.1.1693" name="file0" dev="tmpfs" ino=3209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.072802][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 150.475524][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 150.605461][ T10] usb 3-1: device descriptor read/64, error -71 [ 150.845471][ T10] usb 3-1: device descriptor read/64, error -71 [ 150.864795][ T341] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 151.014880][ T341] usb 4-1: Using ep0 maxpacket: 16 [ 151.021297][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.032402][ T341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.045426][ T341] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 151.054469][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.063356][ T341] usb 4-1: config 0 descriptor?? [ 151.104785][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 151.234795][ T10] usb 3-1: device descriptor read/64, error -71 [ 151.471253][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.474830][ T10] usb 3-1: device descriptor read/64, error -71 [ 151.478482][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.491724][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.498743][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.505815][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.512778][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.519828][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.526812][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.533832][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.540848][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.547843][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.554840][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.561884][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.568888][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.575981][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.582952][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.589939][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.597029][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.604081][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.604940][ T10] usb usb3-port1: attempt power cycle [ 151.611094][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.623561][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.630561][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.637555][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.644534][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.651616][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.658740][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.666104][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.673481][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.683914][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.691162][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.701273][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.708722][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.719843][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.727014][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.734090][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.741464][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.748994][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.756161][ T341] elecom 0003:056E:010D.0014: unknown main item tag 0x0 [ 151.769948][ T341] elecom 0003:056E:010D.0014: hidraw0: USB HID v0.0c Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 151.787229][ T341] usb 4-1: USB disconnect, device number 56 [ 151.974801][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 151.996009][ T10] usb 3-1: device descriptor read/8, error -71 [ 152.125866][ T10] usb 3-1: device descriptor read/8, error -71 [ 152.293176][ T36] audit: type=1400 audit(1773832423.329:1932): avc: denied { create } for pid=4739 comm="syz.3.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.310562][ T4747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4747 comm=syz.3.1718 [ 152.364844][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 152.386113][ T10] usb 3-1: device descriptor read/8, error -71 [ 152.392610][ T4752] netlink: 'syz.3.1718': attribute type 27 has an invalid length. [ 152.515876][ T10] usb 3-1: device descriptor read/8, error -71 [ 152.555316][ T4757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4757 comm=syz.1.1722 [ 152.625424][ T10] usb usb3-port1: unable to enumerate USB device [ 153.264798][ T4768] netlink: 'syz.2.1727': attribute type 6 has an invalid length. [ 153.274032][ T36] audit: type=1400 audit(1773832424.309:1933): avc: denied { mounton } for pid=4767 comm="syz.2.1727" path="/279/file0" dev="tmpfs" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.425797][ T4776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4776 comm=syz.1.1731 [ 153.454868][ T341] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 153.492639][ T4776] netlink: 'syz.1.1731': attribute type 27 has an invalid length. [ 153.605860][ T341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.618883][ T341] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 153.628037][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.637261][ T341] usb 4-1: config 0 descriptor?? [ 153.644791][ T390] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 153.708350][ T4794] netlink: 'syz.0.1738': attribute type 27 has an invalid length. [ 153.736694][ T4794] veth0_vlan: left promiscuous mode [ 153.742432][ T4794] veth0_vlan: entered promiscuous mode [ 153.749398][ T4794] veth1_macvtap: left promiscuous mode [ 153.756336][ T4794] veth1_macvtap: entered promiscuous mode [ 153.779461][ T13] : port 1(bridge_slave_0) entered blocking state [ 153.786228][ T13] : port 1(bridge_slave_0) entered forwarding state [ 153.793960][ T13] : port 2(bridge_slave_1) entered blocking state [ 153.800711][ T13] : port 2(bridge_slave_1) entered forwarding state [ 153.808238][ T390] usb 3-1: Using ep0 maxpacket: 32 [ 153.814910][ T390] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.831495][ T390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.843575][ T390] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 153.853607][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.860083][ T4802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4802 comm=syz.0.1741 [ 153.862302][ T390] usb 3-1: Product: syz [ 153.878660][ T390] usb 3-1: Manufacturer: syz [ 153.883285][ T390] usb 3-1: SerialNumber: syz [ 153.934380][ T4802] netlink: 'syz.0.1741': attribute type 27 has an invalid length. [ 153.995452][ T4802] : port 2(bridge_slave_1) entered disabled state [ 154.002343][ T4802] : port 1(bridge_slave_0) entered disabled state [ 154.063051][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.086599][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.102024][ T4820] netlink: 'syz.1.1743': attribute type 27 has an invalid length. [ 154.113881][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.132135][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.146964][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.159343][ T4820] veth0_vlan: left promiscuous mode [ 154.162000][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.165366][ T4820] veth0_vlan: entered promiscuous mode [ 154.179546][ T4820] veth1_macvtap: left promiscuous mode [ 154.181092][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.186164][ T4820] veth1_macvtap: entered promiscuous mode [ 154.204799][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.213133][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.220296][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.227935][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.237218][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.244534][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.252469][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.259560][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.267071][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.274063][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.284800][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.294345][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.301448][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.308720][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.315942][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.322965][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.330306][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.337417][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.344614][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.351803][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.359309][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.370520][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.377599][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.388428][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.395645][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.402707][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.413790][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.420900][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.432207][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.439767][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.446920][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.454895][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.462224][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.469515][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.476679][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.483723][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.490761][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.497962][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.505002][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.512076][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.519234][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.526379][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.533381][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.540492][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.547563][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.554664][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.561677][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.568749][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.575796][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.582777][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.589832][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.596867][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.603955][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.610998][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x4 [ 154.618006][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.625229][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.632423][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.639424][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.646459][ T341] lg-g15 0003:046D:C22E.0015: unknown main item tag 0x0 [ 154.653433][ T341] lg-g15 0003:046D:C22E.0015: item fetching failed at offset 70/235 [ 154.661636][ T341] lg-g15 0003:046D:C22E.0015: probe with driver lg-g15 failed with error -22 [ 154.673263][ T341] usb 4-1: USB disconnect, device number 57 [ 155.021995][ T36] audit: type=1326 audit(1773832426.059:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.3.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd91fb9c799 code=0x0 [ 155.419985][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 156.021605][ T4890] incfs: mount failed -22 [ 156.035808][ T292] ------------[ cut here ]------------ [ 156.041597][ T292] WARNING: CPU: 1 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 156.051051][ T292] Modules linked in: [ 156.054997][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 156.066886][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.077030][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 156.082912][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4e 79 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 71 59 03 cc e8 f6 53 3f ff <0f> 0b e9 3e ff ff ff e8 ea 53 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 156.102900][ T292] RSP: 0018:ffffc9000b6cfb48 EFLAGS: 00010293 [ 156.109215][ T292] RAX: ffffffff82484f5a RBX: 0000000000000000 RCX: ffff88812f353900 [ 156.117359][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.125556][ T292] RBP: ffffc9000b6cfb70 R08: ffff8881329dfabf R09: 1ffff1102653bf57 [ 156.133717][ T292] R10: dffffc0000000000 R11: ffffed102653bf58 R12: 0000000000000000 [ 156.141844][ T292] R13: dffffc0000000000 R14: ffff8881329dfa20 R15: ffff888149425220 [ 156.149867][ T292] FS: 0000555570d4b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 156.158866][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.165504][ T292] CR2: 00007efd8cb76f60 CR3: 0000000103f24000 CR4: 00000000003526b0 [ 156.173628][ T292] DR0: 0000000000008000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.181662][ T292] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 156.189676][ T292] Call Trace: [ 156.192981][ T292] [ 156.196025][ T292] ovl_do_remove+0x81b/0xda0 [ 156.200739][ T292] ? ovl_set_redirect+0x780/0x780 [ 156.205836][ T292] ? down_write+0xee/0x2b0 [ 156.210379][ T292] ? __cfi_down_write+0x10/0x10 [ 156.215303][ T292] ovl_rmdir+0x1e/0x30 [ 156.219670][ T292] vfs_rmdir+0x3e3/0x560 [ 156.223946][ T292] incfs_kill_sb+0x109/0x230 [ 156.228598][ T292] deactivate_locked_super+0xd5/0x2a0 [ 156.233997][ T292] deactivate_super+0xb8/0xe0 [ 156.238737][ T292] cleanup_mnt+0x406/0x4a0 [ 156.243271][ T292] __cleanup_mnt+0x1d/0x40 [ 156.247747][ T292] task_work_run+0x1e8/0x260 [ 156.252373][ T292] ? __cfi_task_work_run+0x10/0x10 [ 156.257552][ T292] ? __x64_sys_umount+0x12e/0x180 [ 156.262707][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 156.268397][ T292] resume_user_mode_work+0x35/0x50 [ 156.273546][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 156.279173][ T292] do_syscall_64+0x63/0xf0 [ 156.283642][ T292] ? clear_bhb_loop+0x50/0xa0 [ 156.288385][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.294556][ T292] RIP: 0033:0x7fd91fb9d9d7 [ 156.299017][ T292] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 156.318950][ T292] RSP: 002b:00007fff4a2cc0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 156.327520][ T292] RAX: 0000000000000000 RBX: 00007fd91fc32050 RCX: 00007fd91fb9d9d7 [ 156.335631][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4a2cc170 [ 156.345567][ T292] RBP: 00007fff4a2cc170 R08: 00007fff4a2cd170 R09: 00000000ffffffff [ 156.353561][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4a2cd260 [ 156.361623][ T292] R13: 00007fd91fc32050 R14: 0000000000026165 R15: 00007fff4a2ce330 [ 156.369930][ T292] [ 156.372978][ T292] ---[ end trace 0000000000000000 ]--- [ 156.379593][ T292] ------------[ cut here ]------------ [ 156.381100][ T390] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 156.385440][ T292] WARNING: CPU: 0 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 156.395576][ T390] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 156.403840][ T292] Modules linked in: [ 156.416784][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 156.430157][ T292] Tainted: [W]=WARN [ 156.433959][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.444090][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 156.449781][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4e 79 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 71 59 03 cc e8 f6 53 3f ff <0f> 0b e9 3e ff ff ff e8 ea 53 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 156.452281][ T390] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 156.469637][ T292] RSP: 0018:ffffc9000b6cfb48 EFLAGS: 00010293 [ 156.484783][ T292] RAX: ffffffff82484f5a RBX: 0000000000000000 RCX: ffff88812f353900 [ 156.488742][ T390] usb 3-1: USB disconnect, device number 56 [ 156.492890][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.492912][ T292] RBP: ffffc9000b6cfb70 R08: ffff8881329dfabf R09: 1ffff1102653bf57 [ 156.510694][ T4322] udevd[4322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.515427][ T292] R10: dffffc0000000000 R11: ffffed102653bf58 R12: 0000000000000000 [ 156.539612][ T292] R13: dffffc0000000000 R14: ffff8881329dfa20 R15: ffff888149425220 [ 156.547730][ T292] FS: 0000555570d4b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 156.556803][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.563517][ T292] CR2: 0000555569e5a908 CR3: 0000000103f24000 CR4: 00000000003526b0 [ 156.571540][ T292] Call Trace: [ 156.574885][ T292] [ 156.578012][ T292] ovl_do_remove+0x81b/0xda0 [ 156.582647][ T292] ? ovl_set_redirect+0x780/0x780 [ 156.587779][ T292] ? down_write+0xee/0x2b0 [ 156.592231][ T292] ? __cfi_down_write+0x10/0x10 [ 156.597232][ T292] ovl_rmdir+0x1e/0x30 [ 156.601327][ T292] vfs_rmdir+0x3e3/0x560 [ 156.605614][ T292] incfs_kill_sb+0x1a0/0x230 [ 156.610279][ T292] deactivate_locked_super+0xd5/0x2a0 [ 156.615776][ T292] deactivate_super+0xb8/0xe0 [ 156.620559][ T292] cleanup_mnt+0x406/0x4a0 [ 156.625019][ T292] __cleanup_mnt+0x1d/0x40 [ 156.629478][ T292] task_work_run+0x1e8/0x260 [ 156.634176][ T292] ? __cfi_task_work_run+0x10/0x10 [ 156.639343][ T292] ? __x64_sys_umount+0x12e/0x180 [ 156.644407][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 156.650246][ T292] resume_user_mode_work+0x35/0x50 [ 156.655532][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 156.661290][ T292] do_syscall_64+0x63/0xf0 [ 156.665757][ T292] ? clear_bhb_loop+0x50/0xa0 [ 156.670477][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.676519][ T292] RIP: 0033:0x7fd91fb9d9d7 [ 156.680960][ T292] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 156.700790][ T292] RSP: 002b:00007fff4a2cc0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 156.709356][ T292] RAX: 0000000000000000 RBX: 00007fd91fc32050 RCX: 00007fd91fb9d9d7 [ 156.717383][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4a2cc170 [ 156.725396][ T292] RBP: 00007fff4a2cc170 R08: 00007fff4a2cd170 R09: 00000000ffffffff [ 156.733643][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4a2cd260 [ 156.741642][ T292] R13: 00007fd91fc32050 R14: 0000000000026165 R15: 00007fff4a2ce330 [ 156.749750][ T292] [ 156.752781][ T292] ---[ end trace 0000000000000000 ]--- [ 156.767971][ T36] audit: type=1400 audit(1773832427.809:1935): avc: denied { unlink } for pid=4895 comm="syz.3.1776" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1